$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft File: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft (raw, json) Hash identifier: OE3s8BpdEJRq0GJiJsldtIZ5Qd1JV5xvUZEZ5goZ9VA= Subject key identifier: 53:5D:F1:08:8A:1A:87:E7:C4:4F:F8:2C:83:0D:80:04:AF:F3:04:31 Authority key identifier: 7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4 Certificate issuer: /CN=A91E2AE5/serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4 Certificate serial: 14B4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft Manifest number: 14A3 Signing time: Sun 06 Apr 2025 15:30:59 +0000 Manifest this update: Sun 06 Apr 2025 15:30:59 +0000 Manifest next update: Sun 13 Apr 2025 15:30:59 +0000 Files and hashes: 1: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl (hash: yC/6CumZKm3EVfbMh0XyckgUJReauOA07utnhg9qTps=) 2: C163B1881A4711EDA547FE24C4F9AE02.roa (hash: YyHC9fQHplsWKxQpqgQ61v95ti092y+Fsw7rZXStZmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 15:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5300 (0x14b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2AE5 Validity Not Before: Apr 6 15:30:59 2025 GMT Not After : Apr 13 15:30:59 2025 GMT Subject: CN=67f29e33-b49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:42:2d:1b:14:1a:f6:cb:86:a8:2b:49:77:be: 6f:f3:a0:9e:4f:8d:20:23:c0:cb:9e:06:89:cb:14: 3c:02:79:b4:8d:80:e6:5e:72:00:d9:87:28:7e:09: f5:72:eb:b2:3c:7b:fc:ef:3e:7c:26:85:88:79:26: 93:10:bd:59:b0:33:22:e9:6a:3e:67:e6:91:a1:88: 63:c5:f4:07:56:a0:93:71:fe:12:34:8f:72:b4:e1: 65:51:6f:f5:9b:76:5a:f6:6d:cb:e6:c9:c9:5f:9c: ae:d7:6b:fe:e4:2e:00:9a:fb:ca:f1:d2:12:76:65: a9:00:6a:07:6b:d7:b6:56:3c:af:a7:21:26:19:4c: 9c:af:ec:2c:08:81:7a:02:c7:36:ff:1e:d0:28:f4: 1e:a2:39:92:45:81:95:aa:42:fe:d0:53:b6:ca:84: bd:94:b4:a0:c8:85:b8:9a:45:64:e4:91:8c:dc:2e: 0f:02:e9:1b:91:78:3a:b7:7b:04:89:9a:f1:79:62: 27:f2:b1:cc:51:2b:10:e5:94:78:81:d6:2d:a7:e4: ac:f8:22:32:88:9b:32:18:96:80:56:6c:83:e9:21: 8d:98:f4:97:6f:1f:d5:1a:53:95:5d:da:00:1a:0a: 26:b1:a2:a5:da:53:0d:36:40:bc:18:07:e4:df:c7: 09:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5D:F1:08:8A:1A:87:E7:C4:4F:F8:2C:83:0D:80:04:AF:F3:04:31 X509v3 Authority Key Identifier: keyid:7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:8e:aa:cc:63:31:87:1d:52:c9:17:f5:7a:ad:aa:5f:e0:4e: 74:50:cb:61:6b:63:d5:68:82:85:73:8f:f7:7a:4a:92:14:3b: 46:5f:b6:ed:72:ee:be:bf:b5:6e:35:63:ee:a0:e1:ad:46:1d: 0e:51:c5:b2:99:20:d3:47:58:4f:93:4b:c4:96:db:4e:03:4b: 94:92:b3:87:b5:f2:a3:5c:40:70:1c:70:ca:1c:23:97:1b:c0: d6:bd:4b:81:41:79:92:3e:c2:7d:c3:65:ec:2d:62:90:0a:b3: 69:40:96:36:5c:00:e5:2e:8d:1c:00:44:53:b5:a4:04:21:09: e5:d4:40:1f:75:cd:32:88:92:6c:d5:92:69:ee:98:6a:73:5c: 83:b2:4f:6e:93:a7:d8:62:77:1d:2d:0c:64:63:a8:af:dc:f4: b9:cf:0d:8c:c9:96:c7:df:78:80:fa:15:85:1a:42:5e:e8:b3: 74:95:56:e1:82:a2:1f:bf:77:f8:16:15:e4:35:c6:61:5c:4f: 8b:14:b9:9c:8e:bc:48:68:dd:51:b8:4e:e9:63:b9:39:f2:83: 09:01:fd:1c:da:b3:86:e5:57:a2:c5:42:8f:d8:b4:a9:7f:7d: 5b:37:51:d3:91:bd:2c:c9:c1:ef:4d:c3:34:33:8e:7a:68:a9: 70:aa:4e:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBRTUxMTAvBgNVBAUTKDdDNjNCMjgzRDlCOEEwNkVFQUQwNjIxQjgyM0VEMEY0 RTY5OURERjQwHhcNMjUwNDA2MTUzMDU5WhcNMjUwNDEzMTUzMDU5WjAYMRYwFAYD VQQDEw02N2YyOWUzMy1iNDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2EItGxQa9suGqCtJd75v86CeT40gI8DLngaJyxQ8Anm0jYDmXnIA2Ycofgn1 cuuyPHv87z58JoWIeSaTEL1ZsDMi6Wo+Z+aRoYhjxfQHVqCTcf4SNI9ytOFlUW/1 m3Za9m3L5snJX5yu12v+5C4AmvvK8dISdmWpAGoHa9e2VjyvpyEmGUycr+wsCIF6 Asc2/x7QKPQeojmSRYGVqkL+0FO2yoS9lLSgyIW4mkVk5JGM3C4PAukbkXg6t3sE iZrxeWIn8rHMUSsQ5ZR4gdYtp+Ss+CIyiJsyGJaAVmyD6SGNmPSXbx/VGlOVXdoA GgomsaKl2lMNNkC8GAfk38cJfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNd8QiK GofnxE/4LIMNgASv8wQxMB8GA1UdIwQYMBaAFHxjsoPZuKBu6tBiG4I+0PTmmd30 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkFFNS85RDcyNzZCNjVD QTkxMUU4QUE0MkEzNDZDNEY5QUUwMi9mR095ZzltNG9HN3EwR0liZ2o3UTlPYVoz ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZHT3lnOW00b0c3cTBHSWJnajdROU9hWjNmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkFFNS85RDcyNzZCNjVDQTkxMUU4QUE0MkEzNDZDNEY5QUUwMi9mR095ZzltNG9H N3EwR0liZ2o3UTlPYVozZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsjqrMYzGHHVLJF/V6rapf4E50UMtha2PVaIKFc4/3ekqSFDtGX7bt cu6+v7VuNWPuoOGtRh0OUcWymSDTR1hPk0vElttOA0uUkrOHtfKjXEBwHHDKHCOX G8DWvUuBQXmSPsJ9w2XsLWKQCrNpQJY2XADlLo0cAERTtaQEIQnl1EAfdc0yiJJs 1ZJp7phqc1yDsk9uk6fYYncdLQxkY6iv3PS5zw2MyZbH33iA+hWFGkJe6LN0lVbh gqIfv3f4FhXkNcZhXE+LFLmcjrxIaN1RuE7pY7k58oMJAf0c2rOG5VeixUKP2LSp f31bN1HTkb0sycHvTcM0M456aKlwqk6I -----END CERTIFICATE-----Generated at Mon Apr 7 14:59:56 2025 by rpki-client