$ rpki-client -vvf rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft File: PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft (raw, json) Hash identifier: gXKo305o5ZUkGDYB0B3h52gp5N/T8rD8JpSCxKjl6Bg= Subject key identifier: 8B:8C:46:C3:1E:90:AA:97:7B:70:32:1F:32:6B:C5:C7:19:4C:30:F5 Authority key identifier: 3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF Certificate issuer: /CN=A91C278B/serialNumber=3C433B64E64C46DFD58E63C115284485815231FF Certificate serial: 0507 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft Manifest number: 04F7 Signing time: Fri 04 Apr 2025 23:49:15 +0000 Manifest this update: Fri 04 Apr 2025 23:49:14 +0000 Manifest next update: Fri 11 Apr 2025 23:49:14 +0000 Files and hashes: 1: PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl (hash: ODO/WRba2HNyFC8JNHuDR52A7/8U54wbzQyOhe/OOmM=) 2: 9D752204479111ECA77ED34DC4F9AE02.roa (hash: XDKnImKrROyw/ip89561zvYG5bmwAM7xctdHrkfLbGA=) 3: 9BB673AA479111ECA77ED34DC4F9AE02.roa (hash: /DuM5c/5hK0oho9BwTuJNF7dRpHoa2sPJXkyJddg5oQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1287 (0x507) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C278B Validity Not Before: Apr 4 23:49:14 2025 GMT Not After : Apr 11 23:49:14 2025 GMT Subject: CN=67f06ffb-f4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:9f:21:06:ce:16:0b:8f:c7:85:58:72:27:b1: 52:e5:f1:ab:57:55:7b:a4:51:3d:e2:2a:75:00:d5: fe:36:7b:22:5d:aa:23:b7:c7:fd:94:ad:d2:d4:ef: 03:38:78:34:e8:e2:96:03:cd:0f:bf:e7:34:59:ed: 7a:6c:32:1f:92:28:c5:db:4a:68:a8:09:64:0c:fc: 19:d5:7f:a6:a8:d9:86:9f:1e:05:99:9d:97:7b:9a: 13:74:bc:bd:0f:2e:cd:3b:ce:91:31:77:3c:9e:f1: 65:3e:94:22:83:10:75:a6:cb:33:cf:e2:17:f6:48: 4c:99:7e:44:2e:37:ac:05:92:27:9f:1d:69:3b:c7: 9c:e6:23:1e:c3:84:69:ff:5a:fb:0b:b6:87:4a:c1: df:8e:cb:78:ee:35:0d:85:29:ad:00:bd:48:2a:de: 96:c4:d2:8f:cb:be:29:16:50:99:0a:71:69:33:eb: 1b:45:4b:a6:2a:1f:ad:a6:99:ff:2b:a5:c2:9a:6a: 9a:bd:21:03:ab:d3:3f:60:b5:3b:1b:a3:36:af:a8: 36:1c:b0:a4:a2:26:fe:f0:5a:3f:31:eb:08:54:c4: 02:f7:2d:8f:3f:0d:b3:36:9e:1d:c4:a0:ad:f9:32: f3:78:1d:7d:c8:d7:06:b7:58:e8:36:95:9d:28:26: 8f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8C:46:C3:1E:90:AA:97:7B:70:32:1F:32:6B:C5:C7:19:4C:30:F5 X509v3 Authority Key Identifier: keyid:3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:f2:88:1f:c1:e5:d3:37:20:e7:37:99:3f:8f:5b:de:81:db: 