$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft File: oPojd21UTId5RsrHxId0ZRmTfbg.mft (raw, json) Hash identifier: RrkU/vf7W1WNQLDZK09JDtbztheTl6yzB87iZf74vt8= Subject key identifier: D9:3A:FC:41:30:F0:8E:89:4B:6F:EC:EF:67:AC:F7:F7:5F:D4:27:90 Authority key identifier: A0:FA:23:77:6D:54:4C:87:79:46:CA:C7:C4:87:74:65:19:93:7D:B8 Certificate issuer: /CN=A91DD584/serialNumber=A0FA23776D544C877946CAC7C487746519937DB8 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft Manifest number: 54 Signing time: Wed 09 Apr 2025 06:04:49 +0000 Manifest this update: Wed 09 Apr 2025 06:04:49 +0000 Manifest next update: Wed 16 Apr 2025 06:04:49 +0000 Files and hashes: 1: oPojd21UTId5RsrHxId0ZRmTfbg.crl (hash: mte9iTT92tSgAI/FaB4XnE8w+LSOr/4WyxKJV3c3dwk=) 2: B4C685B09CB111EFA6F8E627C4F9AE02.roa (hash: GuNo7IUV7Thwoh9B3txt8mnx9fY3g5B8M+APQokJxqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.crl rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 06:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD584 Validity Not Before: Apr 9 06:04:49 2025 GMT Not After : Apr 16 06:04:49 2025 GMT Subject: CN=67f60e01-5f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a9:80:f9:57:7b:9f:be:7d:7e:14:0f:b0:8a: ea:47:e6:22:80:63:01:4b:83:00:0d:b0:4c:af:77: 68:e9:c3:c2:ea:6f:20:76:7f:cf:fe:00:00:88:da: 8e:54:69:84:4b:86:fb:4a:3a:63:f5:10:df:04:e6: ed:4f:1f:c5:65:da:c8:9e:90:31:3f:83:fb:ce:8f: 9a:2c:45:f0:e6:e9:59:ff:d4:52:48:08:14:16:83: 16:7b:48:31:7d:89:d2:a3:bf:20:b4:f8:57:75:af: 9d:db:54:b7:b6:88:b4:4a:32:5c:d9:ff:17:2f:72: c1:b9:f9:32:b3:c0:b5:99:56:ab:36:f5:16:98:c2: 5f:c3:81:76:3f:44:75:a4:fd:d4:6c:9b:59:f5:42: d1:78:c5:33:fb:6b:e8:f3:d7:11:ed:4a:0e:64:64: d6:b6:62:c2:90:5d:3e:1b:bf:94:86:bc:38:b7:00: fe:3c:0c:5f:58:81:84:bb:08:c3:eb:06:c3:b2:8b: f0:ea:17:5f:71:08:ce:59:21:29:c1:c3:3f:26:95: 2d:77:b2:3e:3a:81:6c:dc:38:81:3a:dd:f8:9e:65: 05:5d:2d:97:db:99:05:74:f9:9b:87:62:3c:96:cd: bc:52:d9:b5:7e:46:94:6b:2f:6d:ff:02:b6:1a:b9: ff:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3A:FC:41:30:F0:8E:89:4B:6F:EC:EF:67:AC:F7:F7:5F:D4:27:90 X509v3 Authority Key Identifier: keyid:A0:FA:23:77:6D:54:4C:87:79:46:CA:C7:C4:87:74:65:19:93:7D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPojd21UTId5RsrHxId0ZRmTfbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD584/327073829CB111EFAEA00D25C4F9AE02/oPojd21UTId5RsrHxId0ZRmTfbg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:0e:a8:f9:4e:17:1e:e9:68:64:a9:1e:dc:fd:a0:5c:04:86: