$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft File: rRapGbMt65RQ0upjx51QMV2RgVU.mft (raw, json) Hash identifier: UWzb43SPHB6ZU6mS31F4NBz/4j35TWofEwCZor6wfdc= Subject key identifier: 47:7C:3D:EA:12:35:4B:F0:34:EA:13:9E:6A:F6:1C:F8:03:E9:45:36 Authority key identifier: AD:16:A9:19:B3:2D:EB:94:50:D2:EA:63:C7:9D:50:31:5D:91:81:55 Certificate issuer: /CN=A91DBA0F/serialNumber=AD16A919B32DEB9450D2EA63C79D50315D918155 Certificate serial: 0AC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft Manifest number: 0ABC Signing time: Fri 04 Apr 2025 19:37:20 +0000 Manifest this update: Fri 04 Apr 2025 19:37:19 +0000 Manifest next update: Fri 11 Apr 2025 19:37:19 +0000 Files and hashes: 1: rRapGbMt65RQ0upjx51QMV2RgVU.crl (hash: g8DZVzBtAf88bZj5EELwTib42RvbaYbCH71+9nnzeaw=) 2: D54C8E6C4DBD11EAAF427F1AC4F9AE02.roa (hash: HVc5OupVsZMNtLGR1vpv78gSGJhGcao3sfuT/HbmUuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.crl rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2758 (0xac6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBA0F Validity Not Before: Apr 4 19:37:19 2025 GMT Not After : Apr 11 19:37:19 2025 GMT Subject: CN=67f034ef-483c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a1:a5:cb:f5:69:24:72:59:ec:30:9d:49:36: d1:84:17:c1:34:f8:6b:93:f2:24:d3:03:c4:d3:a7: cd:98:22:6a:fc:d3:78:7c:eb:d9:7b:ef:8c:f0:3c: 67:26:96:92:3b:9d:f0:ad:6c:1a:48:79:4b:44:5e: 3a:ca:e8:18:fb:9b:f8:61:f7:d8:d3:fe:96:2f:5e: e5:44:f3:4f:74:38:6d:3e:2f:ce:4c:24:01:11:e7: d4:7b:85:64:c5:5c:c4:9a:10:ed:f3:00:b2:44:d2: c8:3b:0f:57:22:2f:9f:2b:2f:39:86:7e:9d:93:01: 26:9b:28:0b:96:0b:78:c2:ee:9c:71:db:23:ea:48: 40:99:fc:e8:85:b6:79:1a:03:9c:70:c9:9f:80:87: 22:a4:a4:7b:b5:ae:e5:84:2e:2d:d5:87:3d:47:f9: 05:f9:db:6c:88:ea:9f:47:44:41:bc:b5:0a:5d:62: d6:68:53:de:73:76:00:56:78:79:37:5f:08:4e:7e: 24:84:de:22:12:42:21:e1:2b:42:fe:e0:3c:7e:dd: 25:bf:80:2e:b4:32:ad:32:2b:30:ce:a6:58:6b:72: 2d:cf:a8:db:1a:f3:00:a1:0d:9c:de:b7:98:8f:18: bd:28:03:eb:15:3f:ca:16:2c:05:c7:6d:09:ff:95: a4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:7C:3D:EA:12:35:4B:F0:34:EA:13:9E:6A:F6:1C:F8:03:E9:45:36 X509v3 Authority Key Identifier: keyid:AD:16:A9:19:B3:2D:EB:94:50:D2:EA:63:C7:9D:50:31:5D:91:81:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRapGbMt65RQ0upjx51QMV2RgVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA0F/D90067FE4CD711EAB4555845C4F9AE02/rRapGbMt65RQ0upjx51QMV2RgVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:04:2c:c1:d0:60:c1:61:a4:3d:0a:3d:39:e8:c5:7a:11:1b: 