$ rpki-client -vvf rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft File: j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft (raw, json) Hash identifier: +/aAww3z7ExxUitSwhAKuQhp5uR9j13H5HRZiIFcK/4= Subject key identifier: 0F:9A:6D:A5:EE:44:72:36:BA:AB:5E:13:01:B9:31:BF:E9:78:F1:83 Authority key identifier: 8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E Certificate issuer: /CN=A91C81E8/serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E Certificate serial: 0BC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft Manifest number: 0BBE Signing time: Sun 20 Apr 2025 18:41:20 +0000 Manifest this update: Sun 20 Apr 2025 18:41:20 +0000 Manifest next update: Sun 27 Apr 2025 18:41:20 +0000 Files and hashes: 1: j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl (hash: DFxtvnSf+f0XaAJNBVqHvIYcGzZhy2ckK7NrGEigvZg=) 2: 659779341A4511EAA4C46765C4F9AE02.roa (hash: WVFiwUZapp9A6STjs2oU5G8NhDLpA0+WzTdM80uXluY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 18:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3012 (0xbc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C81E8, serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E Validity Not Before: Apr 20 18:41:20 2025 GMT Not After : Apr 27 18:41:20 2025 GMT Subject: CN=68053fd0-560e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b9:da:79:cf:8b:63:45:d4:4e:2d:11:d5:03: 69:d7:09:78:d7:db:4e:aa:58:1a:b0:f5:57:de:98: e8:2e:0d:2b:1c:00:83:31:6d:63:95:fa:27:c5:57: ad:b7:34:c5:c1:c4:d4:80:23:52:80:65:c1:bb:98: 29:63:3f:08:48:5d:d6:75:b1:b1:c3:fd:7d:cf:8e: 61:f4:af:58:75:e4:ab:29:88:67:04:76:06:2d:4e: 01:4f:73:11:1b:4a:e0:6d:4e:15:60:a9:8d:8c:cd: 60:2a:9f:e6:15:29:46:99:a5:38:8e:1b:f6:58:54: 75:97:71:70:65:a0:35:b3:b8:b5:af:82:6d:c8:c8: 2b:70:37:f9:ae:91:c2:bd:87:c4:9a:29:ed:f9:db: e9:9c:00:a7:f2:6f:98:6b:c1:d5:3d:a7:3e:f6:4a: 56:37:ba:87:00:fc:83:d3:43:d9:03:0f:a9:80:97: eb:70:28:20:2d:31:3c:93:c9:a2:59:42:55:a7:eb: ac:20:28:35:c8:e5:50:76:18:da:99:ce:ed:ba:1a: 42:70:3b:95:b1:73:61:01:cc:76:dd:86:01:e8:dc: 0a:1d:f0:2f:45:0a:35:30:98:13:8a:4a:67:de:52: 08:9c:5c:d2:45:83:e3:fe:62:d6:05:da:38:40:e6: f9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:9A:6D:A5:EE:44:72:36:BA:AB:5E:13:01:B9:31:BF:E9:78:F1:83 X509v3 Authority Key Identifier: keyid:8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:08:75:d4:e6:f9:11:b0:97:c5:fe:7d:59:86:86:fe:ac:ec: 8b:17:53:72:1f:93:97:02:b2:a4:83:a2:02:47:06:ce:3b:5e: ea:56:78:aa:b4:ca:e3:42:50:25:b8:6f:1d:e2:d2:4e:3f:91: 2a:c2:fc:37:d8:3e:3f:da:f6:6f:2f:15:85:ac:47:42:0f:d0: ad:de:b5:72:83:cd:1a:88:7e:4b:1b:63:ac:59:6e:1c:53:10: 31:95:21:c7:9a:53:ce:8a:06:aa:4b:44:31:05:13:fb:e3:c9: e4:41:9c:b9:df:19:97:b6:cd:d4:92:dd:d9:03:05:4a:88:c3: 80:78:86:10:01:b7:92:b0:95:bd:13:31:d4:b2:27:cc:b4:2d: e3:71:b1:23:59:c4:94:e6:23:c0:b4:9d:90:80:03:b9:bf:6a: ce:c0:5f:ee:33:b1:93:fb:91:92:e1:34:07:7c:70:4d:91:bf: c3:5a:4c:50:d9:fc:e3:60:2e:8e:a1:4e:ea:0d:39:82:29:c7: b1:5a:9e:39:1d:35:07:1d:c8:d8:76:af:04:d4:10:f7:4d:55: b9:c0:76:f2:dd:6e:de:c8:5e:5e:45:d0:d0:b9:82:7c:74:b7: 30:b9:ab:09:7d:b7:ee:a3:f9:cc:3f:5f:86:d6:66:15:1c:6e: df:e9:35:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgxRTgxMTAvBgNVBAUTKDhGNTZFQjhFNzI3N0EyMTdGNDY3RTg5QzgxRjY0Qjc1 REZCODdEMUUwHhcNMjUwNDIwMTg0MTIwWhcNMjUwNDI3MTg0MTIwWjAYMRYwFAYD VQQDEw02ODA1M2ZkMC01NjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLnaec+LY0XUTi0R1QNp1wl419tOqlgasPVX3pjoLg0rHACDMW1jlfonxVet tzTFwcTUgCNSgGXBu5gpYz8ISF3WdbGxw/19z45h9K9YdeSrKYhnBHYGLU4BT3MR G0rgbU4VYKmNjM1gKp/mFSlGmaU4jhv2WFR1l3FwZaA1s7i1r4JtyMgrcDf5rpHC vYfEmint+dvpnACn8m+Ya8HVPac+9kpWN7qHAPyD00PZAw+pgJfrcCggLTE8k8mi WUJVp+usICg1yOVQdhjamc7tuhpCcDuVsXNhAcx23YYB6NwKHfAvRQo1MJgTikpn 3lIInFzSRYPj/mLWBdo4QOb58wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+abaXu RHI2uqteEwG5Mb/pePGDMB8GA1UdIwQYMBaAFI9W645yd6IX9GfonIH2S3XfuH0e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODFFOC85NTEyNTIwODFB NDMxMUVBQTFBNUYxNjFDNEY5QUUwMi9qMWJyam5KM29oZjBaLWljZ2ZaTGRkLTRm UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxYnJqbkozb2hmMFotaWNnZlpMZGQtNGZSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODFFOC85NTEyNTIwODFBNDMxMUVBQTFBNUYxNjFDNEY5QUUwMi9qMWJyam5KM29o ZjBaLWljZ2ZaTGRkLTRmUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnCHXU5vkRsJfF/n1Zhob+rOyLF1NyH5OXArKkg6ICRwbOO17qVniq tMrjQlAluG8d4tJOP5Eqwvw32D4/2vZvLxWFrEdCD9Ct3rVyg80aiH5LG2OsWW4c UxAxlSHHmlPOigaqS0QxBRP748nkQZy53xmXts3Ukt3ZAwVKiMOAeIYQAbeSsJW9 EzHUsifMtC3jcbEjWcSU5iPAtJ2QgAO5v2rOwF/uM7GT+5GS4TQHfHBNkb/DWkxQ 2fzjYC6OoU7qDTmCKcexWp45HTUHHcjYdq8E1BD3TVW5wHby3W7eyF5eRdDQuYJ8 dLcwuasJfbfuo/nMP1+G1mYVHG7f6TXA -----END CERTIFICATE-----Generated at Tue Apr 22 19:51:45 2025 by rpki-client