$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft File: F11CAiv1C9bCDzCxxa2MlOCFvE4.mft (raw, json) Hash identifier: iaHJh7dXA4uW57aXo6VR2ecv8EmSOr7DFG2cvsscrhk= Subject key identifier: AD:F2:2D:C2:EC:8F:15:81:93:3C:12:33:E6:02:36:1A:50:64:F8:6E Authority key identifier: 17:5D:42:02:2B:F5:0B:D6:C2:0F:30:B1:C5:AD:8C:94:E0:85:BC:4E Certificate issuer: /CN=A91F89D9/serialNumber=175D42022BF50BD6C20F30B1C5AD8C94E085BC4E Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft Manifest number: 71 Signing time: Wed 09 Apr 2025 05:43:21 +0000 Manifest this update: Wed 09 Apr 2025 05:43:20 +0000 Manifest next update: Wed 16 Apr 2025 05:43:20 +0000 Files and hashes: 1: F11CAiv1C9bCDzCxxa2MlOCFvE4.crl (hash: ExlKpGnnqtfFC2rWTNRZ/JhY28ZfliGMbSyr+SL9cVE=) 2: A18C777C6F5F11EFAF849B28C4F9AE02.roa (hash: fujb24eQPYgPwcrZc8i7YcmXNyel+exUWMY7rJXI438=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.crl rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 05:43:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89D9 Validity Not Before: Apr 9 05:43:20 2025 GMT Not After : Apr 16 05:43:20 2025 GMT Subject: CN=67f608f9-b274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:98:09:9e:23:90:39:ea:b8:59:1a:dc:ec:16: 00:74:8f:d2:aa:60:fc:e8:ad:39:74:98:17:a2:e1: fb:a7:86:92:cc:35:6a:b1:ef:41:f7:8f:fc:87:f8: 0d:c2:f5:5b:1a:c5:f5:cd:67:1d:43:db:4f:4d:75: 50:34:a2:78:8b:a6:84:ff:9b:eb:f1:84:0c:20:81: f8:e8:84:ab:66:97:f9:29:c8:fa:af:0a:87:b6:29: e2:47:f4:12:3a:0f:15:1b:97:9b:8f:d2:a6:bf:19: 52:98:d1:19:e0:c5:fa:d0:8e:c0:35:40:24:cb:82: a0:f8:24:7b:55:55:2a:a0:b0:01:b9:ed:5e:c3:bb: c9:55:02:91:b6:94:0c:ea:ea:52:33:34:53:a7:c4: 40:a5:6a:ad:9b:8b:d8:84:aa:ec:1f:b9:de:f4:1c: 1f:45:42:f2:da:ca:39:79:c2:59:50:94:7c:24:b7: b2:bc:17:65:c1:ff:e0:da:cd:7c:7a:19:a5:5e:48: 6d:52:d5:fc:9a:02:43:dd:59:fc:86:b7:1f:58:50: 06:52:ca:4d:67:0a:35:7c:45:e4:78:4c:d3:a0:1a: 18:93:57:df:31:80:e1:ba:6f:ec:27:54:b7:6b:f4: af:df:14:48:bb:2e:04:1e:69:1b:2d:4b:27:5a:e6: 00:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F2:2D:C2:EC:8F:15:81:93:3C:12:33:E6:02:36:1A:50:64:F8:6E X509v3 Authority Key Identifier: keyid:17:5D:42:02:2B:F5:0B:D6:C2:0F:30:B1:C5:AD:8C:94:E0:85:BC:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:21:d2:ab:57:5c:fc:e2:af:d3:a0:ee:b1:04:4d:e5:8d:23: