$ rpki-client -vvf rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft File: 92dQUVu3YtGADFrmxsLbJP6VLQI.mft (raw, json) Hash identifier: 6b82KMONhLLz7q5O8M1hhjjTj8GrDnRokTLP1EKKPF4= Subject key identifier: FE:E9:3F:4E:6D:CF:37:49:41:25:26:B7:4F:FC:5C:2E:6D:8F:F3:05 Authority key identifier: F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02 Certificate issuer: /CN=A91C83EA/serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02 Certificate serial: 2A71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft Manifest number: 2A5B Signing time: Sun 06 Apr 2025 15:32:11 +0000 Manifest this update: Sun 06 Apr 2025 15:32:11 +0000 Manifest next update: Sun 13 Apr 2025 15:32:11 +0000 Files and hashes: 1: 92dQUVu3YtGADFrmxsLbJP6VLQI.crl (hash: uYgDfcVn3BpSWCzBZc1drJdqB63ybn8kUjl2zU8bFmo=) 2: 2ED1150C561D11E7B003DF26C4F9AE02.roa (hash: VWQv/IH7NsqTcNchTqEWHo8sER9hJVbk+Ml69dI7l0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10865 (0x2a71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C83EA Validity Not Before: Apr 6 15:32:11 2025 GMT Not After : Apr 13 15:32:11 2025 GMT Subject: CN=67f29e7b-5048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0f:c4:37:6a:24:4d:a4:5d:a5:a5:5b:5d:7a: 83:1a:70:cc:1d:61:a7:48:86:e8:d9:86:2c:8d:6a: 66:5b:64:7e:8a:d7:7e:14:9e:b2:0e:bc:a9:9f:7d: 95:c1:0f:62:4d:31:10:7f:94:83:a0:65:84:87:13: d2:8b:d9:5a:9a:e1:f6:d0:30:d4:f7:d5:18:34:02: ed:65:98:85:51:e7:03:91:80:3f:71:bc:e4:a5:d7: de:98:96:04:bf:f0:f0:2f:84:07:2a:a0:61:f7:7d: 97:88:9b:d7:fa:ce:1d:f8:9b:32:38:cf:3a:fb:d2: 3a:af:fd:75:9e:b1:92:93:e9:fa:02:09:9f:41:2e: 10:09:2c:1f:2e:6f:39:42:eb:8d:05:35:7a:3c:39: d4:37:4c:4f:ee:fb:f7:26:ef:1f:0f:7c:92:6b:11: ae:be:a8:db:ea:f1:2c:65:9f:16:4a:fc:47:89:b1: f2:07:e8:d9:8f:15:9a:5b:42:49:fb:70:53:0a:ec: f5:06:ad:57:88:6d:b2:46:40:a1:e3:98:8d:ca:d2: d7:b8:55:2f:52:ac:57:48:50:9a:68:45:d3:a0:eb: bc:d7:ff:42:21:3e:75:9e:12:8c:fc:00:03:c0:e0: 95:b8:5a:38:cf:58:71:04:80:4a:f6:be:0c:61:19: 06:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E9:3F:4E:6D:CF:37:49:41:25:26:B7:4F:FC:5C:2E:6D:8F:F3:05 X509v3 Authority Key Identifier: keyid:F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:c7:0e:07:8f:4a:21:6f:50:96:1b:69:06:ef:1d:1f:a9:4b: 9a:35:8d:3e:c7:ca:3a:27:e1:4e:0d:5b:5e:ae:d1:47:69:27: 