$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft File: Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft (raw, json) Hash identifier: 7DUuFVLcQTNDfiBYvvbmosqGMQQ4FnzX1bQaeWy0TUM= Subject key identifier: F9:FB:39:FD:4F:64:C4:6F:2A:69:4F:54:F0:C0:0F:D6:61:2A:AC:96 Authority key identifier: 47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2 Certificate issuer: /CN=A91F2364/serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft Manifest number: 65 Signing time: Sat 05 Apr 2025 06:20:08 +0000 Manifest this update: Sat 05 Apr 2025 06:20:08 +0000 Manifest next update: Sat 12 Apr 2025 06:20:08 +0000 Files and hashes: 1: Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl (hash: WLMWsEZnYkxmK1uO81LdYzTKEaU7E6OHSQSeHm3YFXE=) 2: F696F52C8C7311EF995EA751C4F9AE02.roa (hash: IVAag2n39OgPxLOhqGGK4t8maSAxh28CoPmeH83pRE4=) 3: A227F4CC84CC11EFB2C53051C4F9AE02.roa (hash: xCL7VbACEpLGPMzJlAr4A4F4pPeHjMya8awCZyLgvNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 06:20:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2364 Validity Not Before: Apr 5 06:20:08 2025 GMT Not After : Apr 12 06:20:08 2025 GMT Subject: CN=67f0cb98-5f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:50:36:ec:34:96:97:32:c6:7b:c0:e7:a3:41: fa:c2:4f:c5:43:42:42:08:75:6a:75:ac:51:ea:c0: 6c:a3:43:ec:85:3c:4e:94:01:45:46:44:00:b0:b8: 45:32:af:ec:a9:98:93:05:6f:1e:34:3e:95:e6:36: 4e:81:22:d9:29:e6:4a:1a:58:9a:41:2b:41:dc:c2: 9f:2b:59:34:a9:db:f8:ce:4e:0d:04:98:d4:96:c0: de:b0:ea:58:ab:40:44:1d:c4:5a:3a:e7:84:78:62: 22:41:f7:ea:4f:1f:61:75:bb:34:7e:29:8b:31:dc: 62:f8:b3:69:1d:b1:f8:59:b5:e4:2b:06:4d:d5:9f: 03:19:a2:94:a9:15:fb:8f:52:b9:af:fa:7c:f4:ad: b1:fd:c9:99:51:32:a2:d3:e3:7f:de:d5:fa:42:ea: 2f:6f:9f:98:1b:ed:b6:f4:bd:f8:a7:51:2e:a1:83: 36:3f:71:93:0d:3d:28:e5:70:8d:c8:5a:6e:29:cf: 70:79:7f:d0:9b:d4:60:22:cc:b8:b0:3d:51:a5:2c: 84:5d:a9:9a:42:81:5a:aa:48:b8:6b:e1:9c:b2:e7: ab:56:37:58:b9:69:a7:4b:9b:42:2e:bd:07:44:49: ba:23:c3:7d:76:a2:07:92:bc:d2:28:52:2d:11:a9: 22:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FB:39:FD:4F:64:C4:6F:2A:69:4F:54:F0:C0:0F:D6:61:2A:AC:96 X509v3 Authority Key Identifier: keyid:47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:cd:06:f0:d1:1a:af:45:6b:e7:0a:1e:e5:bf:65:53:36:7b: e0:e4:ab:9b:7b:53:53:33:7c:37:bc:68:e7:db:cf:9e:00:a8: 2e:4d:a8:70:79:97:15:1b:ba:58:4e:70:05:9d:10:17:d5:a0: 40:7a:3a:dc:65:f8:a3:20:3f:83:35:4b:32:5a:95:fe:a2:66: 78:32:b1:65:be:cf:f4:36:5f:2c:c1:08:2a:23:ee:70:48:08: 97:b9:2f:55:83:1b:ee:86:e3:89:c7:4f:1e:d4:58:59:dd:9e: 34:51:9c:3d:60:b9:40:ee:4a:17:dd:a1:09:58:6f:53:6f:fa: 91:39:0d:13:fe:97:be:9b:20:79:2d:a9:3c:8b:a5:96:d2:24: 88:5f:f9:58:12:df:16:55:a3:88:b7:a4:7d:65:51:1b:a6:d4: fe:29:0d:0a:80:da:5d:46:5b:df:cf:c7:89:a3:b7:0b:e2:9c: 36:f9:d6:57:5f:04:75:3a:0f:93:b5:50:05:fb:c7:ce:27:a5: 12:07:f0:03:8e:da:54:83:51:b1:bc:0f:dc:85:de:5a:fa:5c: 91:a4:9a:96:5f:35:95:0f:2b:9f:f4:ca:08:95:f4:2b:53:df: 06:2a:dc:87:12:60:77:11:fc:fc:ba:af:2c:ac:92:a8:24:0a: fc:6c:75:51 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MjM2NDExMC8GA1UEBRMoNDcwQ0RGRDQ5RjVERkYyMTI1NzhERUM1REEyMUYyMURB MEIzRkFEMjAeFw0yNTA0MDUwNjIwMDhaFw0yNTA0MTIwNjIwMDhaMBgxFjAUBgNV BAMTDTY3ZjBjYjk4LTVmNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyUDbsNJaXMsZ7wOejQfrCT8VDQkIIdWp1rFHqwGyjQ+yFPE6UAUVGRACwuEUy r+ypmJMFbx40PpXmNk6BItkp5koaWJpBK0Hcwp8rWTSp2/jOTg0EmNSWwN6w6lir QEQdxFo654R4YiJB9+pPH2F1uzR+KYsx3GL4s2kdsfhZteQrBk3VnwMZopSpFfuP Urmv+nz0rbH9yZlRMqLT43/e1fpC6i9vn5gb7bb0vfinUS6hgzY/cZMNPSjlcI3I Wm4pz3B5f9Cb1GAizLiwPVGlLIRdqZpCgVqqSLhr4Zyy56tWN1i5aadLm0IuvQdE Sbojw312ogeSvNIoUi0RqSIlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+fs5/U9k xG8qaU9U8MAP1mEqrJYwHwYDVR0jBBgwFoAURwzf1J9d/yEleN7F2iHyHaCz+tIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyMzY0LzA0MDU2NkE4ODRD QzExRUY4NEVFM0U1MEM0RjlBRTAyL1J3emYxSjlkX3lFbGVON0YyaUh5SGFDei10 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUnd6ZjFKOWRfeUVsZU43RjJpSHlIYUN6LXRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy MzY0LzA0MDU2NkE4ODRDQzExRUY4NEVFM0U1MEM0RjlBRTAyL1J3emYxSjlkX3lF bGVON0YyaUh5SGFDei10SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGLNBvDRGq9Fa+cKHuW/ZVM2e+Dkq5t7U1MzfDe8aOfbz54AqC5NqHB5 lxUbulhOcAWdEBfVoEB6Otxl+KMgP4M1SzJalf6iZngysWW+z/Q2XyzBCCoj7nBI CJe5L1WDG+6G44nHTx7UWFndnjRRnD1guUDuShfdoQlYb1Nv+pE5DRP+l76bIHkt qTyLpZbSJIhf+VgS3xZVo4i3pH1lURum1P4pDQqA2l1GW9/Px4mjtwvinDb51ldf BHU6D5O1UAX7x84npRIH8AOO2lSDUbG8D9yF3lr6XJGkmpZfNZUPK5/0ygiV9CtT 3wYq3IcSYHcR/Py6ryyskqgkCvxsdVE= -----END CERTIFICATE-----Generated at Sun Apr 6 06:12:22 2025 by rpki-client