$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft File: tZ39tQipur3Pjaqv4_PeaVn7E6o.mft (raw, json) Hash identifier: Xgfa5xCMp5oun5+1KvbAYqsIOG4I0N8zBV/aN9tElg0= Subject key identifier: 04:04:16:07:7D:9B:52:10:4D:C9:6A:E8:22:86:73:E4:DA:D9:0F:7E Authority key identifier: B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA Certificate issuer: /CN=A91D1A9C/serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft Manifest number: 90 Signing time: Tue 15 Apr 2025 05:14:08 +0000 Manifest this update: Tue 15 Apr 2025 05:14:08 +0000 Manifest next update: Tue 22 Apr 2025 05:14:08 +0000 Files and hashes: 1: tZ39tQipur3Pjaqv4_PeaVn7E6o.crl (hash: phWquiHaONHONcxTZvaMFdkxqEENRNhDcYvCxUBYE9E=) 2: 31A71E34407111EFAC14A640C4F9AE02.roa (hash: o7hk30ShUIz7UkIOVQj3yZK9QaxLJPC0RUpttTojnJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 05:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1A9C, serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA Validity Not Before: Apr 15 05:14:08 2025 GMT Not After : Apr 22 05:14:08 2025 GMT Subject: CN=67fdeb20-f0db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fe:32:d3:e6:b7:22:57:df:7d:3d:6e:d1:0f: 10:03:33:d0:3c:84:f7:28:7c:57:1c:95:db:e2:a0: 2a:7c:aa:64:7f:d7:cc:d8:9e:c3:e1:73:0a:97:85: 4a:30:26:a5:50:71:06:44:df:f2:d1:04:77:7e:ec: d6:ae:03:e5:b6:29:44:d0:53:93:70:58:42:8c:ae: 6b:de:86:44:94:02:b6:db:c9:d7:18:ed:f2:30:c4: 39:1d:69:f8:fb:1a:6b:2a:64:bf:26:da:7f:e8:46: 85:cc:2c:5c:41:e4:4f:79:d7:d1:4f:60:c2:09:33: f4:c2:f5:7b:cb:ec:78:d2:6c:c0:33:78:28:3c:f8: c5:8d:98:eb:ca:d1:b3:34:94:a9:95:6d:f8:fa:70: fb:85:8c:15:f8:e7:c7:0d:b4:17:08:44:a8:a3:24: a5:ac:ff:fd:29:fb:8f:20:ba:e3:15:7b:ce:10:af: 4d:69:db:e5:cc:f0:b5:e4:95:d2:3b:fd:e8:e5:cd: 0a:f1:67:f2:df:b8:09:6d:3e:95:43:29:7d:e2:ac: 31:90:16:9b:0c:d9:e6:d3:cd:dd:b1:36:16:bd:be: 9a:54:66:99:56:cf:e2:e2:50:07:54:a3:54:01:5e: 4f:c9:c0:80:a8:ef:11:b4:c0:97:27:f6:cd:eb:5f: f1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:04:16:07:7D:9B:52:10:4D:C9:6A:E8:22:86:73:E4:DA:D9:0F:7E X509v3 Authority Key Identifier: keyid:B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:60:30:1a:7e:98:b1:fb:50:8e:12:93:ca:23:ef:a0:55:51: 37:ad:85:68:28:14:54:56:5a:98:4c:1c:01:58:2c:f4:b8:59: af:45:bb:25:a6:f3:4e:b0:72:e1:1c:00:20:03:94:df:d1:45: d4:e9:a0:ae:bb:18:c7:33:8d:c1:98:a4:2d:cb:64:4a:d7:ef: 2e:61:15:bd:fd:b2:69:d0:e7:f5:9b:64:36:9d:bd:a7:82:48: 35:f0:31:59:8a:de:67:cd:f4:6b:5d:e0:8e:a8:2f:70:7c:a8: c0:99:62:02:4a:e1:35:3c:f7:da:91:5c:3f:17:91:ac:f7:03: 79:34:3e:31:3b:8f:51:c3:a9:a8:5e:57:aa:22:c5:51:a8:f4: fa:32:12:a7:e4:41:a3:45:f9:22:85:13:c1:0f:19:2f:d5:06: 3d:6f:15:cf:2a:4c:c4:11:9c:44:d9:45:95:fe:5a:d2:38:80: 73:6f:41:f2:d0:7a:c6:88:90:2a:b4:9a:82:61:bd:ee:2f:86: dd:1a:5e:6b:cc:a8:da:58:a5:63:43:a9:e3:4c:77:f7:31:95: 6d:c2:e7:52:22:16:23:f3:8e:67:bd:23:dd:72:70:ef:24:67: f8:b9:ab:18:57:cb:de:82:bb:ac:32:70:cb:bd:07:db:0a:ca: b5:7e:4b:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFBOUMxMTAvBgNVBAUTKEI1OURGREI1MDhBOUJBQkRDRjhEQUFBRkUzRjNERTY5 NTlGQjEzQUEwHhcNMjUwNDE1MDUxNDA4WhcNMjUwNDIyMDUxNDA4WjAYMRYwFAYD VQQDEw02N2ZkZWIyMC1mMGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/4y0+a3IlfffT1u0Q8QAzPQPIT3KHxXHJXb4qAqfKpkf9fM2J7D4XMKl4VK MCalUHEGRN/y0QR3fuzWrgPltilE0FOTcFhCjK5r3oZElAK228nXGO3yMMQ5HWn4 +xprKmS/Jtp/6EaFzCxcQeRPedfRT2DCCTP0wvV7y+x40mzAM3goPPjFjZjrytGz NJSplW34+nD7hYwV+OfHDbQXCESooySlrP/9KfuPILrjFXvOEK9NadvlzPC15JXS O/3o5c0K8Wfy37gJbT6VQyl94qwxkBabDNnm083dsTYWvb6aVGaZVs/i4lAHVKNU AV5PycCAqO8RtMCXJ/bN61/x2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQEFgd9 m1IQTclq6CKGc+Ta2Q9+MB8GA1UdIwQYMBaAFLWd/bUIqbq9z42qr+Pz3mlZ+xOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUE5Qy84RThCM0U3RTQw NzAxMUVGQjRBMTgwMEFDNEY5QUUwMi90WjM5dFFpcHVyM1BqYXF2NF9QZWFWbjdF Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RaMzl0UWlwdXIzUGphcXY0X1BlYVZuN0U2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUE5Qy84RThCM0U3RTQwNzAxMUVGQjRBMTgwMEFDNEY5QUUwMi90WjM5dFFpcHVy M1BqYXF2NF9QZWFWbjdFNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQYDAafpix+1COEpPKI++gVVE3rYVoKBRUVlqYTBwBWCz0uFmvRbsl pvNOsHLhHAAgA5Tf0UXU6aCuuxjHM43BmKQty2RK1+8uYRW9/bJp0Of1m2Q2nb2n gkg18DFZit5nzfRrXeCOqC9wfKjAmWICSuE1PPfakVw/F5Gs9wN5ND4xO49Rw6mo XleqIsVRqPT6MhKn5EGjRfkihRPBDxkv1QY9bxXPKkzEEZxE2UWV/lrSOIBzb0Hy 0HrGiJAqtJqCYb3uL4bdGl5rzKjaWKVjQ6njTHf3MZVtwudSIhYj845nvSPdcnDv JGf4uasYV8vegrusMnDLvQfbCsq1fkvL -----END CERTIFICATE-----Generated at Tue Apr 15 14:23:09 2025 by rpki-client