$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft File: 05fnjG3TxpaFEzQVMschiNd1Z68.mft (raw, json) Hash identifier: bHmFeHvumH1FFaGYv8WL4T+yh3JHAR8P5j0QLl0lQyE= Subject key identifier: 0E:F3:CE:2C:05:A5:29:85:12:F9:1C:53:21:E3:40:0A:D2:BB:B3:98 Authority key identifier: D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF Certificate issuer: /CN=A91D3CA7/serialNumber=D397E78C6DD3C6968513341532C72188D77567AF Certificate serial: 02A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft Manifest number: 02A1 Signing time: Wed 09 Apr 2025 01:11:46 +0000 Manifest this update: Wed 09 Apr 2025 01:11:46 +0000 Manifest next update: Wed 16 Apr 2025 01:11:46 +0000 Files and hashes: 1: 05fnjG3TxpaFEzQVMschiNd1Z68.crl (hash: qIJonk1OF/4hrTMpe2NhwmYfrsCOruLuPuhqJ+MoNC0=) 2: DE183F1CF46611EC815F7283C4F9AE02.roa (hash: 9MdpJxrwdV0aU1f/zX8n/hykvTdPQn1kKe0kWScV57Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 01:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 678 (0x2a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3CA7 Validity Not Before: Apr 9 01:11:46 2025 GMT Not After : Apr 16 01:11:46 2025 GMT Subject: CN=67f5c952-9018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:67:f1:40:7a:d5:aa:9c:a1:b2:67:80:1d:32: 5c:b0:94:29:93:86:c2:3b:d9:65:f6:7e:56:e6:a1: ee:fd:40:8e:9e:fe:9f:fa:91:b1:92:ea:a4:60:7d: eb:9d:be:73:6f:48:fd:c5:51:b1:cd:9a:bf:42:36: 95:f1:86:73:32:e2:35:3d:69:d0:94:58:54:1d:39: c2:08:f2:7e:ef:5b:17:ff:b5:cb:98:fb:15:88:db: 9f:42:6a:37:e5:8c:81:f5:33:d3:bd:7f:31:01:4c: 5e:b1:cb:25:db:c8:fd:f6:d5:9d:92:bd:6e:02:cb: 9b:c4:49:cc:b7:49:03:74:d9:bd:5a:95:14:07:48: 4f:b3:e5:ab:f9:92:09:44:12:a8:8b:a3:ab:07:60: 5b:43:35:5f:94:ea:39:1a:aa:5d:7e:6e:bf:87:74: aa:d3:18:67:58:9a:d5:63:01:2e:2f:cf:55:a3:f1: b3:f5:04:a6:f8:3f:e4:53:f8:14:4e:0b:02:49:a7: 92:c7:c6:09:dc:a0:76:9c:26:18:7c:40:ad:72:a5: 39:fe:85:18:0e:03:99:90:36:2a:62:9b:c0:f7:4c: 60:d3:47:84:85:94:36:2b:0e:28:1d:f7:d5:dc:d4: d5:49:49:38:c1:4d:f3:9c:8d:82:6f:52:d6:7f:86: 61:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F3:CE:2C:05:A5:29:85:12:F9:1C:53:21:E3:40:0A:D2:BB:B3:98 X509v3 Authority Key Identifier: keyid:D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:c5:af:4b:a5:ea:89:25:a5:9e:7e:f6:14:bf:27:1c:df:ab: 