$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft File: l_PsEBRVjghHCgOpR4yE8j5FADo.mft (raw, json) Hash identifier: /uug2GPB16W+KGWkkIp8PkltBR4pUTKUGiO34wFN+s4= Subject key identifier: B9:A3:09:ED:F7:C7:23:19:62:9D:F3:8A:EA:4E:78:9E:72:4F:B5:F3 Authority key identifier: 97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A Certificate issuer: /CN=A91E2E92/serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft Manifest number: 0162 Signing time: Thu 03 Apr 2025 03:23:14 +0000 Manifest this update: Thu 03 Apr 2025 03:23:13 +0000 Manifest next update: Thu 10 Apr 2025 03:23:13 +0000 Files and hashes: 1: l_PsEBRVjghHCgOpR4yE8j5FADo.crl (hash: f9mA+dqoQYKs/A+++CbH5GYOALet60P/KGuBJJmEiGs=) 2: B7D34CC444ED11EE8D931624C4F9AE02.roa (hash: o91C1jFze1aQemqWDwZsi+b9/Rmy3VyieJUeIkyvzoc=) 3: D78EA2DE44ED11EEA6685324C4F9AE02.roa (hash: /JrzSFgR8sIchQqbAkxuKHvug5BLuVR/st4b3ZlxES8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2E92 Validity Not Before: Apr 3 03:23:13 2025 GMT Not After : Apr 10 03:23:13 2025 GMT Subject: CN=67edff22-711d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b1:34:cc:d2:89:39:6a:30:c3:ab:6c:0e:be: 9e:ad:89:12:5a:a3:82:9d:e5:e2:63:47:6a:c2:9f: a8:c8:4d:2b:06:6d:49:81:3e:b9:72:a2:bf:ef:f7: ec:8c:30:a7:d5:ad:11:85:9d:3f:64:15:9c:ff:60: ae:1c:b0:e1:8d:d3:46:e9:28:96:5f:36:9d:83:15: df:39:a5:67:5a:1a:8d:83:f0:bd:73:ca:5d:01:e8: 6a:2a:6d:bd:3a:61:80:39:40:f6:15:1c:d9:41:20: cf:5b:7f:87:6b:02:77:b5:f8:e2:57:6b:79:81:28: d5:98:7b:27:1d:54:77:e3:e5:e7:fb:83:ad:92:8f: 93:0a:96:60:d9:19:ff:d9:82:28:61:71:ea:1d:db: 85:52:36:c3:01:93:ad:ba:93:d2:06:47:bb:91:68: be:58:d1:64:09:3a:87:fd:43:f8:cf:3a:f2:02:5f: f8:e4:73:f2:ef:7e:85:8a:f3:c9:3b:19:59:36:4c: 38:11:3b:ea:bb:e1:60:14:a6:54:5b:38:cc:e4:46: e0:58:29:42:ae:a1:be:4a:e3:10:33:e7:26:5b:dc: f2:ae:d4:99:53:c2:60:fc:f7:7b:bb:18:2a:d5:29: 00:7e:55:00:df:ac:b2:b3:a8:60:7e:5b:78:8d:c7: b6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A3:09:ED:F7:C7:23:19:62:9D:F3:8A:EA:4E:78:9E:72:4F:B5:F3 X509v3 Authority Key Identifier: keyid:97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:48:72:42:23:e4:03:e3:6a:01:ea:42:ba:0b:88:d7:67:18: 7b:fe:c0:99:3f:0a:79:92:e3:82:8b:79:14:5b:4b:e9:7b:19: 06:82:5b:00:38:4e:3a:38:a1:18:1e:8f:36:a3:55:86:a4:9e: 69:33:34:4e:8a:f4:37:e0:ef:16:cb:16:cc:90:c9:93:31:a9: 91:5b:23:3b:4b:05:31:04:72:4d:fc:08:3d:0b:c6:42:d4:03: 10:15:17:30:e7:9d:45:c2:e0:48:d1:85:82:74:90:c1:d6:ea: d1:49:e0:c8:e3:c9:cf:6a:11:5b:64:fe:65:6b:fc:7f:fd:0c: fa:fe:c0:34:e0:04:fd:22:d9:2a:08:73:03:52:fd:3a:ca:c2: ee:cd:d1:28:8e:d3:eb:e3:57:df:fe:78:d5:89:8b:c7:c8:2c: fc:44:c7:3e:09:a0:61:a8:46:6a:df:a0:78:da:3e:a8:67:6e: bd:7f:f7:45:8f:32:bd:1b:bd:88:14:89:e0:e3:88:6d:c3:c7: 0a:8c:a2:5b:2b:85:da:92:6e:1d:d7:34:5e:6b:5b:97:06:44: 34:74:27:e7:89:d9:ca:26:e0:ca:4c:2d:2c:70:14:75:e2:ce: b0:9b:97:37:e4:f9:2c:18:c6:3b:85:52:e1:30:7a:8a:b1:6d: f2:e2:02:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFOTIxMTAvBgNVBAUTKDk3RjNFQzEwMTQ1NThFMDg0NzBBMDNBOTQ3OEM4NEYy M0U0NTAwM0EwHhcNMjUwNDAzMDMyMzEzWhcNMjUwNDEwMDMyMzEzWjAYMRYwFAYD VQQDEw02N2VkZmYyMi03MTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4LE0zNKJOWoww6tsDr6erYkSWqOCneXiY0dqwp+oyE0rBm1JgT65cqK/7/fs jDCn1a0RhZ0/ZBWc/2CuHLDhjdNG6SiWXzadgxXfOaVnWhqNg/C9c8pdAehqKm29 OmGAOUD2FRzZQSDPW3+HawJ3tfjiV2t5gSjVmHsnHVR34+Xn+4Otko+TCpZg2Rn/ 2YIoYXHqHduFUjbDAZOtupPSBke7kWi+WNFkCTqH/UP4zzryAl/45HPy736FivPJ OxlZNkw4ETvqu+FgFKZUWzjM5EbgWClCrqG+SuMQM+cmW9zyrtSZU8Jg/Pd7uxgq 1SkAflUA36yys6hgflt4jce2xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmjCe33 xyMZYp3ziupOeJ5yT7XzMB8GA1UdIwQYMBaAFJfz7BAUVY4IRwoDqUeMhPI+RQA6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkU5Mi8xODg1QTZEMjA2 Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpnaEhDZ09wUjR5RThqNUZB RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xfUHNFQlJWamdoSENnT3BSNHlFOGo1RkFEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkU5Mi8xODg1QTZEMjA2Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpn aEhDZ09wUjR5RThqNUZBRG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4SHJCI+QD42oB6kK6C4jXZxh7/sCZPwp5kuOCi3kUW0vpexkGglsA OE46OKEYHo82o1WGpJ5pMzROivQ34O8WyxbMkMmTMamRWyM7SwUxBHJN/Ag9C8ZC 1AMQFRcw551FwuBI0YWCdJDB1urRSeDI48nPahFbZP5la/x//Qz6/sA04AT9Itkq CHMDUv06ysLuzdEojtPr41ff/njViYvHyCz8RMc+CaBhqEZq36B42j6oZ269f/dF jzK9G72IFIng44htw8cKjKJbK4Xakm4d1zRea1uXBkQ0dCfnidnKJuDKTC0scBR1 4s6wm5c35PksGMY7hVLhMHqKsW3y4gIy -----END CERTIFICATE-----Generated at Fri Apr 4 21:51:49 2025 by rpki-client