$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.mft File: F6Zubv3tEF6BIZCZBTal32A7qA4.mft (raw, json) Hash identifier: IMdxxOXdhAfRa4C6aoOMxWZkRnHZKYBbJ/r8MvER1HY= Subject key identifier: 13:AF:D8:62:AE:57:6E:23:CB:C2:C0:B7:85:BB:33:3B:C7:DB:B2:EC Authority key identifier: 17:A6:6E:6E:FD:ED:10:5E:81:21:90:99:05:36:A5:DF:60:3B:A8:0E Certificate issuer: /CN=A91DFFB0/serialNumber=17A66E6EFDED105E812190990536A5DF603BA80E Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6Zubv3tEF6BIZCZBTal32A7qA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.mft Manifest number: E1 Signing time: Sat 29 Mar 2025 04:52:00 +0000 Manifest this update: Sat 29 Mar 2025 04:51:59 +0000 Manifest next update: Sat 05 Apr 2025 04:51:59 +0000 Files and hashes: 1: F6Zubv3tEF6BIZCZBTal32A7qA4.crl (hash: JV1EKGsO7yPjH5HVYrl1TLTzU396jdRaRKXh85MPiYw=) 2: BC75F7EEB69511EEA0196A79C4F9AE02.roa (hash: F5iN8kRUhVD5UcQHE+cdGbEF8nSM0rWOmllxV2NtDTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.crl rsync://rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6Zubv3tEF6BIZCZBTal32A7qA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFFB0 Validity Not Before: Mar 29 04:51:59 2025 GMT Not After : Apr 5 04:51:59 2025 GMT Subject: CN=67e77c70-3f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:59:13:f9:47:06:b6:9f:0a:53:b0:89:7e:23: 6e:5d:b2:4e:cd:78:52:d6:39:13:28:c3:25:cd:49: 52:c7:8b:ad:48:44:d3:f6:e5:40:78:05:e4:e4:0e: 17:1f:b9:f2:04:94:42:35:f2:2f:82:bc:fc:4c:3d: 43:7e:34:29:98:97:8e:7d:a1:d7:c7:98:df:d0:93: be:37:db:2f:19:65:ae:42:41:23:dc:ff:81:ff:ae: 68:04:c3:9d:f7:0a:72:86:30:72:1f:40:3d:85:e4: 4a:aa:a6:ed:eb:79:5d:e2:ed:26:ae:75:9c:6c:ab: ff:3c:17:9e:ae:34:ec:86:82:4c:b7:3e:f2:83:81: 4e:ed:80:1f:74:13:a0:12:d2:16:34:74:f8:66:06: 3e:cc:d7:77:f5:14:ed:63:ab:46:c0:3f:3a:22:cb: 46:69:aa:0e:79:a1:83:8e:aa:26:9d:e6:81:cb:61: 78:1f:d2:41:3d:5f:58:75:9c:d0:74:70:7a:53:d0: 34:a5:af:8a:89:d2:dc:b0:18:d2:9a:c7:aa:ca:6c: 72:c2:e2:85:01:51:74:fb:4d:e4:00:03:e4:4d:d0: dd:a2:63:0a:7e:5c:4e:8e:21:04:de:a1:da:35:28: 06:b1:73:34:9d:f6:5f:f0:e7:f6:6d:d4:db:fe:2d: d5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AF:D8:62:AE:57:6E:23:CB:C2:C0:B7:85:BB:33:3B:C7:DB:B2:EC X509v3 Authority Key Identifier: keyid:17:A6:6E:6E:FD:ED:10:5E:81:21:90:99:05:36:A5:DF:60:3B:A8:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6Zubv3tEF6BIZCZBTal32A7qA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFFB0/D00C5F88B68F11EEA56BAE11C4F9AE02/F6Zubv3tEF6BIZCZBTal32A7qA4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:54:10:f2:65:c2:9c:76:9e:f2:7b:68:6f:3a:2b:f3:4f:7f: 