6d:04:51:ac:82:e7:5c:54:f2:0e:36:83:a5:e7:e5:bd:47:0b: 4c:72:2a:69:b5:0a:52:bc:15:e4:40:08:7a:ac:1a:81:87:45: f8:f4:4d:a9:de:9f:46:e3:1f:55:c7:61:24:7b:bb:1a:be:d4: 07:00:58:ef:1f:7b:10:3d:22:b1:b1:1e:bb:25:ce:e2:93:ff: 2d:c6:95:5b:15:30:4d:d8:6f:20:46:69:f7:e4:fd:a2:f2:41: 0b:0c:81:3d:d1:80:a2:8e:3f:b4:b7:2a:4b:96:a5:71:24:8d: 19:ef:97:da:29:49:7b:d4:82:70:04:c9:9b:9b:3e:8c:a4:08: ee:43:6a:bf:25:79:db:81:b4:3c:fa:e0:c0:a7:18:c3:d6:33: ec:bd:7c:0b:62:0e:f4:d1:23:5a:4d:2a:3d:ef:50:e6:82:93: 15:86:9e:5f:94:e7:88:24:61:ce:1f:64:e6:81:99:1c:52:ba: ba:21:83:b3:76:c5:3a:9f:89:c3:3d:0d:4e:f9:9f:dc:8f:17: 0a:79:8b:cd:a2:14:70:a1:43:b4:76:89:4f:b8:70:31:1b:6c: 5d:9d:2c:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgzRUExMTAvBgNVBAUTKEY3Njc1MDUxNUJCNzYyRDE4MDBDNUFFNkM2QzJEQjI0 RkU5NTJEMDIwHhcNMjUwNDA2MTUzMjExWhcNMjUwNDEzMTUzMjExWjAYMRYwFAYD VQQDEw02N2YyOWU3Yi01MDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzg/EN2okTaRdpaVbXXqDGnDMHWGnSIbo2YYsjWpmW2R+itd+FJ6yDrypn32V wQ9iTTEQf5SDoGWEhxPSi9lamuH20DDU99UYNALtZZiFUecDkYA/cbzkpdfemJYE v/DwL4QHKqBh932XiJvX+s4d+JsyOM86+9I6r/11nrGSk+n6AgmfQS4QCSwfLm85 QuuNBTV6PDnUN0xP7vv3Ju8fD3ySaxGuvqjb6vEsZZ8WSvxHibHyB+jZjxWaW0JJ +3BTCuz1Bq1XiG2yRkCh45iNytLXuFUvUqxXSFCaaEXToOu81/9CIT51nhKM/AAD wOCVuFo4z1hxBIBK9r4MYRkGGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7pP05t zzdJQSUmt0/8XC5tj/MFMB8GA1UdIwQYMBaAFPdnUFFbt2LRgAxa5sbC2yT+lS0C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODNFQS9EODJDNjFFODFD NDUxMUU0OTRBNzZGMUJDNEY5QUUwMi85MmRRVVZ1M1l0R0FERnJteHNMYkpQNlZM UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkyZFFVVnUzWXRHQURGcm14c0xiSlA2VkxRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODNFQS9EODJDNjFFODFDNDUxMUU0OTRBNzZGMUJDNEY5QUUwMi85MmRRVVZ1M1l0 R0FERnJteHNMYkpQNlZMUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhxw4Hj0ohb1CWG2kG7x0fqUuaNY0+x8o6J+FODVtertFHaSdtBFGs gudcVPIONoOl5+W9RwtMcipptQpSvBXkQAh6rBqBh0X49E2p3p9G4x9Vx2Eke7sa vtQHAFjvH3sQPSKxsR67Jc7ik/8txpVbFTBN2G8gRmn35P2i8kELDIE90YCijj+0 typLlqVxJI0Z75faKUl71IJwBMmbmz6MpAjuQ2q/JXnbgbQ8+uDApxjD1jPsvXwL Yg700SNaTSo971DmgpMVhp5flOeIJGHOH2TmgZkcUrq6IYOzdsU6n4nDPQ1O+Z/c jxcKeYvNohRwoUO0dolPuHAxG2xdnSzr -----END CERTIFICATE-----Generated at Sun Apr 6 21:56:54 2025 by rpki-client