$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft File: pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft (raw, json) Hash identifier: ek+UBn8S3D+dUk8PMCI+uPNVsWfSQKwIpABdtlS3k+A= Subject key identifier: 1D:79:BB:58:37:E8:BE:DE:5D:39:DE:26:FE:41:E5:9F:5F:32:9E:A6 Authority key identifier: A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC Certificate issuer: /CN=A91F81AD/serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft Manifest number: 0211 Signing time: Tue 15 Apr 2025 01:40:01 +0000 Manifest this update: Tue 15 Apr 2025 01:40:01 +0000 Manifest next update: Tue 22 Apr 2025 01:40:01 +0000 Files and hashes: 1: pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl (hash: 622lysfcDbbILC5HGBQhVo2BvSJLG7Xg6kGN6OgfF3A=) 2: FA957D0A80FA11ED9B35954DC4F9AE02.roa (hash: cB+yZz7NXLEFl+NAyUDxFvEYEWhBfd/lLd6SEh+qscM=) 3: F9F81E3480FA11ED9B35954DC4F9AE02.roa (hash: uF//tcko2WVqVVcNN8K7d2s/1bV6GiNlBkTpEaTcZJA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 01:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F81AD, serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC Validity Not Before: Apr 15 01:40:01 2025 GMT Not After : Apr 22 01:40:01 2025 GMT Subject: CN=67fdb8f1-59e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0e:2a:23:4e:76:c3:3d:66:4b:4a:78:c0:ca: 81:f7:96:e5:a5:87:e9:31:9e:21:72:0c:07:52:16: 9b:2e:94:d4:04:d7:b6:af:46:51:fc:ed:f5:5a:07: b4:4b:ad:64:0c:61:81:1c:ee:2c:de:54:2c:9c:fb: 9c:95:46:83:3d:b3:e7:64:ef:cf:24:4e:26:15:10: c2:7b:75:10:d1:e0:73:f0:09:a0:92:66:13:c6:27: d7:f3:5a:08:62:8e:4c:b8:52:c3:83:88:ca:b6:08: 14:f9:6c:19:80:7d:b9:cb:0f:60:a9:56:db:a6:93: 82:7c:97:89:cf:97:26:28:7b:86:89:36:55:9b:dc: f3:ab:28:5b:4d:53:6f:9a:a8:77:8f:a2:2f:3a:ee: 34:fa:a4:d8:bc:4f:e5:bd:8d:36:c2:2f:51:d8:ab: fd:7f:f2:5a:8c:c2:a2:92:56:94:c4:fb:9e:c1:3f: c0:60:9e:3a:a5:c6:39:89:55:c3:4f:56:7a:82:0a: 54:fc:d7:a7:c4:ce:07:4f:b2:50:29:01:30:ed:51: ff:cb:ea:b7:62:00:c7:b9:e8:84:f4:a1:99:9d:1d: d0:c4:dd:16:e2:6b:05:ad:4e:ae:00:b4:a9:c3:c8: b1:78:98:b0:94:00:3f:66:48:60:84:c5:80:bc:42: 70:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:79:BB:58:37:E8:BE:DE:5D:39:DE:26:FE:41:E5:9F:5F:32:9E:A6 X509v3 Authority Key Identifier: keyid:A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:35:09:61:8c:f6:c0:0d:44:32:c4:d9:af:8e:79:8e:0c:55: