$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft File: ft761lb9iDJvbfriSHAQWAQCo18.mft (raw, json) Hash identifier: bkPY9jx/sdTjyCSwIVszby1XhadiCOjM7NvoYZ+gGwA= Subject key identifier: EB:D3:31:77:C7:56:D9:D5:C9:B1:8B:7B:0A:60:E1:D3:CD:FE:D3:F7 Authority key identifier: 7E:DE:FA:D6:56:FD:88:32:6F:6D:FA:E2:48:70:10:58:04:02:A3:5F Certificate issuer: /CN=A91D9785/serialNumber=7EDEFAD656FD88326F6DFAE2487010580402A35F Certificate serial: 19F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft Manifest number: 19DD Signing time: Fri 04 Apr 2025 16:27:47 +0000 Manifest this update: Fri 04 Apr 2025 16:27:46 +0000 Manifest next update: Fri 11 Apr 2025 16:27:46 +0000 Files and hashes: 1: ft761lb9iDJvbfriSHAQWAQCo18.crl (hash: UFqIBJ4hEw+4g3immD6ukSVupD5SNdTiz3WVO44P1BQ=) 2: CBCD905AA6E811EFB43BBB4EC4F9AE02.roa (hash: 5xyOynEgqDMhag5EGZQN5c/BseZmGpYeCMWkUJIxh/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.crl rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:27:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6641 (0x19f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9785 Validity Not Before: Apr 4 16:27:46 2025 GMT Not After : Apr 11 16:27:46 2025 GMT Subject: CN=67f00882-ac5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:92:cd:c6:d4:04:e7:3e:1f:11:94:1a:45:df: 92:72:96:8d:ea:69:1a:22:c8:0a:16:08:38:ed:a8: af:be:7e:00:56:c1:76:55:31:b0:e5:67:3d:69:16: af:dc:92:fc:b6:9b:b4:14:3a:45:9a:7f:00:dc:9a: 67:40:4e:a7:4e:99:03:bb:84:61:1c:97:b3:8e:b0: 9b:b9:00:11:10:99:fa:73:67:2d:2c:73:69:86:b6: 9a:2b:49:db:d0:0b:42:39:54:38:29:dc:b7:45:d7: 4c:e6:52:6b:66:d2:8f:2c:b5:1b:7f:e0:bc:e5:02: b4:82:7c:89:43:93:0d:a0:6a:c8:a8:14:af:3a:34: 9a:87:62:d3:3c:6e:20:40:7a:0b:85:35:d4:03:dc: fe:8c:6f:5f:bf:3b:17:89:13:5f:5e:f3:9e:00:35: 08:d8:7a:2b:ff:49:9b:7d:92:ab:89:3b:d9:d4:1a: b8:e4:81:7c:ec:07:22:6e:54:d3:01:78:04:c1:5c: 5e:64:cc:53:41:98:f5:35:4a:85:19:77:c5:08:36: 8a:16:27:d4:40:c6:94:09:d1:ee:a0:ee:5e:54:9e: e6:f7:7d:c2:53:a3:ff:ad:9f:35:6a:4e:5b:56:30: 24:0e:d9:70:eb:6d:b6:ce:15:bd:7d:c7:00:38:5d: 77:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D3:31:77:C7:56:D9:D5:C9:B1:8B:7B:0A:60:E1:D3:CD:FE:D3:F7 X509v3 Authority Key Identifier: keyid:7E:DE:FA:D6:56:FD:88:32:6F:6D:FA:E2:48:70:10:58:04:02:A3:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:b6:41:4c:af:aa:c9:d6:4a:22:3a:e6:e8:f5:b9:eb:56:5f: