$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft File: aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft (raw, json) Hash identifier: m67q5Czuh/yp+fOWFhG3b8R+25PJJfCJigMLHVJ5BCs= Subject key identifier: B2:1F:2A:E1:90:33:86:32:79:D2:EB:08:01:1A:D1:11:7A:CE:63:ED Authority key identifier: 68:76:3E:92:A2:C1:78:53:16:75:76:65:11:03:F8:1F:59:AC:DC:1A Certificate issuer: /CN=A91C4750/serialNumber=68763E92A2C17853167576651103F81F59ACDC1A Certificate serial: 07FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft Manifest number: 07F5 Signing time: Tue 08 Apr 2025 20:43:32 +0000 Manifest this update: Tue 08 Apr 2025 20:43:32 +0000 Manifest next update: Tue 15 Apr 2025 20:43:32 +0000 Files and hashes: 1: aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl (hash: Gcax7LALKJz8+dgRYSFKD5wqevKZv3nIwsEUpg1Y0/8=) 2: DA1A98C4DABE11EAB12A5209C4F9AE02.roa (hash: Uilk1jJBfDMGY2sckuokao9InqlSOEodf+Dfn/tc4QA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 20:43:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2044 (0x7fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4750 Validity Not Before: Apr 8 20:43:32 2025 GMT Not After : Apr 15 20:43:32 2025 GMT Subject: CN=67f58a74-bd75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:15:12:33:c2:06:66:31:e5:f9:18:a7:54:39: 1d:75:bc:24:d2:53:f7:04:45:09:f1:c2:28:b2:d4: d5:de:f4:b6:26:a6:fc:80:6a:56:48:08:7c:fe:a6: f6:16:ca:47:b2:d0:75:d7:d6:57:cb:24:b8:2b:c2: 6d:11:c6:3e:ca:fe:c6:22:1b:4f:f7:01:4e:ba:70: 09:4d:83:10:50:af:6b:fe:cf:83:d3:03:b1:12:f4: 06:e7:b4:90:b2:5c:38:8b:26:e4:89:d7:22:d5:ea: fb:4f:04:ae:31:8c:b2:4b:0d:f5:c6:f5:40:d9:53: e9:70:d9:6d:73:33:7b:bc:6b:ec:80:2d:6e:fc:b8: d7:c4:97:2e:3b:d2:db:68:bd:6b:4a:28:2f:2f:48: 64:de:6e:40:e6:b7:83:41:86:86:17:99:f4:f4:01: 82:c0:7e:02:24:85:ee:97:c9:94:cb:b7:65:d3:56: 23:64:fb:b0:71:b5:89:65:b4:46:ab:30:b8:d5:be: 91:ba:97:71:26:d6:bd:e8:13:de:21:57:b2:c9:21: 3c:11:75:0a:03:dc:36:65:2b:01:7b:0f:cd:c5:94: b5:96:5f:25:ef:75:ee:f9:7d:75:d0:ab:5f:93:88: 06:61:8f:52:75:86:d0:cc:84:ee:f5:d0:5d:2a:94: f1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1F:2A:E1:90:33:86:32:79:D2:EB:08:01:1A:D1:11:7A:CE:63:ED X509v3 Authority Key Identifier: keyid:68:76:3E:92:A2:C1:78:53:16:75:76:65:11:03:F8:1F:59:AC:DC:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:43:06:db:15:8a:29:75:8b:34:1f:10:b8:86:e0:24:2e:6f: 