$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft File: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft (raw, json) Hash identifier: 7Z2e6j7oN/pcL8/qVYuDyezvFyrUXXYhe2ZUyEr4mtM= Subject key identifier: 4F:AC:05:82:52:52:7C:B9:57:B0:EE:12:D6:01:A4:27:0E:FE:30:F8 Authority key identifier: 31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4 Certificate issuer: /CN=A91E72AB/serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4 Certificate serial: 0C11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft Manifest number: 0C06 Signing time: Fri 04 Apr 2025 18:48:29 +0000 Manifest this update: Fri 04 Apr 2025 18:48:29 +0000 Manifest next update: Fri 11 Apr 2025 18:48:29 +0000 Files and hashes: 1: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl (hash: pqSxTso1HWB+WkRshZIBWy98km16IwQlvMYWg7EsKQg=) 2: EA903484DBE011EF8B7B8868C4F9AE02.roa (hash: WnCn74CsMDLUDoWgKsd58XNjQZ+24XZ7nmffYeANshI=) 3: 1794902224E111EF97BA8F42C4F9AE02.roa (hash: P2hK1V8n6283lOYlU0zk/lZoroeJfCtrYMgaRe8W0vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3089 (0xc11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E72AB Validity Not Before: Apr 4 18:48:29 2025 GMT Not After : Apr 11 18:48:29 2025 GMT Subject: CN=67f0297d-319b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ec:7d:53:74:da:80:22:fe:6c:d5:99:97:80: 56:cf:57:cd:c7:8c:fb:a8:85:b0:91:7b:7c:87:0f: d8:95:02:36:24:f0:74:11:f3:f2:58:3b:cf:c8:87: bd:85:f2:de:94:e0:88:84:d2:d6:08:b3:a1:01:1a: a0:f2:f9:86:70:ab:4f:3b:db:91:a9:62:9e:42:4b: 96:c4:11:f4:5e:26:d5:e9:e9:02:55:6b:7e:8e:28: b4:23:7a:9a:6a:a0:1b:15:da:98:03:4f:a3:d8:19: a8:a6:aa:68:8c:a0:13:3b:3c:92:2a:10:2f:76:06: 1d:b4:1e:4b:44:af:58:a4:19:83:f4:f7:82:dd:be: 65:e4:a9:69:57:67:d2:a1:8e:11:ae:cb:5c:a0:2f: f0:dd:d6:e0:c2:16:64:cc:f5:40:57:bf:3f:df:08: fc:08:e2:60:fa:77:d2:d9:f3:8e:53:b8:7b:8d:7c: 0c:ed:41:d0:49:90:25:76:c1:b8:4d:d1:9e:58:58: 66:c1:c3:55:c5:49:19:a3:75:da:72:83:69:cc:30: 7f:68:90:57:89:01:86:e4:87:63:a7:fa:3f:47:19: 0d:a2:42:01:8f:2e:15:59:21:7c:d1:ab:af:e5:ff: 25:73:77:b1:9a:35:16:ca:d7:73:a3:ed:a9:95:f2: b7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AC:05:82:52:52:7C:B9:57:B0:EE:12:D6:01:A4:27:0E:FE:30:F8 X509v3 Authority Key Identifier: keyid:31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:42:8b:8d:a7:5d:6e:1b:df:d6:61:31:51:7a:3e:0a:80:06: 35:62:5b:1f:34:bc:c9:ad:ef:13:1d:24:1f:c9:43:f2:5d:43: 0b:fb:db:44:8a:f1:1f:0b:87:6e:57:83:84:1a:2e:0b:60:93: 24:bf:6c:25:ed:f8:2c:ff:4f:f6:a3:43:3d:c0:df:49:da:a5: 28:fd:34:54:d8:84:7c:9c:38:91:9f:cb:da:28:48:a6:9f:d5: 75:a1:87:b1:5a:b2:24:2f:66:6d:af:02:79:b1:1c:1f:c9:83: b9:fb:fe:19:95:43:cb:50:7a:24:c9:cb:28:9b:c3:49:06:01: 15:f0:12:a9:7b:05:82:b9:4a:d5:f2:15:d6:60:f3:d6:49:72: fe:3f:86:a2:9a:68:6e:b3:8c:68:cc:1a:5f:6b:c6:f8:9b:94: 01:c0:e9:92:ae:1d:2b:b4:a9:a3:5b:8c:40:d4:c7:cf:a1:4e: 82:5f:14:89:63:52:1b:4d:31:29:8e:78:01:d8:f5:85:12:54: 77:a0:89:cb:10:31:3f:55:8a:db:ed:5e:c3:da:46:24:66:12: 7c:7d:86:9b:a7:76:e8:79:b6:68:08:80:ec:45:8a:24:30:16: 4f:10:73:4a:3f:49:78:af:89:23:d1:21:ab:12:e3:a0:97:f9: 86:65:45:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcyQUIxMTAvBgNVBAUTKDMxRDA5RTI0RDVEQjhDNThGNDE0RUVBM0VGMEVFREZC MzU1REFCRjQwHhcNMjUwNDA0MTg0ODI5WhcNMjUwNDExMTg0ODI5WjAYMRYwFAYD VQQDEw02N2YwMjk3ZC0zMTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ex9U3TagCL+bNWZl4BWz1fNx4z7qIWwkXt8hw/YlQI2JPB0EfPyWDvPyIe9 hfLelOCIhNLWCLOhARqg8vmGcKtPO9uRqWKeQkuWxBH0XibV6ekCVWt+jii0I3qa aqAbFdqYA0+j2BmopqpojKATOzySKhAvdgYdtB5LRK9YpBmD9PeC3b5l5KlpV2fS oY4RrstcoC/w3dbgwhZkzPVAV78/3wj8COJg+nfS2fOOU7h7jXwM7UHQSZAldsG4 TdGeWFhmwcNVxUkZo3XacoNpzDB/aJBXiQGG5Idjp/o/RxkNokIBjy4VWSF80auv 5f8lc3exmjUWytdzo+2plfK35QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+sBYJS Uny5V7DuEtYBpCcO/jD4MB8GA1UdIwQYMBaAFDHQniTV24xY9BTuo+8O7fs1Xav0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzJBQi9ENzE3MzRGRTBD QTQxMUVBODQ4NDFCM0VDNEY5QUUwMi9NZENlSk5YYmpGajBGTzZqN3c3dC16VmRx X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01kQ2VKTlhiakZqMEZPNmo3dzd0LXpWZHFfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzJBQi9ENzE3MzRGRTBDQTQxMUVBODQ4NDFCM0VDNEY5QUUwMi9NZENlSk5YYmpG ajBGTzZqN3c3dC16VmRxX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0QouNp11uG9/WYTFRej4KgAY1YlsfNLzJre8THSQfyUPyXUML+9tE ivEfC4duV4OEGi4LYJMkv2wl7fgs/0/2o0M9wN9J2qUo/TRU2IR8nDiRn8vaKEim n9V1oYexWrIkL2ZtrwJ5sRwfyYO5+/4ZlUPLUHokycsom8NJBgEV8BKpewWCuUrV 8hXWYPPWSXL+P4aimmhus4xozBpfa8b4m5QBwOmSrh0rtKmjW4xA1MfPoU6CXxSJ Y1IbTTEpjngB2PWFElR3oInLEDE/VYrb7V7D2kYkZhJ8fYabp3boebZoCIDsRYok MBZPEHNKP0l4r4kj0SGrEuOgl/mGZUUa -----END CERTIFICATE-----Generated at Fri Apr 4 22:37:01 2025 by rpki-client