$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.mft File: mG5BZ9azgH9J98JgDWD5wmCacJY.mft (raw, json) Hash identifier: xLGc0NKHwBGcOJfnJ/LwXE2MFs+9uLXdp5qLzm3PSJA= Subject key identifier: D9:C0:30:75:AE:16:5F:F0:65:29:11:13:C6:3B:02:D6:1C:92:4E:AA Authority key identifier: 98:6E:41:67:D6:B3:80:7F:49:F7:C2:60:0D:60:F9:C2:60:9A:70:96 Certificate issuer: /CN=A91F3806/serialNumber=986E4167D6B3807F49F7C2600D60F9C2609A7096 Certificate serial: 0C08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mG5BZ9azgH9J98JgDWD5wmCacJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.mft Manifest number: 0C02 Signing time: Fri 04 Apr 2025 18:46:44 +0000 Manifest this update: Fri 04 Apr 2025 18:46:44 +0000 Manifest next update: Fri 11 Apr 2025 18:46:44 +0000 Files and hashes: 1: mG5BZ9azgH9J98JgDWD5wmCacJY.crl (hash: /RLtBYPxdEHU+a+uLWx8a7XJJsIWTa69mAnX5QvnOOM=) 2: 4E54AA4C0B7E11EA9D8BA43CC4F9AE02.roa (hash: w2KSsvNhZHM7vSx0ch62iXJXMI5bT8m3Td81LTUblUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.crl rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mG5BZ9azgH9J98JgDWD5wmCacJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:46:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3080 (0xc08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3806 Validity Not Before: Apr 4 18:46:44 2025 GMT Not After : Apr 11 18:46:44 2025 GMT Subject: CN=67f02914-c5d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cf:9b:43:5e:3c:cd:49:a2:e1:fa:df:47:e2: 4b:c6:d5:34:66:0d:9d:0c:cd:fb:53:fc:83:26:e6: 7a:54:92:cd:71:7b:53:44:4c:23:55:11:a4:85:82: 65:20:a6:50:4b:1a:54:5f:73:54:b2:88:c3:7f:a2: 96:1b:20:f6:59:c2:65:e2:00:5b:d7:a9:f6:b6:d2: 16:ef:4f:80:23:8f:de:aa:e5:82:22:f5:0a:0e:f8: 06:70:8c:af:7e:82:49:0d:79:a5:46:e0:6e:f6:af: d2:58:24:f7:3f:e7:be:58:0e:f3:03:3f:1c:0d:21: 3e:71:6e:b1:20:30:e9:bc:cb:2e:31:be:83:90:b0: fd:56:8d:0f:3a:d0:5a:1e:5b:4d:49:a1:0b:48:91: 1e:9b:ae:f9:8c:3a:8d:cf:d7:7a:61:14:0f:25:b8: 56:18:34:eb:79:e4:91:99:f1:d3:8e:24:9e:7d:e9: 2c:82:af:39:63:6c:61:90:e9:ca:4c:86:25:2c:62: 8b:e0:3c:d8:d2:49:ea:6c:d6:d3:17:5d:d2:79:da: 58:42:e3:a8:af:18:4b:8c:b7:08:7c:ff:26:99:d4: 6e:a4:1d:a7:5a:8c:7e:aa:49:60:a6:0a:e4:38:b8: 0e:fb:c1:b4:e5:c7:cb:1c:17:bd:fb:96:48:20:1a: 25:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C0:30:75:AE:16:5F:F0:65:29:11:13:C6:3B:02:D6:1C:92:4E:AA X509v3 Authority Key Identifier: keyid:98:6E:41:67:D6:B3:80:7F:49:F7:C2:60:0D:60:F9:C2:60:9A:70:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mG5BZ9azgH9J98JgDWD5wmCacJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:ab:db:78:0f:57:fe:d4:40:a2:81:25:45:af:2d:74:c9:7f: 33:84:f4:5e:67:8d:18:e4:b9:37:d1:8a:6e:84:f8:67:23:b7: c2:92:9f:ce:c4:6c:01:57:8c:66:c9:ef:05:84:8b:fd:ce:4c: c9:00:d2:0b:d0:e3:1a:a9:bd:51:80:89:b5:e4:03:04:ad:ee: cd:ff:63:12:6f:6b:da:bb:4c:37:5c:f6:9e:fe:09:fe:80:5c: f9:35:e5:72:b0:14:f4:44:11:0a:93:48:41:2e:1b:83:11:28: 7b:43:1b:a4:b2:6b:68:09:5e:03:3c:fd:97:49:2e:54:1e:e6: 29:fe:7b:9b:44:29:c9:79:3f:c3:60:27:3b:22:6d:88:56:c2: 8c:e5:b1:41:32:b1:e3:2c:1b:a7:44:5c:07:35:42:dc:5e:69: 60:94:3a:83:89:52:90:d8:28:d7:a8:0e:00:b8:ff:ea:fc:43: ce:f0:ac:92:00:d9:d7:36:bc:d0:d9:37:d1:9a:e9:2c:8f:e9: 66:c2:76:47:38:6b:1b:61:09:a6:e3:7b:e3:e0:04:06:bf:c2: f2:c7:25:50:37:a2:ec:f8:87:a6:0c:fe:fd:e2:db:40:37:54: 7a:13:32:df:15:da:ee:b8:28:33:df:42:4e:1e:75:56:4f:27: 4e:f3:87:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4MDYxMTAvBgNVBAUTKDk4NkU0MTY3RDZCMzgwN0Y0OUY3QzI2MDBENjBGOUMy NjA5QTcwOTYwHhcNMjUwNDA0MTg0NjQ0WhcNMjUwNDExMTg0NjQ0WjAYMRYwFAYD VQQDEw02N2YwMjkxNC1jNWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtc+bQ148zUmi4frfR+JLxtU0Zg2dDM37U/yDJuZ6VJLNcXtTREwjVRGkhYJl IKZQSxpUX3NUsojDf6KWGyD2WcJl4gBb16n2ttIW70+AI4/equWCIvUKDvgGcIyv foJJDXmlRuBu9q/SWCT3P+e+WA7zAz8cDSE+cW6xIDDpvMsuMb6DkLD9Vo0POtBa HltNSaELSJEem675jDqNz9d6YRQPJbhWGDTreeSRmfHTjiSefeksgq85Y2xhkOnK TIYlLGKL4DzY0knqbNbTF13SedpYQuOorxhLjLcIfP8mmdRupB2nWox+qklgpgrk OLgO+8G05cfLHBe9+5ZIIBol/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnAMHWu Fl/wZSkRE8Y7AtYckk6qMB8GA1UdIwQYMBaAFJhuQWfWs4B/SffCYA1g+cJgmnCW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzgwNi9CNDcyRkUyQTBC N0MxMUVBODA4M0U5MzZDNEY5QUUwMi9tRzVCWjlhemdIOUo5OEpnRFdENXdtQ2Fj SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21HNUJaOWF6Z0g5Sjk4SmdEV0Q1d21DYWNKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzgwNi9CNDcyRkUyQTBCN0MxMUVBODA4M0U5MzZDNEY5QUUwMi9tRzVCWjlhemdI OUo5OEpnRFdENXdtQ2FjSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIq9t4D1f+1ECigSVFry10yX8zhPReZ40Y5Lk30YpuhPhnI7fCkp/O xGwBV4xmye8FhIv9zkzJANIL0OMaqb1RgIm15AMEre7N/2MSb2vau0w3XPae/gn+ gFz5NeVysBT0RBEKk0hBLhuDESh7QxuksmtoCV4DPP2XSS5UHuYp/nubRCnJeT/D YCc7Im2IVsKM5bFBMrHjLBunRFwHNULcXmlglDqDiVKQ2CjXqA4AuP/q/EPO8KyS ANnXNrzQ2TfRmuksj+lmwnZHOGsbYQmm43vj4AQGv8LyxyVQN6Ls+IemDP794ttA N1R6EzLfFdruuCgz30JOHnVWTydO84fD -----END CERTIFICATE-----Generated at Fri Apr 4 22:42:15 2025 by rpki-client