$ rpki-client -vvf rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft File: ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft (raw, json) Hash identifier: qPjII9SGdm8d5dchqbOl+tFwjHzNMWJRxMKVIXhvQCE= Subject key identifier: 53:08:65:42:92:01:0B:87:DF:E3:8A:01:12:9E:82:D9:68:58:20:88 Authority key identifier: 76:CD:12:AD:9E:60:8C:AA:2C:19:97:B6:36:F4:50:57:7B:E9:37:BC Certificate issuer: /CN=A91F26F1/serialNumber=76CD12AD9E608CAA2C1997B636F450577BE937BC Certificate serial: 0222 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft Manifest number: 021E Signing time: Sun 13 Apr 2025 01:36:11 +0000 Manifest this update: Sun 13 Apr 2025 01:36:10 +0000 Manifest next update: Sun 20 Apr 2025 01:36:10 +0000 Files and hashes: 1: ds0SrZ5gjKosGZe2NvRQV3vpN7w.crl (hash: WZ+jVmTcTV5ZefZg8PGbz7ulicI0yn7x5NNj3fjyhQM=) 2: 150C1686283511EDABF49D69C4F9AE02.roa (hash: cp/g3c614sxIJhG7+W0sfcuIudQc0T60lgeLxpTEn7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.crl rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 01:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 546 (0x222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F26F1, serialNumber=76CD12AD9E608CAA2C1997B636F450577BE937BC Validity Not Before: Apr 13 01:36:10 2025 GMT Not After : Apr 20 01:36:10 2025 GMT Subject: CN=67fb150b-9aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1f:00:fb:24:6a:b4:26:dd:5c:c4:04:49:c8: 73:94:d6:a0:f2:72:96:36:d8:30:96:bf:56:ab:92: 00:be:67:74:85:f8:f8:2e:a1:97:50:9a:ab:db:2f: 17:c8:b2:51:6b:0a:9e:f1:d3:94:e9:e1:5f:7e:11: f4:15:c3:ad:03:0f:5c:03:b2:27:b6:e7:6d:e4:c4: fd:89:51:62:70:2f:0e:db:7a:97:9a:7a:b7:4d:fd: 86:9a:a1:6b:f6:1f:88:31:d6:a1:f6:3e:6c:f8:7f: d7:5d:75:3f:31:a8:e7:d0:4f:fe:b5:ef:3f:70:c8: 87:64:97:43:33:1a:14:ef:a2:1f:61:83:22:ad:46: c2:62:40:71:8c:c3:c0:dd:b8:d1:47:ac:fb:d5:83: 86:b0:df:0a:cc:d2:be:0e:e2:95:52:2a:b4:c1:cc: ef:9f:4a:c6:54:86:91:29:2f:0c:d6:c4:c9:05:73: e8:74:03:3a:39:f4:0d:df:16:5d:c5:c6:d7:ff:84: de:49:6e:86:c1:90:a2:38:b2:39:fe:42:0b:d7:a5: b7:a2:f7:cf:98:de:e1:ad:76:df:43:67:9a:bd:2d: 49:75:82:21:70:40:69:5e:4a:51:ef:87:0b:9c:0a: 83:62:0a:65:eb:05:f4:5b:37:6c:91:b7:f7:59:ca: 0d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:08:65:42:92:01:0B:87:DF:E3:8A:01:12:9E:82:D9:68:58:20:88 X509v3 Authority Key Identifier: keyid:76:CD:12:AD:9E:60:8C:AA:2C:19:97:B6:36:F4:50:57:7B:E9:37:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e7:92:82:a5:4a:05:ef:ea:4a:78:5c:56:70:35:6d:52:15: f3:1f:b0:13:72:90:1e:b2:33:70:46:7e:25:60:8a:f6:00:a8: 33:07:25:3d:04:29:e5:8c:ff:20:1d:49:e4:ec:3b:90:61:d2: 80:ca:28:17:3d:35:20:b8:18:ff:cf:ac:5b:a9:64:ff:7a:7f: 40:8f:14:10:c1:9b:d0:f0:92:4e:98:e9:a9:5a:9a:5d:e5:f4: 17:73:65:1a:d9:cd:0e:84:bd:d0:26:54:02:a5:4f:76:18:22: 8b:cf:13:24:57:27:ba:dd:fa:22:8b:77:7e:d0:0d:37:04:5d: 0c:59:c5:06:f3:a0:d2:76:b8:94:cb:dc:3d:f8:5d:dc:be:d6: e9:72:d0:84:f8:72:f6:83:f9:af:32:ef:6b:9d:52:f6:39:be: a9:50:40:4e:4e:16:91:6c:82:98:84:c3:14:1f:68:6a:14:83: f1:0b:6c:de:f8:91:49:92:b7:b6:64:0c:da:bc:6f:89:ed:6e: 6d:1d:cb:10:d4:f4:ba:b1:12:5f:06:98:17:e4:f6:4a:94:c6: c7:43:0e:a4:d8:7c:57:6a:1b:47:ca:a0:c3:23:8a:37:b1:28: 22:f3:48:ef:19:0d:27:8d:9c:d6:aa:42:2d:dc:2a:4b:b5:83: ee:1e:1d:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI2RjExMTAvBgNVBAUTKDc2Q0QxMkFEOUU2MDhDQUEyQzE5OTdCNjM2RjQ1MDU3 N0JFOTM3QkMwHhcNMjUwNDEzMDEzNjEwWhcNMjUwNDIwMDEzNjEwWjAYMRYwFAYD VQQDEw02N2ZiMTUwYi05YWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwB8A+yRqtCbdXMQESchzlNag8nKWNtgwlr9Wq5IAvmd0hfj4LqGXUJqr2y8X yLJRawqe8dOU6eFffhH0FcOtAw9cA7Intudt5MT9iVFicC8O23qXmnq3Tf2GmqFr 9h+IMdah9j5s+H/XXXU/Majn0E/+te8/cMiHZJdDMxoU76IfYYMirUbCYkBxjMPA 3bjRR6z71YOGsN8KzNK+DuKVUiq0wczvn0rGVIaRKS8M1sTJBXPodAM6OfQN3xZd xcbX/4TeSW6GwZCiOLI5/kIL16W3ovfPmN7hrXbfQ2eavS1JdYIhcEBpXkpR74cL nAqDYgpl6wX0Wzdskbf3WcoN9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMIZUKS AQuH3+OKARKegtloWCCIMB8GA1UdIwQYMBaAFHbNEq2eYIyqLBmXtjb0UFd76Te8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjZGMS84OEYxQzc4NDI4 MzExMUVEOTQ5NUQ0MkFDNEY5QUUwMi9kczBTclo1Z2pLb3NHWmUyTnZSUVYzdnBO N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RzMFNyWjVnaktvc0daZTJOdlJRVjN2cE43dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjZGMS84OEYxQzc4NDI4MzExMUVEOTQ5NUQ0MkFDNEY5QUUwMi9kczBTclo1Z2pL b3NHWmUyTnZSUVYzdnBON3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd55KCpUoF7+pKeFxWcDVtUhXzH7ATcpAesjNwRn4lYIr2AKgzByU9 BCnljP8gHUnk7DuQYdKAyigXPTUguBj/z6xbqWT/en9AjxQQwZvQ8JJOmOmpWppd 5fQXc2Ua2c0OhL3QJlQCpU92GCKLzxMkVye63foii3d+0A03BF0MWcUG86DSdriU y9w9+F3cvtbpctCE+HL2g/mvMu9rnVL2Ob6pUEBOThaRbIKYhMMUH2hqFIPxC2ze +JFJkre2ZAzavG+J7W5tHcsQ1PS6sRJfBpgX5PZKlMbHQw6k2HxXahtHyqDDI4o3 sSgi80jvGQ0njZzWqkIt3CpLtYPuHh0s -----END CERTIFICATE-----Generated at Sun Apr 13 04:53:01 2025 by rpki-client