$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft File: rI34tAewexNnm3HFASus3eJQHnE.mft (raw, json) Hash identifier: tn0A4JKuN6kPkvJwNogHLOe7bZx2hqItJnBStIYMCmE= Subject key identifier: 0B:B5:E2:37:AC:17:97:2C:4C:F8:12:42:04:53:84:A9:4E:4B:12:A4 Authority key identifier: AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71 Certificate issuer: /CN=A91FC43D/serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71 Certificate serial: 228B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft Manifest number: 227D Signing time: Fri 04 Apr 2025 15:55:06 +0000 Manifest this update: Fri 04 Apr 2025 15:55:06 +0000 Manifest next update: Fri 11 Apr 2025 15:55:06 +0000 Files and hashes: 1: rI34tAewexNnm3HFASus3eJQHnE.crl (hash: 1aCSDbO21KFooK/IUyAXCK+YhLVQpJ+g+onqajHS14U=) 2: 2D55F42CB0F611E5B464E359C4F9AE02.roa (hash: 8mIOCO6QpDE7EtPouAHKOU6jLmPWkYnpnE1kJgri2NI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8843 (0x228b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC43D Validity Not Before: Apr 4 15:55:06 2025 GMT Not After : Apr 11 15:55:06 2025 GMT Subject: CN=67f000da-4b37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:02:f3:ce:ac:99:66:21:75:a8:12:9e:0a:00: 40:9a:af:4b:e5:6f:70:74:1e:61:9a:79:79:ef:28: bb:4f:ab:e4:ef:71:f0:50:da:42:a4:09:6d:19:8f: c0:b9:bd:fb:02:41:12:7f:35:bd:5d:26:d6:59:55: a3:35:d9:6d:4b:0f:c6:26:93:8a:2f:50:3f:08:fc: 12:1b:59:97:dd:9e:af:1b:e0:7d:99:e0:56:bf:f1: bc:5d:61:0e:bb:26:7d:b6:91:5c:0f:4f:ef:69:04: d3:3e:6b:37:dd:20:aa:c7:07:1d:ee:90:0e:67:26: 79:42:a7:02:c9:bd:49:fc:a5:ae:33:d6:ca:58:8f: 19:33:16:4b:98:ab:65:d5:33:4e:b9:cf:e2:6c:3f: ec:62:04:03:d8:e8:d5:ef:fb:46:0d:32:70:6c:93: b7:67:e5:ae:a2:6f:d8:b4:ab:6d:12:9b:8b:a2:ce: dd:30:ba:e4:a5:39:5e:93:d0:bf:c9:e9:d9:2e:54: f7:72:b1:ff:9b:9e:78:7f:0e:50:25:14:16:bc:26: 9b:2b:63:93:fa:82:53:c1:c9:cc:10:df:3a:aa:5e: 76:c0:0a:30:bc:e5:98:8a:b8:ad:39:16:fc:40:16: 6c:c5:29:a4:72:f9:15:0d:d3:9b:1b:88:ef:0c:07: 68:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B5:E2:37:AC:17:97:2C:4C:F8:12:42:04:53:84:A9:4E:4B:12:A4 X509v3 Authority Key Identifier: keyid:AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:8a:ec:36:11:c5:cb:cf:fa:19:70:56:37:46:ae:db:1e:78: 3c:d0:10:fd:7e:12:7c:45:0c:c2:ee:01:01:f3:56:86:f6:f9: ad:f6:f6:b9:1d:ac:f1:6d:a8:b7:d2:7a:41:57:4b:62:89:20: ba:29:cf:d2:34:a4:ce:39:32:aa:8b:2f:15:31:0d:e4:a0:92: 10:f8:cf:91:f0:b5:71:27:cf:3f:e9:3b:d2:76:79:6e:3b:2a: 39:2e:5a:07:dc:40:af:bb:7e:81:d1:11:d9:de:38:11:a7:c1: ae:f9:a3:21:61:b9:d5:b7:d8:0d:76:65:c7:ff:b3:0b:d1:01: b3:5d:fc:99:35:34:77:62:4a:83:f7:4d:a1:a8:01:05:c7:55: 48:92:33:6f:97:90:9f:3b:86:f8:1e:2e:1b:4b:a3:5c:ca:06: 0e:fc:c3:9c:5d:fa:e8:b9:4a:71:4f:7c:5b:44:2b:c7:67:f2: 62:b1:43:34:b5:36:c4:f7:a5:c5:29:f7:c7:b4:7b:c7:98:a5: f1:fc:48:1b:16:21:c1:25:13:e7:ea:f9:e8:61:30:33:33:21: b8:7f:8c:e4:01:18:d3:94:a6:6d:4a:3b:d3:93:93:b9:a3:81: 6f:b0:5c:45:6a:23:1d:44:56:be:5c:e9:46:bb:3b:f9:2e:23: 5d:50:da:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM0M0QxMTAvBgNVBAUTKEFDOERGOEI0MDdCMDdCMTM2NzlCNzFDNTAxMkJBQ0RE RTI1MDFFNzEwHhcNMjUwNDA0MTU1NTA2WhcNMjUwNDExMTU1NTA2WjAYMRYwFAYD VQQDEw02N2YwMDBkYS00YjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwLzzqyZZiF1qBKeCgBAmq9L5W9wdB5hmnl57yi7T6vk73HwUNpCpAltGY/A ub37AkESfzW9XSbWWVWjNdltSw/GJpOKL1A/CPwSG1mX3Z6vG+B9meBWv/G8XWEO uyZ9tpFcD0/vaQTTPms33SCqxwcd7pAOZyZ5QqcCyb1J/KWuM9bKWI8ZMxZLmKtl 1TNOuc/ibD/sYgQD2OjV7/tGDTJwbJO3Z+Wuom/YtKttEpuLos7dMLrkpTlek9C/ yenZLlT3crH/m554fw5QJRQWvCabK2OT+oJTwcnMEN86ql52wAowvOWYiritORb8 QBZsxSmkcvkVDdObG4jvDAdoHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAu14jes F5csTPgSQgRThKlOSxKkMB8GA1UdIwQYMBaAFKyN+LQHsHsTZ5txxQErrN3iUB5x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzQzRC9FREIyOEU3RUE0 ODAxMUU1ODMzNzg4ODZDNEY5QUUwMi9ySTM0dEFld2V4Tm5tM0hGQVN1czNlSlFI bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JJMzR0QWV3ZXhObm0zSEZBU3VzM2VKUUhuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzQzRC9FREIyOEU3RUE0ODAxMUU1ODMzNzg4ODZDNEY5QUUwMi9ySTM0dEFld2V4 Tm5tM0hGQVN1czNlSlFIbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWiuw2EcXLz/oZcFY3Rq7bHng80BD9fhJ8RQzC7gEB81aG9vmt9va5 Hazxbai30npBV0tiiSC6Kc/SNKTOOTKqiy8VMQ3koJIQ+M+R8LVxJ88/6TvSdnlu Oyo5LloH3ECvu36B0RHZ3jgRp8Gu+aMhYbnVt9gNdmXH/7ML0QGzXfyZNTR3YkqD 902hqAEFx1VIkjNvl5CfO4b4Hi4bS6NcygYO/MOcXfrouUpxT3xbRCvHZ/JisUM0 tTbE96XFKffHtHvHmKXx/EgbFiHBJRPn6vnoYTAzMyG4f4zkARjTlKZtSjvTk5O5 o4FvsFxFaiMdRFa+XOlGuzv5LiNdUNp2 -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:55 2025 by rpki-client