$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft File: tj39aGzgqQB25PX_QoaF9j-wjt0.mft (raw, json) Hash identifier: TxFplfd5PrcLrwvWdhuQGsIbTU4hRLt14aaljIHzLHs= Subject key identifier: 7D:26:CF:F4:A9:30:A4:A1:F9:C8:4A:53:3F:76:E8:EC:E3:1A:20:AE Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft Manifest number: 63 Signing time: Mon 07 Apr 2025 05:58:56 +0000 Manifest this update: Mon 07 Apr 2025 05:58:56 +0000 Manifest next update: Mon 14 Apr 2025 05:58:56 +0000 Files and hashes: 1: tj39aGzgqQB25PX_QoaF9j-wjt0.crl (hash: 1xKjU7avmKZmTasrTcTmjlbdlscX35FKy1a8DrnYKdU=) 2: 5AF61D0CEDD811EF8D4FD882C4F9AE02.roa (hash: Z3slCZDCkUSw/0F4QpW19+Hh7dYabhcL9K/vcPHYUaA=) 3: 1FD9809A92A911EFBE53776BC4F9AE02.roa (hash: cDCnZ6S5cO6eBk1U2D1sq10sR7mDNYW0+AjbicEv2TY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 05:58:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3B4C Validity Not Before: Apr 7 05:58:56 2025 GMT Not After : Apr 14 05:58:56 2025 GMT Subject: CN=67f369a0-4b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bd:07:80:b5:cc:d3:b9:95:b5:10:12:56:32: 46:a9:19:79:71:d5:f1:3b:01:96:a7:b9:c3:32:32: 4d:30:92:9a:ad:83:d6:ae:27:5d:26:51:9b:e8:62: 1b:90:3e:84:f8:10:66:80:b1:25:a7:80:79:95:20: 59:63:99:8f:52:23:5c:68:29:87:6c:42:e9:1d:60: d2:b2:34:b1:3c:99:dc:7a:bf:8c:c4:c5:d0:37:c3: ce:e9:d2:38:9a:e9:e6:0e:23:12:9c:e1:28:0a:af: 6a:ad:0c:d0:a7:01:85:f2:14:15:8c:9a:bd:2d:5b: 06:c9:7b:8a:12:02:68:64:4f:3a:30:5b:94:18:09: 8e:88:10:e5:79:74:b7:0f:58:dd:d7:12:76:1a:1a: 1c:63:89:3e:16:ba:16:b8:de:0e:2c:b8:5c:e5:22: c8:ff:d0:05:f2:e9:c9:ae:25:c6:f7:8e:68:13:b6: e0:a9:64:13:2f:76:32:12:d7:6b:ac:ae:9b:1f:3c: e8:dc:a4:68:9a:2a:32:68:b2:ae:ec:87:2f:de:09: 20:c2:16:6f:ae:2b:72:ab:f6:dc:36:83:ba:cb:a3: 24:d0:d5:68:df:57:5a:1b:84:80:53:f1:dc:8c:74: 0b:33:bd:25:dc:7c:47:b1:26:76:6f:52:1f:4e:0f: 03:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:26:CF:F4:A9:30:A4:A1:F9:C8:4A:53:3F:76:E8:EC:E3:1A:20:AE X509v3 Authority Key Identifier: keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:30:29:75:0e:d6:16:02:c3:34:f9:bb:ed:8c:d2:6c:5a:e8: 2f:f4:04:10:21:35:41:35:28:b7:0a:bd:7c:cf:08:e1:f0:a6: dc:64:0a:b0:95:6b:fc:8d:49:80:26:89:60:38:85:33:e0:2f: 74:00:3e:a1:62:ef:ef:63:a8:b9:bb:33:ff:c8:b0:33:26:3b: c2:38:00:e7:12:82:46:3f:92:c4:f0:6e:53:6d:0e:6a:cc:ea: f7:48:18:81:bb:ee:48:a7:f1:7b:8e:fe:9a:40:63:1c:0d:73: b1:f6:e3:3b:dc:1f:0e:ad:7b:31:99:86:e1:00:cc:76:c7:8d: cb:d7:b4:df:dd:93:aa:13:e8:4d:55:b7:7c:38:1e:a4:6d:c9: c2:57:34:a0:81:40:05:1a:ee:20:1b:4c:6d:e3:58:4c:37:59: b1:be:7d:7c:0a:24:1d:f5:ef:e8:3f:16:0a:1b:bc:74:1d:e1: 14:ca:30:32:b6:e5:a7:27:3c:41:4f:d3:9e:08:5c:aa:2c:b5: 0e:76:f1:b8:61:09:14:f6:d6:48:28:60:3f:ee:57:ee:a5:c0: ce:89:09:6e:d5:a5:ea:24:2c:5f:b3:31:6c:29:ef:b5:55:de: 60:63:59:3b:22:29:9b:3d:ca:0a:ae:cb:d4:41:6d:68:ff:e4: 54:6b:29:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC M0I0QzExMC8GA1UEBRMoQjYzREZENjg2Q0UwQTkwMDc2RTRGNUZGNDI4Njg1RjYz RkIwOEVERDAeFw0yNTA0MDcwNTU4NTZaFw0yNTA0MTQwNTU4NTZaMBgxFjAUBgNV BAMTDTY3ZjM2OWEwLTRiOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKvQeAtczTuZW1EBJWMkapGXlx1fE7AZanucMyMk0wkpqtg9auJ10mUZvoYhuQ PoT4EGaAsSWngHmVIFljmY9SI1xoKYdsQukdYNKyNLE8mdx6v4zExdA3w87p0jia 6eYOIxKc4SgKr2qtDNCnAYXyFBWMmr0tWwbJe4oSAmhkTzowW5QYCY6IEOV5dLcP WN3XEnYaGhxjiT4Wuha43g4suFzlIsj/0AXy6cmuJcb3jmgTtuCpZBMvdjIS12us rpsfPOjcpGiaKjJosq7shy/eCSDCFm+uK3Kr9tw2g7rLoyTQ1WjfV1obhIBT8dyM dAszvSXcfEexJnZvUh9ODwPVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfSbP9Kkw pKH5yEpTP3bo7OMaIK4wHwYDVR0jBBgwFoAUtj39aGzgqQB25PX/QoaF9j+wjt0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzQjRDL0RDOURFMjhFOEM1 MDExRUZBMDY3QzgxNUM0RjlBRTAyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdGozOWFHemdxUUIyNVBYX1FvYUY5ai13anQwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz QjRDL0RDOURFMjhFOEM1MDExRUZBMDY3QzgxNUM0RjlBRTAyL3RqMzlhR3pncVFC MjVQWF9Rb2FGOWotd2p0MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHcwKXUO1hYCwzT5u+2M0mxa6C/0BBAhNUE1KLcKvXzPCOHwptxkCrCV a/yNSYAmiWA4hTPgL3QAPqFi7+9jqLm7M//IsDMmO8I4AOcSgkY/ksTwblNtDmrM 6vdIGIG77kin8XuO/ppAYxwNc7H24zvcHw6tezGZhuEAzHbHjcvXtN/dk6oT6E1V t3w4HqRtycJXNKCBQAUa7iAbTG3jWEw3WbG+fXwKJB317+g/FgobvHQd4RTKMDK2 5acnPEFP054IXKostQ528bhhCRT21kgoYD/uV+6lwM6JCW7VpeokLF+zMWwp77VV 3mBjWTsiKZs9ygquy9RBbWj/5FRrKXc= -----END CERTIFICATE-----Generated at Mon Apr 7 21:08:42 2025 by rpki-client