7b:a9:2f:5d:dc:a5:08:52:7b:41:75:fa:25:e1:43:48:59:e0: 78:9d:3d:3b:76:02:4c:df:66:48:b6:8e:39:21:45:49:f8:7e: a2:12:c1:65:07:e0:37:79:9b:9a:b0:8d:6b:7e:3d:a1:37:4a: f1:2b:c2:88:4e:e5:de:f3:7a:04:7a:2a:30:e0:21:12:13:e8: 60:cc:cf:e4:06:4c:2e:61:5c:f9:f8:c4:7b:ef:63:6d:ea:f1: 72:26:3b:d7:dc:7c:85:2e:1b:fa:84:90:c9:1c:d4:8e:0e:c7: 5d:f4:f1:42:a4:05:af:47:76:41:35:14:cc:13:61:22:e6:ba: 96:32:d7:11:22:eb:80:a1:39:be:50:c8:59:18:35:aa:6b:89: 0d:ae:e4:94:a1:98:f0:25:0c:a8:4a:ae:be:3e:31:ab:2b:6b: 90:50:cd:d7:d9:3d:66:f1:f9:3d:c4:14:ee:de:94:86:87:44: c9:b4:8e:59:71:42:de:f6:e6:b7:d4:cd:f5:8b:92:82:0a:e0: 3a:9d:3a:4d:cc:54:a4:71:50:31:bc:f5:63:c5:f5:32:35:d7: 24:f3:33:1a:0b:0b:78:8f:95:9a:cd:9b:5b:82:bf:15:36:a6: e2:84:42:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI3OEIxMTAvBgNVBAUTKDNDNDMzQjY0RTY0QzQ2REZENThFNjNDMTE1Mjg0NDg1 ODE1MjMxRkYwHhcNMjUwNDA0MjM0OTE0WhcNMjUwNDExMjM0OTE0WjAYMRYwFAYD VQQDEw02N2YwNmZmYi1mNGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7J8hBs4WC4/HhVhyJ7FS5fGrV1V7pFE94ip1ANX+NnsiXaojt8f9lK3S1O8D OHg06OKWA80Pv+c0We16bDIfkijF20poqAlkDPwZ1X+mqNmGnx4FmZ2Xe5oTdLy9 Dy7NO86RMXc8nvFlPpQigxB1psszz+IX9khMmX5ELjesBZInnx1pO8ec5iMew4Rp /1r7C7aHSsHfjst47jUNhSmtAL1IKt6WxNKPy74pFlCZCnFpM+sbRUumKh+tppn/ K6XCmmqavSEDq9M/YLU7G6M2r6g2HLCkoib+8Fo/MesIVMQC9y2PPw2zNp4dxKCt +TLzeB19yNcGt1joNpWdKCaPSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIuMRsMe kKqXe3AyHzJrxccZTDD1MB8GA1UdIwQYMBaAFDxDO2TmTEbf1Y5jwRUoRIWBUjH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjc4Qi8wNkIwQjYyQTBB NDgxMUVDQkM1NzNENUZDNEY5QUUwMi9QRU03Wk9aTVJ0X1ZqbVBCRlNoRWhZRlNN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BFTTdaT1pNUnRfVmptUEJGU2hFaFlGU01mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Mjc4Qi8wNkIwQjYyQTBBNDgxMUVDQkM1NzNENUZDNEY5QUUwMi9QRU03Wk9aTVJ0 X1ZqbVBCRlNoRWhZRlNNZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ8ogfweXTNyDnN5k/j1vegdt7qS9d3KUIUntBdfol4UNIWeB4nT07 dgJM32ZIto45IUVJ+H6iEsFlB+A3eZuasI1rfj2hN0rxK8KITuXe83oEeiow4CES E+hgzM/kBkwuYVz5+MR772Nt6vFyJjvX3HyFLhv6hJDJHNSODsdd9PFCpAWvR3ZB NRTME2Ei5rqWMtcRIuuAoTm+UMhZGDWqa4kNruSUoZjwJQyoSq6+PjGrK2uQUM3X 2T1m8fk9xBTu3pSGh0TJtI5ZcULe9ua31M31i5KCCuA6nTpNzFSkcVAxvPVjxfUy Ndck8zMaCwt4j5WazZtbgr8VNqbihEJs -----END CERTIFICATE-----Generated at Sat Apr 5 08:44:51 2025 by rpki-client