$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft File: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft (raw, json) Hash identifier: dtnkdQ/1zWGoZr4I0cixfXeqfujE7MbjrSrSCsocPnw= Subject key identifier: 32:50:41:25:50:34:4F:06:7D:56:3E:E7:BC:0F:8E:52:EB:8D:3F:4E Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0 Certificate issuer: /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0 Certificate serial: 0932 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft Manifest number: 08F2 Signing time: Fri 04 Apr 2025 20:39:56 +0000 Manifest this update: Fri 04 Apr 2025 20:39:56 +0000 Manifest next update: Fri 11 Apr 2025 20:39:56 +0000 Files and hashes: 1: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl (hash: LH78pf00OxcIFQE8fk3EC84frxSui6IgrhTGLRVu5wY=) 2: BDB203466B5D11EF84E04577C4F9AE02.roa (hash: Vhh+YHEkOAm0lTC6Mvlr9fVSy/b7j5HS4EmA8GcE6KE=) 3: 2857F2E4111A11EF86332415C4F9AE02.roa (hash: d8stm93qiMJHuD7A7Kjf0EChjXZv6Yi1Blkv29w2AO0=) 4: E3A0B86070F611EFA4CF2731C4F9AE02.roa (hash: IiCELpz1lNWn/wDk8+lG4EPk1Fz80QLORn5i0grUOVk=) 5: 51B031C80E8D11EE89A0B128C4F9AE02.roa (hash: TjvAc6jpZ9U97nYJG6DnvYohT4lBnpgp5Lc+Qvz205I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2354 (0x932) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8F27 Validity Not Before: Apr 4 20:39:56 2025 GMT Not After : Apr 11 20:39:56 2025 GMT Subject: CN=67f0439c-05ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:17:d1:5a:5d:58:fd:7f:8c:d2:3d:63:0e:f4: 98:90:fd:b8:00:84:b6:9f:c7:f1:16:a0:9a:85:2c: 7c:d1:e3:3e:87:20:a6:55:2a:f3:8a:b0:23:cf:aa: f0:64:07:82:91:1d:52:de:1f:d1:0a:73:1a:52:b0: 57:f5:5b:a9:37:e0:be:8e:7e:3a:50:51:2c:05:e8: 52:40:67:bf:cf:2e:9c:26:56:db:6b:8a:85:ba:b7: 6a:27:dc:cd:12:83:01:a1:4f:5d:17:70:02:02:99: f2:a3:a7:b1:24:66:b4:97:ef:51:5f:32:9b:2d:cd: 36:fe:8c:09:d6:32:9f:0b:86:ab:5b:78:6d:6e:7e: 89:c3:b9:7c:37:8e:8e:c4:bf:6b:68:ff:a3:5c:e3: 91:c1:27:4f:b1:2b:43:36:cd:b7:9b:12:34:1e:af: c5:1e:f8:77:0a:37:24:0c:26:a5:0c:34:59:1f:18: 66:15:06:4c:ba:88:2e:6f:01:a6:6f:76:07:5b:47: 97:c1:66:94:50:1e:83:97:b3:37:27:2f:fc:7f:87: bf:4d:a3:f3:62:38:f2:0a:fd:fc:9f:0a:92:b6:c0: 1b:be:4d:d4:3a:46:91:db:6e:70:ec:e7:51:52:65: 51:9f:2d:cc:a9:6f:9f:ee:06:96:ae:84:fd:ec:0c: 85:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:50:41:25:50:34:4F:06:7D:56:3E:E7:BC:0F:8E:52:EB:8D:3F:4E X509v3 Authority Key Identifier: keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:90:30:2c:60:58:09:f3:1b:1e:5e:a1:f7:fb:f2:94:54:0a: 66:8a:c7:f7:f9:ed:f5:12:79:0d:99:16:55:28:51:03:17:f4: 06:48:1a:da:81:0c:48:7b:25:96:c1:1f:70:97:50:91:24:e9: 14:68:42:22:e1:5a:5a:4c:84:ef:e2:08:25:67:7b:73:91:b5: ca:1d:38:a6:69:29:1d:a3:e4:57:49:44:77:6e:14:5f:6c:94: 1f:ce:30:52:b7:1f:a6:9e:02:4e:4a:49:5a:7e:72:3b:c6:67: 4a:5a:9b:71:3a:c0:3c:4d:fd:63:ed:31:3e:06:d6:f9:5b:31: 69:93:03:14:75:a8:46:51:5b:b5:68:c2:73:ef:9b:d9:bf:22: 8f:1a:31:04:0f:31:32:5f:c6:bd:fa:cc:cb:63:cd:a4:f9:68: 32:b1:31:8d:49:b1:75:07:1c:26:55:fe:e6:23:da:f2:30:e8: 82:95:91:56:cd:29:85:ae:b1:14:d9:41:1d:f7:e2:15:52:ca: 29:f6:19:2a:eb:0d:1d:bf:1f:71:68:6a:3b:e3:20:61:d2:c7: 9e:a6:9c:74:76:ef:28:50:f4:0d:39:f1:12:4f:11:f3:b8:e4: 0c:fe:e9:76:8a:80:4d:cf:93:2d:c3:92:93:db:fe:87:8c:5b: 4b:18:16:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhGMjcxMTAvBgNVBAUTKEQxQTM2Q0Q4RUQyMzU1MDgyNzYxQTNEQjEzRUREMzBE RkRBMkNGRDAwHhcNMjUwNDA0MjAzOTU2WhcNMjUwNDExMjAzOTU2WjAYMRYwFAYD VQQDEw02N2YwNDM5Yy0wNWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBfRWl1Y/X+M0j1jDvSYkP24AIS2n8fxFqCahSx80eM+hyCmVSrzirAjz6rw ZAeCkR1S3h/RCnMaUrBX9VupN+C+jn46UFEsBehSQGe/zy6cJlbba4qFurdqJ9zN EoMBoU9dF3ACApnyo6exJGa0l+9RXzKbLc02/owJ1jKfC4arW3htbn6Jw7l8N46O xL9raP+jXOORwSdPsStDNs23mxI0Hq/FHvh3CjckDCalDDRZHxhmFQZMuogubwGm b3YHW0eXwWaUUB6Dl7M3Jy/8f4e/TaPzYjjyCv38nwqStsAbvk3UOkaR225w7OdR UmVRny3MqW+f7gaWroT97AyF1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJQQSVQ NE8GfVY+57wPjlLrjT9OMB8GA1UdIwQYMBaAFNGjbNjtI1UIJ2Gj2xPt0w39os/Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEYyNy83RjUyMjlBOEIw OTIxMUVBQjVEQkVDNThDNEY5QUUwMi8wYU5zMk8walZRZ25ZYVBiRS0zVERmMml6 OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBhTnMyTzBqVlFnbllhUGJFLTNURGYyaXo5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEYyNy83RjUyMjlBOEIwOTIxMUVBQjVEQkVDNThDNEY5QUUwMi8wYU5zMk8walZR Z25ZYVBiRS0zVERmMml6OUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1kDAsYFgJ8xseXqH3+/KUVApmisf3+e31EnkNmRZVKFEDF/QGSBra gQxIeyWWwR9wl1CRJOkUaEIi4VpaTITv4gglZ3tzkbXKHTimaSkdo+RXSUR3bhRf bJQfzjBStx+mngJOSklafnI7xmdKWptxOsA8Tf1j7TE+Btb5WzFpkwMUdahGUVu1 aMJz75vZvyKPGjEEDzEyX8a9+szLY82k+WgysTGNSbF1BxwmVf7mI9ryMOiClZFW zSmFrrEU2UEd9+IVUsop9hkq6w0dvx9xaGo74yBh0seeppx0du8oUPQNOfESTxHz uOQM/ul2ioBNz5Mtw5KT2/6HjFtLGBYP -----END CERTIFICATE-----Generated at Sun Apr 6 08:55:34 2025 by rpki-client