e9:59:c4:65:ba:76:eb:0d:c2:7e:cf:52:31:f4:e3:c6:d4:27: d8:d3:08:fd:41:bd:35:71:30:38:31:a5:16:61:1a:84:2b:22: 83:a8:5d:00:a1:fc:8c:85:1a:b1:f4:c0:7c:92:f1:81:34:ba: f8:5f:16:65:5c:9a:6d:82:ca:3c:33:54:e9:e2:9d:8d:f7:b1: e4:3c:c0:e6:1c:3c:af:13:c5:94:9c:bb:d4:b4:e5:d4:43:58: 25:27:c2:87:34:4c:ee:cf:fd:de:2a:71:d4:f6:4d:24:e0:19: 4a:5d:05:c3:94:01:66:e7:d0:f2:cb:77:70:37:36:05:a2:5f: 38:5b:3b:46:27:c8:21:cb:ac:dd:f5:92:16:ec:b5:82:0c:de: a6:c8:dd:a9:6d:d1:8f:9b:88:73:cd:12:d5:06:cf:38:e0:8c: f7:fb:1b:e3:62:b7:f4:13:f3:ad:cd:44:ed:fa:d2:09:41:d6: 3d:1e:fd:42:66:e6:43:80:14:20:8b:57:b8:e0:1a:d0:fe:8f: 08:09:c5:7b:1a:54:65:c8:f9:59:a9:51:5a:fc:25:80:89:4d: ca:ef:1f:fe:b4:57:9c:f2:ff:59:42:23:57:f3:b2:dd:3f:83: 93:d9:86:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxQUQxMTAvBgNVBAUTKEE0Q0QzRTY3RDFCMjI0RjMyNTA0N0U5RjVFNDg0QUNE QzRGNjYzRUMwHhcNMjUwNDE1MDE0MDAxWhcNMjUwNDIyMDE0MDAxWjAYMRYwFAYD VQQDEw02N2ZkYjhmMS01OWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvw4qI052wz1mS0p4wMqB95blpYfpMZ4hcgwHUhabLpTUBNe2r0ZR/O31Wge0 S61kDGGBHO4s3lQsnPuclUaDPbPnZO/PJE4mFRDCe3UQ0eBz8AmgkmYTxifX81oI Yo5MuFLDg4jKtggU+WwZgH25yw9gqVbbppOCfJeJz5cmKHuGiTZVm9zzqyhbTVNv mqh3j6IvOu40+qTYvE/lvY02wi9R2Kv9f/JajMKiklaUxPuewT/AYJ46pcY5iVXD T1Z6ggpU/NenxM4HT7JQKQEw7VH/y+q3YgDHueiE9KGZnR3QxN0W4msFrU6uALSp w8ixeJiwlAA/ZkhghMWAvEJwkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB15u1g3 6L7eXTneJv5B5Z9fMp6mMB8GA1UdIwQYMBaAFKTNPmfRsiTzJQR+n15ISs3E9mPs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODFBRC80Q0NCMDA5MDJD QkUxMUVEOTk4MjRCNENDNEY5QUUwMi9wTTAtWjlHeUpQTWxCSDZmWGtoS3pjVDJZ LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BNMC1aOUd5SlBNbEJINmZYa2hLemNUMlktdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODFBRC80Q0NCMDA5MDJDQkUxMUVEOTk4MjRCNENDNEY5QUUwMi9wTTAtWjlHeUpQ TWxCSDZmWGtoS3pjVDJZLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRNQlhjPbADUQyxNmvjnmODFXpWcRlunbrDcJ+z1Ix9OPG1CfY0wj9 Qb01cTA4MaUWYRqEKyKDqF0AofyMhRqx9MB8kvGBNLr4XxZlXJptgso8M1Tp4p2N 97HkPMDmHDyvE8WUnLvUtOXUQ1glJ8KHNEzuz/3eKnHU9k0k4BlKXQXDlAFm59Dy y3dwNzYFol84WztGJ8ghy6zd9ZIW7LWCDN6myN2pbdGPm4hzzRLVBs844Iz3+xvj Yrf0E/OtzUTt+tIJQdY9Hv1CZuZDgBQgi1e44BrQ/o8ICcV7GlRlyPlZqVFa/CWA iU3K7x/+tFec8v9ZQiNX87LdP4OT2YaG -----END CERTIFICATE-----Generated at Wed Apr 16 17:15:26 2025 by rpki-client