$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft File: poNjJUbxoQeEvBpP9voLvmzsLU4.mft (raw, json) Hash identifier: AaI0eEiRW+ODF1wC/4JqUSP7PCYNTF285J+zduSED74= Subject key identifier: 95:B4:F2:3C:47:56:99:75:F2:3A:7B:53:92:EC:FB:05:1B:7F:34:B8 Authority key identifier: A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E Certificate issuer: /CN=A91EF547/serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E Certificate serial: 038C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft Manifest number: 0384 Signing time: Sat 29 Mar 2025 01:05:20 +0000 Manifest this update: Sat 29 Mar 2025 01:05:20 +0000 Manifest next update: Sat 05 Apr 2025 01:05:20 +0000 Files and hashes: 1: poNjJUbxoQeEvBpP9voLvmzsLU4.crl (hash: qKQXHbstpygNKFy0h6PLkzyEvhC0piWq8tz6xvEYoVI=) 2: 6246B1F2609A11EDAAF70C26C4F9AE02.roa (hash: CW3j/kB0iIlMJ+3lrD5HV2LAKz9hUDzTZRZrWdpxIYA=) 3: 636B090C609A11EDAAF70C26C4F9AE02.roa (hash: KwB5Za6c44Sp6WKsELOvklwRL+/LDv/rBqGOUWdpNrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 01:05:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 908 (0x38c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF547 Validity Not Before: Mar 29 01:05:20 2025 GMT Not After : Apr 5 01:05:20 2025 GMT Subject: CN=67e74750-eddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:99:f0:81:06:03:d2:70:8d:85:82:0e:b7:d0: 0f:1e:17:a2:2c:42:95:d9:09:e6:8a:d5:b4:64:f3: 63:75:7c:80:69:82:da:2c:b9:b4:3b:90:d3:6a:d2: eb:5b:62:a3:59:03:dd:ca:51:94:a6:4b:e7:a9:a5: f6:be:94:99:b1:4d:a8:cd:34:4e:fe:f7:68:d0:5e: 3f:ee:e9:c3:9b:88:2a:40:f6:2d:b9:2f:19:b3:b6: f1:ed:52:c1:ba:0b:c1:ee:15:4f:2e:cb:5c:f7:eb: 38:ef:21:4e:91:e9:22:ab:59:ab:ae:52:0b:de:45: c7:7b:48:52:9f:83:65:3e:1f:ca:06:1c:e9:d8:b1: dc:ff:61:02:f0:af:19:69:b1:c1:a2:6d:d0:dd:15: b4:00:ca:da:da:13:4e:85:43:57:91:3f:a4:55:93: 35:bb:ba:09:44:27:6f:2c:0c:b4:5d:a6:35:7c:c2: 9e:0f:7d:dc:0e:fe:c9:e6:f6:6a:02:6c:af:2e:b6: 6d:6b:90:6a:ac:ee:a4:de:b9:0f:ca:2b:f3:3c:18: 00:fa:02:17:ef:99:69:e3:ed:bf:57:a7:8a:f2:16: 75:42:22:b4:68:3a:d1:83:53:ad:22:b7:1f:0e:74: c3:d0:e0:8c:ab:3f:bd:bb:89:8c:fe:ee:08:ae:1f: 20:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B4:F2:3C:47:56:99:75:F2:3A:7B:53:92:EC:FB:05:1B:7F:34:B8 X509v3 Authority Key Identifier: keyid:A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:07:3a:10:cf:b2:36:a2:9e:f0:8b:fb:ce:7f:26:44:2d:ea: 