$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft File: x-37dX9ZS98jrdcSH12-PSWuAPw.mft (raw, json) Hash identifier: Tu10tsqOyZip7VZtmucJrolS99yin29Un33GFKbHgRY= Subject key identifier: 5A:7F:EC:43:19:29:39:59:23:1D:C1:DA:5E:9E:7B:04:4E:A7:7D:78 Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC Certificate issuer: /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC Certificate serial: 0316 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft Manifest number: 0305 Signing time: Sat 05 Apr 2025 01:23:50 +0000 Manifest this update: Sat 05 Apr 2025 01:23:50 +0000 Manifest next update: Sat 12 Apr 2025 01:23:50 +0000 Files and hashes: 1: x-37dX9ZS98jrdcSH12-PSWuAPw.crl (hash: BI0kGCSC1i/N89ngAcDgmoVg3OKTxM3m2arjaISrDcI=) 2: C38C54A2650411EE89EC7112C4F9AE02.roa (hash: 2IeO54Cp6b06u4xrChfhugqf5OR3NU+qoLsUiOOPr8M=) 3: 2872E3EEB78511EFACBD807DC4F9AE02.roa (hash: f/9vGnn2JXmJ21/jrMMvJ7DpIN0BPneJ38/5WfHmbrI=) 4: B1CE8816650411EEBE8D4512C4F9AE02.roa (hash: xl/v3HFE5XZWMUy9IIOzuRvTobJH6hv4JoT6vWaFF1Q=) 5: 27DC7846B78511EFACBD807DC4F9AE02.roa (hash: i3ADmyA4WgLpGdAmHRBQc8Kk5ppJaulRCigFr15Uv0k=) 6: 9389FFE8650411EE80570A12C4F9AE02.roa (hash: IhHnqIJSUKHQvAUemNA8DV1wdnkLH6BV1/tBV7gGepE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:23:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 790 (0x316) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8579 Validity Not Before: Apr 5 01:23:50 2025 GMT Not After : Apr 12 01:23:50 2025 GMT Subject: CN=67f08626-35ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:eb:a8:ec:22:df:76:40:e8:b5:f4:35:3d:ec: 19:9d:28:13:f6:92:a0:c5:34:9f:2e:1c:f2:ad:e7: ed:5d:45:2b:ba:4d:28:b1:c6:0b:e6:eb:f9:0a:f8: 94:9e:8d:e9:cc:fb:b9:48:d1:be:19:7b:d5:8f:e9: 53:cb:fe:3c:ad:b1:7a:f2:81:b6:ac:24:e6:89:41: 17:12:6e:df:a5:b6:44:44:c6:d5:02:4a:37:4e:c5: a4:2b:c5:f7:c2:17:f8:e7:c9:82:2d:0b:23:c5:af: e3:a4:44:65:b9:41:e3:a3:c4:57:ed:63:6e:23:3c: 77:90:6d:2e:d1:29:c5:f3:8a:a9:a4:ad:04:0b:49: 36:d1:73:f3:ea:cf:2f:62:9e:fc:30:bc:d9:e1:d9: f0:36:68:62:31:aa:a3:31:ef:2e:33:e3:fe:05:ad: 01:de:20:ba:31:0c:ee:d8:b0:90:f7:d2:a8:e4:c3: f9:d5:e4:0f:9d:ef:4c:97:5b:2f:46:03:3c:99:73: 31:57:1b:5c:f7:44:e1:09:c7:c4:c4:f0:b8:5b:72: d9:de:7c:84:2c:17:7f:a7:f9:91:cb:db:09:22:37: 3f:27:1d:d8:1d:84:e7:7b:bb:ec:01:75:6b:8d:05: 86:dc:f9:b8:bb:7d:01:01:8a:f9:97:7f:65:95:d6: 78:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7F:EC:43:19:29:39:59:23:1D:C1:DA:5E:9E:7B:04:4E:A7:7D:78 X509v3 Authority