$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft File: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft (raw, json) Hash identifier: eo+fDfyujnDi2zjsh9++jghe8bU1qoNplsdB2TsPlrc= Subject key identifier: EA:18:5D:35:04:97:4C:90:E6:DA:B7:09:A0:21:AB:A2:87:58:7D:7A Authority key identifier: A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 Certificate issuer: /CN=A91E63E7/serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft Manifest number: 62 Signing time: Mon 07 Apr 2025 05:56:33 +0000 Manifest this update: Mon 07 Apr 2025 05:56:33 +0000 Manifest next update: Mon 14 Apr 2025 05:56:33 +0000 Files and hashes: 1: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl (hash: BRQ6/KpWaH2mSuIeYZwwCGyiqwnUJMGIVXrgnOqEAYc=) 2: A54B071C887211EFAC44513CC4F9AE02.roa (hash: xlW1WRvz7DCMXZZnV+rfb+Ls8+ewucJliDacTm3Al7M=) 3: 4694313A887211EF840E431CC4F9AE02.roa (hash: Sw+02xDE4zOVH8jJoCIIJ4Q+dPTGSSy4jLCilaWklfA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 05:56:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E63E7 Validity Not Before: Apr 7 05:56:33 2025 GMT Not After : Apr 14 05:56:33 2025 GMT Subject: CN=67f36911-845e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:da:00:5c:6c:0c:dd:98:39:b2:99:0b:e0:ae: e1:67:c5:80:34:8c:eb:71:18:5e:9b:1e:0c:ff:31: b3:89:f7:66:72:c1:02:48:b0:a6:eb:5e:3f:92:e5: bb:e4:9d:79:24:17:ff:cc:8c:96:c8:75:56:49:15: bb:d0:71:9a:cc:6a:1c:52:0a:14:8e:f3:aa:a6:37: 78:21:e1:33:d9:6f:56:19:9d:7f:8d:81:5b:7a:b5: c9:71:7b:35:4c:0d:9f:77:09:30:1b:0f:55:d9:64: 58:e2:dc:6d:0a:01:0a:b0:3c:e0:b4:7a:3e:60:53: bd:6d:62:27:0b:1a:80:c2:76:67:fb:da:4c:c0:b6: fc:f1:7d:44:fd:3f:d0:30:a0:da:20:3c:b1:77:4f: 95:02:5b:e2:ab:ab:34:47:73:71:0a:60:d6:f7:b7: ff:4a:91:50:b9:f1:97:08:53:ad:e5:d6:85:62:71: e9:ae:3c:27:c9:b7:3c:10:69:49:c1:ec:35:98:38: 05:8d:73:57:68:a1:22:54:1d:f6:90:5f:72:39:3a: 90:bd:1d:2a:82:a8:c2:e8:33:03:43:cb:4f:aa:24: 43:1b:33:b6:07:4d:09:e9:ca:a4:d4:28:f0:5b:e1: 81:54:27:50:b3:38:cd:97:d9:c6:ad:4f:3a:e1:41: d2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:18:5D:35:04:97:4C:90:E6:DA:B7:09:A0:21:AB:A2:87:58:7D:7A X509v3 Authority Key Identifier: keyid:A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:47:b7:3b:5b:2f:0c:b4:33:fd:a0:41:61:11:96:ac:a7:9d: 85:3d:ca:82:6c:5c:e2:66:e3:f1:6e:1c:e0:53:88:bb:11:8e: 05:56:eb:d8:89:4a:da:2b:a8:55:05:23:21:49:87:d8:08:4f: ed:c1:69:2a:b6:b0:68:c2:e0:66:50:9e:4a:57:84:a9:21:b9: be:db:0b:d3:0a:83:90:af:db:1b:b5:36:34:56:6c:f5:7d:0b: cf:85:b5:3b:2b:c9:13:5b:06:22:70:1c:1d:fe:90:86:98:43: 6a:5b:b0:62:58:5b:12:b3:44:8b:d9:00:00:1f:25:85:53:ca: ba:a8:70:25:09:8e:63:14:10:a0:e9:b9:43:14:43:9c:51:aa: 66:47:3d:34:b2:2c:95:33:25:30:05:24:7a:63:be:dd:6e:0c: c9:8e:93:87:3b:32:9b:56:88:82:fe:bb:e3:00:a3:d9:48:94: 3c:e8:46:41:f9:a6:4d:2d:ec:44:60:53:59:52:a7:b4:ae:e4: a7:06:cf:f6:a6:a5:61:eb:06:3e:f5:78:66:64:01:8a:65:96: 6b:7d:ac:73:95:03:cf:04:c0:cd:4c:b1:e0:22:3a:d8:7b:4c: 30:a0:81:4a:f8:02:69:85:0b:65:e3:91:63:d0:d1:14:da:a4: c2:5a:26:c5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NjNFNzExMC8GA1UEBRMoQTU5RjdFRTJGQTI3NTkzN0YzRTFDMkRCQTVCQjhGQkY2 M0QzN0MzNDAeFw0yNTA0MDcwNTU2MzNaFw0yNTA0MTQwNTU2MzNaMBgxFjAUBgNV BAMTDTY3ZjM2OTExLTg0NWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+2gBcbAzdmDmymQvgruFnxYA0jOtxGF6bHgz/MbOJ92ZywQJIsKbrXj+S5bvk nXkkF//MjJbIdVZJFbvQcZrMahxSChSO86qmN3gh4TPZb1YZnX+NgVt6tclxezVM DZ93CTAbD1XZZFji3G0KAQqwPOC0ej5gU71tYicLGoDCdmf72kzAtvzxfUT9P9Aw oNogPLF3T5UCW+KrqzRHc3EKYNb3t/9KkVC58ZcIU63l1oVicemuPCfJtzwQaUnB 7DWYOAWNc1dooSJUHfaQX3I5OpC9HSqCqMLoMwNDy0+qJEMbM7YHTQnpyqTUKPBb 4YFUJ1CzOM2X2catTzrhQdLRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6hhdNQSX TJDm2rcJoCGroodYfXowHwYDVR0jBBgwFoAUpZ9+4vonWTfz4cLbpbuPv2PTfDQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2M0U3LzQxQjBDOTg2ODg3 MTExRUZBNzA4RDE3REM0RjlBRTAyL3BaOS00dm9uV1RmejRjTGJwYnVQdjJQVGZE US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcFo5LTR2b25XVGZ6NGNMYnBidVB2MlBUZkRRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 M0U3LzQxQjBDOTg2ODg3MTExRUZBNzA4RDE3REM0RjlBRTAyL3BaOS00dm9uV1Rm ejRjTGJwYnVQdjJQVGZEUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACRHtztbLwy0M/2gQWERlqynnYU9yoJsXOJm4/FuHOBTiLsRjgVW69iJ StorqFUFIyFJh9gIT+3BaSq2sGjC4GZQnkpXhKkhub7bC9MKg5Cv2xu1NjRWbPV9 C8+FtTsryRNbBiJwHB3+kIaYQ2pbsGJYWxKzRIvZAAAfJYVTyrqocCUJjmMUEKDp uUMUQ5xRqmZHPTSyLJUzJTAFJHpjvt1uDMmOk4c7MptWiIL+u+MAo9lIlDzoRkH5 pk0t7ERgU1lSp7Su5KcGz/ampWHrBj71eGZkAYpllmt9rHOVA88EwM1MseAiOth7 TDCggUr4AmmFC2XjkWPQ0RTapMJaJsU= -----END CERTIFICATE-----Generated at Wed Apr 9 00:29:44 2025 by rpki-client