$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft File: F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft (raw, json) Hash identifier: CFFiPgEv3CAdmYIhe+wEzrPoXUfy6ihQXxUoR2w+1SY= Subject key identifier: 74:74:6A:5A:17:5F:BC:30:8C:64:E0:97:BA:E0:E2:E5:85:59:48:D4 Authority key identifier: 17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 Certificate issuer: /CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Certificate serial: 059C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft Manifest number: 058A Signing time: Fri 28 Mar 2025 23:34:11 +0000 Manifest this update: Fri 28 Mar 2025 23:34:10 +0000 Manifest next update: Fri 04 Apr 2025 23:34:10 +0000 Files and hashes: 1: F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl (hash: tN2cJNLL0qeGIuT22Ydr5WxM6w5N9A4X4CcmztWrNlk=) 2: 96B7F96CAB3611EFB500860EC4F9AE02.roa (hash: iaEDsuKMVztdGMGs0bnGMXhB9BJu4woZe+sOZWunBeo=) 3: 73381ABCAB3611EF809A470EC4F9AE02.roa (hash: 8awFpwX01PkZF5PrK0NGjIp+5wkg+8qfVTaZFTVJKxQ=) 4: 2B7B2500A62E11EF8FF03040C4F9AE02.roa (hash: +yAPNF6ojlFOJLTYVaEQ9SmWRMBtqwGItUQsI9wXCmI=) 5: 695C5050C27D11EEB0AE466DC4F9AE02.roa (hash: FU4aJFxj8CoUjnkiDQB/hpo0mTt04SzDs8mb97d7XQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1436 (0x59c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB09E Validity Not Before: Mar 28 23:34:10 2025 GMT Not After : Apr 4 23:34:10 2025 GMT Subject: CN=67e731f2-8084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2c:e9:fd:3c:ea:ce:a4:56:90:5c:3d:73:d0: 32:5e:a9:81:45:7d:d8:22:c6:36:34:0a:e3:10:d5: 8d:6c:67:1e:e5:55:a0:7e:12:17:da:30:9c:cd:4b: b0:ed:c0:5b:fb:e0:21:5c:23:23:96:e8:a2:ff:68: f7:75:02:c4:e6:a2:10:01:f3:0e:d3:35:dd:35:29: 8a:36:bc:f5:2b:a0:28:7c:31:6c:02:dd:03:e6:ef: 9d:46:a4:47:a2:30:0c:93:3e:35:94:8d:d8:b1:6c: de:ca:77:d9:89:71:7e:b1:4c:35:9e:31:79:d0:ae: 88:9c:92:c4:69:58:3c:b7:35:18:61:33:09:ee:30: ea:35:86:46:ee:69:62:fc:3f:21:0f:21:b3:b3:83: dd:b3:19:8c:49:5f:c1:6d:e1:56:9a:df:cb:a9:26: df:8a:8e:2a:71:30:a6:c8:3d:17:d2:d2:ac:16:89: b0:23:8a:81:1d:f8:06:3f:47:e0:4b:8b:35:9d:9a: cb:4b:ba:5a:30:e5:ec:82:29:59:6d:a1:08:ec:ab: 0b:0f:49:b3:e0:fb:f2:7c:47:88:55:99:a3:19:20: 44:cc:28:b4:cc:51:52:36:c0:22:c4:19:ed:fa:2c: eb:bb:14:9f:63:42:a7:d6:8a:35:92:23:e9:74:9d: 9c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:74:6A:5A:17:5F:BC:30:8C:64:E0:97:BA:E0:E2:E5:85:59:48:D4 X509v3 Authority Key Identifier: keyid:17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:b5:fb:be:20:9f:dd:d9:50:0b:09:9d:db:e3:e6:02:56:69: ad:6e:33:0f:c0:00:80:d8:31:76:f7:74:62:e0:bb:c3:ca:ce: 2f:1b:90:59:2f:4a:09:a8:18:71:0a:51:14:1f:df:26:65:e4: 41:66:ae:1c:c6:dc:2c:38:51:33:bc:05:83:1f:1f:e3:eb:6b: 89:4a:1e:da:bb:98:99:25:d0:3f:a6:ec:84:cc:b7:2d:5b:a2: ab:11:94:fa:b0:1d:c3:79:8b:cf:9a:4e:c1:9b:1d:57:6c:09: ce:36:40:4f:ae:77:49:5f:23:53:e6:96:4a:06:5c:8d:5d:3d: 1e:23:e0:03:44:df:e7:b7:09:de:5f:0f:59:46:0b:cc:8b:84: 1f:05:aa:20:e0:ed:23:bb:dc:64:9f:fe:d0:79:68:7e:80:c9: 5d:81:48:c6:29:d7:ed:0f:91:f1:87:08:78:99:49:dd:ae:d2: 58:2d:fd:d4:a3:db:5a:16:c9:b3:62:2c:fc:b5:b1:ad:da:79: dc:00:f4:35:e5:1f:83:6f:60:4d:a4:eb:d9:b8:89:9c:b3:0e: 57:cb:3c:b7:0c:9e:12:4f:d2:d8:b0:d4:57:7a:26:f2:a7:66: 16:8c:71:72:69:c5:ac:f9:20:f1:e6:8f:8a:51:57:cd:bb:dd: d0:85:e1:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwOUUxMTAvBgNVBAUTKDE3NjBGRjcxRTE2QkNGRUVFN0I4RDY3MTBENjM2MDY3 OTlBRUY3NjcwHhcNMjUwMzI4MjMzNDEwWhcNMjUwNDA0MjMzNDEwWjAYMRYwFAYD VQQDEw02N2U3MzFmMi04MDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCzp/TzqzqRWkFw9c9AyXqmBRX3YIsY2NArjENWNbGce5VWgfhIX2jCczUuw 7cBb++AhXCMjluii/2j3dQLE5qIQAfMO0zXdNSmKNrz1K6AofDFsAt0D5u+dRqRH ojAMkz41lI3YsWzeynfZiXF+sUw1njF50K6InJLEaVg8tzUYYTMJ7jDqNYZG7mli /D8hDyGzs4PdsxmMSV/BbeFWmt/LqSbfio4qcTCmyD0X0tKsFomwI4qBHfgGP0fg S4s1nZrLS7paMOXsgilZbaEI7KsLD0mz4PvyfEeIVZmjGSBEzCi0zFFSNsAixBnt +izruxSfY0Kn1oo1kiPpdJ2cswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHR0aloX X7wwjGTgl7rg4uWFWUjUMB8GA1UdIwQYMBaAFBdg/3Hha8/u57jWcQ1jYGeZrvdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA5RS80NzExOUQwMEQw MEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnotN251Tlp4RFdOZ1o1bXU5 MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YyRF9jZUZyei03bnVOWnhEV05nWjVtdTkyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjA5RS80NzExOUQwMEQwMEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnot N251Tlp4RFdOZ1o1bXU5MmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvtfu+IJ/d2VALCZ3b4+YCVmmtbjMPwACA2DF293Ri4LvDys4vG5BZ L0oJqBhxClEUH98mZeRBZq4cxtwsOFEzvAWDHx/j62uJSh7au5iZJdA/puyEzLct W6KrEZT6sB3DeYvPmk7Bmx1XbAnONkBPrndJXyNT5pZKBlyNXT0eI+ADRN/ntwne Xw9ZRgvMi4QfBaog4O0ju9xkn/7QeWh+gMldgUjGKdftD5Hxhwh4mUndrtJYLf3U o9taFsmzYiz8tbGt2nncAPQ15R+Db2BNpOvZuImcsw5Xyzy3DJ4ST9LYsNRXeiby p2YWjHFyacWs+SDx5o+KUVfNu93QheFo -----END CERTIFICATE-----Generated at Fri Apr 4 21:05:51 2025 by rpki-client