$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft File: 4idah1qSyusBBPicRvSlhbet9bY.mft (raw, json) Hash identifier: Fexcz3oUTdkKOM05CzkeWJZgG+VVtxzLK+3OZ4L01Ms= Subject key identifier: A3:2A:2D:DC:87:E8:B8:2E:A8:41:F4:6C:2B:23:50:3D:53:3B:9B:A8 Authority key identifier: E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6 Certificate issuer: /CN=A91CC561/serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6 Certificate serial: 0CD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft Manifest number: 0CC6 Signing time: Wed 02 Apr 2025 18:13:04 +0000 Manifest this update: Wed 02 Apr 2025 18:13:03 +0000 Manifest next update: Wed 09 Apr 2025 18:13:03 +0000 Files and hashes: 1: 4idah1qSyusBBPicRvSlhbet9bY.crl (hash: kmDdrFs1uwCm996DlAnvRz6pgRIrTEM+nUgsXPPtM6I=) 2: 5A395E26E2DB11EB8608EA87C4F9AE02.roa (hash: qxCxFSPkCJMsK7i3RHMxc9Lr9Tcp57aZA1WThFY3ZFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 18:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3282 (0xcd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC561 Validity Not Before: Apr 2 18:13:03 2025 GMT Not After : Apr 9 18:13:03 2025 GMT Subject: CN=67ed7e30-44c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fe:dc:fd:70:6d:8c:4a:29:79:68:a1:e3:9e: 47:cb:15:ac:58:18:5d:5a:ac:38:0d:ab:cd:57:74: 1b:cd:8b:b9:36:84:9f:26:68:7d:ff:c4:24:65:f9: 7f:63:49:c7:b5:0d:08:2b:88:31:54:ca:0b:47:57: ed:4a:db:b5:3e:ea:0e:6b:71:91:d7:36:9f:be:9b: 74:fd:b6:bc:31:57:86:e3:4d:fb:05:fc:eb:01:96: ca:c8:d2:67:85:a6:45:55:49:c9:bd:88:96:8a:8b: e8:80:1c:31:7d:d9:93:73:09:92:22:ad:73:dd:9b: 92:f5:d7:0c:fc:a0:eb:f2:69:2f:58:c1:67:0a:cb: 29:12:55:d6:ef:ee:f8:a1:62:49:50:70:33:b5:ce: 4f:5e:cb:a1:cc:18:23:83:13:42:50:7b:25:81:3e: 1a:ea:cb:c2:65:22:4b:45:20:28:f5:65:e5:b9:0e: 58:33:14:da:25:dd:0a:25:7a:ba:b4:c9:6b:09:0f: c3:cc:f2:9a:80:60:4c:4c:fb:89:85:2c:4a:78:c5: 3d:80:29:5a:b5:2d:ab:ee:9e:c3:75:b5:98:80:dd: dd:8e:68:c3:5a:63:58:84:e1:31:2b:29:18:1b:fa: cc:f0:eb:f0:ff:82:6e:68:f1:13:6f:cd:a7:ad:e5: bf:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2A:2D:DC:87:E8:B8:2E:A8:41:F4:6C:2B:23:50:3D:53:3B:9B:A8 X509v3 Authority Key Identifier: keyid:E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:b4:4e:5a:7b:07:86:e6:15:fa:c5:77:d5:85:cb:e8:a1:93: 7b:48:46:4e:f3:e1:a2:02:88:3b:9c:58:07:d0:41:66:6f:8c: a1:7e:cb:97:4e:36:ab:14:93:8d:8e:59:82:18:60:a9:36:3d: 6b:fc:f1:b3:f3:bc:17:f2:ca:e1:f5:51:74:04:cf:fd:03:b8: 99:32:06:3c:7a:35:6a:70:b7:28:88:bb:c3:50:45:f3:c4:87: c9:5d:3c:fa:5f:cf:a7:06:1d:e2:bc:0d:76:61:19:33:1d:d1: 21:6f:91:3c:80:e8:d8:4c:72:50:23:ce:fd:5c:7c:47:c6:06: 5f:03:78:9f:2b:95:53:2e:7b:2e:c0:93:a4:dd:de:63:75:80: 2e:e5:32:0f:11:6a:25:92:7b:79:d4:e2:61:fc:9f:b5:5e:41: b1:8e:71:00:6b:6c:42:8b:0d:b5:82:b8:a2:0f:cf:ce:4e:87: ae:ba:f9:bf:bb:96:bd:6a:1f:ee:06:fb:46:10:f5:10:0b:f3: 07:6f:1b:2a:6f:9f:0c:9b:18:cd:6e:d9:28:ae:0e:97:72:f9: 48:d1:a3:a6:c9:6b:d5:0e:73:08:1d:c6:15:a1:be:0d:4f:b6: c4:2f:8c:5a:c9:5d:3b:41:f9:1c:fa:4a:af:e5:d5:32:3b:28: 4a:dc:8f:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M1NjExMTAvBgNVBAUTKEUyMjc1QTg3NUE5MkNBRUIwMTA0Rjg5QzQ2RjRBNTg1 QjdBREY1QjYwHhcNMjUwNDAyMTgxMzAzWhcNMjUwNDA5MTgxMzAzWjAYMRYwFAYD VQQDEw02N2VkN2UzMC00NGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvf7c/XBtjEopeWih455HyxWsWBhdWqw4DavNV3QbzYu5NoSfJmh9/8QkZfl/ Y0nHtQ0IK4gxVMoLR1ftStu1PuoOa3GR1zafvpt0/ba8MVeG4037BfzrAZbKyNJn haZFVUnJvYiWiovogBwxfdmTcwmSIq1z3ZuS9dcM/KDr8mkvWMFnCsspElXW7+74 oWJJUHAztc5PXsuhzBgjgxNCUHslgT4a6svCZSJLRSAo9WXluQ5YMxTaJd0KJXq6 tMlrCQ/DzPKagGBMTPuJhSxKeMU9gClatS2r7p7DdbWYgN3djmjDWmNYhOExKykY G/rM8Ovw/4JuaPETb82nreW/TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMqLdyH 6LguqEH0bCsjUD1TO5uoMB8GA1UdIwQYMBaAFOInWodaksrrAQT4nEb0pYW3rfW2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzU2MS84NkMzMDQ4MkU3 MzQxMUU5OUQ4RUFGNDdDNEY5QUUwMi80aWRhaDFxU3l1c0JCUGljUnZTbGhiZXQ5 YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRpZGFoMXFTeXVzQkJQaWNSdlNsaGJldDliWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzU2MS84NkMzMDQ4MkU3MzQxMUU5OUQ4RUFGNDdDNEY5QUUwMi80aWRhaDFxU3l1 c0JCUGljUnZTbGhiZXQ5YlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5tE5aeweG5hX6xXfVhcvooZN7SEZO8+GiAog7nFgH0EFmb4yhfsuX TjarFJONjlmCGGCpNj1r/PGz87wX8srh9VF0BM/9A7iZMgY8ejVqcLcoiLvDUEXz xIfJXTz6X8+nBh3ivA12YRkzHdEhb5E8gOjYTHJQI879XHxHxgZfA3ifK5VTLnsu wJOk3d5jdYAu5TIPEWolknt51OJh/J+1XkGxjnEAa2xCiw21griiD8/OToeuuvm/ u5a9ah/uBvtGEPUQC/MHbxsqb58MmxjNbtkorg6XcvlI0aOmyWvVDnMIHcYVob4N T7bEL4xayV07Qfkc+kqv5dUyOyhK3I/P -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:26 2025 by rpki-client