Key Identifier: keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:96:55:93:2e:44:8a:bb:5a:d9:6b:a1:67:cd:ad:1e:0e:87: 06:91:4e:61:52:8e:2c:dc:c0:1a:f6:6b:a1:18:6c:ba:5b:e6: 31:52:d0:c8:6b:e0:3f:b6:aa:b2:b8:9e:0b:fd:11:26:75:39: 94:3f:7a:31:7c:74:42:f4:61:4a:04:d6:4c:e0:4f:ac:36:06: 33:81:76:82:24:54:17:e8:34:f6:0f:31:c4:e5:15:8f:c8:9d: 4a:ee:d5:2d:7e:f8:82:fc:68:11:dd:d4:c4:94:25:a8:19:8a: f7:0a:e8:4c:8c:fc:66:a2:34:61:fb:4c:fb:22:14:60:71:d4: b3:21:1c:95:8c:cb:35:a0:66:3e:3b:6b:f7:36:ac:23:a4:69: 3c:c1:4f:e8:4e:69:ac:3f:71:c4:19:48:d9:23:f1:65:ce:b0: 67:73:5b:4b:40:43:c1:fb:cd:09:4d:2e:e7:9e:0b:17:4b:55: 23:48:90:ec:20:86:dc:7a:63:40:7a:67:db:f6:d6:6b:d5:3f: 00:ef:42:ad:65:67:b4:06:d8:fd:a8:22:79:f6:21:87:72:0b: 0f:fc:1d:76:7c:bf:19:d2:a2:fe:e9:8c:91:85:b8:fb:85:25: 1b:41:d0:6f:c5:f7:d7:a0:8f:0e:5d:22:31:86:be:cc:52:07: 56:1a:44:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg1NzkxMTAvBgNVBAUTKEM3RURGQjc1N0Y1OTRCREYyM0FERDcxMjFGNURCRTNE MjVBRTAwRkMwHhcNMjUwNDA1MDEyMzUwWhcNMjUwNDEyMDEyMzUwWjAYMRYwFAYD VQQDEw02N2YwODYyNi0zNWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueuo7CLfdkDotfQ1PewZnSgT9pKgxTSfLhzyreftXUUruk0oscYL5uv5CviU no3pzPu5SNG+GXvVj+lTy/48rbF68oG2rCTmiUEXEm7fpbZERMbVAko3TsWkK8X3 whf458mCLQsjxa/jpERluUHjo8RX7WNuIzx3kG0u0SnF84qppK0EC0k20XPz6s8v Yp78MLzZ4dnwNmhiMaqjMe8uM+P+Ba0B3iC6MQzu2LCQ99Ko5MP51eQPne9Ml1sv RgM8mXMxVxtc90ThCcfExPC4W3LZ3nyELBd/p/mRy9sJIjc/Jx3YHYTne7vsAXVr jQWG3Pm4u30BAYr5l39lldZ4cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFp/7EMZ KTlZIx3B2l6eewROp314MB8GA1UdIwQYMBaAFMft+3V/WUvfI63XEh9dvj0lrgD8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODU3OS8wMTc2MDNGQ0NF QjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5OGpyZGNTSDEyLVBTV3VB UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gtMzdkWDlaUzk4anJkY1NIMTItUFNXdUFQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODU3OS8wMTc2MDNGQ0NFQjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5 OGpyZGNTSDEyLVBTV3VBUHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhllWTLkSKu1rZa6Fnza0eDocGkU5hUo4s3MAa9muhGGy6W+YxUtDI a+A/tqqyuJ4L/REmdTmUP3oxfHRC9GFKBNZM4E+sNgYzgXaCJFQX6DT2DzHE5RWP yJ1K7tUtfviC/GgR3dTElCWoGYr3CuhMjPxmojRh+0z7IhRgcdSzIRyVjMs1oGY+ O2v3NqwjpGk8wU/oTmmsP3HEGUjZI/FlzrBnc1tLQEPB+80JTS7nngsXS1UjSJDs IIbcemNAemfb9tZr1T8A70KtZWe0Btj9qCJ59iGHcgsP/B12fL8Z0qL+6YyRhbj7 hSUbQdBvxffXoI8OXSIxhr7MUgdWGkQg -----END CERTIFICATE-----Generated at Mon Apr 7 02:46:54 2025 by rpki-client