$ rpki-client -vvf rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft File: -rpT9D2gDiGn6veS1I_bdpV6gLw.mft (raw, json) Hash identifier: VA7kEjuK8lDtUbT2eUhGKmrUrSJtuYboIWcYA8jsbSo= Subject key identifier: 7F:75:B3:DE:DE:05:BB:8D:3C:0D:27:E8:16:9F:D7:06:7E:F8:E0:EB Authority key identifier: FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC Certificate issuer: /CN=A91D25E5/serialNumber=FABA53F43DA00E21A7EAF792D48FDB76957A80BC Certificate serial: 0607 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft Manifest number: 0602 Signing time: Fri 28 Mar 2025 23:07:39 +0000 Manifest this update: Fri 28 Mar 2025 23:07:38 +0000 Manifest next update: Fri 04 Apr 2025 23:07:38 +0000 Files and hashes: 1: -rpT9D2gDiGn6veS1I_bdpV6gLw.crl (hash: 625QSLkuyNDY8h/bpv56mroL5SKrc5vFwNmKYhc8iqo=) 2: EB8DE9B49B6411EBA08FBE84C4F9AE02.roa (hash: OXMHoo8Egs65FUqbV0ME5rvmbJEFphKa1wlI6laYOWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.crl rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:07:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1543 (0x607) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D25E5 Validity Not Before: Mar 28 23:07:38 2025 GMT Not After : Apr 4 23:07:38 2025 GMT Subject: CN=67e72bbb-8dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:de:ef:a2:0b:f8:e4:3b:d4:0e:de:5d:5c:c5: 74:7d:4c:0f:bd:e2:6b:f8:1c:a3:de:a5:ef:ff:8c: d2:b2:5d:f3:c9:2b:c1:81:86:b9:d7:db:f1:bf:24: dc:6b:0e:a6:b5:9e:68:c7:5c:f4:27:63:96:1e:50: 30:15:ba:81:7e:42:c9:d5:f6:70:39:ca:b2:fa:6c: b2:0e:f1:4b:7a:3c:8a:0d:ae:2f:03:06:35:d0:c6: 0e:4b:71:13:9f:b0:1a:86:74:38:91:46:84:10:76: 25:c3:97:70:f1:b1:52:fa:c9:69:8c:ab:92:db:b8: 79:fd:29:aa:1d:26:68:76:85:de:fa:20:14:05:37: e3:ca:92:d6:3e:2c:b8:75:89:01:c7:fc:ae:20:3a: 1f:51:a5:a5:9c:e4:6b:86:4f:93:af:33:00:bf:61: 44:8e:9e:ce:77:f6:06:b1:27:4a:a0:fb:50:73:b4: d3:87:51:5b:64:8f:7e:95:6f:c4:15:ad:35:c0:3e: df:82:6b:a3:8a:6f:9a:d8:0b:9a:53:f5:b8:73:3d: 83:02:b8:69:64:79:f0:d3:40:b4:3e:33:70:45:a8: ec:8a:dd:47:ed:88:00:3e:2f:e2:43:81:82:83:d6: cd:c1:d3:bb:b9:54:ba:1e:bb:a2:05:f3:78:14:ad: 9e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:75:B3:DE:DE:05:BB:8D:3C:0D:27:E8:16:9F:D7:06:7E:F8:E0:EB X509v3 Authority Key Identifier: keyid:FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:5e:e9:2f:09:bc:04:af:14:03:b5:01:56:5f:2a:03:af:9b: 