19:be:c5:a3:68:67:f3:ff:6d:dc:bf:f6:34:35:d2:4b:c7:5d: 93:5d:fe:26:f2:0e:d3:12:49:75:4b:87:b5:d7:62:53:4d:60: 47:b4:5b:77:89:dc:a1:fa:04:81:7b:3e:57:c8:23:c0:93:2d: 84:b9:15:be:9f:dd:c4:94:49:f4:c3:66:68:e8:f8:6c:22:dd: 5e:b5:ff:1a:52:ad:77:56:0f:71:6d:5a:44:3a:d8:d8:0c:5a: a4:a8:7e:56:70:7b:c8:68:ec:b3:a7:46:7a:02:cd:73:90:51: 08:24:2a:92:41:13:5a:49:0f:5c:d0:23:0d:c9:24:27:46:e9: 79:ec:32:f3:84:49:24:b4:2c:17:91:a6:1b:d7:b8:31:7d:b0: d1:11:b2:b2:54:0c:6a:3b:69:20:4b:d7:74:b4:1d:84:69:d4: 5a:fb:74:3e:a2:b7:e4:54:7a:3e:23:72:ab:ab:b2:0e:eb:53: 5e:b1:91:da:27:2b:99:c6:99:d6:47:02:9c:91:bc:7c:a7:f6: d4:9e:01:8d:d0:84:70:2e:91:ce:9c:94:2a:6b:1c:1a:10:5e: 1c:23:16:2b:66:c5:18:8d:4d:9c:14:8e:b8:83:f5:03:ff:bd: 0f:b9:c7:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZGQjAxMTAvBgNVBAUTKDE3QTY2RTZFRkRFRDEwNUU4MTIxOTA5OTA1MzZBNURG NjAzQkE4MEUwHhcNMjUwMzI5MDQ1MTU5WhcNMjUwNDA1MDQ1MTU5WjAYMRYwFAYD VQQDEw02N2U3N2M3MC0zZjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylkT+UcGtp8KU7CJfiNuXbJOzXhS1jkTKMMlzUlSx4utSETT9uVAeAXk5A4X H7nyBJRCNfIvgrz8TD1DfjQpmJeOfaHXx5jf0JO+N9svGWWuQkEj3P+B/65oBMOd 9wpyhjByH0A9heRKqqbt63ld4u0mrnWcbKv/PBeerjTshoJMtz7yg4FO7YAfdBOg EtIWNHT4ZgY+zNd39RTtY6tGwD86IstGaaoOeaGDjqomneaBy2F4H9JBPV9YdZzQ dHB6U9A0pa+KidLcsBjSmseqymxywuKFAVF0+03kAAPkTdDdomMKflxOjiEE3qHa NSgGsXM0nfZf8Of2bdTb/i3VGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOv2GKu V24jy8LAt4W7MzvH27LsMB8GA1UdIwQYMBaAFBembm797RBegSGQmQU2pd9gO6gO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkZCMC9EMDBDNUY4OEI2 OEYxMUVFQTU2QkFFMTFDNEY5QUUwMi9GNlp1YnYzdEVGNkJJWkNaQlRhbDMyQTdx QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y2WnVidjN0RUY2QklaQ1pCVGFsMzJBN3FBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkZCMC9EMDBDNUY4OEI2OEYxMUVFQTU2QkFFMTFDNEY5QUUwMi9GNlp1YnYzdEVG NkJJWkNaQlRhbDMyQTdxQTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkVBDyZcKcdp7ye2hvOivzT38ZvsWjaGfz/23cv/Y0NdJLx12TXf4m 8g7TEkl1S4e112JTTWBHtFt3idyh+gSBez5XyCPAky2EuRW+n93ElEn0w2Zo6Phs It1etf8aUq13Vg9xbVpEOtjYDFqkqH5WcHvIaOyzp0Z6As1zkFEIJCqSQRNaSQ9c 0CMNySQnRul57DLzhEkktCwXkaYb17gxfbDREbKyVAxqO2kgS9d0tB2EadRa+3Q+ orfkVHo+I3Krq7IO61NesZHaJyuZxpnWRwKckbx8p/bUngGN0IRwLpHOnJQqaxwa EF4cIxYrZsUYjU2cFI64g/UD/70Pucfk -----END CERTIFICATE-----Generated at Fri Apr 4 18:29:54 2025 by rpki-client