34:8f:af:b1:2c:ad:84:0f:30:81:29:91:bd:1e:40:61:04:a0: 80:d8:f0:2a:72:18:6a:14:53:95:33:19:3b:f0:19:86:ec:35: f0:b5:64:dc:d2:8c:28:6f:53:79:ed:d7:9f:bc:2e:1a:47:a7: eb:15:d0:9f:a2:9b:aa:04:45:9b:08:3b:f6:65:ad:6e:28:28: 57:32:1c:55:a6:08:ac:45:9a:d4:80:0f:a9:0b:b1:5b:ce:d9: 6f:74:24:29:2d:7a:8f:67:ea:0f:05:11:b8:96:48:d5:28:ec: 24:81:1f:16:3c:b4:9d:13:61:70:1a:de:c3:51:0c:40:bd:86: 8b:9a:86:4b:fd:41:6e:f8:ae:72:d0:34:0a:87:07:23:e9:f4: 31:73:85:d5:b4:4c:a1:ff:0c:cc:92:78:03:f8:65:49:90:3c: aa:6e:ff:31:84:10:5c:7a:0f:fb:8d:42:6d:87:02:4f:fa:1c: 10:36:bc:95:21:d9:89:c7:a3:04:5c:30:6f:1a:ab:22:f8:bd: 8c:f7:03:7c:38:8e:4a:3c:f6:5c:34:7a:46:2f:50:6f:d8:4f: fa:90:74:6c:76:1d:68:bb:12:5c:e7:78:cd:75:aa:45:eb:7f: e3:22:70:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ3NTAxMTAvBgNVBAUTKDY4NzYzRTkyQTJDMTc4NTMxNjc1NzY2NTExMDNGODFG NTlBQ0RDMUEwHhcNMjUwNDA4MjA0MzMyWhcNMjUwNDE1MjA0MzMyWjAYMRYwFAYD VQQDEw02N2Y1OGE3NC1iZDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2xUSM8IGZjHl+RinVDkddbwk0lP3BEUJ8cIostTV3vS2Jqb8gGpWSAh8/qb2 FspHstB119ZXyyS4K8JtEcY+yv7GIhtP9wFOunAJTYMQUK9r/s+D0wOxEvQG57SQ slw4iybkidci1er7TwSuMYyySw31xvVA2VPpcNltczN7vGvsgC1u/LjXxJcuO9Lb aL1rSigvL0hk3m5A5reDQYaGF5n09AGCwH4CJIXul8mUy7dl01YjZPuwcbWJZbRG qzC41b6RupdxJta96BPeIVeyySE8EXUKA9w2ZSsBew/NxZS1ll8l73Xu+X110Ktf k4gGYY9SdYbQzITu9dBdKpTxKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIfKuGQ M4YyedLrCAEa0RF6zmPtMB8GA1UdIwQYMBaAFGh2PpKiwXhTFnV2ZRED+B9ZrNwa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDc1MC85MEQ1RUM1QURB QkQxMUVBOEZDNjIzODdDNEY5QUUwMi9hSFkta3FMQmVGTVdkWFpsRVFQNEgxbXMz Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FIWS1rcUxCZUZNV2RYWmxFUVA0SDFtczNCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDc1MC85MEQ1RUM1QURBQkQxMUVBOEZDNjIzODdDNEY5QUUwMi9hSFkta3FMQmVG TVdkWFpsRVFQNEgxbXMzQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApQwbbFYopdYs0HxC4huAkLm80j6+xLK2EDzCBKZG9HkBhBKCA2PAq chhqFFOVMxk78BmG7DXwtWTc0owob1N57defvC4aR6frFdCfopuqBEWbCDv2Za1u KChXMhxVpgisRZrUgA+pC7FbztlvdCQpLXqPZ+oPBRG4lkjVKOwkgR8WPLSdE2Fw Gt7DUQxAvYaLmoZL/UFu+K5y0DQKhwcj6fQxc4XVtEyh/wzMkngD+GVJkDyqbv8x hBBceg/7jUJthwJP+hwQNryVIdmJx6MEXDBvGqsi+L2M9wN8OI5KPPZcNHpGL1Bv 2E/6kHRsdh1ouxJc53jNdapF63/jInBp -----END CERTIFICATE-----Generated at Wed Apr 9 09:44:38 2025 by rpki-client