$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.mft File: pVDumUQoL8_DhLCCv_qI-G2wQXk.mft (raw, json) Hash identifier: qPMN77y9l+a1VsCKwSmNWBMyc+mA6k1ctUALkVCBmDE= Subject key identifier: 7B:5E:31:80:21:6F:52:CA:D9:C2:01:70:7E:7E:E5:5F:CB:86:A4:86 Authority key identifier: A5:50:EE:99:44:28:2F:CF:C3:84:B0:82:BF:FA:88:F8:6D:B0:41:79 Certificate issuer: /CN=A91CD5B5/serialNumber=A550EE9944282FCFC384B082BFFA88F86DB04179 Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVDumUQoL8_DhLCCv_qI-G2wQXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.mft Manifest number: 015A Signing time: Mon 21 Apr 2025 03:02:46 +0000 Manifest this update: Mon 21 Apr 2025 03:02:45 +0000 Manifest next update: Mon 28 Apr 2025 03:02:45 +0000 Files and hashes: 1: pVDumUQoL8_DhLCCv_qI-G2wQXk.crl (hash: I8yfjEcP5FMkRXh0p7rsukqrBxTpH9PnrPn3wUiOVVM=) 2: 6C1498CE9B1811EFAEB7E76EC4F9AE02.roa (hash: yOtTIq0fcuWqwPlV5sPcr1ebgyRQ1WaOBXCbzpyrda0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.crl rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVDumUQoL8_DhLCCv_qI-G2wQXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 03:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD5B5, serialNumber=A550EE9944282FCFC384B082BFFA88F86DB04179 Validity Not Before: Apr 21 03:02:45 2025 GMT Not After : Apr 28 03:02:45 2025 GMT Subject: CN=6805b556-4f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c8:64:d4:64:a2:e2:51:e8:18:4b:98:67:48: 6e:6f:78:17:e6:9c:3d:31:74:a7:29:60:d7:2a:20: 0f:04:94:90:8b:f7:02:d7:66:41:e8:2c:62:c1:fc: 34:56:df:87:0a:7e:ec:6a:e2:56:00:d7:df:96:a7: bb:fb:ab:a8:67:b5:1d:86:98:68:5e:27:0c:18:2e: 0f:67:e5:6f:cf:44:46:63:e8:89:17:4c:8d:08:9f: b8:e9:e0:74:21:9f:79:03:ab:34:05:c7:14:ec:37: 57:96:e2:ba:65:0d:30:f2:b6:57:d6:96:4a:e3:9b: 0d:9f:ed:8e:c2:de:76:39:73:a1:4c:61:1c:bb:78: 96:cf:e0:fb:f6:0d:39:8c:db:3c:e0:75:b1:b4:b3: c7:44:99:85:ce:52:4b:21:56:36:53:c5:f7:e8:fe: 93:02:79:57:33:43:a8:64:a5:a8:7b:09:4a:e5:5f: 70:92:bb:ff:93:77:75:bf:92:a5:6e:f0:fd:20:0d: c2:98:fd:45:ee:3a:c2:a8:c7:a3:36:17:58:d8:4b: ca:78:7c:21:29:d5:cd:34:6b:35:4f:55:77:db:9d: 57:1c:85:7b:5c:c2:b6:64:b6:79:10:9e:48:1e:b8: f4:99:4e:c3:2a:2b:da:52:3e:15:67:52:e0:46:57: a9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:5E:31:80:21:6F:52:CA:D9:C2:01:70:7E:7E:E5:5F:CB:86:A4:86 X509v3 Authority Key Identifier: keyid:A5:50:EE:99:44:28:2F:CF:C3:84:B0:82:BF:FA:88:F8:6D:B0:41:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVDumUQoL8_DhLCCv_qI-G2wQXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD5B5/A46B9912164D11EE96858534C4F9AE02/pVDumUQoL8_DhLCCv_qI-G2wQXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:de:d9:95:29:a4:d7:e0:f8:8d:ea:51:15:b2:99:25:b1:60: a8:ce:ea:24:aa:ba:7a:32:78:3b:1c:0a:cb:89:7d:e8:a6:51: 0e:19:ed:89:56:41:53:76:66:a6:ab:f3:75:4e:52:6c:2e:eb: a6:88:83:53:36:d8:c6:10:08:6f:23:39:f2:4c:6b:96:cf:d6: b1:32:12:6c:99:ea:d3:4b:e4:bb:d8:f3:1f:21:da:ab:c6:c8: ca:e0:e5:54:ff:ec:26:74:c5:ba:0b:51:6e:88:30:95:08:2a: 36:9f:f9:82:73:3b:c3:11:26:90:f1:cb:a1:23:2a:51:d3:dc: c7:b6:e3:91:f2:7d:31:00:ee:af:22:d8:52:fe:33:39:c4:e9: ce:e1:ef:c1:89:d8:e2:f1:71:94:0c:1c:f8:89:c2:86:f0:8f: 3c:2f:45:e9:4e:c7:77:d0:7b:9d:5d:17:0a:75:0a:59:13:18: 21:a3:f1:2a:1e:05:7f:7c:39:be:02:e1:ad:de:9c:99:55:17: 6c:81:16:a7:bd:ee:fa:0a:78:d1:9d:21:b1:01:94:bc:17:c5: 51:3c:ea:35:38:e3:ee:59:c8:13:5d:27:c3:76:3e:d8:2e:59: c5:6f:a9:83:6d:2a:c9:42:d9:fc:3e:35:35:cf:bd:e9:4e:98: d1:92:f0:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q1QjUxMTAvBgNVBAUTKEE1NTBFRTk5NDQyODJGQ0ZDMzg0QjA4MkJGRkE4OEY4 NkRCMDQxNzkwHhcNMjUwNDIxMDMwMjQ1WhcNMjUwNDI4MDMwMjQ1WjAYMRYwFAYD VQQDEw02ODA1YjU1Ni00ZjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAschk1GSi4lHoGEuYZ0hub3gX5pw9MXSnKWDXKiAPBJSQi/cC12ZB6Cxiwfw0 Vt+HCn7sauJWANfflqe7+6uoZ7UdhphoXicMGC4PZ+Vvz0RGY+iJF0yNCJ+46eB0 IZ95A6s0BccU7DdXluK6ZQ0w8rZX1pZK45sNn+2Owt52OXOhTGEcu3iWz+D79g05 jNs84HWxtLPHRJmFzlJLIVY2U8X36P6TAnlXM0OoZKWoewlK5V9wkrv/k3d1v5Kl bvD9IA3CmP1F7jrCqMejNhdY2EvKeHwhKdXNNGs1T1V3251XHIV7XMK2ZLZ5EJ5I Hrj0mU7DKivaUj4VZ1LgRlep6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHteMYAh b1LK2cIBcH5+5V/LhqSGMB8GA1UdIwQYMBaAFKVQ7plEKC/Pw4Swgr/6iPhtsEF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDVCNS9BNDZCOTkxMjE2 NEQxMUVFOTY4NTg1MzRDNEY5QUUwMi9wVkR1bVVRb0w4X0RoTENDdl9xSS1HMndR WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BWRHVtVVFvTDhfRGhMQ0N2X3FJLUcyd1FYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDVCNS9BNDZCOTkxMjE2NEQxMUVFOTY4NTg1MzRDNEY5QUUwMi9wVkR1bVVRb0w4 X0RoTENDdl9xSS1HMndRWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA23tmVKaTX4PiN6lEVspklsWCozuokqrp6Mng7HArLiX3oplEOGe2J VkFTdmamq/N1TlJsLuumiINTNtjGEAhvIznyTGuWz9axMhJsmerTS+S72PMfIdqr xsjK4OVU/+wmdMW6C1FuiDCVCCo2n/mCczvDESaQ8cuhIypR09zHtuOR8n0xAO6v IthS/jM5xOnO4e/Bidji8XGUDBz4icKG8I88L0XpTsd30HudXRcKdQpZExgho/Eq HgV/fDm+AuGt3pyZVRdsgRanve76CnjRnSGxAZS8F8VRPOo1OOPuWcgTXSfDdj7Y LlnFb6mDbSrJQtn8PjU1z73pTpjRkvBt -----END CERTIFICATE-----Generated at Mon Apr 21 17:15:57 2025 by rpki-client