$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft File: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft (raw, json) Hash identifier: dctnhdqju/d7/7cjYqXBK7+On7L/y9NkGopVRAQr9O4= Subject key identifier: B3:42:CE:54:11:D7:F9:1E:22:52:1D:E9:9E:4F:5B:7C:6E:9C:B1:D1 Authority key identifier: 0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40 Certificate issuer: /CN=A91EDFAF/serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft Manifest number: 5C Signing time: Thu 03 Apr 2025 06:24:54 +0000 Manifest this update: Thu 03 Apr 2025 06:24:54 +0000 Manifest next update: Thu 10 Apr 2025 06:24:54 +0000 Files and hashes: 1: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl (hash: gX3FZUt0OlTknLWQD/lVcZfTAO/rrvdFbaAf1ahZwps=) 2: 5E89A9888CBD11EFBA479615C4F9AE02.roa (hash: YUDcoFmZ6Z8eSf+ykpnCcDAS77nR9kd6RW9K0Z7WPIA=) 3: 5D58A6368CBD11EFBA479615C4F9AE02.roa (hash: fQEPggKeUXGb8ZTYlH41koJENtuHoAxNSC/aql+imTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDFAF Validity Not Before: Apr 3 06:24:54 2025 GMT Not After : Apr 10 06:24:54 2025 GMT Subject: CN=67ee29b6-b1f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0f:33:5b:aa:7f:b3:56:25:ef:90:1d:25:70: b0:b8:c4:3d:9b:3f:48:c7:b3:01:09:6b:d6:88:0a: b3:82:e5:f9:dd:dd:2f:94:37:ce:92:13:1d:85:7b: a9:07:7c:a2:57:33:31:df:84:fd:7e:5c:c9:b5:e4: b4:4c:47:70:a1:d0:eb:3d:56:b3:ec:6f:06:63:90: 2c:13:da:4e:d0:21:b3:2c:58:26:65:f5:9a:af:fa: d2:23:c4:77:d4:65:69:cc:55:c8:71:22:eb:17:60: 13:05:60:7a:63:e4:62:5e:63:be:47:ed:a1:2d:4a: 10:0d:e4:21:40:03:48:bc:c3:ca:78:fd:bb:c8:55: 3c:14:3d:61:66:89:8c:b4:5a:7f:17:56:98:21:72: 15:a8:71:cc:cb:6e:f0:78:63:07:59:9d:cd:5d:5f: e9:a4:11:01:92:ab:ab:7f:f2:08:79:80:78:fa:52: de:76:12:e6:96:31:28:c9:18:d1:88:a8:93:bd:c7: 92:20:8a:da:91:dd:d5:ae:4e:7e:2a:f6:70:a5:3f: 73:c6:af:88:07:97:9e:8e:2e:fc:53:39:f7:36:32: 90:11:ee:3e:8e:9f:7c:2c:8c:20:4a:f1:17:fb:ab: 60:89:77:44:71:f9:34:7d:aa:1e:21:a8:6d:10:5f: f9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:42:CE:54:11:D7:F9:1E:22:52:1D:E9:9E:4F:5B:7C:6E:9C:B1:D1 X509v3 Authority Key Identifier: keyid:0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a9:ec:75:dd:18:42:dd:6f:2f:f6:6d:b2:d6:4d:e5:8a:96: 04:f7:78:1e:86:2c:05:aa:03:87:4f:63:66:09:95:de:83:a0: 3f:f2:89:2f:22:6f:df:40:74:d7:e3:cb:a0:0f:e2:58:d4:20: a9:20:19:58:c7:4c:ee:7e:db:40:b0:53:ed:29:d1:76:93:c0: da:61:74:c6:cf:fe:05:68:1b:17:1b:ba:be:b2:13:58:fa:2a: b5:11:08:f6:22:d6:ac:a7:67:9a:1d:27:d6:b7:ea:b0:51:90: 7f:f2:76:1f:84:5d:70:f7:a1:e9:b2:0e:b5:38:f7:e4:29:2c: 22:a5:40:f5:c2:b7:b8:68:3e:53:91:28:6d:89:2e:29:8b:67: 4d:d3:1a:10:38:a3:60:95:9b:d5:4f:75:7c:a3:71:b4:1e:14: a2:1b:23:14:2e:d6:89:6c:87:05:af:33:4f:77:44:ac:67:c5: 95:80:17:6f:1e:bb:56:a3:13:9c:c6:dd:7c:02:1a:fa:cc:21: 19:7a:e6:52:c5:8f:f9:0b:24:e7:a1:59:c8:5d:15:08:6c:04: 63:d0:bf:9c:a7:b0:2e:b2:63:95:21:c7:98:d0:87:8d:ef:15: 3f:7e:4c:fc:93:23:d4:5a:99:02:6b:12:f2:7c:aa:d0:29:23: 5f:d5:91:a9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF REZBRjExMC8GA1UEBRMoMEU2NjNDQjQ5MDBFRjREODIyRjk5QUJERTI3RkE0MDNB QjlGNEM0MDAeFw0yNTA0MDMwNjI0NTRaFw0yNTA0MTAwNjI0NTRaMBgxFjAUBgNV BAMTDTY3ZWUyOWI2LWIxZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCXDzNbqn+zViXvkB0lcLC4xD2bP0jHswEJa9aICrOC5fnd3S+UN86SEx2Fe6kH fKJXMzHfhP1+XMm15LRMR3Ch0Os9VrPsbwZjkCwT2k7QIbMsWCZl9Zqv+tIjxHfU ZWnMVchxIusXYBMFYHpj5GJeY75H7aEtShAN5CFAA0i8w8p4/bvIVTwUPWFmiYy0 Wn8XVpghchWocczLbvB4YwdZnc1dX+mkEQGSq6t/8gh5gHj6Ut52EuaWMSjJGNGI qJO9x5IgitqR3dWuTn4q9nClP3PGr4gHl56OLvxTOfc2MpAR7j6On3wsjCBK8Rf7 q2CJd0Rx+TR9qh4hqG0QX/mDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUs0LOVBHX +R4iUh3pnk9bfG6csdEwHwYDVR0jBBgwFoAUDmY8tJAO9Ngi+Zq94n+kA6ufTEAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVERkFGLzk3QkU5MzBFOENC QzExRUZCRjIyMDAxMkM0RjlBRTAyL0RtWTh0SkFPOU5naS1acTk0bi1rQTZ1ZlRF QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRG1ZOHRKQU85TmdpLVpxOTRuLWtBNnVmVEVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVE RkFGLzk3QkU5MzBFOENCQzExRUZCRjIyMDAxMkM0RjlBRTAyL0RtWTh0SkFPOU5n aS1acTk0bi1rQTZ1ZlRFQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG6p7HXdGELdby/2bbLWTeWKlgT3eB6GLAWqA4dPY2YJld6DoD/yiS8i b99AdNfjy6AP4ljUIKkgGVjHTO5+20CwU+0p0XaTwNphdMbP/gVoGxcbur6yE1j6 KrURCPYi1qynZ5odJ9a36rBRkH/ydh+EXXD3oemyDrU49+QpLCKlQPXCt7hoPlOR KG2JLimLZ03TGhA4o2CVm9VPdXyjcbQeFKIbIxQu1olshwWvM093RKxnxZWAF28e u1ajE5zG3XwCGvrMIRl65lLFj/kLJOehWchdFQhsBGPQv5ynsC6yY5Uhx5jQh43v FT9+TPyTI9RamQJrEvJ8qtApI1/Vkak= -----END CERTIFICATE-----Generated at Fri Apr 4 22:32:06 2025 by rpki-client