$ rpki-client -vvf rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft File: fKdQzAmQd9S0MpCnYoOre_C2Smg.mft (raw, json) Hash identifier: /SYucxDJ0x+nfUXwTOkELootCvtmoTPVTL4qkV5ttRI= Subject key identifier: C9:84:47:EE:6B:30:C5:CC:5A:AD:FF:2F:C5:2E:B3:0F:11:92:B4:F7 Authority key identifier: 7C:A7:50:CC:09:90:77:D4:B4:32:90:A7:62:83:AB:7B:F0:B6:4A:68 Certificate issuer: /CN=A91300ED/serialNumber=7CA750CC099077D4B43290A76283AB7BF0B64A68 Certificate serial: 06AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft Manifest number: 06A5 Signing time: Thu 24 Apr 2025 22:00:16 +0000 Manifest this update: Thu 24 Apr 2025 22:00:16 +0000 Manifest next update: Thu 01 May 2025 22:00:16 +0000 Files and hashes: 1: fKdQzAmQd9S0MpCnYoOre_C2Smg.crl (hash: I8+JAS+GhlCZGz3iX4B619a5KX5ltHYCQBvQFgYnE6Y=) 2: 74897CC0622A11EBA8BA0B7EC4F9AE02.roa (hash: jMHgt7FvNkUCkLd7vYheLEj/MpewQSbVwisjvUIDov4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.crl rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1707 (0x6ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91300ED, serialNumber=7CA750CC099077D4B43290A76283AB7BF0B64A68 Validity Not Before: Apr 24 22:00:16 2025 GMT Not After : May 1 22:00:16 2025 GMT Subject: CN=680ab470-f5b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:42:a0:78:8c:ee:1e:fd:32:fe:09:1d:7d:db: a4:ba:21:40:18:f4:5d:28:43:1f:c2:56:a5:60:dd: cf:8c:91:05:7a:e7:2e:93:41:bf:16:e3:b8:7e:9e: 5a:b3:b5:45:7f:02:3f:c8:ac:70:e3:c0:a9:2f:d7: dd:e9:f9:b4:c6:87:37:fb:1b:1a:81:23:15:fb:d0: 8b:a3:84:38:7e:f9:c0:0e:ea:2f:36:67:e9:c3:ad: 86:5d:50:fb:7d:1b:ac:ec:b9:8e:be:aa:1c:a9:c8: 36:c6:e9:bd:e5:fc:fb:76:76:b9:46:b2:4b:25:0b: 45:71:a7:c1:a1:18:ed:5d:e0:bd:e9:b9:38:6a:a3: 62:3c:fd:39:df:9b:ab:7f:9f:dd:cf:c7:ce:8c:05: de:af:06:b2:e0:e8:91:ca:8d:61:38:29:1b:33:c7: 7b:ea:0f:92:91:5d:c8:8d:58:bd:1b:a5:be:43:f8: 76:c0:d5:05:d2:c5:72:b9:7f:10:f1:80:2d:09:74: a6:63:3f:35:5e:78:b6:44:28:99:53:f1:27:3f:3e: 02:39:e1:87:fc:af:48:cb:77:be:50:04:65:32:9f: 5e:00:6f:41:fe:1a:81:c9:65:43:ea:8a:fd:a0:e1: 75:ca:04:75:97:1b:2d:46:7e:38:8c:69:a7:3d:cc: dc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:84:47:EE:6B:30:C5:CC:5A:AD:FF:2F:C5:2E:B3:0F:11:92:B4:F7 X509v3 Authority Key Identifier: keyid:7C:A7:50:CC:09:90:77:D4:B4:32:90:A7:62:83:AB:7B:F0:B6:4A:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:65:b8:25:98:59:25:01:fc:ce:fa:df:0c:98:7a:43:b5:13: 