$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft File: 1BN478zNyo5lN-lfJ6o7NTdYCvM.mft (raw, json) Hash identifier: griXvga256jPFHYQ8kT8IV6CWDdPVdCc6+mnS/fiz/s= Subject key identifier: 81:92:C0:9D:A9:69:78:FE:B6:F2:F8:3A:4C:65:D6:18:07:D2:17:E1 Authority key identifier: D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3 Certificate issuer: /CN=A91F2E76/serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3 Certificate serial: 0772 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft Manifest number: 076D Signing time: Wed 02 Apr 2025 21:26:12 +0000 Manifest this update: Wed 02 Apr 2025 21:26:11 +0000 Manifest next update: Wed 09 Apr 2025 21:26:11 +0000 Files and hashes: 1: 1BN478zNyo5lN-lfJ6o7NTdYCvM.crl (hash: FnJ3RAiEi9imVEIjnVNy7VOu0GPp9RVtNbhZ2IGdCmA=) 2: 86AE60140D7A11EB9D346C48C4F9AE02.roa (hash: EnKj89o4/2sutrwYpg7UxwXHFBOFSGJviP9dKcMIsAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1906 (0x772) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2E76 Validity Not Before: Apr 2 21:26:11 2025 GMT Not After : Apr 9 21:26:11 2025 GMT Subject: CN=67edab74-6458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9b:69:b2:1d:20:a9:23:9c:28:a1:80:7e:a3: 4b:bb:fd:ca:a0:45:5f:5d:dc:fa:98:e8:70:9f:b7: 6a:57:7b:a6:d5:d4:20:c3:da:27:d1:ca:14:54:d7: af:c0:8d:75:3c:8d:23:14:01:54:41:87:af:95:72: 99:d1:b4:fa:a3:96:6f:02:da:3b:b2:af:43:99:00: 72:f6:2b:ab:51:bf:86:d9:a8:24:fc:ce:d0:42:67: cc:86:b1:e9:11:b5:3a:d0:1b:a8:b2:d6:22:40:a2: bd:b3:ba:f7:58:ea:f6:a4:cc:ce:ab:e5:55:84:2e: fa:58:bb:c7:0b:b8:11:f8:71:28:fe:d9:3e:51:5a: 69:79:bb:1b:8f:72:91:a0:15:0f:26:0d:04:5d:02: 22:11:7a:ea:53:3b:14:6e:d6:4d:4c:63:1e:33:fe: 09:11:62:34:d8:69:8c:e1:9a:e2:ec:e5:dc:86:eb: e0:9e:cb:4f:68:c0:0c:3e:54:eb:44:e6:62:bd:55: ce:75:03:fa:f8:e4:c7:6b:1d:3b:bd:ca:39:41:70: 32:4b:98:2a:93:f4:ec:8c:4d:aa:fb:8c:0d:40:64: 32:e7:0d:97:33:ec:af:e7:d6:fc:e8:22:35:7c:6e: c7:ad:77:e2:3a:55:fc:7c:fd:34:cd:c2:04:c0:1e: fd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:92:C0:9D:A9:69:78:FE:B6:F2:F8:3A:4C:65:D6:18:07:D2:17:E1 X509v3 Authority Key Identifier: keyid:D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:67:a4:1e:0a:02:0d:85:ce:20:aa:8f:e8:ff:e2:9b:2e:3b: 67:52:8b:2e:62:ee:8d:02:43:0c:33:de:b4:b2:de:9f:13:03: 9e:79:a0:c5:e9:6e:30:be:e8:0c:45:a8:b4:c3:00:00:48:7e: b5:4c:1e:2b:90:f3:4b:fb:d1:aa:6d:58:b6:c7:ce:f9:14:da: 4f:ed:08:d2:c7:4f:e4:e2:59:a0:2c:8e:81:ea:55:06:f2:79: fb:df:e9:d6:d6:1f:b6:ef:e6:be:e6:f1:40:37:c5:66:76:03: 23:3a:34:fe:71:a2:03:1b:65:f7:1b:3e:d7:d8:61:76:1a:6d: 19:53:69:39:a2:7d:d3:73:dc:ce:c6:06:27:65:18:5b:55:90: 13:db:02:61:a5:80:c3:01:d7:61:4c:b9:13:82:56:59:ee:94: cb:b8:12:33:a8:97:5d:23:fe:1d:3f:83:5b:cb:42:b0:f6:2e: 0a:a0:e3:aa:3d:90:11:11:e6:e0:a8:88:e9:b3:32:2f:28:43: e0:56:54:20:52:2c:64:7b:05:9b:b7:37:e0:89:43:e3:a8:b3: 58:31:d5:5a:9d:3a:18:06:2a:b9:c1:bf:82:73:69:13:33:0b: 59:66:65:27:61:f7:ed:c1:1f:2d:c5:42:6e:66:db:cc:fb:98: d1:50:af:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJFNzYxMTAvBgNVBAUTKEQ0MTM3OEVGQ0NDRENBOEU2NTM3RTk1RjI3QUEzQjM1 Mzc1ODBBRjMwHhcNMjUwNDAyMjEyNjExWhcNMjUwNDA5MjEyNjExWjAYMRYwFAYD VQQDEw02N2VkYWI3NC02NDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzptpsh0gqSOcKKGAfqNLu/3KoEVfXdz6mOhwn7dqV3um1dQgw9on0coUVNev wI11PI0jFAFUQYevlXKZ0bT6o5ZvAto7sq9DmQBy9iurUb+G2agk/M7QQmfMhrHp EbU60BuostYiQKK9s7r3WOr2pMzOq+VVhC76WLvHC7gR+HEo/tk+UVppebsbj3KR oBUPJg0EXQIiEXrqUzsUbtZNTGMeM/4JEWI02GmM4Zri7OXchuvgnstPaMAMPlTr ROZivVXOdQP6+OTHax07vco5QXAyS5gqk/TsjE2q+4wNQGQy5w2XM+yv59b86CI1 fG7HrXfiOlX8fP00zcIEwB790wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGSwJ2p aXj+tvL4Okxl1hgH0hfhMB8GA1UdIwQYMBaAFNQTeO/MzcqOZTfpXyeqOzU3WArz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkU3Ni84RjNDOUU2QTBE NzcxMUVCQkJBRTM0NDBDNEY5QUUwMi8xQk40Nzh6TnlvNWxOLWxmSjZvN05UZFlD dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFCTjQ3OHpOeW81bE4tbGZKNm83TlRkWUN2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkU3Ni84RjNDOUU2QTBENzcxMUVCQkJBRTM0NDBDNEY5QUUwMi8xQk40Nzh6Tnlv NWxOLWxmSjZvN05UZFlDdk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPZ6QeCgINhc4gqo/o/+KbLjtnUosuYu6NAkMMM960st6fEwOeeaDF 6W4wvugMRai0wwAASH61TB4rkPNL+9GqbVi2x875FNpP7QjSx0/k4lmgLI6B6lUG 8nn73+nW1h+27+a+5vFAN8VmdgMjOjT+caIDG2X3Gz7X2GF2Gm0ZU2k5on3Tc9zO xgYnZRhbVZAT2wJhpYDDAddhTLkTglZZ7pTLuBIzqJddI/4dP4Nby0Kw9i4KoOOq PZAREebgqIjpszIvKEPgVlQgUixkewWbtzfgiUPjqLNYMdVanToYBiq5wb+Cc2kT MwtZZmUnYfftwR8txUJuZtvM+5jRUK9N -----END CERTIFICATE-----Generated at Fri Apr 4 18:34:00 2025 by rpki-client