$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft File: 379fgwtQs7_B5TULnGBbt1YSLhE.mft (raw, json) Hash identifier: tAr5iNtq+mGJkGSNJMCDfxEm0fzl0bNFYPcbD1jc5hk= Subject key identifier: 7C:C5:A8:12:B5:6B:D4:7D:0F:60:3A:9B:FD:0C:CE:78:0D:DF:1B:0B Authority key identifier: DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11 Certificate issuer: /CN=A91DBB7D/serialNumber=DFBF5F830B50B3BFC1E5350B9C605BB756122E11 Certificate serial: 04AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft Manifest number: 04A6 Signing time: Sun 06 Apr 2025 23:34:06 +0000 Manifest this update: Sun 06 Apr 2025 23:34:05 +0000 Manifest next update: Sun 13 Apr 2025 23:34:05 +0000 Files and hashes: 1: 379fgwtQs7_B5TULnGBbt1YSLhE.crl (hash: 9p4FeafQyHqX7SM2jw8dP7Q9nHVcvMEVaugpjF2E3bo=) 2: D5C4A54A617B11EC82058668C4F9AE02.roa (hash: lRFgE9XZ6iDD+G2GlIBwvnuaHaRG9VvqEjSSiJJQVDA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.crl rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 23:34:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1197 (0x4ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBB7D Validity Not Before: Apr 6 23:34:05 2025 GMT Not After : Apr 13 23:34:05 2025 GMT Subject: CN=67f30f6e-31a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4d:b4:5e:ad:e9:4c:95:9d:6f:26:aa:ef:7c: d7:a0:e4:cc:5d:e9:db:64:71:ea:53:e1:56:6d:99: 13:9b:5e:f1:bc:1e:49:86:c3:d4:42:dc:ab:f4:3f: e4:4c:cd:fe:21:eb:a3:7e:5b:21:cb:cf:1b:66:db: cf:0c:8d:ee:0a:a4:de:df:2f:be:26:51:7a:fc:14: 51:4a:57:ef:93:f9:3f:32:92:99:d5:0e:05:94:8f: d8:6c:51:35:c1:63:65:c6:c8:68:b2:ab:d0:08:3c: 5e:c4:b5:58:9e:02:72:d0:e6:3b:ed:be:18:3c:ee: 3e:ed:f9:96:60:74:af:3c:bb:ef:4d:bd:3e:b9:35: 7e:09:bb:3b:f9:22:e5:48:06:bc:05:c3:9b:c4:af: e1:30:b3:7f:78:99:43:68:99:5a:7f:52:7d:86:75: 96:42:9e:6a:2c:eb:88:9e:01:69:7a:20:c3:9c:89: 1f:fa:4a:44:3f:c8:de:71:d1:15:8a:69:2f:06:a1: b9:cc:27:47:cf:f6:21:ea:10:1b:7a:1e:5a:51:07: e3:0b:39:3b:34:37:c1:51:93:3f:95:82:32:07:6f: 18:8d:ad:be:96:7c:bb:a8:70:b7:91:ba:35:49:fe: 38:a4:02:b6:b7:e3:ae:4a:4c:da:dd:43:bf:0f:ed: af:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C5:A8:12:B5:6B:D4:7D:0F:60:3A:9B:FD:0C:CE:78:0D:DF:1B:0B X509v3 Authority Key Identifier: keyid:DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:eb:82:fc:a9:11:77:45:f3:b8:cd:f4:e0:2d:65:ea:6e:f2: