$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft File: 5CANRK2dbstocvZTqVhD-yfYR6Q.mft (raw, json) Hash identifier: 3szVvJThxCadV5oI5ewg9qJcj8XhG8cYeYgpZ07ftvA= Subject key identifier: 10:03:F2:8E:12:55:77:73:6C:26:64:76:CE:6A:79:EB:55:57:49:F2 Authority key identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 Certificate issuer: /CN=A91C0D37/serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft Manifest number: 011A Signing time: Thu 13 Mar 2025 03:14:41 +0000 Manifest this update: Thu 13 Mar 2025 03:14:40 +0000 Manifest next update: Thu 20 Mar 2025 03:14:40 +0000 Files and hashes: 1: 5CANRK2dbstocvZTqVhD-yfYR6Q.crl (hash: 9TB81UN++rNRGFLRGVKuBgrRw/wV1oE1tbTrOYAqDO4=) 2: 0099AE56536911EE8594503BC4F9AE02.roa (hash: AOPC9WbNcZUf3rw4IBXy2gFnwozs8jTrPTS3eOn6dJw=) 3: C7C45DD643F611EF84151D6FC4F9AE02.roa (hash: SfS9ZnMJ4K7BL+m5tPbXXtGeAg5+tE+/js3vJ/6kex8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 03:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37 Validity Not Before: Mar 13 03:14:40 2025 GMT Not After : Mar 20 03:14:40 2025 GMT Subject: CN=67d24da0-6c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fc:31:8f:4b:44:16:14:78:d0:cb:0d:d9:97: 69:84:05:5d:c9:ab:fb:f3:a3:89:09:b2:27:17:bc: bb:dd:a7:b2:73:06:1d:f9:9f:a3:c7:2d:d5:cf:08: d4:0f:81:6b:25:c9:93:26:6b:36:29:6f:c8:82:f6: 7c:c9:11:27:cf:9e:9c:85:e2:c7:d7:68:c8:f8:bb: 3a:80:83:dd:f1:f1:93:22:6a:03:d2:76:59:24:32: 73:4c:7e:c0:1d:cc:f7:2b:13:f2:86:88:6c:f5:36: a1:b3:96:7f:54:fa:e0:b9:b0:ed:05:73:be:a1:a1: 5b:ad:58:e2:77:16:32:1b:d8:27:e3:44:76:22:25: 6c:78:47:04:64:87:a5:53:ec:85:c7:dd:02:3e:e6: b1:fc:5d:aa:7e:22:29:95:49:b2:27:94:fc:44:62: da:43:50:bb:86:c7:a3:ef:ad:7a:63:d9:6d:6e:a1: 2b:2d:39:05:85:62:9d:7f:75:0d:78:9c:23:98:62: b5:42:15:57:ec:66:04:ed:f8:9f:f2:fe:f6:93:4c: e6:71:fe:d0:a9:fe:58:20:37:03:4a:c9:f7:f0:9e: 3e:f8:01:d7:26:ab:dd:13:8c:fa:38:45:e8:19:9e: 3e:19:c0:52:ae:c5:cc:ad:c9:f2:29:6b:b0:a8:08: b1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:03:F2:8E:12:55:77:73:6C:26:64:76:CE:6A:79:EB:55:57:49:F2 X509v3 Authority Key Identifier: keyid:E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:c2:3e:cd:64:4a:d0:55:34:a2:39:a5:75:a1:a9:d7:a7:a4: a4:9f:be:d0:1f:7a:85:1c:b3:81:7b:0d:85:6f:82:53:35:d2: 50:12:50:74:f6:1f:55:72:36:37:2d:7a:d6:ae:ac:bc:3b:e5: 83:be:d4:c8:39:2a:50:97:3f:9d:30:cc:96:e6:f0:c5:65:db: 94:a1:51:c9:cb:20:74:64:e9:f4:cd:6c:c2:06:d4:cf:9c:9c: 5f:14:b9:54:00:f0:04:c1:c8:58:b9:90:26:20:60:c5:28:9b: ce:fe:eb:e4:14:a0:e6:7b:ed:b2:47:cf:ba:88:77:53:0c:86: 81:72:c9:fc:84:b3:0e:99:cb:b0:ea:cb:a3:f2:e5:6f:36:b3: 39:0d:36:8d:ec:6a:b8:62:3c:7d:98:f3:b0:b7:bd:13:28:cd: b7:8d:1c:4d:04:bf:07:db:78:9e:b1:4d:cc:9d:3f:bd:92:44: 51:95:56:13:c1:87:9f:93:88:22:86:33:98:dd:7c:18:9b:42: d2:55:76:96:18:70:f1:6c:73:ab:d1:66:e0:5c:6b:86:7c:f9: b5:06:b9:8b:23:f5:52:b9:eb:7f:5e:af:2c:ad:ea:1b:29:96: bc:39:3f:b5:41:dd:9e:5e:31:15:31:1e:55:5a:11:c8:ef:7c: 4b:cb:e3:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKEU0MjAwRDQ0QUQ5RDZFQ0I2ODcyRjY1M0E5NTg0M0ZC MjdEODQ3QTQwHhcNMjUwMzEzMDMxNDQwWhcNMjUwMzIwMDMxNDQwWjAYMRYwFAYD VQQDEw02N2QyNGRhMC02YzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/wxj0tEFhR40MsN2ZdphAVdyav786OJCbInF7y73aeycwYd+Z+jxy3VzwjU D4FrJcmTJms2KW/IgvZ8yREnz56cheLH12jI+Ls6gIPd8fGTImoD0nZZJDJzTH7A Hcz3KxPyhohs9Tahs5Z/VPrgubDtBXO+oaFbrVjidxYyG9gn40R2IiVseEcEZIel U+yFx90CPuax/F2qfiIplUmyJ5T8RGLaQ1C7hsej7616Y9ltbqErLTkFhWKdf3UN eJwjmGK1QhVX7GYE7fif8v72k0zmcf7Qqf5YIDcDSsn38J4++AHXJqvdE4z6OEXo GZ4+GcBSrsXMrcnyKWuwqAixVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBAD8o4S VXdzbCZkds5qeetVV0nyMB8GA1UdIwQYMBaAFOQgDUStnW7LaHL2U6lYQ/sn2Eek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wNUVFQ0Q4NjUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJzdG9jdlpUcVZoRC15ZllS NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVDQU5SSzJkYnN0b2N2WlRxVmhELXlmWVI2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wNUVFQ0Q4NjUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJz dG9jdlpUcVZoRC15ZllSNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5wj7NZErQVTSiOaV1oanXp6Skn77QH3qFHLOBew2Fb4JTNdJQElB0 9h9VcjY3LXrWrqy8O+WDvtTIOSpQlz+dMMyW5vDFZduUoVHJyyB0ZOn0zWzCBtTP nJxfFLlUAPAEwchYuZAmIGDFKJvO/uvkFKDme+2yR8+6iHdTDIaBcsn8hLMOmcuw 6suj8uVvNrM5DTaN7Gq4Yjx9mPOwt70TKM23jRxNBL8H23iesU3MnT+9kkRRlVYT wYefk4gihjOY3XwYm0LSVXaWGHDxbHOr0WbgXGuGfPm1BrmLI/VSuet/Xq8sreob KZa8OT+1Qd2eXjEVMR5VWhHI73xLy+Pg -----END CERTIFICATE-----Generated at Thu Mar 13 21:30:59 2025 by rpki-client