53:54:97:49:b4:e4:08:8c:86:aa:67:75:de:56:61:15:45:4f: c7:63:5c:5b:b4:02:93:d9:1f:9f:9e:6b:59:a4:b0:ce:4b:62: 16:b6:18:40:dd:4d:1f:ed:de:e1:24:d5:b9:41:3e:5b:e6:70: f3:5f:39:1f:1f:30:ce:27:99:db:8d:14:f8:4f:f8:14:db:9b: 31:45:52:8a:3e:08:06:34:19:87:16:c2:da:0d:a4:05:eb:2a: b9:43:e5:10:ba:72:21:ae:e8:ac:f1:31:c3:42:99:30:31:0f: 05:8f:7f:e7:08:1f:a9:2a:ed:e2:30:c5:c9:f5:c5:53:f3:08: 6e:1a:85:30:94:3e:80:fc:86:1a:d9:7a:c1:2b:4f:13:1d:99: 1e:cc:42:64:49:1d:4c:f3:87:ef:6a:d9:6b:79:8a:59:dd:c0: e1:e6:fc:4d:06:de:da:63:cd:e2:5e:52:d3:6e:32:ea:ce:5b: de:68:af:42:61:e2:e9:fa:c5:54:7a:cd:35:12:47:e2:3a:99: be:8a:ad:8e:07:0d:bc:39:3e:1f:1e:55:48:e6:83:c5:01:62: 33:8c:c3:66:6d:22:f4:dc:7d:c2:55:83:0f:c7:31:4e:d2:c7: 17:08:eb:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI1RTUxMTAvBgNVBAUTKEZBQkE1M0Y0M0RBMDBFMjFBN0VBRjc5MkQ0OEZEQjc2 OTU3QTgwQkMwHhcNMjUwMzI4MjMwNzM4WhcNMjUwNDA0MjMwNzM4WjAYMRYwFAYD VQQDEw02N2U3MmJiYi04ZGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzN7vogv45DvUDt5dXMV0fUwPveJr+Byj3qXv/4zSsl3zySvBgYa519vxvyTc aw6mtZ5ox1z0J2OWHlAwFbqBfkLJ1fZwOcqy+myyDvFLejyKDa4vAwY10MYOS3ET n7AahnQ4kUaEEHYlw5dw8bFS+slpjKuS27h5/SmqHSZodoXe+iAUBTfjypLWPiy4 dYkBx/yuIDofUaWlnORrhk+TrzMAv2FEjp7Od/YGsSdKoPtQc7TTh1FbZI9+lW/E Fa01wD7fgmujim+a2AuaU/W4cz2DArhpZHnw00C0PjNwRajsit1H7YgAPi/iQ4GC g9bNwdO7uVS6HruiBfN4FK2e3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH91s97e BbuNPA0n6Baf1wZ++ODrMB8GA1UdIwQYMBaAFPq6U/Q9oA4hp+r3ktSP23aVeoC8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjVFNS9FQ0JGMDBFODlC NEIxMUVCOTczMEExNTRDNEY5QUUwMi8tcnBUOUQyZ0RpR242dmVTMUlfYmRwVjZn THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ycFQ5RDJnRGlHbjZ2ZVMxSV9iZHBWNmdMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjVFNS9FQ0JGMDBFODlCNEIxMUVCOTczMEExNTRDNEY5QUUwMi8tcnBUOUQyZ0Rp R242dmVTMUlfYmRwVjZnTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIXukvCbwErxQDtQFWXyoDr5tTVJdJtOQIjIaqZ3XeVmEVRU/HY1xb tAKT2R+fnmtZpLDOS2IWthhA3U0f7d7hJNW5QT5b5nDzXzkfHzDOJ5nbjRT4T/gU 25sxRVKKPggGNBmHFsLaDaQF6yq5Q+UQunIhruis8THDQpkwMQ8Fj3/nCB+pKu3i MMXJ9cVT8whuGoUwlD6A/IYa2XrBK08THZkezEJkSR1M84fvatlreYpZ3cDh5vxN Bt7aY83iXlLTbjLqzlveaK9CYeLp+sVUes01EkfiOpm+iq2OBw28OT4fHlVI5oPF AWIzjMNmbSL03H3CVYMPxzFO0scXCOt2 -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:41 2025 by rpki-client