$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft File: _g28w89QoeDrA9MSluOfuogMGQU.mft (raw, json) Hash identifier: 8dRexf8KRvdOTiZvkgt3tlOBHF1AYKjFW94FbkjvAKM= Subject key identifier: 95:6E:64:EA:81:0F:26:90:CE:81:B2:25:37:05:B3:F1:DF:C2:38:B9 Authority key identifier: FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 Certificate issuer: /CN=A91F7FEA/serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Certificate serial: 0A72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft Manifest number: 0A64 Signing time: Fri 04 Apr 2025 19:49:42 +0000 Manifest this update: Fri 04 Apr 2025 19:49:41 +0000 Manifest next update: Fri 11 Apr 2025 19:49:41 +0000 Files and hashes: 1: _g28w89QoeDrA9MSluOfuogMGQU.crl (hash: yG3tWXW7l4084viOHOLR0so4dvQIsShj1lItVBlrbuA=) 2: AF5AC6B69E3F11EEA6B6CB0DC4F9AE02.roa (hash: aO7ZzsxjyqFcAzfGikfamjQffULd11X020Rl4PUmMgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:49:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2674 (0xa72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7FEA Validity Not Before: Apr 4 19:49:41 2025 GMT Not After : Apr 11 19:49:41 2025 GMT Subject: CN=67f037d5-c337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:84:04:75:9f:ca:37:0e:fe:6a:9d:b7:84:c6: dc:f9:c6:15:b6:b8:19:fa:93:b1:d5:12:85:a9:74: c9:c9:40:84:64:a9:b7:91:68:d8:b2:18:0e:06:03: ff:a2:e3:63:c2:b7:be:47:a2:90:3f:5a:4d:3d:5a: 32:2f:01:4d:64:66:ec:98:c3:59:e9:00:af:13:2b: 7d:f6:07:a3:b8:1b:78:af:0f:66:32:9d:57:2e:6e: 76:4c:f1:93:8a:65:b5:67:31:3f:d0:56:02:b7:b9: 71:ab:b4:2f:02:af:cd:97:8c:33:f9:64:fd:8d:6c: b6:cd:93:70:09:5a:e6:d1:3d:6c:9e:84:27:21:f4: 38:dd:15:2e:c0:eb:34:4a:e2:11:d1:89:ad:36:ec: 62:63:ac:59:a0:a6:1d:00:ae:19:fe:3e:29:cf:77: 95:ea:95:fb:15:43:ff:9d:34:8b:ea:b7:16:4b:d0: 99:66:97:48:1d:df:b4:d5:3f:82:1a:3b:23:9c:4d: 8b:a0:2f:1f:cf:f7:06:ed:fd:45:79:bc:a3:9b:3e: d1:85:92:19:70:d2:ff:59:8c:ed:8a:38:f7:f9:b5: 71:62:a0:7c:84:7b:09:95:dd:54:07:93:6a:16:50: c7:e9:7c:f6:8d:8b:13:8c:49:c2:60:7a:8c:2b:db: 10:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:6E:64:EA:81:0F:26:90:CE:81:B2:25:37:05:B3:F1:DF:C2:38:B9 X509v3 Authority Key Identifier: keyid:FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:fa:a4:c4:25:fb:56:c1:c3:64:83:7b:9f:e5:ec:71:69:80: c0:0e:80:b6:19:ef:f1:58:93:54:75:39:de:4a:30:b1:89:d1: dd:e6:24:a2:2a:6b:af:ce:b0:e4:a5:6f:20:12:e5:34:cf:d0: f1:af:08:57:19:48:dc:39:e7:e7:6a:00:5c:fb:c9:2c:16:56: a1:58:f1:17:48:dd:d8:48:de:c3:f7:44:b0:ac:aa:fd:cb:c8: 33:ad:5c:15:4f:77:90:8c:8e:39:da:ec:f4:3b:a3:83:dd:65: 35:93:7a:e5:62:81:0a:c1:08:25:73:15:4c:e0:f8:25:4b:83: 89:6d:a3:08:24:6d:62:a1:d3:e7:e7:b0:ef:39:f2:e0:5b:13: 01:4c:86:24:36:47:b5:e4:ea:df:33:5c:5e:17:a4:e1:4b:b7: 2e:d7:98:d8:07:83:8d:49:2e:b6:42:71:02:2f:43:80:b3:8e: bd:eb:a0:6a:13:88:63:1d:10:6b:f4:da:58:f7:4e:4d:df:7d: 37:c3:80:bd:1d:84:8f:a6:04:a1:dd:83:e9:9b:62:b5:e4:4e: 56:0e:d6:34:9a:2c:2e:7a:df:61:80:e5:59:1b:17:3e:a6:38: 1b:b9:c7:9e:1e:76:72:75:f9:ba:4b:5e:03:49:28:ac:db:20: e3:6c:73:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdGRUExMTAvBgNVBAUTKEZFMERCQ0MzQ0Y1MEExRTBFQjAzRDMxMjk2RTM5RkJB ODgwQzE5MDUwHhcNMjUwNDA0MTk0OTQxWhcNMjUwNDExMTk0OTQxWjAYMRYwFAYD VQQDEw02N2YwMzdkNS1jMzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4QEdZ/KNw7+ap23hMbc+cYVtrgZ+pOx1RKFqXTJyUCEZKm3kWjYshgOBgP/ ouNjwre+R6KQP1pNPVoyLwFNZGbsmMNZ6QCvEyt99gejuBt4rw9mMp1XLm52TPGT imW1ZzE/0FYCt7lxq7QvAq/Nl4wz+WT9jWy2zZNwCVrm0T1snoQnIfQ43RUuwOs0 SuIR0YmtNuxiY6xZoKYdAK4Z/j4pz3eV6pX7FUP/nTSL6rcWS9CZZpdIHd+01T+C GjsjnE2LoC8fz/cG7f1Febyjmz7RhZIZcNL/WYztijj3+bVxYqB8hHsJld1UB5Nq FlDH6Xz2jYsTjEnCYHqMK9sQnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVuZOqB DyaQzoGyJTcFs/Hfwji5MB8GA1UdIwQYMBaAFP4NvMPPUKHg6wPTEpbjn7qIDBkF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0ZFQS8xRUUzQUVFQzYw NDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9lRHJBOU1TbHVPZnVvZ01H UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19nMjh3ODlRb2VEckE5TVNsdU9mdW9nTUdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0ZFQS8xRUUzQUVFQzYwNDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9l RHJBOU1TbHVPZnVvZ01HUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR+qTEJftWwcNkg3uf5exxaYDADoC2Ge/xWJNUdTneSjCxidHd5iSi KmuvzrDkpW8gEuU0z9DxrwhXGUjcOefnagBc+8ksFlahWPEXSN3YSN7D90SwrKr9 y8gzrVwVT3eQjI452uz0O6OD3WU1k3rlYoEKwQglcxVM4PglS4OJbaMIJG1iodPn 57DvOfLgWxMBTIYkNke15OrfM1xeF6ThS7cu15jYB4ONSS62QnECL0OAs46966Bq E4hjHRBr9NpY905N3303w4C9HYSPpgSh3YPpm2K15E5WDtY0miwuet9hgOVZGxc+ pjgbuceeHnZydfm6S14DSSis2yDjbHOa -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:53 2025 by rpki-client