$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft File: ed1SqjF1MIEm0XSGpygF-w4bqlg.mft (raw, json) Hash identifier: B/YZ8Q/pKUz+eoCeIg7Y3+zpKlR07s5e54eYWUAgtsE= Subject key identifier: D4:FD:5D:9B:3D:79:7D:E9:05:DF:EE:C8:C5:D0:4E:53:72:51:45:F0 Authority key identifier: 79:DD:52:AA:31:75:30:81:26:D1:74:86:A7:28:05:FB:0E:1B:AA:58 Certificate issuer: /CN=A91CB0E2/serialNumber=79DD52AA3175308126D17486A72805FB0E1BAA58 Certificate serial: 072F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft Manifest number: 0728 Signing time: Wed 16 Apr 2025 21:29:33 +0000 Manifest this update: Wed 16 Apr 2025 21:29:33 +0000 Manifest next update: Wed 23 Apr 2025 21:29:33 +0000 Files and hashes: 1: ed1SqjF1MIEm0XSGpygF-w4bqlg.crl (hash: 3bxNMrPfmR0aaKN5XvXynQTSAgdroAVHLTpOPpeIlWU=) 2: 6B5C86022D6811EB86D96027C4F9AE02.roa (hash: t3hqNdqM2MD3ZAVu8FNoGwxlm5G0gcPJniuKJXcYFWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.crl rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 21:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1839 (0x72f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB0E2, serialNumber=79DD52AA3175308126D17486A72805FB0E1BAA58 Validity Not Before: Apr 16 21:29:33 2025 GMT Not After : Apr 23 21:29:33 2025 GMT Subject: CN=6800213d-08e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:15:19:0f:f1:a7:cd:a7:e7:ac:43:01:d5:4f: 56:6c:0c:b9:c8:8e:d0:18:39:04:c9:5f:66:f3:0a: 2a:b4:40:64:d1:04:05:82:20:bb:b5:e5:05:cc:15: 41:2d:a6:df:6c:18:29:6f:bb:a8:86:3a:58:bb:0f: 60:01:de:8f:89:f9:97:bd:36:22:4e:44:cf:94:e2: 9c:d6:86:dc:ad:1c:65:ab:b1:55:74:33:c0:e0:7a: 40:9e:0f:ee:20:4e:d0:08:24:d5:ae:63:87:eb:f8: 62:d9:66:ce:ce:79:08:23:c7:f4:cf:ce:e8:72:96: 5d:84:9b:3d:4c:0e:fd:e1:52:93:a4:7a:3f:6d:79: c4:1c:cb:71:f0:2c:6a:3a:07:f6:78:2f:b3:99:2c: d7:49:47:c8:7d:b6:3a:90:08:28:dc:4d:e1:76:10: bc:c1:15:dd:73:e5:e4:e1:17:34:10:61:47:38:25: 99:2b:07:15:c1:ad:24:52:c5:91:b3:f5:e9:71:5f: 56:97:a0:bd:d1:7b:0e:27:30:3a:e6:13:b2:78:72: 86:70:8e:7a:98:fb:77:f6:3b:14:fb:b1:9c:2b:0c: 91:9e:f0:30:b2:f9:53:78:ee:4c:05:05:27:5e:ea: 62:78:89:54:45:ed:14:5f:7a:75:15:d8:31:9a:c5: 75:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:FD:5D:9B:3D:79:7D:E9:05:DF:EE:C8:C5:D0:4E:53:72:51:45:F0 X509v3 Authority Key Identifier: keyid:79:DD:52:AA:31:75:30:81:26:D1:74:86:A7:28:05:FB:0E:1B:AA:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:70:9e:8b:cc:f2:28:f1:21:36:dc:21:cc:69:0b:c7:e9:6b: 