e4:cf:56:6d:e8:e9:cc:3a:53:6a:ff:f2:08:96:3c:f3:5f:cd: ec:76:93:25:3d:c1:46:84:b0:be:d0:d8:e1:95:af:a4:49:76: ca:8f:30:f7:57:18:e6:32:ed:4c:24:43:ff:e2:db:f1:67:e2: 58:31:dc:7f:dd:29:fe:fd:29:4c:13:90:c3:e4:b4:f5:af:e4: ed:13:23:3d:a9:26:b9:80:17:79:5c:84:25:d4:09:e4:27:64: 52:4e:70:37:fc:72:5d:97:cf:a7:c7:8d:99:62:75:19:7a:73: f1:cb:58:ac:c3:0e:dd:8e:ec:b8:dc:33:94:c4:16:3a:7c:a1: bf:05:c3:9d:2f:73:61:e1:f6:3b:b0:3e:6f:0a:85:a0:22:d8: 83:fe:d9:ed:1f:40:26:10:61:3a:7f:db:e1:f1:a8:59:c8:de: c0:9f:5d:1d:3e:19:e0:62:12:5c:ce:2e:fc:69:79:04:7c:c5: 55:65:24:80:de:43:70:c9:fc:8f:e2:95:8b:e5:7b:d7:17:13: fa:cd:61:11:cf:89:2d:72:67:1e:b7:d1:98:54:62:df:56:6f: 2a:88:e3:50:95:80:c4:68:23:fb:24:88:70:e9:a9:3f:fe:6c: cd:c3:e2:2f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODlEOTExMC8GA1UEBRMoMTc1RDQyMDIyQkY1MEJENkMyMEYzMEIxQzVBRDhDOTRF MDg1QkM0RTAeFw0yNTA0MDkwNTQzMjBaFw0yNTA0MTYwNTQzMjBaMBgxFjAUBgNV BAMTDTY3ZjYwOGY5LWIyNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3mAmeI5A56rhZGtzsFgB0j9KqYPzorTl0mBei4funhpLMNWqx70H3j/yH+A3C 9VsaxfXNZx1D209NdVA0oniLpoT/m+vxhAwggfjohKtml/kpyPqvCoe2KeJH9BI6 DxUbl5uP0qa/GVKY0RngxfrQjsA1QCTLgqD4JHtVVSqgsAG57V7Du8lVApG2lAzq 6lIzNFOnxEClaq2bi9iEquwfud70HB9FQvLayjl5wllQlHwkt7K8F2XB/+DazXx6 GaVeSG1S1fyaAkPdWfyGtx9YUAZSyk1nCjV8ReR4TNOgGhiTV98xgOG6b+wnVLdr 9K/fFEi7LgQeaRstSyda5gDJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrfItwuyP FYGTPBIz5gI2GlBk+G4wHwYDVR0jBBgwFoAUF11CAiv1C9bCDzCxxa2MlOCFvE4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4OUQ5L0VBQkZFQkYyNkY1 QzExRUY4MzVBN0I2NkM0RjlBRTAyL0YxMUNBaXYxQzliQ0R6Q3h4YTJNbE9DRnZF NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRjExQ0FpdjFDOWJDRHpDeHhhMk1sT0NGdkU0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 OUQ5L0VBQkZFQkYyNkY1QzExRUY4MzVBN0I2NkM0RjlBRTAyL0YxMUNBaXYxQzli Q0R6Q3h4YTJNbE9DRnZFNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADch0qtXXPzir9Og7rEETeWNI+TPVm3o6cw6U2r/8giWPPNfzex2kyU9 wUaEsL7Q2OGVr6RJdsqPMPdXGOYy7UwkQ//i2/Fn4lgx3H/dKf79KUwTkMPktPWv 5O0TIz2pJrmAF3lchCXUCeQnZFJOcDf8cl2Xz6fHjZlidRl6c/HLWKzDDt2O7Ljc M5TEFjp8ob8Fw50vc2Hh9juwPm8KhaAi2IP+2e0fQCYQYTp/2+HxqFnI3sCfXR0+ GeBiElzOLvxpeQR8xVVlJIDeQ3DJ/I/ilYvle9cXE/rNYRHPiS1yZx630ZhUYt9W byqI41CVgMRoI/skiHDpqT/+bM3D4i8= -----END CERTIFICATE-----Generated at Thu Apr 10 23:57:47 2025 by rpki-client