$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft File: msuAZmP7D89uvEPAELk14FIU_J8.mft (raw, json) Hash identifier: KnaYMJNeKP+QjNX0G8VeOB4qKbg1xfAiEpz2OYoUTKs= Subject key identifier: 38:68:19:A8:06:7A:1B:B5:81:B9:1F:43:91:E6:98:AC:F6:EB:DA:93 Authority key identifier: 9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F Certificate issuer: /CN=A91C7B68/serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft Manifest number: 09A0 Signing time: Fri 04 Apr 2025 20:40:18 +0000 Manifest this update: Fri 04 Apr 2025 20:40:17 +0000 Manifest next update: Fri 11 Apr 2025 20:40:17 +0000 Files and hashes: 1: msuAZmP7D89uvEPAELk14FIU_J8.crl (hash: XVvA+zUT7YKfvRCKRjLAmcwfDlCmmgu88Ef7nzbOc2s=) 2: 2EC10CF4071C11EFAD19C863C4F9AE02.roa (hash: Y+jK0YiITj1fWstmg7VEHVKcSXHK5MXXLGNw5LXxFzk=) 3: C4DB3710B0BC11EFA44BCA7DC4F9AE02.roa (hash: gWIB+Y9hTKP+TMLvq+0rVTxIDDpRJJpgLYlkfQUCFsY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B68 Validity Not Before: Apr 4 20:40:17 2025 GMT Not After : Apr 11 20:40:17 2025 GMT Subject: CN=67f043b2-4632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3f:07:93:34:e0:3c:b2:63:fc:fc:ea:bd:dd: 84:68:ed:ea:f8:12:55:46:ce:57:19:5d:f5:83:28: de:37:e1:0c:05:fd:5b:34:68:fd:e2:fc:62:f1:9e: ff:81:ce:73:08:19:7a:e1:d4:af:04:72:d0:1a:56: 25:bf:28:88:9c:5e:9e:43:64:46:46:10:60:40:f3: 8d:f7:e2:ff:d9:e0:d8:6c:88:2f:bc:b0:21:33:3c: c7:ae:c7:d4:45:8a:88:f9:92:fc:b2:85:1f:b7:92: ca:2f:5a:79:37:1b:52:a2:af:76:dd:1d:7d:1d:82: 85:1b:86:75:b6:cd:b4:47:1b:32:4d:46:83:d5:c4: 35:02:41:9c:ed:12:9a:96:01:74:3d:99:bd:c6:34: ab:57:92:5a:45:a7:74:ad:72:4f:79:64:65:c5:c4: ee:2b:30:50:e5:b5:03:ff:37:3d:28:ca:ab:77:77: cf:5b:5f:f9:94:2e:8e:44:4f:70:10:64:49:11:10: 2f:29:49:98:7b:62:1c:2e:c5:82:19:b9:09:ff:1f: 36:64:68:53:0c:f2:d6:db:7e:3e:30:52:53:00:f2: 25:27:7f:c4:1c:ad:1c:80:8c:3a:88:ea:84:23:9b: c1:47:ff:48:ed:67:90:90:68:04:68:41:87:cc:5a: 9b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:68:19:A8:06:7A:1B:B5:81:B9:1F:43:91:E6:98:AC:F6:EB:DA:93 X509v3 Authority Key Identifier: keyid:9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:61:2e:79:1a:d3:ad:b8:b0:70:c7:af:c9:77:28:3c:ad:10: 37:08:b3:f9:c6:08:e5:63:e8:f1:5c:78:43:72:88:79:7e:fa: 