$ rpki-client -vvf rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft File: A72QmhoVpFA9-tWUw8bem5RgTmY.mft (raw, json) Hash identifier: H964+mbWndRD9D2biaBJxIqUyxgAXt8GRNCTRsbtaYI= Subject key identifier: F9:2A:0A:B8:7A:93:85:BA:94:1A:6A:3B:F6:C0:45:52:9D:E2:F6:33 Authority key identifier: 03:BD:90:9A:1A:15:A4:50:3D:FA:D5:94:C3:C6:DE:9B:94:60:4E:66 Certificate issuer: /CN=A91D873B/serialNumber=03BD909A1A15A4503DFAD594C3C6DE9B94604E66 Certificate serial: 0318 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft Manifest number: 0311 Signing time: Sat 29 Mar 2025 01:27:59 +0000 Manifest this update: Sat 29 Mar 2025 01:27:58 +0000 Manifest next update: Sat 05 Apr 2025 01:27:58 +0000 Files and hashes: 1: A72QmhoVpFA9-tWUw8bem5RgTmY.crl (hash: aG/mwRb79xQedgtsS2jpXDXOqifJ09YF9eo1S+Iq+xE=) 2: E15CC33CD55011EFB17CB022C4F9AE02.roa (hash: YkgVY3NySYm4wFHmOVUk89wTvIIkdJt3TNVnKoMCNEA=) 3: 5409C188C6CB11ECB185E43EC4F9AE02.roa (hash: qkNJcqJasGm5DqRK6RDLwIc76BxJl9ChsFknMyrjOEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.crl rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 01:27:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 792 (0x318) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D873B Validity Not Before: Mar 29 01:27:58 2025 GMT Not After : Apr 5 01:27:58 2025 GMT Subject: CN=67e74c9e-c726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:72:e1:08:e0:98:a5:9f:11:8a:ca:a7:7a:b5: d5:2c:40:b2:f4:09:0f:b9:7f:2e:d1:65:75:e0:7f: 1b:23:d9:5d:44:e6:9c:35:2d:25:34:58:bf:39:89: 11:b0:08:e4:34:a1:14:76:1f:26:72:67:51:83:2b: e6:1d:04:3e:3e:a0:bf:62:ba:af:36:c1:d8:a7:24: 21:84:e9:54:f5:55:99:09:56:7a:88:24:0b:49:98: b2:48:6d:28:29:eb:b0:e2:96:0e:94:19:53:c5:f0: f7:00:98:46:ab:d3:67:0a:dc:64:05:c8:4c:90:09: 6f:1b:e5:2b:c3:5e:e7:08:63:24:00:e2:82:7c:e6: 90:0f:21:e2:45:42:08:a0:61:0c:95:90:2d:d2:bf: c0:d7:4e:f4:bb:3a:77:c7:06:f4:52:9f:8b:05:ef: 58:59:5b:21:8c:f2:ea:95:bd:66:a9:b8:ae:58:2d: 24:2e:8a:0f:98:b2:7a:a9:3b:22:0e:2b:f3:23:05: 24:8c:08:8e:8e:22:2a:ad:65:43:23:d0:6f:9c:25: 4c:37:23:58:fd:57:aa:0d:e3:68:c9:4a:db:c4:a3: 81:06:3a:0d:e1:12:70:95:a8:9a:fa:a5:b7:c4:c5: ed:96:18:81:49:dd:cc:db:15:32:cf:d3:8d:bf:f1: d7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:2A:0A:B8:7A:93:85:BA:94:1A:6A:3B:F6:C0:45:52:9D:E2:F6:33 X509v3 Authority Key Identifier: