$ rpki-client -vvf rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft File: l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft (raw, json) Hash identifier: noZTEnu6KlcBAiLqi9+WTQPVMlrisAlfyOZpmOKWZI0= Subject key identifier: E5:39:69:A3:A8:F3:00:82:CD:0C:41:16:AF:7F:2C:15:25:BD:47:98 Authority key identifier: 97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 Certificate issuer: /CN=A91E39B4/serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12 Certificate serial: 0B24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft Manifest number: 0B10 Signing time: Fri 04 Apr 2025 19:23:45 +0000 Manifest this update: Fri 04 Apr 2025 19:23:45 +0000 Manifest next update: Fri 11 Apr 2025 19:23:45 +0000 Files and hashes: 1: l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl (hash: ALgGHHkICpdppEjpAy1U6bko1hu+xhOgLPjYcb+Q8Qg=) 2: 46F57CF8137B11EBA3B47E37C4F9AE02.roa (hash: 2qnnF6MVOAPWKTwVx6xcANvt7+ipRsuxDi1zcVsoM90=) 3: D968823E3DA111EA9A3FD550C4F9AE02.roa (hash: LHN9DyWzlGRcwkpXqFqZ90XaKLujDGwCFAysXhBXguc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2852 (0xb24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E39B4 Validity Not Before: Apr 4 19:23:45 2025 GMT Not After : Apr 11 19:23:45 2025 GMT Subject: CN=67f031c1-1074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:25:78:fd:0e:d8:98:29:fa:52:ce:eb:77:22: ad:51:b6:02:50:bd:8b:e5:a9:f4:bf:0d:48:30:9b: 59:c8:4e:42:69:fc:ce:b2:59:0e:6e:70:f8:97:8c: 7c:11:d9:6a:f9:59:68:f7:90:af:56:09:5a:f7:02: c0:f6:a2:73:20:f8:70:a8:d3:8c:b8:6e:27:7d:14: b1:96:14:0a:93:ed:5d:f0:fe:a1:85:62:14:3a:5e: f5:81:fc:97:a3:67:53:84:30:32:1f:fb:57:d6:04: d0:4d:79:9f:80:28:89:12:68:80:a1:8f:78:ab:c3: 49:5a:97:be:02:50:b9:34:62:1c:35:8c:11:ef:bd: 88:4d:1d:53:c1:47:9b:32:32:5e:1e:f2:03:3e:77: 56:76:f1:6b:1c:e6:ca:25:9e:61:86:19:9c:a4:1e: 2f:8f:bb:74:0a:4b:7e:a7:4f:6b:01:e9:48:62:69: 80:eb:12:77:23:b9:33:dc:d0:0c:b5:1c:b1:59:91: ec:58:21:94:9c:e5:b6:b5:83:41:3a:f0:02:ad:ac: e5:fa:cf:77:25:1c:9d:e3:72:20:2f:ce:f4:24:a7: 2f:7a:8d:b1:52:74:ee:9f:69:c5:29:e8:a1:c8:0f: fe:14:bc:a6:70:4f:04:c3:5d:3a:16:ea:54:1a:2e: d9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:39:69:A3:A8:F3:00:82:CD:0C:41:16:AF:7F:2C:15:25:BD:47:98 X509v3 Authority Key Identifier: keyid:97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:ca:9f:dd:e7:3b:f8:3e:28:aa:37:9f:f4:c5:ae:f4:74:1a: cf:d4:44:19:fb:33:bb:19:22:6d:1e:d6:7b:ce:2d:03:c1:b5: d3:3a:75:dc:dc:4a:21:98:38:7a:2e:9f:aa:80:96:43:81:6e: 2a:28:d4:38:cd:72:ef:e1:65:a8:64:3f:e2:23:57:3e:79:b5: 85:1d:14:b5:0b:0b:c4:19:b3:0b:03:41:41:d1:64:b7:62:f9: 72:73:fa:a3:7b:4b:73:1d:35:17:ce:13:4b:29:e9:14:ff:13: 4c:d9:64:c6:ec:93:81:ad:be:85:fc:b9:66:7d:90:0c:2a:74: 69:69:80:cc:99:c0:04:af:a4:42:58:64:d6:8b:7f:65:5c:92: 6e:ca:6b:12:d5:92:e1:01:04:ca:75:20:0f:1b:db:2f:05:d3: 2b:32:da:ef:74:87:ee:63:2b:96:16:9e:ed:9a:3e:1e:32:65: 4d:71:52:9a:bf:59:30:79:f8:35:37:15:25:2f:42:45:dc:1e: 5b:7f:0f:6f:9b:65:2b:91:b2:29:29:e4:e8:6b:4c:81:ec:62: 83:ab:d2:63:4e:a2:16:0b:b5:e7:89:77:b4:ce:f0:48:06:e6: 71:d3:28:30:40:f9:a8:02:d4:90:1e:85:53:d0:61:4a:8e:d2: f8:e8:ac:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM5QjQxMTAvBgNVBAUTKDk3QjNERDJBQjNDODlCQzhBMkJCQzFEQjgwM0JDRTY4 RUFBNUFBMTIwHhcNMjUwNDA0MTkyMzQ1WhcNMjUwNDExMTkyMzQ1WjAYMRYwFAYD VQQDEw02N2YwMzFjMS0xMDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxiV4/Q7YmCn6Us7rdyKtUbYCUL2L5an0vw1IMJtZyE5CafzOslkObnD4l4x8 Edlq+Vlo95CvVgla9wLA9qJzIPhwqNOMuG4nfRSxlhQKk+1d8P6hhWIUOl71gfyX o2dThDAyH/tX1gTQTXmfgCiJEmiAoY94q8NJWpe+AlC5NGIcNYwR772ITR1TwUeb MjJeHvIDPndWdvFrHObKJZ5hhhmcpB4vj7t0Ckt+p09rAelIYmmA6xJ3I7kz3NAM tRyxWZHsWCGUnOW2tYNBOvACrazl+s93JRyd43IgL870JKcveo2xUnTun2nFKeih yA/+FLymcE8Ew106FupUGi7ZXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOU5aaOo 8wCCzQxBFq9/LBUlvUeYMB8GA1UdIwQYMBaAFJez3SqzyJvIorvB24A7zmjqpaoS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzlCNC8xRUUxODI5RTNE QTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04aWl1OEhiZ0R2T2FPcWxx aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w3UGRLclBJbThpaXU4SGJnRHZPYU9xbHFoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzlCNC8xRUUxODI5RTNEQTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04 aWl1OEhiZ0R2T2FPcWxxaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVyp/d5zv4PiiqN5/0xa70dBrP1EQZ+zO7GSJtHtZ7zi0DwbXTOnXc 3EohmDh6Lp+qgJZDgW4qKNQ4zXLv4WWoZD/iI1c+ebWFHRS1CwvEGbMLA0FB0WS3 Yvlyc/qje0tzHTUXzhNLKekU/xNM2WTG7JOBrb6F/LlmfZAMKnRpaYDMmcAEr6RC WGTWi39lXJJuymsS1ZLhAQTKdSAPG9svBdMrMtrvdIfuYyuWFp7tmj4eMmVNcVKa v1kwefg1NxUlL0JF3B5bfw9vm2UrkbIpKeToa0yB7GKDq9JjTqIWC7XniXe0zvBI BuZx0ygwQPmoAtSQHoVT0GFKjtL46Kwj -----END CERTIFICATE-----Generated at Fri Apr 4 22:15:12 2025 by rpki-client