$ rpki-client -vvf rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft File: 10XhyGsYGPfQVj-Q6LoSvosa43g.mft (raw, json) Hash identifier: sda+5ee34csy3vjYMSJTVPVRUOOlNL1keiX86xz9rl8= Subject key identifier: FC:56:CD:7A:DC:3D:2E:2F:70:64:B5:D3:41:BF:35:90:A1:4D:F0:5D Authority key identifier: D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78 Certificate issuer: /CN=A91D97C4/serialNumber=D745E1C86B1818F7D0563F90E8BA12BE8B1AE378 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft Manifest number: 0134 Signing time: Sat 29 Mar 2025 03:57:35 +0000 Manifest this update: Sat 29 Mar 2025 03:57:34 +0000 Manifest next update: Sat 05 Apr 2025 03:57:34 +0000 Files and hashes: 1: 10XhyGsYGPfQVj-Q6LoSvosa43g.crl (hash: uAm+gnBty9cp1ibejKpptRxHEgTspCE6MTCHSUBhbAQ=) 2: 12DD779467A211EEA8239268C4F9AE02.roa (hash: 7lqdZ2FcePrtK+ORkGuFUebt7bprHrcQU1BOkcrtW3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.crl rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:57:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D97C4 Validity Not Before: Mar 29 03:57:34 2025 GMT Not After : Apr 5 03:57:34 2025 GMT Subject: CN=67e76faf-4ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f5:61:cc:86:a4:6a:8d:7d:d9:82:89:a8:13: 3d:7f:71:54:0d:24:ca:3c:9e:66:36:6c:36:a8:5f: 50:69:fb:6c:fc:3c:ee:93:f4:52:17:f4:f2:44:7d: 43:f0:7a:8a:80:cf:fd:ad:91:d9:80:cf:0a:f7:5d: 00:36:08:b1:ea:f4:af:71:f2:a3:ea:d3:10:e4:a7: 24:0b:9f:70:4d:6d:67:39:eb:fe:33:27:d8:0f:05: 5d:9c:2a:18:eb:67:28:dc:a0:b4:91:eb:f6:76:35: 34:c5:4e:bc:c8:73:85:ae:2a:e4:c5:04:45:e0:7a: af:de:92:a6:3b:0a:b4:46:5e:f6:8e:b0:17:b3:3c: 43:93:1d:ee:88:b3:3a:5e:52:73:18:cc:39:87:f1: 06:9f:3b:c7:69:50:02:9a:dd:53:e8:db:f3:07:29: c5:21:28:c6:e4:71:ff:ee:7e:ab:19:8a:0a:c9:43: 00:a1:63:c2:07:e8:1b:47:b1:8c:98:aa:76:1a:2c: fd:29:52:16:ab:99:c0:20:ab:82:40:11:6f:8e:04: dd:a8:f6:1d:d5:d8:c9:a9:52:5b:b3:72:9e:38:af: a9:10:eb:e9:00:8f:6b:b4:f9:77:fd:b3:61:8d:52: cd:44:93:3a:8a:3b:b8:94:2c:17:c5:3c:55:8f:84: d0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:56:CD:7A:DC:3D:2E:2F:70:64:B5:D3:41:BF:35:90:A1:4D:F0:5D X509v3 Authority Key Identifier: keyid:D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:a6:9c:23:cb:fd:af:90:77:d1:ce:c2:a1:6d:10:31:be:6a: 5b:06:51:8c:d3:5d:97:c3:2c:86:36:cd:6c:6a:b2:b1:43:07: 