$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft File: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft (raw, json) Hash identifier: JZh4uG/WvUDe4o1kV8Wsu4pSA8OGNesF3Y985du9VzU= Subject key identifier: A7:B6:32:38:4E:18:25:26:36:DC:3A:A8:53:1E:BF:87:F8:C1:CB:4D Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 Certificate issuer: /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Certificate serial: 08F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft Manifest number: 123A Signing time: Fri 04 Apr 2025 20:17:42 +0000 Manifest this update: Fri 04 Apr 2025 20:17:41 +0000 Manifest next update: Fri 11 Apr 2025 20:17:41 +0000 Files and hashes: 1: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl (hash: MUgJgKWMoSFngypbLMfOdIGgoUdNR9h7RLGXjlWCmrY=) 2: 38548A62EDC011EF82A1C85BC4F9AE02.roa (hash: NR90n3hD0iN+wJNiZGZM+dVTFYNLmapWU9u6Yuwslvs=) 3: 214232EC4FD311EF90027A63C4F9AE02.roa (hash: zfbAmczU0TvDg++Ahlw3nwgh74bmLp4RT834l0v2hLY=) 4: 2944DC90B57E11EFB31B630FC4F9AE02.roa (hash: LIT5TNu9i//v3laD/Jx0lP/RjQSe9WAE0qoyMHUVSVc=) 5: F585B320A4ED11EFBA65C13CC4F9AE02.roa (hash: svSsv7iDDsESPj4djUfhOIqdOSSzOy7GY2n53ZHUYRM=) 6: 2921D24E067C11ED882FC127C4F9AE02.roa (hash: yTR181mMOhFtz0/zNI7qM2KlctQHTJXyuSeldVEFcuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2291 (0x8f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE Validity Not Before: Apr 4 20:17:41 2025 GMT Not After : Apr 11 20:17:41 2025 GMT Subject: CN=67f03e65-3fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6a:b9:d2:88:92:ea:6f:fd:7b:54:90:70:7c: 45:57:cc:f0:d2:8d:13:1a:05:f0:5b:64:06:36:d6: 82:85:14:a8:db:29:7f:b3:fb:b0:10:65:d3:48:b4: e7:64:e8:1e:58:98:80:0c:09:11:f1:a4:a9:29:70: 6c:de:9d:e1:99:f4:a6:6e:f7:83:3e:c0:70:18:0b: e1:64:2a:e4:52:d6:ea:0f:92:f4:7c:8a:d1:43:64: 87:e3:f5:13:a9:c7:52:93:9c:9c:a7:58:99:11:a8: 7d:d7:cf:c6:96:10:dc:44:39:6b:ef:b2:65:4b:2f: 33:27:32:1a:80:27:36:86:47:a0:14:42:24:ba:ef: f1:ce:05:2b:9d:64:34:bc:6d:19:d9:4a:f6:c1:a0: fa:03:e1:3a:15:05:ec:16:23:6e:98:45:3b:8b:df: 7a:21:05:1e:aa:6f:59:c6:17:e5:47:6b:ba:ea:06: c3:8a:19:6b:93:43:d9:39:e0:0b:3f:25:da:8a:87: 22:69:0d:2e:49:00:6c:ce:48:6a:c5:21:56:5f:9e: 0a:b3:84:08:53:2a:7b:8b:1c:e3:3f:b4:c2:6a:d9: c5:47:26:39:da:a9:35:ad:ef:be:d7:4e:34:12:f8: a5:c4:19:43:c9:74:e8:cd:eb:06:97:22:06:b1:40: f4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B6:32:38:4E:18:25:26:36:DC:3A:A8:53:1E:BF:87:F8:C1:CB:4D