$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft File: kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft (raw, json) Hash identifier: lKu7NA970tBhA+Z1PGfIoVNJB3+kwwxgxUNzxUOiwWM= Subject key identifier: 26:FD:0C:D8:B1:F9:8E:15:77:C4:14:9B:54:CD:2F:E2:FD:56:FC:FE Authority key identifier: 92:AC:4F:BE:17:0E:A9:DF:89:F0:C8:31:8C:3C:D4:5F:93:A5:23:34 Certificate issuer: /CN=A91FDCFE/serialNumber=92AC4FBE170EA9DF89F0C8318C3CD45F93A52334 Certificate serial: 03D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft Manifest number: 03C6 Signing time: Sat 29 Mar 2025 00:54:11 +0000 Manifest this update: Sat 29 Mar 2025 00:54:11 +0000 Manifest next update: Sat 05 Apr 2025 00:54:11 +0000 Files and hashes: 1: kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl (hash: M3EOg6EZs4w4TjAB8YgfXwUbshHy0rboUBd77OiF8mk=) 2: A5621F3480EA11EC9B13735BC4F9AE02.roa (hash: 8vDL+87ujwmt0cTUprGHDVqUcQ7iOWe78XinpUQSTr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 976 (0x3d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDCFE Validity Not Before: Mar 29 00:54:11 2025 GMT Not After : Apr 5 00:54:11 2025 GMT Subject: CN=67e744b3-b9f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e6:71:a0:9c:7f:64:3f:e4:4c:39:c2:e6:4e: 38:91:e4:6c:a6:1f:d1:cb:fc:1e:bf:bc:71:83:55: d6:06:f4:1c:7a:01:a7:c4:74:e5:e9:94:4d:f0:1c: 69:f0:3f:a0:49:99:7b:6d:2f:b1:5d:50:a3:d4:5a: 0d:8c:77:ef:d6:e8:20:9c:54:58:7b:9f:6a:2d:48: 85:fc:ee:07:93:cd:47:86:b2:0b:c0:79:46:69:55: 77:0d:17:31:0b:df:c6:f9:8e:a6:8e:6a:d3:db:62: 32:0c:7b:69:63:ff:ad:70:9d:e8:60:41:2c:42:9a: e5:47:0c:0e:39:5b:ef:fa:fe:03:59:58:a5:f6:19: a3:78:fb:e5:5b:0e:39:9e:fe:85:f2:d4:5c:05:27: ec:a0:8b:37:c5:9b:f9:43:56:64:70:04:fd:3f:8a: 6b:ad:9a:a3:8d:e8:00:5b:c2:ed:fc:82:1d:65:30: 51:90:0c:fe:c1:b4:e9:2f:ae:ea:02:2c:08:72:7b: f3:40:2f:cd:ca:c7:a3:4d:99:1a:d4:39:be:16:ba: 4d:af:39:8f:bc:79:1a:05:36:22:85:b2:f6:bf:0a: 1f:93:c3:22:b6:12:c9:6a:bc:cc:5d:a7:a4:03:50: df:d6:16:3d:5a:c0:ba:da:08:91:7b:12:9d:55:28: 97:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:FD:0C:D8:B1:F9:8E:15:77:C4:14:9B:54:CD:2F:E2:FD:56:FC:FE X509v3 Authority Key Identifier: keyid:92:AC:4F:BE:17:0E:A9:DF:89:F0:C8:31:8C:3C:D4:5F:93:A5:23:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:53:8d:81:57:99:1e:d8:f1:13:5e:aa:83:ff:a8:6d:2d:9a: