$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft File: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft (raw, json) Hash identifier: qGslMWYRZQIk95lxCoWKCtEZ3GM1364RroY/xvjB23Q= Subject key identifier: 56:8F:D1:9D:6B:5C:CD:9F:9F:05:E6:A0:F4:EA:81:EC:79:7A:28:91 Authority key identifier: 31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF Certificate issuer: /CN=A91C8203/serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft Manifest number: 55 Signing time: Thu 03 Apr 2025 06:28:15 +0000 Manifest this update: Thu 03 Apr 2025 06:28:14 +0000 Manifest next update: Thu 10 Apr 2025 06:28:14 +0000 Files and hashes: 1: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl (hash: h3QzPdezHGFc5r/dNWETxh9oajEbsHfdIEmkK5uqFDE=) 2: BE48D4AA927D11EF9651FC4AC4F9AE02.roa (hash: izRhlY7DGrfvs8MmjLdXrrQgAeYYKtyct/uQzFPAxkk=) 3: D9BE56E2927D11EFB83ACB5CC4F9AE02.roa (hash: gD5kq8/HSPW50HYpmldu2HRZWRqRsB+3dXKbKp9PeAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:28:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8203 Validity Not Before: Apr 3 06:28:14 2025 GMT Not After : Apr 10 06:28:14 2025 GMT Subject: CN=67ee2a7e-084a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:24:47:e0:6d:7d:d1:43:bf:02:12:e0:a3:5a: 86:18:a0:4a:b3:59:12:9d:4f:c5:98:b3:f2:6d:0d: c7:aa:c4:5b:9a:8f:d0:34:28:2f:52:f9:93:81:72: 14:4c:01:0d:84:7c:f6:92:b5:4c:9a:28:3a:f6:21: be:52:32:10:e5:86:c8:20:60:f0:eb:c5:83:03:15: ac:5d:59:36:a8:f9:5f:a4:e9:90:0f:44:75:35:42: 21:7b:f6:ae:22:f7:00:72:93:0e:2e:b1:82:cd:33: 06:c6:0a:48:9a:ff:bc:43:59:92:09:0b:58:55:2f: e8:ac:e3:50:47:52:f7:e1:10:65:76:9e:86:a2:5e: c4:8d:66:2c:14:c0:67:c4:82:28:85:ee:17:18:2f: ce:b7:f2:68:52:30:33:f8:62:cf:d3:11:b9:64:c0: 2b:1b:fa:11:bc:5d:e8:17:fe:44:e3:ff:db:be:d2: 50:9c:9a:99:a0:b5:61:2b:f6:0c:60:1e:a7:75:9b: b7:57:06:62:96:2d:bb:f0:f2:78:29:8d:f8:66:da: 28:ae:ff:88:0b:32:e1:64:bd:87:ef:ae:d7:1e:c3: c6:75:0d:3c:6d:cd:f2:8a:9f:be:18:23:42:64:e1: f4:2c:3e:86:88:3a:95:3f:44:50:75:9a:ac:4b:60: 82:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:8F:D1:9D:6B:5C:CD:9F:9F:05:E6:A0:F4:EA:81:EC:79:7A:28:91 X509v3 Authority Key Identifier: keyid:31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:ab:f8:eb:5b:99:ad:7e:e2:64:58:b4:fe:b5:93:ab:08:42: 12:34:9b:e2:4f:1a:78:29:f6:c7:07:55:c4:1e:84:42:be:34: b4:08:d5:7b:c7:db:3e:c9:e9:08:33:01:c3:5d:aa:13:25:bf: 4c:72:24:1c:14:4a:52:e4:ec:de:6f:79:63:7d:3e:77:03:4c: 45:29:35:7a:7b:86:34:c9:87:11:ac:72:24:e8:72:6c:2f:e4: bd:f1:95:e4:07:7c:61:60:de:96:7d:2c:cb:ce:04:42:dc:64: ee:f2:52:8b:4c:99:7d:85:ea:40:b9:bc:e9:3d:46:b0:0b:6e: e5:91:26:32:a6:03:67:ef:ce:55:da:9d:86:12:5c:9d:7b:34: 83:18:27:c9:c3:a5:0a:8b:b2:24:10:82:65:6c:d6:9e:d8:51: e6:fe:f5:33:87:49:00:e3:7e:b9:01:88:67:01:fa:56:63:da: 8c:9d:b0:50:ff:40:9c:c7:89:aa:90:69:50:0c:75:ee:db:8a: c5:dc:cd:5f:dd:1f:3f:5d:89:0e:57:df:00:80:32:a0:63:ad: d1:17:95:4b:a8:42:b6:8e:0b:44:ee:4a:77:65:bc:28:0a:9e: 27:97:a3:cc:f1:77:bb:43:b1:65:3b:25:2c:bd:0c:d2:1f:1b: e2:78:d0:5d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD ODIwMzExMC8GA1UEBRMoMzFEMjFENUNFRTVGQUNERUYzQzhDMUM4N0QwRDczOTFG OUY3M0FGRjAeFw0yNTA0MDMwNjI4MTRaFw0yNTA0MTAwNjI4MTRaMBgxFjAUBgNV BAMTDTY3ZWUyYTdlLTA4NGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChJEfgbX3RQ78CEuCjWoYYoEqzWRKdT8WYs/JtDceqxFuaj9A0KC9S+ZOBchRM AQ2EfPaStUyaKDr2Ib5SMhDlhsggYPDrxYMDFaxdWTao+V+k6ZAPRHU1QiF79q4i 9wBykw4usYLNMwbGCkia/7xDWZIJC1hVL+is41BHUvfhEGV2noaiXsSNZiwUwGfE giiF7hcYL8638mhSMDP4Ys/TEblkwCsb+hG8XegX/kTj/9u+0lCcmpmgtWEr9gxg Hqd1m7dXBmKWLbvw8ngpjfhm2iiu/4gLMuFkvYfvrtcew8Z1DTxtzfKKn74YI0Jk 4fQsPoaIOpU/RFB1mqxLYILrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVo/RnWtc zZ+fBeag9OqB7Hl6KJEwHwYDVR0jBBgwFoAUMdIdXO5frN7zyMHIfQ1zkfn3Ov8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4MjAzL0JDNTE1REFBOTI3 QTExRUZCNTY0M0M0RUM0RjlBRTAyL01kSWRYTzVmck43enlNSElmUTF6a2ZuM092 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWRJZFhPNWZyTjd6eU1ISWZRMXprZm4zT3Y4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4 MjAzL0JDNTE1REFBOTI3QTExRUZCNTY0M0M0RUM0RjlBRTAyL01kSWRYTzVmck43 enlNSElmUTF6a2ZuM092OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFKr+Otbma1+4mRYtP61k6sIQhI0m+JPGngp9scHVcQehEK+NLQI1XvH 2z7J6QgzAcNdqhMlv0xyJBwUSlLk7N5veWN9PncDTEUpNXp7hjTJhxGsciTocmwv 5L3xleQHfGFg3pZ9LMvOBELcZO7yUotMmX2F6kC5vOk9RrALbuWRJjKmA2fvzlXa nYYSXJ17NIMYJ8nDpQqLsiQQgmVs1p7YUeb+9TOHSQDjfrkBiGcB+lZj2oydsFD/ QJzHiaqQaVAMde7bisXczV/dHz9diQ5X3wCAMqBjrdEXlUuoQraOC0TuSndlvCgK nieXo8zxd7tDsWU7JSy9DNIfG+J40F0= -----END CERTIFICATE-----Generated at Sat Apr 5 07:57:06 2025 by rpki-client