X509v3 Authority Key Identifier: keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:13:c8:34:13:64:d9:c9:14:b7:ea:7c:f0:db:c0:e1:ce:25: 32:5b:d6:c5:da:34:ae:86:5a:0a:58:0b:e4:90:ab:ff:6f:2a: 12:9c:0e:15:3e:71:17:47:8a:a0:fb:1d:1e:e0:7f:f6:53:25: 38:02:c7:0d:6e:2d:e7:8b:0b:66:c3:cc:00:0c:56:93:53:79: 6f:4b:13:e5:bb:d8:2e:a2:1d:30:5b:4b:09:4c:aa:c2:a0:35: 2c:52:53:ca:e2:ce:60:ae:ec:94:86:8e:4d:a2:5d:07:4d:e0: a7:bd:3c:78:3b:13:4f:87:2c:45:d3:5f:f1:37:1b:45:c7:76: 30:d9:f1:e8:ff:83:98:05:04:63:66:c3:21:96:a3:2a:c3:79: de:f9:34:0a:5b:e3:8e:80:8c:9e:f5:74:83:31:25:d4:12:97: 15:ca:09:80:55:04:43:a3:51:77:7f:ec:55:07:d4:1a:be:d9: b2:e9:c5:b7:42:97:f6:ad:bc:47:f9:fc:37:4a:09:af:17:fd: 45:28:c4:d4:62:69:db:3b:cc:85:97:0e:86:41:34:c9:51:8e: 7c:d7:c3:7a:7a:25:06:de:89:4a:b0:ff:28:81:61:34:77:6c: 83:d1:3d:35:79:f6:be:ac:a1:b2:3b:e0:ae:59:51:c1:34:78: 49:f1:2c:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKEE0QjUwQkVDRDhCQkEyODU1ODcxMjhENTkxOTI4M0RC RTE2OTA5MTgwHhcNMjUwNDA0MjAxNzQxWhcNMjUwNDExMjAxNzQxWjAYMRYwFAYD VQQDEw02N2YwM2U2NS0zZmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGq50oiS6m/9e1SQcHxFV8zw0o0TGgXwW2QGNtaChRSo2yl/s/uwEGXTSLTn ZOgeWJiADAkR8aSpKXBs3p3hmfSmbveDPsBwGAvhZCrkUtbqD5L0fIrRQ2SH4/UT qcdSk5ycp1iZEah918/GlhDcRDlr77JlSy8zJzIagCc2hkegFEIkuu/xzgUrnWQ0 vG0Z2Ur2waD6A+E6FQXsFiNumEU7i996IQUeqm9ZxhflR2u66gbDihlrk0PZOeAL PyXaiociaQ0uSQBszkhqxSFWX54Ks4QIUyp7ixzjP7TCatnFRyY52qk1re++1040 EvilxBlDyXTozesGlyIGsUD0xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKe2MjhO GCUmNtw6qFMev4f4wctNMB8GA1UdIwQYMBaAFKS1C+zYu6KFWHEo1ZGSg9vhaQkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29vVlljU2pWa1pLRDItRnBD UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BMVUw3Tmk3b29WWWNTalZrWktEMi1GcENSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEJERS83RTVBQzNFMDg5NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29v VlljU2pWa1pLRDItRnBDUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtE8g0E2TZyRS36nzw28DhziUyW9bF2jSuhloKWAvkkKv/byoSnA4V PnEXR4qg+x0e4H/2UyU4AscNbi3niwtmw8wADFaTU3lvSxPlu9guoh0wW0sJTKrC oDUsUlPK4s5gruyUho5Nol0HTeCnvTx4OxNPhyxF01/xNxtFx3Yw2fHo/4OYBQRj ZsMhlqMqw3ne+TQKW+OOgIye9XSDMSXUEpcVygmAVQRDo1F3f+xVB9Qavtmy6cW3 Qpf2rbxH+fw3SgmvF/1FKMTUYmnbO8yFlw6GQTTJUY5818N6eiUG3olKsP8ogWE0 d2yD0T01efa+rKGyO+CuWVHBNHhJ8Sy7 -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:37 2025 by rpki-client