a7:4d:c0:b6:39:86:8f:b5:91:ee:3a:17:32:e7:a0:a9:8f:3d: 02:ad:90:96:51:90:4b:73:27:52:30:3a:b2:32:e6:8f:d4:53: c7:26:de:58:50:93:cb:64:61:6f:f6:c8:0b:41:e2:6f:ec:ea: 63:7c:52:f0:0e:43:3e:a0:dd:5c:69:63:ec:f7:93:3c:e7:1b: c0:d3:fb:3f:32:92:42:e7:1c:43:23:61:0e:c4:21:2e:b3:91: 34:2f:8a:12:b4:a6:f0:7f:d1:6f:a9:52:2c:79:ea:29:19:47: df:52:95:a6:12:49:34:6d:37:ce:95:02:7f:1c:38:8a:e6:33: 94:5e:bd:4f:66:1a:cf:5d:92:5d:f0:f0:51:e5:40:ec:43:b4: 35:27:13:a9:7b:7d:cd:6e:1e:38:2b:61:83:ea:e8:6e:1c:14: 0c:0e:30:38:fb:3f:be:8e:e4:26:c9:d9:2e:54:4f:26:06:0b: 18:c6:9f:7d:38:e8:66:70:98:95:66:03:d1:38:5e:fb:91:4e: 3b:40:11:f7:59:15:09:98:f4:9f:b3:c1:4a:0e:61:55:c1:e3: 23:06:4f:73:ac:f6:fc:ff:d9:d2:d8:61:f7:ff:60:d4:fc:c4: ed:22:30:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDRkUxMTAvBgNVBAUTKDkyQUM0RkJFMTcwRUE5REY4OUYwQzgzMThDM0NENDVG OTNBNTIzMzQwHhcNMjUwMzI5MDA1NDExWhcNMjUwNDA1MDA1NDExWjAYMRYwFAYD VQQDEw02N2U3NDRiMy1iOWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+ZxoJx/ZD/kTDnC5k44keRsph/Ry/wev7xxg1XWBvQcegGnxHTl6ZRN8Bxp 8D+gSZl7bS+xXVCj1FoNjHfv1uggnFRYe59qLUiF/O4Hk81HhrILwHlGaVV3DRcx C9/G+Y6mjmrT22IyDHtpY/+tcJ3oYEEsQprlRwwOOVvv+v4DWVil9hmjePvlWw45 nv6F8tRcBSfsoIs3xZv5Q1ZkcAT9P4prrZqjjegAW8Lt/IIdZTBRkAz+wbTpL67q AiwIcnvzQC/NysejTZka1Dm+FrpNrzmPvHkaBTYihbL2vwofk8MithLJarzMXaek A1Df1hY9WsC62giRexKdVSiXHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCb9DNix +Y4Vd8QUm1TNL+L9Vvz+MB8GA1UdIwQYMBaAFJKsT74XDqnfifDIMYw81F+TpSM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRENGRS85NjUwNUIyNDgw RTQxMUVDQjkyRENCNERDNEY5QUUwMi9rcXhQdmhjT3FkLUo4TWd4akR6VVg1T2xJ elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2txeFB2aGNPcWQtSjhNZ3hqRHpVWDVPbEl6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RENGRS85NjUwNUIyNDgwRTQxMUVDQjkyRENCNERDNEY5QUUwMi9rcXhQdmhjT3Fk LUo4TWd4akR6VVg1T2xJelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRU42BV5ke2PETXqqD/6htLZqnTcC2OYaPtZHuOhcy56Cpjz0CrZCW UZBLcydSMDqyMuaP1FPHJt5YUJPLZGFv9sgLQeJv7OpjfFLwDkM+oN1caWPs95M8 5xvA0/s/MpJC5xxDI2EOxCEus5E0L4oStKbwf9FvqVIseeopGUffUpWmEkk0bTfO lQJ/HDiK5jOUXr1PZhrPXZJd8PBR5UDsQ7Q1JxOpe33Nbh44K2GD6uhuHBQMDjA4 +z++juQmydkuVE8mBgsYxp99OOhmcJiVZgPROF77kU47QBH3WRUJmPSfs8FKDmFV weMjBk9zrPb8/9nS2GH3/2DU/MTtIjAG -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:46 2025 by rpki-client