$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft File: -WS28tsd8I3d2tR5U1OdnFk9CmY.mft (raw, json) Hash identifier: NZJ42x0NCHblmDJmFNRxaTdI4d+mjdbbgW0MYMQxJWg= Subject key identifier: 05:A3:74:B3:5E:F1:3C:9A:20:05:E4:C4:A4:77:73:D4:08:5F:63:E4 Authority key identifier: F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 Certificate issuer: /CN=A91F0F53/serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft Manifest number: 01DC Signing time: Thu 03 Apr 2025 02:11:17 +0000 Manifest this update: Thu 03 Apr 2025 02:11:16 +0000 Manifest next update: Thu 10 Apr 2025 02:11:16 +0000 Files and hashes: 1: -WS28tsd8I3d2tR5U1OdnFk9CmY.crl (hash: 6ea4ZxqWlETtCXJeyeqLVf7xzDdDC2oYq9tQMMemk8M=) 2: 50AC0FBE329011EEB46D367FC4F9AE02.roa (hash: MniMCaT7GS5dM8liFRmMS+V0grGgkVjsR8fvxiwRJoU=) 3: 051D87824A9A11ED9B9F6E25C4F9AE02.roa (hash: yFTXv2eFumW58i8EpayoiAuuDpkxivQ9zhERap37PtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0F53 Validity Not Before: Apr 3 02:11:16 2025 GMT Not After : Apr 10 02:11:16 2025 GMT Subject: CN=67edee44-b0f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:77:e1:6b:5b:9f:2e:7a:fb:fb:a4:f6:4b:d0: db:8e:80:9f:06:24:7c:bd:4e:11:d3:ce:98:dd:67: 8d:4b:ec:15:35:e5:e7:6f:e7:cc:33:ce:82:1c:1e: d0:62:32:19:8c:d0:fa:14:1b:39:d4:d0:e3:ba:53: fb:8c:e5:b8:5a:28:bd:8a:a0:ce:dd:42:b7:c2:5e: da:7d:ca:0e:94:2a:2a:7c:be:67:9c:b4:bd:e8:53: 3a:b1:4a:d8:09:21:8c:06:d3:6d:43:b3:2a:d6:c1: c9:47:e6:37:d4:6c:ff:ba:74:21:e1:64:16:7e:5f: 5a:a2:2b:f2:67:cb:b5:ca:db:8a:28:19:46:35:0f: 93:08:8b:e8:dd:e7:3d:26:4b:37:fd:17:f1:59:06: 41:d4:fc:f3:98:d5:bb:e4:14:c2:f7:11:2b:9a:e6: c5:cc:6e:fa:47:c3:76:70:dc:fa:58:46:13:68:75: a8:59:95:2c:68:5c:eb:96:ef:77:ab:53:37:86:41: 4f:3c:88:a8:27:07:17:7d:0f:88:58:d8:f2:55:0a: d6:d9:b3:3e:80:9b:84:b4:ee:ac:42:8c:2e:bc:7d: c6:a5:0b:72:b3:bb:4e:5b:ac:95:40:6a:77:b1:aa: da:16:4e:fb:db:ed:08:ab:c7:83:02:3c:6b:9c:84: 41:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A3:74:B3:5E:F1:3C:9A:20:05:E4:C4:A4:77:73:D4:08:5F:63:E4 X509v3 Authority Key Identifier: keyid:F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:41:d7:0b:ad:1b:c0:70:54:c6:12:bc:c9:4f:58:3b:45:ce: e6:75:10:a7:11:ea:cb:50:7a:d6:5a:a5:ce:3e:af:da:a2:72: 76:92:92:34:38:07:af:bc:bf:4c:84:dd:08:09:94:ef:57:fd: ca:d3:93:d1:87:89:8d:e6:86:13:47:59:59:c3:55:65:e0:b9: 77:27:d1:bb:5f:7f:c9:66:e9:38:14:85:c3:60:03:79:a2:a2: 61:e3:13:5b:7f:c0:2b:60:9a:d1:e2:f2:27:d9:cc:b8:f7:d6: 77:b8:8f:ca:a5:4e:7d:b4:e0:62:c6:8b:77:59:86:4f:b0:dc: a8:06:40:9b:60:b6:b6:c3:47:43:b1:16:b7:e7:7a:df:87:36: 79:2a:5d:2f:b0:c7:6e:57:08:82:3b:b7:5d:e8:da:4b:1f:52: 0a:92:a0:71:10:33:12:31:af:f1:95:41:36:ec:c5:ca:42:24: 98:5e:b3:f9:21:57:cc:a9:97:80:45:65:46:b5:88:71:16:05: a2:4c:ee:af:6f:03:b5:c6:cb:ed:d7:cc:2f:69:1e:27:78:e6: bc:76:bb:94:2c:35:29:5a:5d:91:6e:6b:25:10:29:ba:ce:53: a1:f3:d3:1f:a8:fc:a1:bf:23:7d:28:de:c3:7f:e3:46:d8:9b: b6:73:33:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGNTMxMTAvBgNVBAUTKEY5NjRCNkYyREIxREYwOERERERBRDQ3OTUzNTM5RDlD NTkzRDBBNjYwHhcNMjUwNDAzMDIxMTE2WhcNMjUwNDEwMDIxMTE2WjAYMRYwFAYD VQQDEw02N2VkZWU0NC1iMGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0nfha1ufLnr7+6T2S9DbjoCfBiR8vU4R086Y3WeNS+wVNeXnb+fMM86CHB7Q YjIZjND6FBs51NDjulP7jOW4Wii9iqDO3UK3wl7afcoOlCoqfL5nnLS96FM6sUrY CSGMBtNtQ7Mq1sHJR+Y31Gz/unQh4WQWfl9aoivyZ8u1ytuKKBlGNQ+TCIvo3ec9 Jks3/RfxWQZB1PzzmNW75BTC9xErmubFzG76R8N2cNz6WEYTaHWoWZUsaFzrlu93 q1M3hkFPPIioJwcXfQ+IWNjyVQrW2bM+gJuEtO6sQowuvH3GpQtys7tOW6yVQGp3 saraFk772+0Iq8eDAjxrnIRBvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWjdLNe 8TyaIAXkxKR3c9QIX2PkMB8GA1UdIwQYMBaAFPlktvLbHfCN3drUeVNTnZxZPQpm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEY1My9BMjIzNTJDMjRB OTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJM2QydFI1VTFPZG5GazlD bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1XUzI4dHNkOEkzZDJ0UjVVMU9kbkZrOUNtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEY1My9BMjIzNTJDMjRBOTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJ M2QydFI1VTFPZG5GazlDbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7QdcLrRvAcFTGErzJT1g7Rc7mdRCnEerLUHrWWqXOPq/aonJ2kpI0 OAevvL9MhN0ICZTvV/3K05PRh4mN5oYTR1lZw1Vl4Ll3J9G7X3/JZuk4FIXDYAN5 oqJh4xNbf8ArYJrR4vIn2cy499Z3uI/KpU59tOBixot3WYZPsNyoBkCbYLa2w0dD sRa353rfhzZ5Kl0vsMduVwiCO7dd6NpLH1IKkqBxEDMSMa/xlUE27MXKQiSYXrP5 IVfMqZeARWVGtYhxFgWiTO6vbwO1xsvt18wvaR4neOa8druULDUpWl2RbmslECm6 zlOh89MfqPyhvyN9KN7Df+NG2Ju2czNf -----END CERTIFICATE-----Generated at Fri Apr 4 22:14:59 2025 by rpki-client