$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft File: T8Rg8J-QqobK9GfCha149DEnILA.mft (raw, json) Hash identifier: OqlfHciAtrUT/nTEkTPVINTaTREKrCBXqfbNsiq7xgw= Subject key identifier: 9E:96:54:1B:19:68:2D:49:D2:ED:86:26:14:BD:69:79:C3:76:03:4C Authority key identifier: 4F:C4:60:F0:9F:90:AA:86:CA:F4:67:C2:85:AD:78:F4:31:27:20:B0 Certificate issuer: /CN=A91EDD99/serialNumber=4FC460F09F90AA86CAF467C285AD78F4312720B0 Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft Manifest number: B0 Signing time: Thu 17 Apr 2025 04:56:59 +0000 Manifest this update: Thu 17 Apr 2025 04:56:59 +0000 Manifest next update: Thu 24 Apr 2025 04:56:59 +0000 Files and hashes: 1: T8Rg8J-QqobK9GfCha149DEnILA.crl (hash: 9xUxsUT7lSX2u7ly6Tgx8VW44QRdU5dxkgfrGBnGwqU=) 2: F394D822271911EF86EB1C09C4F9AE02.roa (hash: Qh8PjLgGSm0UikgzIoT2yOicsZXmat+tWnCt5geWY08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.crl rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 04:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDD99, serialNumber=4FC460F09F90AA86CAF467C285AD78F4312720B0 Validity Not Before: Apr 17 04:56:59 2025 GMT Not After : Apr 24 04:56:59 2025 GMT Subject: CN=68008a1b-4aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dd:9f:38:b9:9c:ed:09:ef:7c:be:23:ff:db: 24:2c:c9:89:b2:11:7c:7a:6a:b2:c5:41:24:b8:c9: 79:ab:28:c9:70:22:78:0c:0c:2b:ca:c0:48:d2:51: 9a:85:47:6f:49:7a:b8:7a:05:aa:58:fe:5d:20:c6: 39:2c:27:fd:86:9e:3f:2b:02:04:de:10:df:22:97: 55:59:5d:f2:34:c4:57:b0:e6:ce:8f:3c:53:bb:d7: 2b:35:83:9c:f0:ca:f5:92:fe:18:93:db:da:76:be: 8d:f3:5d:d6:02:bd:8e:84:27:e9:35:2a:54:48:5f: 30:a4:c8:18:cd:06:d1:27:a3:92:1b:3a:4e:9a:a6: ee:bb:8a:3e:e1:98:a1:0c:4b:d3:be:dc:16:7e:51: 63:bb:4a:b7:a0:84:4b:26:a5:34:3b:d0:c7:0e:32: a4:0a:a8:a3:7d:3c:d2:9d:7b:2a:cb:88:a8:ad:26: 5d:20:f4:aa:c3:dd:0c:63:5d:3f:cd:33:22:7d:8c: da:68:74:5b:ac:9c:f3:b4:ee:37:a5:dd:e8:a6:bd: 24:da:f2:2f:b9:68:2c:9b:1d:0d:1b:08:78:2a:fa: 9f:c4:29:36:3d:f6:a6:aa:9e:b1:ee:68:63:af:4b: 95:53:a7:c3:64:b5:71:80:27:77:e8:49:e8:20:d7: 67:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:96:54:1B:19:68:2D:49:D2:ED:86:26:14:BD:69:79:C3:76:03:4C X509v3 Authority Key Identifier: keyid:4F:C4:60:F0:9F:90:AA:86:CA:F4:67:C2:85:AD:78:F4:31:27:20:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:79:fc:aa:a9:24:f2:c9:ca:2e:17:f6:83:a5:72:0d:84:7c: 