$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft File: I3t9TKhKJtX8SVjUgZHzahS8ei8.mft (raw, json) Hash identifier: lOFW1qtHWZPx4Ng44Wgn3Efe0Bs6QwaRuCjhZMnd02I= Subject key identifier: EC:C5:8D:00:78:4C:DD:98:F0:96:60:BD:CB:9F:4A:E5:9E:BE:5B:7A Authority key identifier: 23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F Certificate issuer: /CN=A91DB6F8/serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft Manifest number: 01CC Signing time: Mon 21 Apr 2025 02:02:24 +0000 Manifest this update: Mon 21 Apr 2025 02:02:24 +0000 Manifest next update: Mon 28 Apr 2025 02:02:24 +0000 Files and hashes: 1: I3t9TKhKJtX8SVjUgZHzahS8ei8.crl (hash: 0Ulpiv/Xar4vKVQSy60x8u8IpnBhR7O09BAaE0zxkFc=) 2: CC863C00AAC011EF8A637D09C4F9AE02.roa (hash: 0d8EDj7p85g61PO4rxhm2YW85ofVuKXgCa1+1ENa/7s=) 3: B76665B6AAC011EFBC479E79C4F9AE02.roa (hash: ebFVZb24qzMOclquLEvNefeGPzln4MMRSWx20kkSl4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 02:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB6F8, serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Validity Not Before: Apr 21 02:02:24 2025 GMT Not After : Apr 28 02:02:24 2025 GMT Subject: CN=6805a730-ac81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7c:3f:e2:5e:e0:8f:e5:8c:f1:e8:c0:13:99: 30:49:96:c8:6d:1e:bd:7e:31:98:ca:5a:b9:a9:a6: 47:db:ba:e8:cc:0f:eb:7c:78:25:62:64:53:3b:53: b4:6f:dc:4e:03:84:cf:21:fd:58:4e:b2:a9:97:a5: 4f:bd:ee:b8:f7:54:f8:28:55:33:15:70:8a:82:9b: 3f:8f:0c:11:fb:da:0b:a0:67:2e:08:01:6b:57:a8: 30:3f:73:c6:71:7a:7f:84:d4:08:e8:d1:7e:cb:25: 98:74:8b:46:02:af:8e:16:48:85:a3:fb:fc:a4:27: 5c:31:0a:cb:e5:ba:b8:93:be:c5:ac:59:ef:f5:e7: 68:54:4c:bf:da:29:7c:f0:63:a4:37:2e:85:65:29: fa:18:50:b3:09:97:00:b7:19:48:1f:31:20:df:4b: 19:c4:ab:37:7f:85:c0:42:c1:e7:bf:fe:3b:77:98: 66:81:82:43:19:04:d5:91:4a:42:43:bf:72:c9:e3: 0a:d9:83:4e:8f:ad:65:c8:89:32:64:35:55:47:2d: f0:e7:8b:0e:cb:f5:95:32:54:0d:0b:ff:d0:c3:d8: 79:0e:2a:0c:af:47:45:c2:64:55:bd:f2:10:e7:01: 02:a1:c2:fe:d1:e0:91:53:0c:e2:99:35:47:7e:46: 6a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C5:8D:00:78:4C:DD:98:F0:96:60:BD:CB:9F:4A:E5:9E:BE:5B:7A X509v3 Authority Key Identifier: keyid:23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:50:23:de:94:39:8c:f9:64:6c:fa:3a:ce:46:0c:40:9f:39: 92:2a:b1:52:cc:66:d3:6f:65:42:85:69:70:de:ad:42:d0:c5: e9:d8:fd:06:fd:1c:ca:ba:94:28:14:57:c3:07:aa:b1:78:4f: c8:26:72:ce:ba:64:b4:ad:03:1a:a3:ee:7c:f5:d8:26:c7:50: 4d:24:91:df:a1:47:5e:78:c8:f8:ed:29:3c:ec:53:f9:ee:92: 88:8d:a1:c4:0f:d5:a2:ba:e3:b9:55:05:cd:d1:2b:06:bd:82: f7:74:db:99:bf:e5:ac:fc:2d:61:78:4b:c7:5d:9f:6f:60:e8: e3:f8:93:e2:88:a4:a8:52:f6:54:91:cf:04:bc:e5:66:e6:83: 71:a6:26:f1:e1:bc:61:c2:4d:6f:f4:de:30:b2:f6:ca:41:2c: 69:56:bd:52:fa:9f:81:6d:f3:d7:64:1f:3c:df:45:e5:cf:2a: 73:e8:0a:73:fb:2a:e0:e7:04:48:f3:42:12:5f:99:09:70:36: 72:1b:9d:0a:c0:b0:9b:ef:1b:72:b5:35:40:2e:00:86:37:1f: 3c:be:59:b8:5b:87:e6:a1:cc:5a:5f:2e:72:86:bd:f2:5e:3a: 37:09:9c:32:8f:65:a7:38:cd:93:45:15:cf:fa:3a:7a:74:59: 1c:bb:a4:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2RjgxMTAvBgNVBAUTKDIzN0I3RDRDQTg0QTI2RDVGQzQ5NThENDgxOTFGMzZB MTRCQzdBMkYwHhcNMjUwNDIxMDIwMjI0WhcNMjUwNDI4MDIwMjI0WjAYMRYwFAYD VQQDEw02ODA1YTczMC1hYzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHw/4l7gj+WM8ejAE5kwSZbIbR69fjGYylq5qaZH27rozA/rfHglYmRTO1O0 b9xOA4TPIf1YTrKpl6VPve6491T4KFUzFXCKgps/jwwR+9oLoGcuCAFrV6gwP3PG cXp/hNQI6NF+yyWYdItGAq+OFkiFo/v8pCdcMQrL5bq4k77FrFnv9edoVEy/2il8 8GOkNy6FZSn6GFCzCZcAtxlIHzEg30sZxKs3f4XAQsHnv/47d5hmgYJDGQTVkUpC Q79yyeMK2YNOj61lyIkyZDVVRy3w54sOy/WVMlQNC//Qw9h5DioMr0dFwmRVvfIQ 5wECocL+0eCRUwzimTVHfkZqPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzFjQB4 TN2Y8JZgvcufSuWevlt6MB8GA1UdIwQYMBaAFCN7fUyoSibV/ElY1IGR82oUvHov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGOC81NjJDM0NCNDcy NEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0WDhTVmpVZ1pIemFoUzhl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzdDlUS2hLSnRYOFNWalVnWkh6YWhTOGVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjZGOC81NjJDM0NCNDcyNEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0 WDhTVmpVZ1pIemFoUzhlaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTUCPelDmM+WRs+jrORgxAnzmSKrFSzGbTb2VChWlw3q1C0MXp2P0G /RzKupQoFFfDB6qxeE/IJnLOumS0rQMao+589dgmx1BNJJHfoUdeeMj47Sk87FP5 7pKIjaHED9WiuuO5VQXN0SsGvYL3dNuZv+Ws/C1heEvHXZ9vYOjj+JPiiKSoUvZU kc8EvOVm5oNxpibx4bxhwk1v9N4wsvbKQSxpVr1S+p+BbfPXZB8830Xlzypz6Apz +yrg5wRI80ISX5kJcDZyG50KwLCb7xtytTVALgCGNx88vlm4W4fmocxaXy5yhr3y Xjo3CZwyj2WnOM2TRRXP+jp6dFkcu6RV -----END CERTIFICATE-----Generated at Tue Apr 22 13:46:55 2025 by rpki-client