$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft File: akWKsPxWKCkzGD1GgFG_xQeRFjI.mft (raw, json) Hash identifier: T9KSiV8q3jiZP5nJf1OzeXxyMvUWY209IM8Qn2fmGcQ= Subject key identifier: C4:5A:AC:47:96:35:F9:7A:39:55:7D:21:A0:2F:3A:94:E4:01:74:5E Authority key identifier: 6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32 Certificate issuer: /CN=A91CCA92/serialNumber=6A458AB0FC56282933183D468051BFC507911632 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft Manifest number: 5D Signing time: Sat 29 Mar 2025 06:28:11 +0000 Manifest this update: Sat 29 Mar 2025 06:28:10 +0000 Manifest next update: Sat 05 Apr 2025 06:28:10 +0000 Files and hashes: 1: akWKsPxWKCkzGD1GgFG_xQeRFjI.crl (hash: qnrOcS33ThecCbb9GKTfTyuc9k4qkQW8+bORfds+LYk=) 2: C14680A887BF11EF8804736AC4F9AE02.roa (hash: V86iixkcvnqrY9mFy6IN1yxn9j8XC/z6FWNoSjs479w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCA92 Validity Not Before: Mar 29 06:28:10 2025 GMT Not After : Apr 5 06:28:10 2025 GMT Subject: CN=67e792fb-01ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:07:3b:5d:4a:ba:26:d8:ab:80:9e:4d:fe:5c: 56:7b:d5:fd:52:ff:05:29:e7:a9:40:87:e8:3b:6e: 0a:5a:87:04:6f:e4:0b:95:00:7c:67:de:6d:7f:81: 81:94:ec:9c:ab:7f:9e:a3:39:b7:03:7a:c1:fa:dd: e5:31:49:d3:ae:60:34:42:b6:22:13:9b:e3:6e:1f: 86:98:03:5c:9e:79:9f:65:d3:df:fe:5e:db:6d:12: 7f:36:70:15:58:7b:3b:b8:82:ac:01:30:f3:e6:f9: 3c:4e:c8:d5:47:cd:34:22:84:ae:39:3d:14:c9:c3: ae:7b:7f:9d:38:84:50:de:4b:07:25:fe:8d:54:2e: 06:ac:72:79:ce:81:28:cf:ae:53:ee:f7:e1:f4:a3: dc:b3:85:b5:66:a4:20:5a:f2:23:c6:be:c6:4d:80: d0:8e:7d:5a:0f:60:dd:3f:d7:f7:09:d6:3a:7e:a3: d8:4c:df:18:5e:56:bc:05:04:a0:8e:58:bb:8e:70: 26:28:86:e9:f9:68:76:ec:b7:80:1e:6e:10:36:d7: cb:70:ec:c2:44:2e:39:8f:3f:92:bc:85:31:ca:3c: 6a:d5:03:a3:75:1a:f9:5d:6f:0d:a8:5c:2c:e8:90: 6b:91:09:e3:90:b0:6a:45:03:fe:f3:38:af:96:87: 04:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5A:AC:47:96:35:F9:7A:39:55:7D:21:A0:2F:3A:94:E4:01:74:5E X509v3 Authority Key Identifier: keyid:6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:17:19:4e:1f:cd:e9:5d:14:98:55:02:b8:e0:85:78:92:23: 57:46:ec:5d:fd:8f:50:3e:d2:cc:19:8e:d8:59:1c:c6:5e:98: 67:46:1b:3f:20:a3:04:ee:a9:e3:68:8e:7a:5c:b0:e8:62:e5: a0:c4:c9:70:d1:1e:ce:ef:c1:2f:6a:d7:79:a0:2d:bf:63:0c: 21:39:35:7a:c3:86:ee:7b:e1:57:4d:31:b3:79:02:8e:3e:86: b6:46:0c:1c:e8:9d:aa:ab:b1:57:c3:ec:f4:9f:53:b9:d9:7e: 43:7b:93:2b:66:07:f2:a4:64:ef:fd:a0:bd:f4:9c:01:0d:e9: da:58:d7:3d:da:9c:2a:3a:84:5c:36:3e:39:e6:a9:7a:5b:47: dc:4a:78:e6:4d:6c:3f:3c:82:09:4e:a2:ca:d6:c0:c5:1b:0e: e3:9c:b6:67:75:9a:88:7d:85:ee:b7:8d:a4:03:b3:6f:0d:17: 2d:03:ec:ee:d8:ac:ac:14:f5:12:32:ad:de:7b:4d:1f:49:b0: e1:b7:41:cb:6f:ef:f6:f6:be:ab:57:3d:97:ec:b5:98:de:09: 03:93:05:c0:3a:40:19:59:d9:6a:0e:ed:a4:c3:3e:35:be:91: df:c5:77:7d:42:39:fa:f5:b4:23:ac:a1:52:02:c0:a7:4b:10: ee:fc:eb:b8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0E5MjExMC8GA1UEBRMoNkE0NThBQjBGQzU2MjgyOTMzMTgzRDQ2ODA1MUJGQzUw NzkxMTYzMjAeFw0yNTAzMjkwNjI4MTBaFw0yNTA0MDUwNjI4MTBaMBgxFjAUBgNV BAMTDTY3ZTc5MmZiLTAxZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvBztdSrom2KuAnk3+XFZ71f1S/wUp56lAh+g7bgpahwRv5AuVAHxn3m1/gYGU 7Jyrf56jObcDesH63eUxSdOuYDRCtiITm+NuH4aYA1yeeZ9l09/+XtttEn82cBVY ezu4gqwBMPPm+TxOyNVHzTQihK45PRTJw657f504hFDeSwcl/o1ULgascnnOgSjP rlPu9+H0o9yzhbVmpCBa8iPGvsZNgNCOfVoPYN0/1/cJ1jp+o9hM3xheVrwFBKCO WLuOcCYohun5aHbst4AebhA218tw7MJELjmPP5K8hTHKPGrVA6N1Gvldbw2oXCzo kGuRCeOQsGpFA/7zOK+WhwQZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxFqsR5Y1 +Xo5VX0hoC86lOQBdF4wHwYDVR0jBBgwFoAUakWKsPxWKCkzGD1GgFG/xQeRFjIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQTkyLzk5OUU4RUFDODdC RTExRUZCQzQxQzI2OEM0RjlBRTAyL2FrV0tzUHhXS0NrekdEMUdnRkdfeFFlUkZq SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWtXS3NQeFdLQ2t6R0QxR2dGR194UWVSRmpJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND QTkyLzk5OUU4RUFDODdCRTExRUZCQzQxQzI2OEM0RjlBRTAyL2FrV0tzUHhXS0Nr ekdEMUdnRkdfeFFlUkZqSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB4XGU4fzeldFJhVArjghXiSI1dG7F39j1A+0swZjthZHMZemGdGGz8g owTuqeNojnpcsOhi5aDEyXDRHs7vwS9q13mgLb9jDCE5NXrDhu574VdNMbN5Ao4+ hrZGDBzonaqrsVfD7PSfU7nZfkN7kytmB/KkZO/9oL30nAEN6dpY1z3anCo6hFw2 PjnmqXpbR9xKeOZNbD88gglOosrWwMUbDuOctmd1moh9he63jaQDs28NFy0D7O7Y rKwU9RIyrd57TR9JsOG3Qctv7/b2vqtXPZfstZjeCQOTBcA6QBlZ2WoO7aTDPjW+ kd/Fd31COfr1tCOsoVICwKdLEO7867g= -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:57 2025 by rpki-client