4e:f1:ee:79:20:53:2d:c9:6e:37:c7:f4:af:4a:d8:4a:68:b4: 2c:c9:72:e8:91:3e:62:c8:9a:47:b3:78:a7:6c:71:af:b1:af: a1:7c:2a:2e:4e:0c:81:5f:4d:f7:d0:2f:36:d0:1f:d0:6c:9b: 80:13:28:54:16:ee:5f:59:06:d1:c5:a9:7d:d4:c8:d3:f9:8c: f1:f9:30:e2:e5:3e:9b:18:f5:be:cc:6f:51:a2:41:97:ab:49: 6a:98:eb:0a:04:7e:c5:6c:8d:28:85:1a:54:04:db:7e:ac:6d: 6f:0a:53:31:cd:95:63:25:8d:e9:aa:9e:0f:19:10:eb:06:35: f0:ed:98:86:f5:7b:5b:1c:c4:28:35:5a:4f:8d:b4:21:f5:d3: d9:0c:a7:02:d0:66:94:8b:46:c5:5b:93:40:54:a2:eb:e0:72: 9d:1a:e0:1c:4a:fb:1f:9d:2a:26:85:06:b7:94:97:ec:bf:98: 76:a0:97:bb:b7:85:1b:de:66:6c:57:01:80:6d:12:8e:a7:0f: 54:f4:19:99:55:9b:87:84:9c:e3:7d:18:85:66:5b:e1:bd:bc: 4b:4e:fd:49:c5:9b:01:9f:fe:1c:f7:d3:5b:d3:f0:a2:bd:2d: a5:84:87:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNDQTcxMTAvBgNVBAUTKEQzOTdFNzhDNkREM0M2OTY4NTEzMzQxNTMyQzcyMTg4 RDc3NTY3QUYwHhcNMjUwNDA5MDExMTQ2WhcNMjUwNDE2MDExMTQ2WjAYMRYwFAYD VQQDEw02N2Y1Yzk1Mi05MDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2fxQHrVqpyhsmeAHTJcsJQpk4bCO9ll9n5W5qHu/UCOnv6f+pGxkuqkYH3r nb5zb0j9xVGxzZq/QjaV8YZzMuI1PWnQlFhUHTnCCPJ+71sX/7XLmPsViNufQmo3 5YyB9TPTvX8xAUxescsl28j99tWdkr1uAsubxEnMt0kDdNm9WpUUB0hPs+Wr+ZIJ RBKoi6OrB2BbQzVflOo5Gqpdfm6/h3Sq0xhnWJrVYwEuL89Vo/Gz9QSm+D/kU/gU TgsCSaeSx8YJ3KB2nCYYfECtcqU5/oUYDgOZkDYqYpvA90xg00eEhZQ2Kw4oHffV 3NTVSUk4wU3znI2Cb1LWf4Zh1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7zziwF pSmFEvkcUyHjQArSu7OYMB8GA1UdIwQYMBaAFNOX54xt08aWhRM0FTLHIYjXdWev MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0NBNy8zRjBFMEUwNkY0 NjExMUVDODIzQ0EwN0NDNEY5QUUwMi8wNWZuakczVHhwYUZFelFWTXNjaGlOZDFa NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA1Zm5qRzNUeHBhRkV6UVZNc2NoaU5kMVo2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0NBNy8zRjBFMEUwNkY0NjExMUVDODIzQ0EwN0NDNEY5QUUwMi8wNWZuakczVHhw YUZFelFWTXNjaGlOZDFaNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/xa9LpeqJJaWefvYUvycc36tO8e55IFMtyW43x/SvSthKaLQsyXLo kT5iyJpHs3inbHGvsa+hfCouTgyBX0330C820B/QbJuAEyhUFu5fWQbRxal91MjT +Yzx+TDi5T6bGPW+zG9RokGXq0lqmOsKBH7FbI0ohRpUBNt+rG1vClMxzZVjJY3p qp4PGRDrBjXw7ZiG9XtbHMQoNVpPjbQh9dPZDKcC0GaUi0bFW5NAVKLr4HKdGuAc SvsfnSomhQa3lJfsv5h2oJe7t4Ub3mZsVwGAbRKOpw9U9BmZVZuHhJzjfRiFZlvh vbxLTv1JxZsBn/4c99Nb0/CivS2lhIfg -----END CERTIFICATE-----Generated at Fri Apr 11 19:05:56 2025 by rpki-client