$ rpki-client -vvf rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft File: 77aQcOLEAaX3cTPS27G6NB0X5h4.mft (raw, json) Hash identifier: oRzoWz0I/wYpVIV4NR0X5KgPEkIwm33zjYAhvbprTLA= Subject key identifier: 98:AE:AB:F0:C6:27:51:63:F7:AB:EE:96:2E:10:6E:D3:55:B0:57:B7 Authority key identifier: EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E Certificate issuer: /CN=A91D359E/serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E Certificate serial: 0C03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft Manifest number: 0BFD Signing time: Wed 16 Apr 2025 18:34:13 +0000 Manifest this update: Wed 16 Apr 2025 18:34:12 +0000 Manifest next update: Wed 23 Apr 2025 18:34:12 +0000 Files and hashes: 1: 77aQcOLEAaX3cTPS27G6NB0X5h4.crl (hash: HUVbPj1hAtKQmZ50Ej/K1nZZKGBxRcwAoAv4Ajan5aY=) 2: 606EE7BC0DED11EA88AC0A29C4F9AE02.roa (hash: QT7mEE8UuN9rjPhIlUrQcIBctTWW16AFm9Bfvp1Mkyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 18:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3075 (0xc03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D359E, serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E Validity Not Before: Apr 16 18:34:12 2025 GMT Not After : Apr 23 18:34:12 2025 GMT Subject: CN=67fff825-d260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f5:50:5c:8e:12:7c:c1:02:07:9a:32:c2:ef: ec:e1:50:45:d6:bb:13:a8:df:fe:e6:d3:f0:c9:41: 53:67:d8:b2:2b:44:f2:1c:90:e9:65:ec:ea:a3:07: 0d:cb:bc:6a:7b:25:00:fb:23:77:21:13:83:bc:ab: a7:fd:fe:62:81:08:f7:ea:c7:8d:d0:7f:d9:89:5e: cb:48:53:e7:44:61:e2:e9:8f:c3:2d:e1:ce:d1:11: 14:17:80:ec:6e:01:64:95:32:c7:15:be:e6:51:f1: d2:d9:d3:13:58:ec:29:8b:02:36:5b:77:65:35:08: fc:0b:29:c2:ac:7a:6e:b1:68:1f:bb:47:e7:27:90: b9:28:5b:60:63:b2:18:1c:04:ad:9e:c7:82:c7:9e: 37:80:4b:98:95:9b:46:1b:ed:c3:e0:9f:0e:f0:5c: 0b:6d:7e:0d:39:90:cc:cc:22:9b:dc:ea:01:02:ac: f0:f7:45:7a:98:fd:ea:f4:50:17:76:17:c9:30:eb: 3c:3c:53:8a:a9:c5:30:83:0f:0f:06:64:70:db:67: 26:93:a8:30:40:39:78:f7:8d:75:60:c2:09:0f:1e: 42:d7:86:c6:76:9e:46:9f:ba:5b:59:c6:24:bc:a3: 90:18:a6:f8:d8:bd:28:4c:da:f8:e1:49:1b:77:ff: 0c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:AE:AB:F0:C6:27:51:63:F7:AB:EE:96:2E:10:6E:D3:55:B0:57:B7 X509v3 Authority Key Identifier: keyid:EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:df:d4:da:71:05:a2:8a:74:07:37:7a:95:a6:13:a8:3c:4a: 0c:7b:71:d6:24:ed:48:e3:0a:71:66:10:c9:c6:dc:99:f7:cf: 61:a6:85:4d:8e:bc:b4:44:ce:cc:8f:66:f7:a3:d2:94:08:ff: a1:f8:d2:ab:06:e5:46:b0:0f:44:57:df:89:73:10:fc:23:02: ae:59:36:5b:da:06:87:ed:02:26:29:3a:2a:5b:27:55:66:27: 0f:a2:a0:23:f3:cd:9d:40:10:49:22:ba:15:0b:92:16:c4:c9: ac:e6:75:ba:c4:ce:e9:f7:36:4f:f5:2a:d7:33:6c:ff:1f:3c: d0:19:55:7c:ef:fa:84:89:b5:41:0e:af:06:51:ba:63:ae:ba: cd:d8:4f:f1:3f:33:36:2f:7a:54:a9:98:1d:cd:9c:2f:89:00: 51:20:77:43:30:79:52:05:43:79:d9:81:45:c5:7c:c8:ae:aa: 1c:f0:c9:f2:18:04:21:3a:73:34:81:08:75:90:c5:38:74:04: a4:f2:0e:e7:ac:ed:2d:3c:dc:52:72:f0:74:10:34:d5:80:b5: 40:70:90:55:cc:14:f9:71:8a:b6:a1:6f:25:75:c7:39:82:53: 8c:a6:e3:b5:7c:d8:96:a2:74:a7:ce:bd:47:cd:25:38:7b:e1: bc:76:a3:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM1OUUxMTAvBgNVBAUTKEVGQjY5MDcwRTJDNDAxQTVGNzcxMzNEMkRCQjFCQTM0 MUQxN0U2MUUwHhcNMjUwNDE2MTgzNDEyWhcNMjUwNDIzMTgzNDEyWjAYMRYwFAYD VQQDEw02N2ZmZjgyNS1kMjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPVQXI4SfMECB5oywu/s4VBF1rsTqN/+5tPwyUFTZ9iyK0TyHJDpZezqowcN y7xqeyUA+yN3IRODvKun/f5igQj36seN0H/ZiV7LSFPnRGHi6Y/DLeHO0REUF4Ds bgFklTLHFb7mUfHS2dMTWOwpiwI2W3dlNQj8CynCrHpusWgfu0fnJ5C5KFtgY7IY HAStnseCx543gEuYlZtGG+3D4J8O8FwLbX4NOZDMzCKb3OoBAqzw90V6mP3q9FAX dhfJMOs8PFOKqcUwgw8PBmRw22cmk6gwQDl49411YMIJDx5C14bGdp5Gn7pbWcYk vKOQGKb42L0oTNr44Ukbd/8MBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJiuq/DG J1Fj96vuli4QbtNVsFe3MB8GA1UdIwQYMBaAFO+2kHDixAGl93Ez0tuxujQdF+Ye MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzU5RS82QTQ5ODhCNjBE RUIxMUVBQjhFNjBCMjVDNEY5QUUwMi83N2FRY09MRUFhWDNjVFBTMjdHNk5CMFg1 aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc3YVFjT0xFQWFYM2NUUFMyN0c2TkIwWDVoNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzU5RS82QTQ5ODhCNjBERUIxMUVBQjhFNjBCMjVDNEY5QUUwMi83N2FRY09MRUFh WDNjVFBTMjdHNk5CMFg1aDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ39TacQWiinQHN3qVphOoPEoMe3HWJO1I4wpxZhDJxtyZ989hpoVN jry0RM7Mj2b3o9KUCP+h+NKrBuVGsA9EV9+JcxD8IwKuWTZb2gaH7QImKToqWydV ZicPoqAj882dQBBJIroVC5IWxMms5nW6xM7p9zZP9SrXM2z/HzzQGVV87/qEibVB Dq8GUbpjrrrN2E/xPzM2L3pUqZgdzZwviQBRIHdDMHlSBUN52YFFxXzIrqoc8Mny GAQhOnM0gQh1kMU4dASk8g7nrO0tPNxScvB0EDTVgLVAcJBVzBT5cYq2oW8ldcc5 glOMpuO1fNiWonSnzr1HzSU4e+G8dqPl -----END CERTIFICATE-----Generated at Fri Apr 18 10:48:09 2025 by rpki-client