ee:8d:77:c0:b7:e1:56:ea:bb:f7:a9:20:07:aa:65:13:d3:7e: 14:06:c5:05:79:1d:d7:cc:dd:c9:0f:01:2a:97:66:6f:46:9d: e5:48:b6:19:14:e0:e7:c0:88:12:65:1f:30:4e:1d:eb:43:23: 5f:fa:f1:b3:fd:2f:ff:60:c8:04:63:78:88:bc:db:04:08:be: 14:cf:c7:15:7a:0a:d7:0b:2f:10:e9:3d:8f:c8:4e:ec:33:61: 77:80:10:6c:5c:28:d7:29:6f:bc:ec:28:9f:85:83:1c:b8:fc: 86:67:f0:51:e9:f4:46:53:1b:f6:76:df:37:50:33:d1:0a:71: b6:15:e4:a9:39:92:b8:41:ad:4d:ad:77:3d:e7:5b:38:26:22: d3:8b:a0:51:cd:b4:4f:a4:79:dd:e9:41:ac:79:14:c5:13:3d: b6:ba:55:ae:b3:82:66:bb:08:1b:32:4e:6b:0f:14:5b:22:8b: cc:66:fd:b1:62:c1:a4:c3:aa:a0:d4:04:a8:53:ac:75:f5:d5: 7f:e2:4e:30:da:7a:49:99:71:f1:a3:cf:5f:b8:c9:5f:7c:67: 60:dd:4f:e6:71:6b:0e:af:62:b1:66:2b:38:7f:b5:b7:fa:f5: 95:6f:4b:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk3ODUxMTAvBgNVBAUTKDdFREVGQUQ2NTZGRDg4MzI2RjZERkFFMjQ4NzAxMDU4 MDQwMkEzNUYwHhcNMjUwNDA0MTYyNzQ2WhcNMjUwNDExMTYyNzQ2WjAYMRYwFAYD VQQDEw02N2YwMDg4Mi1hYzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpLNxtQE5z4fEZQaRd+ScpaN6mkaIsgKFgg47aivvn4AVsF2VTGw5Wc9aRav 3JL8tpu0FDpFmn8A3JpnQE6nTpkDu4RhHJezjrCbuQAREJn6c2ctLHNphraaK0nb 0AtCOVQ4Kdy3RddM5lJrZtKPLLUbf+C85QK0gnyJQ5MNoGrIqBSvOjSah2LTPG4g QHoLhTXUA9z+jG9fvzsXiRNfXvOeADUI2Hor/0mbfZKriTvZ1Bq45IF87AciblTT AXgEwVxeZMxTQZj1NUqFGXfFCDaKFifUQMaUCdHuoO5eVJ7m933CU6P/rZ81ak5b VjAkDtlw6222zhW9fccAOF13GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvTMXfH VtnVybGLewpg4dPN/tP3MB8GA1UdIwQYMBaAFH7e+tZW/Ygyb2364khwEFgEAqNf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTc4NS80N0RGOUNFQzU2 RUMxMUU3QkFENDhEM0JDNEY5QUUwMi9mdDc2MWxiOWlESnZiZnJpU0hBUVdBUUNv MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0NzYxbGI5aURKdmJmcmlTSEFRV0FRQ28xOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTc4NS80N0RGOUNFQzU2RUMxMUU3QkFENDhEM0JDNEY5QUUwMi9mdDc2MWxiOWlE SnZiZnJpU0hBUVdBUUNvMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZtkFMr6rJ1koiOubo9bnrVl/ujXfAt+FW6rv3qSAHqmUT034UBsUF eR3XzN3JDwEql2ZvRp3lSLYZFODnwIgSZR8wTh3rQyNf+vGz/S//YMgEY3iIvNsE CL4Uz8cVegrXCy8Q6T2PyE7sM2F3gBBsXCjXKW+87CifhYMcuPyGZ/BR6fRGUxv2 dt83UDPRCnG2FeSpOZK4Qa1NrXc951s4JiLTi6BRzbRPpHnd6UGseRTFEz22ulWu s4JmuwgbMk5rDxRbIovMZv2xYsGkw6qg1ASoU6x19dV/4k4w2npJmXHxo89fuMlf fGdg3U/mcWsOr2KxZis4f7W3+vWVb0u+ -----END CERTIFICATE-----Generated at Fri Apr 4 21:12:34 2025 by rpki-client