0a:a5:b9:74:46:45:22:56:0e:7c:cb:2d:9d:a5:21:66:d4:44: c4:4a:e4:d4:53:80:9d:8c:ec:f5:e1:c2:52:5b:41:f9:9c:9f: f8:cd:3a:68:21:5e:60:3a:0b:c5:39:90:bd:ce:de:77:56:08: f3:01:ae:eb:2e:88:dc:55:09:61:da:98:ec:49:9e:82:c0:40: b0:cf:64:0f:b1:9b:66:99:7f:16:d4:31:67:0e:97:2a:5a:15: 21:1d:28:99:b4:21:74:92:33:29:e9:3a:ab:db:8e:e6:7c:39: 5d:ab:06:65:9e:26:0f:0d:2f:fc:6c:8e:4e:f5:30:9f:6c:96: 7a:12:eb:a1:97:59:16:a3:01:ca:89:2b:6f:e2:5e:09:89:20: 1f:7b:b6:88:44:4c:5b:aa:65:4a:a7:7e:c1:40:bb:fe:77:f0: 3b:6a:11:8f:7d:6b:63:a3:d3:fd:98:0a:31:17:f8:76:9e:cf: 6b:7b:79:e5:4c:6a:d4:0c:00:99:c7:4d:b2:c6:b2:37:bc:46: 00:68:93:31:83:51:b0:ce:0e:b3:5c:14:04:cc:c7:95:48:75: 10:01:d2:a0:05:84:7c:03:78:18:83:00:95:58:76:b2:2a:5b: 62:f1:13:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUREOTkxMTAvBgNVBAUTKDRGQzQ2MEYwOUY5MEFBODZDQUY0NjdDMjg1QUQ3OEY0 MzEyNzIwQjAwHhcNMjUwNDE3MDQ1NjU5WhcNMjUwNDI0MDQ1NjU5WjAYMRYwFAYD VQQDEw02ODAwOGExYi00YWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxN2fOLmc7QnvfL4j/9skLMmJshF8emqyxUEkuMl5qyjJcCJ4DAwrysBI0lGa hUdvSXq4egWqWP5dIMY5LCf9hp4/KwIE3hDfIpdVWV3yNMRXsObOjzxTu9crNYOc 8Mr1kv4Yk9vadr6N813WAr2OhCfpNSpUSF8wpMgYzQbRJ6OSGzpOmqbuu4o+4Zih DEvTvtwWflFju0q3oIRLJqU0O9DHDjKkCqijfTzSnXsqy4iorSZdIPSqw90MY10/ zTMifYzaaHRbrJzztO43pd3opr0k2vIvuWgsmx0NGwh4KvqfxCk2Pfamqp6x7mhj r0uVU6fDZLVxgCd36EnoINdn8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6WVBsZ aC1J0u2GJhS9aXnDdgNMMB8GA1UdIwQYMBaAFE/EYPCfkKqGyvRnwoWtePQxJyCw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREQ5OS8wNTcyOUI0QzE5 QjkxMUVGOEUwREZFM0VDNEY5QUUwMi9UOFJnOEotUXFvYks5R2ZDaGExNDlERW5J TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q4Umc4Si1RcW9iSzlHZkNoYTE0OURFbklMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REQ5OS8wNTcyOUI0QzE5QjkxMUVGOEUwREZFM0VDNEY5QUUwMi9UOFJnOEotUXFv Yks5R2ZDaGExNDlERW5JTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRefyqqSTyycouF/aDpXINhHwKpbl0RkUiVg58yy2dpSFm1ETESuTU U4CdjOz14cJSW0H5nJ/4zTpoIV5gOgvFOZC9zt53VgjzAa7rLojcVQlh2pjsSZ6C wECwz2QPsZtmmX8W1DFnDpcqWhUhHSiZtCF0kjMp6Tqr247mfDldqwZlniYPDS/8 bI5O9TCfbJZ6Euuhl1kWowHKiStv4l4JiSAfe7aIRExbqmVKp37BQLv+d/A7ahGP fWtjo9P9mAoxF/h2ns9re3nlTGrUDACZx02yxrI3vEYAaJMxg1Gwzg6zXBQEzMeV SHUQAdKgBYR8A3gYgwCVWHayKlti8RNs -----END CERTIFICATE-----Generated at Fri Apr 18 08:23:07 2025 by rpki-client