28:05:79:94:ac:10:68:76:30:55:57:9c:25:f4:b1:db:f8:6d: 5e:6e:d1:cb:e5:8b:fd:b0:1e:10:36:74:e4:62:03:e6:7f:03: ad:8a:80:c9:6f:a5:8b:b1:fc:61:a0:75:fa:dd:1e:a7:f0:63: cf:22:7c:f4:ac:c6:33:9c:f5:63:12:30:a4:01:63:26:a3:48: 8b:75:39:49:fd:fa:2b:85:ab:9c:2f:9e:ff:f8:ad:81:5a:3a: d2:57:22:17:4e:85:b0:58:a4:1b:80:7d:85:a0:52:e5:3e:34: 51:d1:3d:00:4f:a5:77:f1:68:ee:7e:5b:cc:76:50:cc:8f:0c: bc:51:80:b9:ac:76:45:f3:95:48:37:bb:14:46:93:49:55:3e: 15:fc:87:57:e3:b0:90:81:d6:bf:9f:2c:7a:3e:f3:a7:0a:d2: 4b:8e:99:6a:45:05:13:6c:db:e8:a5:c4:e3:bb:9a:24:bd:72: 45:ca:e5:c4:83:1b:ec:f2:d6:34:ce:0b:7b:9a:a3:54:30:d0: 85:7d:92:da:b6:61:d9:1e:bf:a6:50:80:51:28:c4:6e:74:c6: fc:0d:01:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCNjgxMTAvBgNVBAUTKDlBQ0I4MDY2NjNGQjBGQ0Y2RUJDNDNDMDEwQjkzNUUw NTIxNEZDOUYwHhcNMjUwNDA0MjA0MDE3WhcNMjUwNDExMjA0MDE3WjAYMRYwFAYD VQQDEw02N2YwNDNiMi00NjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArj8HkzTgPLJj/Pzqvd2EaO3q+BJVRs5XGV31gyjeN+EMBf1bNGj94vxi8Z7/ gc5zCBl64dSvBHLQGlYlvyiInF6eQ2RGRhBgQPON9+L/2eDYbIgvvLAhMzzHrsfU RYqI+ZL8soUft5LKL1p5NxtSoq923R19HYKFG4Z1ts20RxsyTUaD1cQ1AkGc7RKa lgF0PZm9xjSrV5JaRad0rXJPeWRlxcTuKzBQ5bUD/zc9KMqrd3fPW1/5lC6ORE9w EGRJERAvKUmYe2IcLsWCGbkJ/x82ZGhTDPLW234+MFJTAPIlJ3/EHK0cgIw6iOqE I5vBR/9I7WeQkGgEaEGHzFqbEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhoGagG ehu1gbkfQ5HmmKz269qTMB8GA1UdIwQYMBaAFJrLgGZj+w/PbrxDwBC5NeBSFPyf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0I2OC81M0E3QjkyQ0Iw QTUxMUVBOEY5MkVEMTdDNEY5QUUwMi9tc3VBWm1QN0Q4OXV2RVBBRUxrMTRGSVVf SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21zdUFabVA3RDg5dXZFUEFFTGsxNEZJVV9KOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0I2OC81M0E3QjkyQ0IwQTUxMUVBOEY5MkVEMTdDNEY5QUUwMi9tc3VBWm1QN0Q4 OXV2RVBBRUxrMTRGSVVfSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMYS55GtOtuLBwx6/Jdyg8rRA3CLP5xgjlY+jxXHhDcoh5fvooBXmU rBBodjBVV5wl9LHb+G1ebtHL5Yv9sB4QNnTkYgPmfwOtioDJb6WLsfxhoHX63R6n 8GPPInz0rMYznPVjEjCkAWMmo0iLdTlJ/forhaucL57/+K2BWjrSVyIXToWwWKQb gH2FoFLlPjRR0T0AT6V38WjuflvMdlDMjwy8UYC5rHZF85VIN7sURpNJVT4V/IdX 47CQgda/nyx6PvOnCtJLjplqRQUTbNvopcTju5okvXJFyuXEgxvs8tY0zgt7mqNU MNCFfZLatmHZHr+mUIBRKMRudMb8DQFG -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:37 2025 by rpki-client