$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft File: rg5L7FaP5v7kkvcuTTrLko2cHk8.mft (raw, json) Hash identifier: EpXsMwunBWH20edhm5xvIIZZq5hfU7Ab3X2brskUsZE= Subject key identifier: E3:EB:3B:4D:06:30:64:78:B1:70:A5:BD:E4:F9:E4:3A:03:0A:7D:7D Authority key identifier: AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F Certificate issuer: /CN=A91DBF0C/serialNumber=AE0E4BEC568FE6FEE492F72E4D3ACB928D9C1E4F Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft Manifest number: 51 Signing time: Thu 13 Mar 2025 05:22:08 +0000 Manifest this update: Thu 13 Mar 2025 05:22:08 +0000 Manifest next update: Thu 20 Mar 2025 05:22:08 +0000 Files and hashes: 1: rg5L7FaP5v7kkvcuTTrLko2cHk8.crl (hash: x6OaE3Ry84uadSQRTDsHvvMT5gFZ3ijcV/SCYGjwUgU=) 2: 9E4987668C7F11EFB4290976C4F9AE02.roa (hash: cHJy1BLtElHS3p1bo+4QsrHmfc/col4vczERE1sjyMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.crl rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 05:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBF0C Validity Not Before: Mar 13 05:22:08 2025 GMT Not After : Mar 20 05:22:08 2025 GMT Subject: CN=67d26b80-2054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:05:32:e7:1f:fc:74:67:a3:f3:fc:f6:08:ca: 07:8b:c3:c7:96:18:a1:e7:27:a5:00:52:ec:76:e7: 59:26:47:f8:32:8b:4d:2a:e4:70:3c:02:fc:66:04: ab:0f:12:b6:f8:3a:78:d7:23:a0:b1:f9:c4:6f:0c: 1a:9c:c3:97:83:6a:75:84:22:a5:68:6b:08:45:2f: f7:e6:6d:b6:a2:4f:d9:49:c1:cb:90:bd:66:d9:78: 4e:b5:49:43:30:51:50:70:42:00:30:05:80:07:95: c2:6e:f4:07:1e:74:b7:3f:6f:b3:a8:1c:40:f0:eb: 9d:aa:b6:e1:c6:da:ac:c8:86:2c:9a:3e:9c:7c:fd: 6d:1b:a1:c1:3a:b0:50:dd:bd:2b:8e:8d:4f:10:c8: 65:28:49:0f:11:f8:29:15:44:2d:62:b6:b7:61:eb: 62:a1:c0:67:89:49:91:bd:00:cd:8a:7f:e0:5b:e8: 25:97:36:67:d8:c5:05:fb:62:f3:72:0c:cb:6f:6b: ed:88:7b:ca:d9:6e:e6:5e:7d:c8:97:93:c2:e9:e9: 63:9f:f9:55:4d:24:47:91:3e:f4:62:b4:72:df:63: 79:48:72:11:6c:89:76:bc:55:d4:0e:ae:b6:e1:96: a7:eb:25:87:28:0a:ce:38:36:7f:c0:8c:ec:c3:8a: f9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:EB:3B:4D:06:30:64:78:B1:70:A5:BD:E4:F9:E4:3A:03:0A:7D:7D X509v3 Authority Key Identifier: keyid:AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b5:32:83:ad:4a:81:93:71:4a:ab:78:b4:9c:fb:83:24:d6: 4a:8b:13:8e:ea:0d:d8:c7:dc:b8:19:2a:ac:ff:8a:5a:40:77: ea:0b:f9:ee:dc:9e:aa:27:6a:fe:ad:ca:37:d6:be:a5:6e:08: 27:19:68:dc:0e:c1:69:ab:90:1f:87:1b:f5:e2:7a:4e:1d:66: d1:cc:ff:b1:c6:d7:8e:ea:92:14:27:71:c4:11:a5:b1:5c:72: 74:ec:d7:34:ce:c1:26:11:52:71:03:2f:c7:75:b3:8f:e8:b5: ae:e4:e8:d6:b5:c6:e4:db:cd:7a:98:75:89:b3:66:1a:26:94: 5a:ea:ff:98:fd:55:d4:dd:d8:a4:41:f5:23:5f:c7:03:b2:a1: b9:58:5d:09:7c:d6:13:fb:96:4c:b6:97:78:63:c5:78:8c:d5: e0:a1:bb:a0:49:67:fa:17:c4:d3:d7:06:ae:d9:55:ae:3f:8a: 31:a5:bd:1d:83:60:3e:e0:2e:44:eb:50:33:65:4a:3d:2e:c0: fe:30:f0:4a:61:47:c7:13:76:94:61:65:74:32:80:d4:ff:0a: ae:19:b3:50:40:6c:9c:d4:7d:52:55:72:46:07:71:cf:f1:0b: 09:81:3d:0a:14:05:e4:d4:2f:a3:32:d3:a9:66:c9:57:35:0a: b9:33:b4:0d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QkYwQzExMC8GA1UEBRMoQUUwRTRCRUM1NjhGRTZGRUU0OTJGNzJFNEQzQUNCOTI4 RDlDMUU0RjAeFw0yNTAzMTMwNTIyMDhaFw0yNTAzMjAwNTIyMDhaMBgxFjAUBgNV BAMTDTY3ZDI2YjgwLTIwNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfBTLnH/x0Z6Pz/PYIygeLw8eWGKHnJ6UAUux251kmR/gyi00q5HA8AvxmBKsP Erb4OnjXI6Cx+cRvDBqcw5eDanWEIqVoawhFL/fmbbaiT9lJwcuQvWbZeE61SUMw UVBwQgAwBYAHlcJu9AcedLc/b7OoHEDw652qtuHG2qzIhiyaPpx8/W0bocE6sFDd vSuOjU8QyGUoSQ8R+CkVRC1itrdh62KhwGeJSZG9AM2Kf+Bb6CWXNmfYxQX7YvNy DMtva+2Ie8rZbuZefciXk8Lp6WOf+VVNJEeRPvRitHLfY3lIchFsiXa8VdQOrrbh lqfrJYcoCs44Nn/AjOzDivkpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4+s7TQYw ZHixcKW95PnkOgMKfX0wHwYDVR0jBBgwFoAUrg5L7FaP5v7kkvcuTTrLko2cHk8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCRjBDLzQxNDg1MDcwOEM1 QjExRUZBNzA2NzU3RkM0RjlBRTAyL3JnNUw3RmFQNXY3a2t2Y3VUVHJMa28yY0hr OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcmc1TDdGYVA1djdra3ZjdVRUckxrbzJjSGs4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC RjBDLzQxNDg1MDcwOEM1QjExRUZBNzA2NzU3RkM0RjlBRTAyL3JnNUw3RmFQNXY3 a2t2Y3VUVHJMa28yY0hrOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJu1MoOtSoGTcUqreLSc+4Mk1kqLE47qDdjH3LgZKqz/ilpAd+oL+e7c nqonav6tyjfWvqVuCCcZaNwOwWmrkB+HG/Xiek4dZtHM/7HG147qkhQnccQRpbFc cnTs1zTOwSYRUnEDL8d1s4/ota7k6Na1xuTbzXqYdYmzZhomlFrq/5j9VdTd2KRB 9SNfxwOyoblYXQl81hP7lky2l3hjxXiM1eChu6BJZ/oXxNPXBq7ZVa4/ijGlvR2D YD7gLkTrUDNlSj0uwP4w8EphR8cTdpRhZXQygNT/Cq4Zs1BAbJzUfVJVckYHcc/x CwmBPQoUBeTUL6My06lmyVc1CrkztA0= -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:01 2025 by rpki-client