0e:91:08:01:da:bd:1c:9f:08:36:20:35:ca:7d:37:50:25:6f: 69:24:50:c4:31:05:b6:03:c9:d7:b2:78:d7:36:bc:4a:95:dd: 81:5f:ff:47:a9:3f:06:1f:30:8d:0f:6d:75:0e:24:f1:58:a3: cb:03:ff:89:ed:a0:97:2d:5a:62:3a:98:60:67:e5:13:e0:08: a0:f2:f8:51:3d:b1:f0:c4:a4:74:71:f0:76:ef:a6:72:f9:e2: 08:04:c3:48:6f:d0:ed:b8:c5:98:a8:97:58:6d:10:e0:e7:c6: 7e:52:b1:85:ab:bd:60:49:c0:32:db:2d:dc:96:f3:9a:42:85: 02:eb:58:1f:2b:0e:9e:4e:7c:45:11:0f:4e:57:fe:e7:bd:b5: 56:c7:51:8d:47:98:40:54:c9:2a:24:ea:ac:37:11:90:26:97: 53:fe:9d:7d:8b:ea:2b:9b:e9:76:3f:cd:a0:cb:ff:c1:28:1a: 3b:e8:41:57:a9:9a:6b:f3:00:3f:0b:72:17:f4:6f:ea:a5:38: 21:2e:db:0b:93:19:59:c2:f7:b1:b8:06:19:b6:fe:d9:4e:82: 53:f5:b4:c6:2d:b3:fa:4f:8b:8c:5d:2e:aa:be:72:14:0b:fb: a8:36:8b:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1NDcxMTAvBgNVBAUTKEE2ODM2MzI1NDZGMUExMDc4NEJDMUE0RkY2RkEwQkJF NkNFQzJENEUwHhcNMjUwMzI5MDEwNTIwWhcNMjUwNDA1MDEwNTIwWjAYMRYwFAYD VQQDEw02N2U3NDc1MC1lZGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJnwgQYD0nCNhYIOt9APHheiLEKV2QnmitW0ZPNjdXyAaYLaLLm0O5DTatLr W2KjWQPdylGUpkvnqaX2vpSZsU2ozTRO/vdo0F4/7unDm4gqQPYtuS8Zs7bx7VLB ugvB7hVPLstc9+s47yFOkekiq1mrrlIL3kXHe0hSn4NlPh/KBhzp2LHc/2EC8K8Z abHBom3Q3RW0AMra2hNOhUNXkT+kVZM1u7oJRCdvLAy0XaY1fMKeD33cDv7J5vZq AmyvLrZta5BqrO6k3rkPyivzPBgA+gIX75lp4+2/V6eK8hZ1QiK0aDrRg1OtIrcf DnTD0OCMqz+9u4mM/u4Irh8gvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJW08jxH Vpl18jp7U5Ls+wUbfzS4MB8GA1UdIwQYMBaAFKaDYyVG8aEHhLwaT/b6C75s7C1O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU0Ny82MjZFMTA5NDk4 QzcxMUVDODZBMDA5NDlDNEY5QUUwMi9wb05qSlVieG9RZUV2QnBQOXZvTHZtenNM VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BvTmpKVWJ4b1FlRXZCcFA5dm9Mdm16c0xVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjU0Ny82MjZFMTA5NDk4QzcxMUVDODZBMDA5NDlDNEY5QUUwMi9wb05qSlVieG9R ZUV2QnBQOXZvTHZtenNMVTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBBzoQz7I2op7wi/vOfyZELeoOkQgB2r0cnwg2IDXKfTdQJW9pJFDE MQW2A8nXsnjXNrxKld2BX/9HqT8GHzCND211DiTxWKPLA/+J7aCXLVpiOphgZ+UT 4Aig8vhRPbHwxKR0cfB276Zy+eIIBMNIb9DtuMWYqJdYbRDg58Z+UrGFq71gScAy 2y3clvOaQoUC61gfKw6eTnxFEQ9OV/7nvbVWx1GNR5hAVMkqJOqsNxGQJpdT/p19 i+orm+l2P82gy//BKBo76EFXqZpr8wA/C3IX9G/qpTghLtsLkxlZwvexuAYZtv7Z ToJT9bTGLbP6T4uMXS6qvnIUC/uoNotP -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:54 2025 by rpki-client