bf:7e:01:ff:ef:a2:37:38:1d:78:c7:dc:73:41:78:95:55:2d: 0b:0c:14:4c:f3:84:f3:c3:01:28:7a:cf:96:85:95:4c:9a:fd: 99:16:ba:9e:07:fd:6e:5a:03:cf:d2:a7:f3:72:a8:95:a2:37: f4:bf:63:7e:45:15:4b:6f:38:19:6d:d0:6a:7d:3e:1e:3a:2f: 3d:e9:af:9b:5a:22:90:31:e8:2b:f4:6a:33:ed:9a:a2:db:b3: f8:c5:ba:ea:03:f1:bf:ba:be:e6:e2:8c:d5:71:c7:4c:ad:37: a1:54:fc:14:5f:ad:71:18:13:65:ea:2c:a5:3d:58:27:1b:f8: ef:09:12:a1:ab:49:52:6e:e1:7c:0c:67:47:4e:a6:40:66:9f: c5:96:0a:ca:e7:54:e6:52:7d:22:8f:9d:70:b5:4b:56:70:df: f4:87:a8:56:b7:da:82:3b:69:7d:f5:ef:46:9f:05:b4:6e:0d: 8e:f9:11:0f:f2:4f:f0:8b:b3:8b:df:8f:e4:e2:c5:64:a0:d4: f6:0f:2f:9a:20:86:21:b8:59:3b:d8:58:6e:70:b2:44:b3:52: 7a:bf:76:fa:36:08:7f:bb:7d:b5:06:c9:29:db:17:82:f4:91: ba:72:43:cb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDU4NDExMC8GA1UEBRMoQTBGQTIzNzc2RDU0NEM4Nzc5NDZDQUM3QzQ4Nzc0NjUx OTkzN0RCODAeFw0yNTA0MDkwNjA0NDlaFw0yNTA0MTYwNjA0NDlaMBgxFjAUBgNV BAMTDTY3ZjYwZTAxLTVmODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFqYD5V3ufvn1+FA+wiupH5iKAYwFLgwANsEyvd2jpw8LqbyB2f8/+AACI2o5U aYRLhvtKOmP1EN8E5u1PH8Vl2siekDE/g/vOj5osRfDm6Vn/1FJICBQWgxZ7SDF9 idKjvyC0+Fd1r53bVLe2iLRKMlzZ/xcvcsG5+TKzwLWZVqs29RaYwl/DgXY/RHWk /dRsm1n1QtF4xTP7a+jz1xHtSg5kZNa2YsKQXT4bv5SGvDi3AP48DF9YgYS7CMPr BsOyi/DqF19xCM5ZISnBwz8mlS13sj46gWzcOIE63fieZQVdLZfbmQV0+ZuHYjyW zbxS2bV+RpRrL23/ArYauf+DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2Tr8QTDw jolLb+zvZ6z391/UJ5AwHwYDVR0jBBgwFoAUoPojd21UTId5RsrHxId0ZRmTfbgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURENTg0LzMyNzA3MzgyOUNC MTExRUZBRUEwMEQyNUM0RjlBRTAyL29Qb2pkMjFVVElkNVJzckh4SWQwWlJtVGZi Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1BvamQyMVVUSWQ1UnNySHhJZDBaUm1UZmJnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE NTg0LzMyNzA3MzgyOUNCMTExRUZBRUEwMEQyNUM0RjlBRTAyL29Qb2pkMjFVVElk NVJzckh4SWQwWlJtVGZiZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACcOqPlOFx7paGSpHtz9oFwEhr9+Af/vojc4HXjH3HNBeJVVLQsMFEzz hPPDASh6z5aFlUya/ZkWup4H/W5aA8/Sp/NyqJWiN/S/Y35FFUtvOBlt0Gp9Ph46 Lz3pr5taIpAx6Cv0ajPtmqLbs/jFuuoD8b+6vubijNVxx0ytN6FU/BRfrXEYE2Xq LKU9WCcb+O8JEqGrSVJu4XwMZ0dOpkBmn8WWCsrnVOZSfSKPnXC1S1Zw3/SHqFa3 2oI7aX3170afBbRuDY75EQ/yT/CLs4vfj+TixWSg1PYPL5oghiG4WTvYWG5wskSz Unq/dvo2CH+7fbUGySnbF4L0kbpyQ8s= -----END CERTIFICATE-----Generated at Fri Apr 11 15:59:46 2025 by rpki-client