90:fb:c5:95:9f:70:a9:0b:a1:5b:dc:13:c5:d3:2b:6c:b1:a9: a7:d9:67:8c:0c:f1:eb:87:59:c5:d5:28:b1:4e:f7:2a:b7:93: 17:bd:49:bb:a7:17:9c:29:f0:8f:c5:38:e6:5e:e0:37:39:15: cc:0f:d6:59:ca:8b:29:5d:f5:51:eb:d7:77:88:dc:69:2d:af: 74:c6:b7:e0:1b:9c:d5:b3:fb:9c:be:a5:61:72:56:87:c6:f0: 52:14:17:7a:29:e0:82:e5:ea:96:de:8d:5e:f8:ca:02:74:37: 36:cc:1d:c4:86:ad:87:ba:5e:12:d4:c3:3e:c5:56:e7:a2:64: 46:1d:3e:58:ca:85:f8:c0:40:13:65:71:c5:a6:ae:8d:ac:39: 71:98:a5:2b:e8:6d:6b:05:5b:75:dc:20:a4:55:63:e7:43:e3: 8e:38:57:95:39:f4:68:29:8d:a9:55:e1:f1:54:ae:25:4c:b8: d4:a1:75:e4:dd:f0:c1:75:f1:9b:02:6a:c4:8e:e0:50:9e:35: 4e:a2:e5:4f:50:d0:cf:32:fd:1a:fb:43:b4:c5:72:54:5c:a4: 21:61:57:d5:58:68:a0:d1:7f:b0:7a:c8:f9:51:65:6e:df:cb: 24:97:d1:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwRTIxMTAvBgNVBAUTKDc5REQ1MkFBMzE3NTMwODEyNkQxNzQ4NkE3MjgwNUZC MEUxQkFBNTgwHhcNMjUwNDE2MjEyOTMzWhcNMjUwNDIzMjEyOTMzWjAYMRYwFAYD VQQDEw02ODAwMjEzZC0wOGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8RUZD/GnzafnrEMB1U9WbAy5yI7QGDkEyV9m8woqtEBk0QQFgiC7teUFzBVB LabfbBgpb7uohjpYuw9gAd6PifmXvTYiTkTPlOKc1obcrRxlq7FVdDPA4HpAng/u IE7QCCTVrmOH6/hi2WbOznkII8f0z87ocpZdhJs9TA794VKTpHo/bXnEHMtx8Cxq Ogf2eC+zmSzXSUfIfbY6kAgo3E3hdhC8wRXdc+Xk4Rc0EGFHOCWZKwcVwa0kUsWR s/XpcV9Wl6C90XsOJzA65hOyeHKGcI56mPt39jsU+7GcKwyRnvAwsvlTeO5MBQUn XupieIlURe0UX3p1FdgxmsV15wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNT9XZs9 eX3pBd/uyMXQTlNyUUXwMB8GA1UdIwQYMBaAFHndUqoxdTCBJtF0hqcoBfsOG6pY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjBFMi9CNjIzODUyQTJE NjYxMUVCQjQ0RjU3MjVDNEY5QUUwMi9lZDFTcWpGMU1JRW0wWFNHcHlnRi13NGJx bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VkMVNxakYxTUlFbTBYU0dweWdGLXc0YnFsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjBFMi9CNjIzODUyQTJENjYxMUVCQjQ0RjU3MjVDNEY5QUUwMi9lZDFTcWpGMU1J RW0wWFNHcHlnRi13NGJxbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4cJ6LzPIo8SE23CHMaQvH6WuQ+8WVn3CpC6Fb3BPF0ytssamn2WeM DPHrh1nF1SixTvcqt5MXvUm7pxecKfCPxTjmXuA3ORXMD9ZZyospXfVR69d3iNxp La90xrfgG5zVs/ucvqVhclaHxvBSFBd6KeCC5eqW3o1e+MoCdDc2zB3Ehq2Hul4S 1MM+xVbnomRGHT5YyoX4wEATZXHFpq6NrDlxmKUr6G1rBVt13CCkVWPnQ+OOOFeV OfRoKY2pVeHxVK4lTLjUoXXk3fDBdfGbAmrEjuBQnjVOouVPUNDPMv0a+0O0xXJU XKQhYVfVWGig0X+wesj5UWVu38skl9HS -----END CERTIFICATE-----Generated at Fri Apr 18 20:20:12 2025 by rpki-client