$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft File: E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft (raw, json) Hash identifier: PsmCQdlgVTJp4r4yBSll+xTz0jNG4J3ywpfJ2p0gZ4o= Subject key identifier: B1:9A:4B:3C:92:BC:44:9F:5A:6A:A4:13:10:AE:DD:75:43:D9:88:FD Authority key identifier: 13:B2:7F:D4:62:48:F4:A7:33:D9:24:65:1C:94:0C:B7:F1:A3:06:09 Certificate issuer: /CN=A91FFEDB/serialNumber=13B27FD46248F4A733D924651C940CB7F1A30609 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft Manifest number: 01C8 Signing time: Sat 29 Mar 2025 02:30:26 +0000 Manifest this update: Sat 29 Mar 2025 02:30:26 +0000 Manifest next update: Sat 05 Apr 2025 02:30:26 +0000 Files and hashes: 1: E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl (hash: kI4VyVL5DUNxB9EvC0HHFFrrbDGNNdHuLloqkE2kzeQ=) 2: 26BE1334558F11EDB3A5ED4FC4F9AE02.roa (hash: SUpV5MPTH/BMBi71c7spbVUHkBTzCZVpxBmfHqDrVmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFEDB Validity Not Before: Mar 29 02:30:26 2025 GMT Not After : Apr 5 02:30:26 2025 GMT Subject: CN=67e75b42-f5e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:8b:45:8b:3c:f8:e8:b5:e4:bc:53:ab:b8:42: c7:d2:a2:2c:be:f0:49:de:3d:90:7b:2d:d6:ca:19: 7c:76:e2:a8:7f:82:f2:5f:44:4b:31:44:83:6d:55: 75:b6:c3:a5:78:a0:8d:8b:1d:29:b0:b9:1e:a7:94: c5:dc:dd:45:3b:b0:b0:73:15:61:cf:5b:d9:3a:e3: e8:8b:36:da:29:92:48:cc:df:c7:f6:ef:6c:d1:38: 4d:cd:42:8d:5b:a1:00:ef:ea:89:b9:80:2e:ad:b2: 0b:0a:5b:4b:5d:b1:a8:b8:60:c5:ad:35:86:7c:98: 55:f7:0a:56:ab:fc:cd:41:f0:f2:1e:cc:5d:5b:ce: 87:20:f0:1e:22:19:7f:6c:9a:e8:b7:0e:56:9b:32: 55:18:3b:3b:57:4a:a3:c4:51:c3:b7:d8:bd:aa:57: 1e:11:8f:c3:ae:a6:bf:27:8b:a7:9f:93:3d:4b:e1: 56:87:ca:6f:a3:80:2b:a0:63:ef:17:59:1e:8b:04: 63:0d:a8:96:08:0f:77:86:ad:0c:39:35:1a:54:a1: 9f:50:59:77:08:74:ea:dc:58:87:e5:d9:5c:23:25: 26:e8:d8:3e:c9:67:38:13:fe:da:dc:b8:6b:c0:0d: 9b:09:ff:1a:34:de:48:ee:9a:88:91:cd:7c:ee:b6: ef:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9A:4B:3C:92:BC:44:9F:5A:6A:A4:13:10:AE:DD:75:43:D9:88:FD X509v3 Authority Key Identifier: keyid:13:B2:7F:D4:62:48:F4:A7:33:D9:24:65:1C:94:0C:B7:F1:A3:06:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:67:47:fd:09:6c:eb:ba:ed:9e:49:5e:26:8a:6a:39:42:bd: b5:5a:6f:99:3a:fe:a9:58:e1:6c:71:5f:40:c6:2f:9a:da:79: 56:31:5f:15:d9:76:9d:88:59:32:28:96:e2:03:26:ad:9f:1c: d1:83:ae:56:1f:c4:a6:d5:a6:e3:9c:27:b3:2b:4d:b6:5c:59: eb:e3:06:33:27:7a:bf:bd:83:41:93:40:81:37:5f:c2:f9:e1: 3c:71:0a:5b:46:d6:2b:87:48:fc:54:36:43:6b:77:b3:f8:f1: b3:b2:62:98:5c:fc:85:46:99:4f:7a:ff:cc:19:82:6a:33:ed: f5:fa:24:d4:8f:ad:cb:76:dd:d9:32:a1:79:b2:0f:63:11:72: ff:42:c6:0b:b8:0e:39:5d:ef:67:33:74:ac:b2:81:6d:7e:be: 0d:3a:0c:ef:73:f7:73:f0:79:25:2d:60:8e:66:da:79:0e:ac: f9:e6:be:5f:01:76:19:49:e6:45:95:64:de:83:61:34:aa:84: 8b:0f:83:dc:91:0d:f1:a7:43:6e:0a:62:18:80:03:22:12:81: a4:5f:ca:65:80:d9:32:90:cf:65:9c:a4:53:d3:c7:79:0e:a5: da:07:7f:00:d7:bf:8b:2d:36:d8:15:03:34:6c:14:c9:bc:6d: fd:ff:aa:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZFREIxMTAvBgNVBAUTKDEzQjI3RkQ0NjI0OEY0QTczM0Q5MjQ2NTFDOTQwQ0I3 RjFBMzA2MDkwHhcNMjUwMzI5MDIzMDI2WhcNMjUwNDA1MDIzMDI2WjAYMRYwFAYD VQQDEw02N2U3NWI0Mi1mNWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA84tFizz46LXkvFOruELH0qIsvvBJ3j2Qey3Wyhl8duKof4LyX0RLMUSDbVV1 tsOleKCNix0psLkep5TF3N1FO7CwcxVhz1vZOuPoizbaKZJIzN/H9u9s0ThNzUKN W6EA7+qJuYAurbILCltLXbGouGDFrTWGfJhV9wpWq/zNQfDyHsxdW86HIPAeIhl/ bJrotw5WmzJVGDs7V0qjxFHDt9i9qlceEY/Drqa/J4unn5M9S+FWh8pvo4AroGPv F1keiwRjDaiWCA93hq0MOTUaVKGfUFl3CHTq3FiH5dlcIyUm6Ng+yWc4E/7a3Lhr wA2bCf8aNN5I7pqIkc187rbvMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGaSzyS vESfWmqkExCu3XVD2Yj9MB8GA1UdIwQYMBaAFBOyf9RiSPSnM9kkZRyUDLfxowYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkVEQi8zRUY3RTlCQzU1 MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9FN0pfMUdKSTlLY3oyU1JsSEpRTXRfR2pC Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U3Sl8xR0pJOUtjejJTUmxISlFNdF9HakJnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkVEQi8zRUY3RTlCQzU1MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9FN0pfMUdKSTlL Y3oyU1JsSEpRTXRfR2pCZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8Z0f9CWzruu2eSV4mimo5Qr21Wm+ZOv6pWOFscV9Axi+a2nlWMV8V 2XadiFkyKJbiAyatnxzRg65WH8Sm1abjnCezK022XFnr4wYzJ3q/vYNBk0CBN1/C +eE8cQpbRtYrh0j8VDZDa3ez+PGzsmKYXPyFRplPev/MGYJqM+31+iTUj63Ldt3Z MqF5sg9jEXL/QsYLuA45Xe9nM3SssoFtfr4NOgzvc/dz8HklLWCOZtp5Dqz55r5f AXYZSeZFlWTeg2E0qoSLD4PckQ3xp0NuCmIYgAMiEoGkX8plgNkykM9lnKRT08d5 DqXaB38A17+LLTbYFQM0bBTJvG39/6r7 -----END CERTIFICATE-----Generated at Fri Apr 4 22:06:27 2025 by rpki-client