e1:8c:d3:57:32:94:c4:d4:6a:03:be:6d:5c:62:40:d4:c9:26: b6:0c:fd:de:07:aa:94:0a:9b:33:28:69:12:9d:24:62:3d:5c: fb:fb:07:e8:d3:27:a1:bd:e5:47:08:c2:3e:34:39:7a:15:bd: 9f:e1:37:aa:c3:ae:27:50:17:c5:ef:10:7e:b9:ec:34:41:ef: e8:d5:f3:6a:2a:2f:dd:3e:f5:6c:27:60:f7:77:cd:a6:03:ad: 5e:ca:68:06:14:e7:85:0c:df:44:3a:26:e3:db:fd:59:a9:1d: a6:91:0a:3b:8c:1a:81:ec:68:68:18:23:67:23:5a:a8:fd:0d: 04:07:72:52:a2:6d:70:aa:f6:67:89:b3:09:7e:26:48:35:5f: 32:5d:07:41:e5:b3:9f:f9:cb:63:da:90:a1:f1:4f:a2:5c:0d: 7d:bf:1e:39:9f:fe:65:2f:14:4e:4b:a0:93:d9:fe:52:89:fa: 44:8e:63:44:a3:29:d6:d4:19:b4:21:0e:76:97:aa:c7:94:b2: b2:b8:a4:01:07:42:3e:57:c0:47:30:6c:dc:57:41:20:fc:f9: fb:bb:41:46:3a:bc:a6:a7:25:cc:2f:00:36:0c:66:75:3d:0b: e0:10:4a:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJCN0QxMTAvBgNVBAUTKERGQkY1RjgzMEI1MEIzQkZDMUU1MzUwQjlDNjA1QkI3 NTYxMjJFMTEwHhcNMjUwNDA2MjMzNDA1WhcNMjUwNDEzMjMzNDA1WjAYMRYwFAYD VQQDEw02N2YzMGY2ZS0zMWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuk20Xq3pTJWdbyaq73zXoOTMXenbZHHqU+FWbZkTm17xvB5JhsPUQtyr9D/k TM3+Ieujflshy88bZtvPDI3uCqTe3y++JlF6/BRRSlfvk/k/MpKZ1Q4FlI/YbFE1 wWNlxshosqvQCDxexLVYngJy0OY77b4YPO4+7fmWYHSvPLvvTb0+uTV+Cbs7+SLl SAa8BcObxK/hMLN/eJlDaJlaf1J9hnWWQp5qLOuIngFpeiDDnIkf+kpEP8jecdEV imkvBqG5zCdHz/Yh6hAbeh5aUQfjCzk7NDfBUZM/lYIyB28Yja2+lny7qHC3kbo1 Sf44pAK2t+OuSkza3UO/D+2vVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzFqBK1 a9R9D2A6m/0MzngN3xsLMB8GA1UdIwQYMBaAFN+/X4MLULO/weU1C5xgW7dWEi4R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkI3RC8zMDE3MDk2RTJC QjkxMUVDQjJCMzY3NEZDNEY5QUUwMi8zNzlmZ3d0UXM3X0I1VFVMbkdCYnQxWVNM aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM3OWZnd3RRczdfQjVUVUxuR0JidDFZU0xoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkI3RC8zMDE3MDk2RTJCQjkxMUVDQjJCMzY3NEZDNEY5QUUwMi8zNzlmZ3d0UXM3 X0I1VFVMbkdCYnQxWVNMaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw64L8qRF3RfO4zfTgLWXqbvLhjNNXMpTE1GoDvm1cYkDUySa2DP3e B6qUCpszKGkSnSRiPVz7+wfo0yehveVHCMI+NDl6Fb2f4Teqw64nUBfF7xB+uew0 Qe/o1fNqKi/dPvVsJ2D3d82mA61eymgGFOeFDN9EOibj2/1ZqR2mkQo7jBqB7Gho GCNnI1qo/Q0EB3JSom1wqvZnibMJfiZINV8yXQdB5bOf+ctj2pCh8U+iXA19vx45 n/5lLxROS6CT2f5SifpEjmNEoynW1Bm0IQ52l6rHlLKyuKQBB0I+V8BHMGzcV0Eg /Pn7u0FGOrympyXMLwA2DGZ1PQvgEErI -----END CERTIFICATE-----Generated at Tue Apr 8 05:23:00 2025 by rpki-client