39:98:56:94:f9:16:24:f6:9f:e5:28:8d:f9:67:15:42:59:f1: e5:9d:9f:7e:59:b5:d9:a4:bc:70:2a:bb:af:bb:c9:2f:66:21: 94:6d:26:99:68:01:3b:f9:5d:19:45:2b:35:b2:b9:77:a8:d0: dd:13:e4:ab:60:19:12:f8:74:d6:e3:11:fa:e2:77:3a:6d:b7: 8f:9b:d7:1d:12:05:c9:f4:47:79:f3:ac:3f:c5:e5:c7:01:33: f6:f5:81:51:79:64:f6:30:45:da:46:27:76:46:28:02:4a:65: 2e:1b:a5:29:6c:65:ac:eb:2e:95:48:41:5e:66:dc:c4:f7:1c: 98:73:1a:a7:11:04:87:9e:10:f7:e6:a0:34:f2:2b:76:2e:7b: 22:2e:ad:93:83:d4:83:aa:b8:15:e9:e9:65:88:b5:5a:6c:b9: 80:40:fe:28:25:90:7e:2b:77:26:7f:f9:aa:63:5a:08:cc:6e: 7b:ee:5c:d0:53:b2:b7:2b:6b:ab:4b:f6:bf:1a:44:9c:18:5f: 73:dc:e8:6a:af:65:43:9d:32:b4:f3:0c:ec:30:19:4e:29:61: 83:6a:d2:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk3QzQxMTAvBgNVBAUTKEQ3NDVFMUM4NkIxODE4RjdEMDU2M0Y5MEU4QkExMkJF OEIxQUUzNzgwHhcNMjUwMzI5MDM1NzM0WhcNMjUwNDA1MDM1NzM0WjAYMRYwFAYD VQQDEw02N2U3NmZhZi00ZmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPVhzIakao192YKJqBM9f3FUDSTKPJ5mNmw2qF9Qafts/Dzuk/RSF/TyRH1D 8HqKgM/9rZHZgM8K910ANgix6vSvcfKj6tMQ5KckC59wTW1nOev+MyfYDwVdnCoY 62co3KC0kev2djU0xU68yHOFrirkxQRF4Hqv3pKmOwq0Rl72jrAXszxDkx3uiLM6 XlJzGMw5h/EGnzvHaVACmt1T6NvzBynFISjG5HH/7n6rGYoKyUMAoWPCB+gbR7GM mKp2Giz9KVIWq5nAIKuCQBFvjgTdqPYd1djJqVJbs3KeOK+pEOvpAI9rtPl3/bNh jVLNRJM6iju4lCwXxTxVj4TQAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPxWzXrc PS4vcGS100G/NZChTfBdMB8GA1UdIwQYMBaAFNdF4chrGBj30FY/kOi6Er6LGuN4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTdDNC9DNjNERjIwMDND NjQxMUVFQkNBQzUxNzBDNEY5QUUwMi8xMFhoeUdzWUdQZlFWai1RNkxvU3Zvc2E0 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEwWGh5R3NZR1BmUVZqLVE2TG9Tdm9zYTQzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTdDNC9DNjNERjIwMDNDNjQxMUVFQkNBQzUxNzBDNEY5QUUwMi8xMFhoeUdzWUdQ ZlFWai1RNkxvU3Zvc2E0M2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzppwjy/2vkHfRzsKhbRAxvmpbBlGM012XwyyGNs1sarKxQwc5mFaU +RYk9p/lKI35ZxVCWfHlnZ9+WbXZpLxwKruvu8kvZiGUbSaZaAE7+V0ZRSs1srl3 qNDdE+SrYBkS+HTW4xH64nc6bbePm9cdEgXJ9Ed586w/xeXHATP29YFReWT2MEXa Rid2RigCSmUuG6UpbGWs6y6VSEFeZtzE9xyYcxqnEQSHnhD35qA08it2LnsiLq2T g9SDqrgV6elliLVabLmAQP4oJZB+K3cmf/mqY1oIzG577lzQU7K3K2urS/a/GkSc GF9z3Ohqr2VDnTK08wzsMBlOKWGDatKo -----END CERTIFICATE-----Generated at Fri Apr 4 21:52:03 2025 by rpki-client