4b:57:de:b8:5b:76:bd:2f:05:03:a1:50:76:93:c8:22:33:1f: 6f:3f:05:cd:5e:f4:f2:52:3a:9f:c2:67:2a:9e:74:24:9a:8c: 21:9c:08:0b:e6:cc:61:ff:da:0d:85:7e:03:25:82:44:de:48: f4:ff:cd:87:88:2c:75:d0:71:0d:19:5f:f1:5d:0c:63:c0:95: b8:36:7e:f0:98:67:b5:f4:7e:f9:3f:66:f4:f0:86:47:3a:66: cb:fe:62:ee:26:40:ce:2b:9f:e2:e8:fb:1f:6c:94:11:fb:9f: 4e:53:17:21:88:eb:25:32:15:e1:cb:02:8f:71:ba:15:46:43: dd:9c:f4:7a:51:00:11:5c:fa:11:02:26:7c:60:1d:b1:56:1c: 75:9f:9e:ad:e4:e6:1e:a5:7e:08:2b:df:02:cc:5b:bd:b0:3c: df:fc:89:6c:47:7a:e3:f3:86:9c:5b:ac:e9:bc:52:b9:d8:64: a8:4d:19:89:d1:ef:66:63:46:9e:33:5a:74:a9:fb:48:21:10: 5e:ac:78:47:e1:52:f4:e3:43:27:f3:ab:8f:fd:b2:f5:df:76: aa:c9:da:03:d1:6d:b1:e4:32:64:9a:e3:d0:89:a9:47:76:be: 17:54:cb:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBMEYxMTAvBgNVBAUTKEFEMTZBOTE5QjMyREVCOTQ1MEQyRUE2M0M3OUQ1MDMx NUQ5MTgxNTUwHhcNMjUwNDA0MTkzNzE5WhcNMjUwNDExMTkzNzE5WjAYMRYwFAYD VQQDEw02N2YwMzRlZi00ODNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KGly/VpJHJZ7DCdSTbRhBfBNPhrk/Ik0wPE06fNmCJq/NN4fOvZe++M8Dxn JpaSO53wrWwaSHlLRF46yugY+5v4YffY0/6WL17lRPNPdDhtPi/OTCQBEefUe4Vk xVzEmhDt8wCyRNLIOw9XIi+fKy85hn6dkwEmmygLlgt4wu6ccdsj6khAmfzohbZ5 GgOccMmfgIcipKR7ta7lhC4t1Yc9R/kF+dtsiOqfR0RBvLUKXWLWaFPec3YAVnh5 N18ITn4khN4iEkIh4StC/uA8ft0lv4AutDKtMiswzqZYa3Itz6jbGvMAoQ2c3reY jxi9KAPrFT/KFiwFx20J/5WkdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEd8PeoS NUvwNOoTnmr2HPgD6UU2MB8GA1UdIwQYMBaAFK0WqRmzLeuUUNLqY8edUDFdkYFV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkEwRi9EOTAwNjdGRTRD RDcxMUVBQjQ1NTU4NDVDNEY5QUUwMi9yUmFwR2JNdDY1UlEwdXBqeDUxUU1WMlJn VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JSYXBHYk10NjVSUTB1cGp4NTFRTVYyUmdWVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkEwRi9EOTAwNjdGRTRDRDcxMUVBQjQ1NTU4NDVDNEY5QUUwMi9yUmFwR2JNdDY1 UlEwdXBqeDUxUU1WMlJnVlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALBCzB0GDBYaQ9Cj056MV6ERtLV964W3a9LwUDoVB2k8giMx9vPwXN XvTyUjqfwmcqnnQkmowhnAgL5sxh/9oNhX4DJYJE3kj0/82HiCx10HENGV/xXQxj wJW4Nn7wmGe19H75P2b08IZHOmbL/mLuJkDOK5/i6PsfbJQR+59OUxchiOslMhXh ywKPcboVRkPdnPR6UQARXPoRAiZ8YB2xVhx1n56t5OYepX4IK98CzFu9sDzf/Ils R3rj84acW6zpvFK52GSoTRmJ0e9mY0aeM1p0qftIIRBerHhH4VL040Mn86uP/bL1 33aqydoD0W2x5DJkmuPQialHdr4XVMu2 -----END CERTIFICATE-----Generated at Fri Apr 4 22:14:54 2025 by rpki-client