$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft File: B82dMe1hhir1A-UglCjHyyfqiB8.mft (raw, json) Hash identifier: 2R9Q4DBqwsIThdv8/aJI6wJZK+r5I1cNJWKgqy5a7V8= Subject key identifier: 50:74:0C:15:E2:2D:BD:91:AF:68:BE:53:72:F2:17:A2:78:53:81:A2 Authority key identifier: 07:CD:9D:31:ED:61:86:2A:F5:03:E5:20:94:28:C7:CB:27:EA:88:1F Certificate issuer: /CN=A91FD609/serialNumber=07CD9D31ED61862AF503E5209428C7CB27EA881F Certificate serial: 07D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft Manifest number: 07CC Signing time: Tue 08 Apr 2025 20:52:32 +0000 Manifest this update: Tue 08 Apr 2025 20:52:32 +0000 Manifest next update: Tue 15 Apr 2025 20:52:32 +0000 Files and hashes: 1: B82dMe1hhir1A-UglCjHyyfqiB8.crl (hash: qi3xdKMybptO+NDDzAIE56gZvJV3XOtiBZa98SoOdJQ=) 2: 765DBCFEEC1A11EAA8520072C4F9AE02.roa (hash: LwXV2swiHkwzhmRJHgtxVwl/mp8FDjhnbQvKS2GLsds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.crl rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 20:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2006 (0x7d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD609 Validity Not Before: Apr 8 20:52:32 2025 GMT Not After : Apr 15 20:52:32 2025 GMT Subject: CN=67f58c90-b0a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e6:f3:d1:f8:6a:ce:05:c2:1e:68:ef:25:13: 72:c2:e7:17:ea:fd:fb:3b:34:31:8e:bd:e4:82:33: cd:f3:b4:81:2a:fb:f8:87:3d:d3:42:a2:67:aa:76: 20:2d:8f:78:4c:23:39:e1:c9:6b:4f:54:f1:7a:f4: c4:92:be:cd:4d:8e:f3:fd:36:2d:38:3d:8d:ff:e7: d6:1b:f4:f7:8a:3d:7c:89:10:9d:5d:30:16:34:78: 69:d8:b1:33:40:ea:de:20:5e:07:56:18:c8:9f:88: f9:ab:00:96:28:84:00:fa:0a:d2:05:48:51:ea:be: 92:9b:a2:54:6e:93:e3:28:c8:a5:54:8c:ec:b7:c0: 96:a0:41:6b:34:20:ba:b2:b1:ea:23:c0:a0:54:83: 3b:b3:06:f7:0b:2a:3b:f2:92:5d:44:aa:68:fa:f0: 5d:eb:6e:b6:cd:b6:9f:18:f2:09:b1:a0:6c:26:3f: 1b:59:b7:9b:3d:7e:39:af:d1:44:e0:d1:cb:31:23: 54:b4:ee:8a:a6:66:af:a7:3f:bd:00:d0:a0:fe:d1: 26:6b:fc:08:b8:d2:f1:b0:a7:8d:7b:37:2d:e9:49: 80:7e:5c:4a:3e:e9:ac:ff:6d:81:52:33:60:cf:6a: a7:c4:20:1a:28:1c:5e:98:5d:ba:e7:91:fd:7a:8d: 8c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:74:0C:15:E2:2D:BD:91:AF:68:BE:53:72:F2:17:A2:78:53:81:A2 X509v3 Authority Key Identifier: keyid:07:CD:9D:31:ED:61:86:2A:F5:03:E5:20:94:28:C7:CB:27:EA:88:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:12:f4:2e:a3:4a:32:04:bd:d4:45:c3:df:8e:d2:61:64:ba: bf:f6:d8:f0:55:a9:46:fb:c2:7d:66:cd:1b:52:f8:46:1e:de: e4:ef:d7:5f:d6:4b:f8:29:6d:07:45:f6:32:28:36:dc:38:3b: 0b:94:17:6f:2a:5b:6b:2d:5b:05:25:8d:f8:0d:0b:08:dd:66: 44:20:b6:ff:4b:9f:78:2f:08:2c:0f:10:1e:72:93:5c:84:19: f6:e6:b3:87:99:71:f8:8e:96:01:7c:f4:d3:92:46:2c:33:23: 2f:5d:99:f9:8c:46:4a:79:c6:90:fa:12:c4:27:04:8d:9c:d3: dc:91:5f:38:16:91:37:10:c5:be:e3:d5:da:b2:fc:d7:34:a6: 1c:a6:e0:bb:26:fc:31:3d:ae:26:e9:ae:8e:64:ca:6a:66:af: 38:85:2c:17:06:a8:92:45:59:60:ee:3c:c6:dc:41:e6:bd:ec: c5:45:a5:69:99:98:f0:63:55:a5:90:20:e8:b9:a7:24:7e:7a: f0:9e:92:b0:88:e9:86:2c:3d:82:8a:e5:8a:a1:72:2c:62:08: 86:40:e1:c6:28:fc:b8:9d:13:36:a1:62:41:1b:45:4b:66:56: 4b:29:38:86:4f:f8:49:f3:01:41:ff:87:ae:c9:d5:7a:bd:d5: 3e:b1:e6:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ2MDkxMTAvBgNVBAUTKDA3Q0Q5RDMxRUQ2MTg2MkFGNTAzRTUyMDk0MjhDN0NC MjdFQTg4MUYwHhcNMjUwNDA4MjA1MjMyWhcNMjUwNDE1MjA1MjMyWjAYMRYwFAYD VQQDEw02N2Y1OGM5MC1iMGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ebz0fhqzgXCHmjvJRNywucX6v37OzQxjr3kgjPN87SBKvv4hz3TQqJnqnYg LY94TCM54clrT1TxevTEkr7NTY7z/TYtOD2N/+fWG/T3ij18iRCdXTAWNHhp2LEz QOreIF4HVhjIn4j5qwCWKIQA+grSBUhR6r6Sm6JUbpPjKMilVIzst8CWoEFrNCC6 srHqI8CgVIM7swb3Cyo78pJdRKpo+vBd6262zbafGPIJsaBsJj8bWbebPX45r9FE 4NHLMSNUtO6Kpmavpz+9ANCg/tEma/wIuNLxsKeNezct6UmAflxKPums/22BUjNg z2qnxCAaKBxemF2655H9eo2MJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFB0DBXi Lb2Rr2i+U3LyF6J4U4GiMB8GA1UdIwQYMBaAFAfNnTHtYYYq9QPlIJQox8sn6ogf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDYwOS8wQzYwOUI5Q0VD MTkxMUVBOTI1REZDNkZDNEY5QUUwMi9CODJkTWUxaGhpcjFBLVVnbENqSHl5ZnFp QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I4MmRNZTFoaGlyMUEtVWdsQ2pIeXlmcWlCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDYwOS8wQzYwOUI5Q0VDMTkxMUVBOTI1REZDNkZDNEY5QUUwMi9CODJkTWUxaGhp cjFBLVVnbENqSHl5ZnFpQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxEvQuo0oyBL3URcPfjtJhZLq/9tjwValG+8J9Zs0bUvhGHt7k79df 1kv4KW0HRfYyKDbcODsLlBdvKltrLVsFJY34DQsI3WZEILb/S594LwgsDxAecpNc hBn25rOHmXH4jpYBfPTTkkYsMyMvXZn5jEZKecaQ+hLEJwSNnNPckV84FpE3EMW+ 49XasvzXNKYcpuC7JvwxPa4m6a6OZMpqZq84hSwXBqiSRVlg7jzG3EHmvezFRaVp mZjwY1WlkCDouackfnrwnpKwiOmGLD2CiuWKoXIsYgiGQOHGKPy4nRM2oWJBG0VL ZlZLKTiGT/hJ8wFB/4euydV6vdU+seY3 -----END CERTIFICATE-----Generated at Thu Apr 10 18:40:22 2025 by rpki-client