$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft File: 83YJDdec9qJZrioXAgNy6eYWC7Y.mft (raw, json) Hash identifier: 8CyNr/53KLrUhuaXPn2+V7wbztql9l53IlHwm80oGd8= Subject key identifier: 04:DD:AE:39:FA:12:3E:43:F2:BD:96:8D:E8:11:86:E9:86:1B:C1:6E Authority key identifier: F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6 Certificate issuer: /CN=A91E8EAD/serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6 Certificate serial: 0967 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft Manifest number: 095F Signing time: Sun 06 Apr 2025 19:56:59 +0000 Manifest this update: Sun 06 Apr 2025 19:56:59 +0000 Manifest next update: Sun 13 Apr 2025 19:56:59 +0000 Files and hashes: 1: 83YJDdec9qJZrioXAgNy6eYWC7Y.crl (hash: AcZBC6POkhQXUAziFxmIbrrKoGXwpl4N+D7eChCRRZ0=) 2: 16F7FB3E8FAF11EA96738C46C4F9AE02.roa (hash: FDVevWofhV4OBWCY3mCV+bPsuc2xoyahcfyBo3UC3vE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2407 (0x967) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8EAD Validity Not Before: Apr 6 19:56:59 2025 GMT Not After : Apr 13 19:56:59 2025 GMT Subject: CN=67f2dc8b-42e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5d:21:2d:4f:ce:5d:48:f7:fa:a7:b1:dd:2c: 80:f0:c3:9b:9f:15:00:28:76:4a:27:08:32:31:c0: 97:bc:78:ba:6d:8f:67:81:19:35:71:20:d0:fe:28: 7d:88:de:2b:32:c8:54:cb:d9:3c:22:48:fc:47:14: 69:ff:ad:6f:bf:f2:e9:95:d8:aa:6f:ae:8e:0b:b4: 57:c6:8a:07:94:d9:9b:11:52:e0:2d:54:67:15:ab: 50:f0:77:82:41:08:65:6e:30:2a:50:63:68:35:ce: c8:ed:cd:6e:1e:3a:43:74:d4:52:59:dd:cd:b6:3a: 21:a1:21:21:f0:de:ce:e9:08:e9:a8:f6:43:95:94: 76:7d:96:47:5c:57:a7:ad:d4:6b:8d:11:7a:77:52: fc:65:7e:f2:3e:4a:69:31:5d:ff:06:fd:f2:1f:a9: 55:be:6d:b6:6f:8a:7b:cc:9b:1b:bd:66:14:24:a5: 27:f9:52:37:b2:74:7b:b7:aa:f1:93:86:63:cc:5e: 14:42:0c:40:50:3b:25:a3:0c:b9:98:5e:5f:3d:84: c7:e8:6d:ad:06:f1:00:f9:cf:86:6a:64:20:76:25: d3:2c:c0:38:9b:8f:74:67:31:a5:6e:43:9d:ce:f9: 83:1f:ca:1d:c0:09:7f:3b:7e:97:19:b5:73:55:09: cc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:DD:AE:39:FA:12:3E:43:F2:BD:96:8D:E8:11:86:E9:86:1B:C1:6E X509v3 Authority Key Identifier: keyid:F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:bf:a6:3c:2f:9c:29:6f:46:eb:e1:53:7b:88:0f:e7:fd:2b: 7b:49:e8:97:d8:dc:b2:83:8b:d2:b9:28:50:19:f0:01:00:cf: fc:ce:d7:30:e1:cd:fa:ba:ec:65:7e:b0:6a:4b:05:03:8a:ab: 6e:e9:cc:d7:c6:f0:be:90:ed:0b:19:4d:c1:ac:44:01:7c:90: 39:38:bd:6d:d3:58:69:fc:d0:65:f4:38:3d:b0:28:5e:36:53: 07:f5:e3:5d:bc:6f:83:5e:ec:35:db:f7:fb:e2:db:a4:a3:27: 82:5e:15:3f:d9:1c:62:df:14:dc:5d:35:d2:1f:21:c9:b8:c8: c6:bd:7e:a4:13:d3:7c:b9:13:b2:da:6d:2d:ad:01:ad:79:59: cc:d0:28:cb:13:7d:1d:14:46:0b:24:d7:7c:e7:66:84:f3:84: b3:2f:33:94:21:3f:f5:b2:ee:f5:7d:9c:f6:b2:7c:7c:3c:e0: ed:12:91:ac:05:2d:3e:5b:a4:6f:8b:ca:d8:93:a3:d4:b4:d4: 83:ef:48:20:fe:aa:cb:6c:a3:c6:ce:fe:b2:30:46:97:63:a1: 09:96:6f:dc:39:3d:bc:02:37:c1:3a:40:44:5e:05:d6:75:bc: f7:d7:0c:01:77:a5:ce:c0:d5:1b:f6:ad:fc:0a:7b:64:03:47: 68:19:a1:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThFQUQxMTAvBgNVBAUTKEYzNzYwOTBERDc5Q0Y2QTI1OUFFMkExNzAyMDM3MkU5 RTYxNjBCQjYwHhcNMjUwNDA2MTk1NjU5WhcNMjUwNDEzMTk1NjU5WjAYMRYwFAYD VQQDEw02N2YyZGM4Yi00MmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvF0hLU/OXUj3+qex3SyA8MObnxUAKHZKJwgyMcCXvHi6bY9ngRk1cSDQ/ih9 iN4rMshUy9k8Ikj8RxRp/61vv/Lpldiqb66OC7RXxooHlNmbEVLgLVRnFatQ8HeC QQhlbjAqUGNoNc7I7c1uHjpDdNRSWd3NtjohoSEh8N7O6QjpqPZDlZR2fZZHXFen rdRrjRF6d1L8ZX7yPkppMV3/Bv3yH6lVvm22b4p7zJsbvWYUJKUn+VI3snR7t6rx k4ZjzF4UQgxAUDslowy5mF5fPYTH6G2tBvEA+c+GamQgdiXTLMA4m490ZzGlbkOd zvmDH8odwAl/O36XGbVzVQnMEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATdrjn6 Ej5D8r2WjegRhumGG8FuMB8GA1UdIwQYMBaAFPN2CQ3XnPaiWa4qFwIDcunmFgu2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEVBRC8zQzI0REFEMjhG QUQxMUVBOTJEMUY2NDJDNEY5QUUwMi84M1lKRGRlYzlxSlpyaW9YQWdOeTZlWVdD N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgzWUpEZGVjOXFKWnJpb1hBZ055NmVZV0M3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEVBRC8zQzI0REFEMjhGQUQxMUVBOTJEMUY2NDJDNEY5QUUwMi84M1lKRGRlYzlx SlpyaW9YQWdOeTZlWVdDN1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3v6Y8L5wpb0br4VN7iA/n/St7SeiX2Nyyg4vSuShQGfABAM/8ztcw 4c36uuxlfrBqSwUDiqtu6czXxvC+kO0LGU3BrEQBfJA5OL1t01hp/NBl9Dg9sChe NlMH9eNdvG+DXuw12/f74tukoyeCXhU/2Rxi3xTcXTXSHyHJuMjGvX6kE9N8uROy 2m0trQGteVnM0CjLE30dFEYLJNd852aE84SzLzOUIT/1su71fZz2snx8PODtEpGs BS0+W6Rvi8rYk6PUtNSD70gg/qrLbKPGzv6yMEaXY6EJlm/cOT28AjfBOkBEXgXW dbz31wwBd6XOwNUb9q38CntkA0doGaFH -----END CERTIFICATE-----Generated at Mon Apr 7 00:29:17 2025 by rpki-client