0b:a1:88:12:9b:99:a9:2b:75:c9:87:53:a9:71:ad:10:13:98: cd:d7:98:f4:1b:61:4b:4b:2d:c1:f6:40:50:c0:cd:c4:32:33: e7:d3:11:35:75:e9:6b:bc:6d:f2:06:aa:89:f8:b1:14:33:81: ba:2a:ff:a8:90:a2:7a:52:93:69:8e:4e:f4:6f:c7:c2:8b:fb: 18:4c:c5:7b:17:3a:02:50:1e:99:6c:29:f4:d2:eb:67:42:b0: f0:89:cb:8e:aa:fd:1c:72:51:6f:17:cb:45:42:ae:89:86:29: 4c:b5:b2:d7:7f:41:75:59:89:f9:c6:c8:df:2f:6b:cb:ae:6c: 83:15:46:31:d0:09:a0:71:12:76:f6:64:62:49:7a:62:57:38: d2:21:3c:23:fd:3c:f9:9f:c6:75:74:80:f3:38:55:99:2b:a6: 9a:6c:12:77:35:e3:62:c9:28:4e:27:38:0c:ab:91:e5:98:95: 96:e8:35:de:13:2e:33:92:7a:fb:cf:f6:16:05:cd:3e:bc:70: de:d5:c3:ee:a1:f9:ed:e9:33:8d:18:78:3b:8e:d6:13:64:67: e8:63:da:79:6a:42:7b:38:71:1f:99:72:e3:e7:f0:f7:fc:1d: 7c:ad:d2:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAwRUQxMTAvBgNVBAUTKDdDQTc1MENDMDk5MDc3RDRCNDMyOTBBNzYyODNBQjdC RjBCNjRBNjgwHhcNMjUwNDI0MjIwMDE2WhcNMjUwNTAxMjIwMDE2WjAYMRYwFAYD VQQDEw02ODBhYjQ3MC1mNWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6EKgeIzuHv0y/gkdfdukuiFAGPRdKEMfwlalYN3PjJEFeucuk0G/FuO4fp5a s7VFfwI/yKxw48CpL9fd6fm0xoc3+xsagSMV+9CLo4Q4fvnADuovNmfpw62GXVD7 fRus7LmOvqocqcg2xum95fz7dna5RrJLJQtFcafBoRjtXeC96bk4aqNiPP0535ur f5/dz8fOjAXerway4OiRyo1hOCkbM8d76g+SkV3IjVi9G6W+Q/h2wNUF0sVyuX8Q 8YAtCXSmYz81Xni2RCiZU/EnPz4COeGH/K9Iy3e+UARlMp9eAG9B/hqByWVD6or9 oOF1ygR1lxstRn44jGmnPczcgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmER+5r MMXMWq3/L8Uusw8RkrT3MB8GA1UdIwQYMBaAFHynUMwJkHfUtDKQp2KDq3vwtkpo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDBFRC8wRUM5NEE4ODYy MjkxMUVCOEUxQkMyN0NDNEY5QUUwMi9mS2RRekFtUWQ5UzBNcENuWW9PcmVfQzJT bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZLZFF6QW1RZDlTME1wQ25Zb09yZV9DMlNtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDBFRC8wRUM5NEE4ODYyMjkxMUVCOEUxQkMyN0NDNEY5QUUwMi9mS2RRekFtUWQ5 UzBNcENuWW9PcmVfQzJTbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVZbglmFklAfzO+t8MmHpDtRMLoYgSm5mpK3XJh1Opca0QE5jN15j0 G2FLSy3B9kBQwM3EMjPn0xE1delrvG3yBqqJ+LEUM4G6Kv+okKJ6UpNpjk70b8fC i/sYTMV7FzoCUB6ZbCn00utnQrDwicuOqv0cclFvF8tFQq6JhilMtbLXf0F1WYn5 xsjfL2vLrmyDFUYx0AmgcRJ29mRiSXpiVzjSITwj/Tz5n8Z1dIDzOFWZK6aabBJ3 NeNiyShOJzgMq5HlmJWW6DXeEy4zknr7z/YWBc0+vHDe1cPuofnt6TONGHg7jtYT ZGfoY9p5akJ7OHEfmXLj5/D3/B18rdIz -----END CERTIFICATE-----Generated at Sat Apr 26 03:59:05 2025 by rpki-client