keyid:03:BD:90:9A:1A:15:A4:50:3D:FA:D5:94:C3:C6:DE:9B:94:60:4E:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A72QmhoVpFA9-tWUw8bem5RgTmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D873B/4A16BBDAC60411ECAA94594BC4F9AE02/A72QmhoVpFA9-tWUw8bem5RgTmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:75:0f:50:ca:c0:70:fd:b5:51:df:15:ac:76:6f:78:a0:7c: 53:b0:8e:95:37:f0:6f:6d:7a:7f:4e:37:cc:0d:be:67:d7:a9: c9:52:8e:79:41:d3:b1:9e:af:b2:a5:a3:db:60:fd:8c:00:a1: 6b:1d:ee:a6:d8:fe:f0:e9:7b:2f:8e:b5:08:87:06:1d:e8:14: d9:fa:c4:cd:8f:6c:9a:0d:e0:3f:c6:5c:99:03:c4:96:df:ed: 93:7c:9b:4e:89:9a:18:a6:cc:fb:af:0e:a9:45:40:01:cb:4e: a2:de:f7:94:45:c0:8b:48:25:cb:04:be:3a:41:78:8a:f2:43: e5:be:3a:22:1e:0d:06:ee:31:33:32:c6:b0:93:f1:a9:1b:c4: 2e:2d:0d:80:9a:25:af:b9:48:90:cb:e0:2e:d7:4a:04:ff:c1: c4:7c:3a:75:f1:34:94:61:f8:bc:bf:76:17:60:c0:22:c2:93: 59:cb:ed:dc:31:1e:be:ff:9d:d6:96:51:5e:cc:5d:f9:52:68: a9:52:11:25:a1:f5:96:9f:c0:c0:1f:32:62:ed:f2:26:68:cd: d3:2d:5e:3a:48:03:63:bb:fa:3c:72:1c:cd:77:33:0d:f5:b2: 6b:bb:b8:46:85:5d:9e:a1:09:da:a8:19:6b:bc:8e:ce:15:92: bd:d5:8d:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3M0IxMTAvBgNVBAUTKDAzQkQ5MDlBMUExNUE0NTAzREZBRDU5NEMzQzZERTlC OTQ2MDRFNjYwHhcNMjUwMzI5MDEyNzU4WhcNMjUwNDA1MDEyNzU4WjAYMRYwFAYD VQQDEw02N2U3NGM5ZS1jNzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnLhCOCYpZ8RisqnerXVLECy9AkPuX8u0WV14H8bI9ldROacNS0lNFi/OYkR sAjkNKEUdh8mcmdRgyvmHQQ+PqC/YrqvNsHYpyQhhOlU9VWZCVZ6iCQLSZiySG0o Keuw4pYOlBlTxfD3AJhGq9NnCtxkBchMkAlvG+Urw17nCGMkAOKCfOaQDyHiRUII oGEMlZAt0r/A1070uzp3xwb0Up+LBe9YWVshjPLqlb1mqbiuWC0kLooPmLJ6qTsi DivzIwUkjAiOjiIqrWVDI9BvnCVMNyNY/VeqDeNoyUrbxKOBBjoN4RJwlaia+qW3 xMXtlhiBSd3M2xUyz9ONv/HX/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkqCrh6 k4W6lBpqO/bARVKd4vYzMB8GA1UdIwQYMBaAFAO9kJoaFaRQPfrVlMPG3puUYE5m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODczQi80QTE2QkJEQUM2 MDQxMUVDQUE5NDU5NEJDNEY5QUUwMi9BNzJRbWhvVnBGQTktdFdVdzhiZW01UmdU bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E3MlFtaG9WcEZBOS10V1V3OGJlbTVSZ1RtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODczQi80QTE2QkJEQUM2MDQxMUVDQUE5NDU5NEJDNEY5QUUwMi9BNzJRbWhvVnBG QTktdFdVdzhiZW01UmdUbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhdQ9QysBw/bVR3xWsdm94oHxTsI6VN/BvbXp/TjfMDb5n16nJUo55 QdOxnq+ypaPbYP2MAKFrHe6m2P7w6XsvjrUIhwYd6BTZ+sTNj2yaDeA/xlyZA8SW 3+2TfJtOiZoYpsz7rw6pRUABy06i3veURcCLSCXLBL46QXiK8kPlvjoiHg0G7jEz Msawk/GpG8QuLQ2AmiWvuUiQy+Au10oE/8HEfDp18TSUYfi8v3YXYMAiwpNZy+3c MR6+/53WllFezF35UmipUhElofWWn8DAHzJi7fImaM3TLV46SANju/o8chzNdzMN 9bJru7hGhV2eoQnaqBlrvI7OFZK91Y0r -----END CERTIFICATE-----Generated at Fri Apr 4 22:06:43 2025 by rpki-client