$ rpki-client -vvf rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft File: rdsr88QYJtbQ--jSvy8FLZil2Uk.mft (raw, json) Hash identifier: z1Cg53cy3IcBE0kewLFLgu8GcS3aTCIMefvd4G4T3A4= Subject key identifier: 89:3F:62:7A:93:95:98:C9:EC:BA:77:C3:8A:40:9F:AE:63:1E:04:A6 Authority key identifier: AD:DB:2B:F3:C4:18:26:D6:D0:FB:E8:D2:BF:2F:05:2D:98:A5:D9:49 Certificate issuer: /CN=A91689C8/serialNumber=ADDB2BF3C41826D6D0FBE8D2BF2F052D98A5D949 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft Manifest number: 01C2 Signing time: Fri 25 Apr 2025 02:22:12 +0000 Manifest this update: Fri 25 Apr 2025 02:22:12 +0000 Manifest next update: Fri 02 May 2025 02:22:12 +0000 Files and hashes: 1: rdsr88QYJtbQ--jSvy8FLZil2Uk.crl (hash: 295QtgrrKQyru0mmPnn7TZN3Z+Nugx3yjut3v0ZYGJc=) 2: 3BB70A86092211F08BA72686C4F9AE02.roa (hash: 2J/4S4P7iHBoNIa8ALxa/H8YBNXVUqoF1W5QLX0G6vs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.crl rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:22:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689C8, serialNumber=ADDB2BF3C41826D6D0FBE8D2BF2F052D98A5D949 Validity Not Before: Apr 25 02:22:12 2025 GMT Not After : May 2 02:22:12 2025 GMT Subject: CN=680af1d4-4de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ec:bf:0f:8d:17:0d:13:3e:c6:2f:da:4f:2b: 74:fe:0e:b6:38:9f:ce:e3:91:38:a8:44:58:89:0a: de:41:42:9f:fa:02:20:8a:3a:b5:46:f1:93:1c:83: db:f7:a0:a1:4f:d6:16:78:53:38:4f:23:e3:a1:d3: a0:7d:7c:42:82:e5:ea:f4:a6:4d:5d:1b:08:c2:3b: 84:60:72:44:08:e6:f5:4f:a0:d1:60:4d:af:a7:34: 4f:99:d2:c4:d7:b6:63:d2:82:cd:6c:62:0a:4d:4e: ff:be:19:bc:ad:5a:90:c9:c0:b6:23:15:6b:b9:83: af:24:3b:64:be:6f:f1:ac:ce:23:6a:51:f2:2f:1b: 33:65:19:79:52:3e:12:78:55:75:5f:0f:77:c7:60: 08:f5:b2:f7:49:f9:20:24:e9:89:f4:30:1e:56:94: 47:3d:76:2d:21:2a:44:5e:7b:17:00:ed:4f:05:93: 62:1f:20:94:7f:34:6f:72:3b:e8:85:9b:bd:2e:25: eb:ad:f7:fb:a1:cc:12:84:e4:e2:4f:55:e9:3f:e8: 81:7d:28:c7:d5:5f:cd:5f:cc:c6:0f:17:27:36:af: a9:ba:6d:a4:d5:54:03:f8:bc:ba:c3:93:df:4a:7e: 8b:8f:48:32:7b:90:71:22:d8:3f:08:b8:8b:1a:09: 1d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3F:62:7A:93:95:98:C9:EC:BA:77:C3:8A:40:9F:AE:63:1E:04:A6 X509v3 Authority Key Identifier: keyid:AD:DB:2B:F3:C4:18:26:D6:D0:FB:E8:D2:BF:2F:05:2D:98:A5:D9:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:ce:a2:d8:27:bf:e5:38:e4:34:c4:85:2e:7e:d3:fb:7a:e3: 70:71:8b:7d:46:55:1d:44:a9:39:4e:33:88:e2:74:03:6f:9f: b7:6b:7e:87:5f:4b:23:f5:b0:77:d1:bd:e2:f1:f0:15:c2:fd: 91:5f:49:d4:fc:2e:f1:52:cb:73:a6:ca:c8:e9:44:68:f0:43: 81:9c:c3:9b:77:28:a4:5c:9f:6d:ea:28:c4:f2:b9:ee:d1:4f: b6:95:6d:67:63:9e:79:69:a5:42:81:5a:44:29:e7:91:a3:03: 78:55:5c:a8:c4:9b:c7:35:ae:18:aa:ed:c3:4d:6d:0d:96:73: 22:7b:e5:2e:1e:3a:3b:43:17:e7:5a:b7:7e:b0:ad:b1:33:82: 35:7e:8d:0e:04:d6:cd:f1:45:7b:5c:9a:a0:28:99:16:98:45: d0:46:66:6b:e9:35:be:3b:39:2b:53:5d:64:13:84:c6:0b:00: be:d8:fb:61:fb:9f:ef:e4:12:09:ba:84:4c:51:06:44:d1:c7: 74:05:79:b8:bc:13:08:0a:32:9f:f7:fc:b4:a2:fe:96:86:77: 75:4c:14:5e:6e:0c:d0:33:bc:4a:0e:a8:d0:dd:49:bb:ec:7f: 8c:8d:1c:f2:60:7b:ad:85:79:62:1c:65:30:39:ea:43:92:fb: 48:b3:1a:94 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODlDODExMC8GA1UEBRMoQUREQjJCRjNDNDE4MjZENkQwRkJFOEQyQkYyRjA1MkQ5 OEE1RDk0OTAeFw0yNTA0MjUwMjIyMTJaFw0yNTA1MDIwMjIyMTJaMBgxFjAUBgNV BAMTDTY4MGFmMWQ0LTRkZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCt7L8PjRcNEz7GL9pPK3T+DrY4n87jkTioRFiJCt5BQp/6AiCKOrVG8ZMcg9v3 oKFP1hZ4UzhPI+Oh06B9fEKC5er0pk1dGwjCO4RgckQI5vVPoNFgTa+nNE+Z0sTX tmPSgs1sYgpNTv++GbytWpDJwLYjFWu5g68kO2S+b/GsziNqUfIvGzNlGXlSPhJ4 VXVfD3fHYAj1svdJ+SAk6Yn0MB5WlEc9di0hKkReexcA7U8Fk2IfIJR/NG9yO+iF m70uJeut9/uhzBKE5OJPVek/6IF9KMfVX81fzMYPFyc2r6m6baTVVAP4vLrDk99K fouPSDJ7kHEi2D8IuIsaCR2LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiT9iepOV mMnsunfDikCfrmMeBKYwHwYDVR0jBBgwFoAUrdsr88QYJtbQ++jSvy8FLZil2Ukw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4OUM4LzM4QjM4RTVFOERE NzExRUQ4NTIyNUE3RUM0RjlBRTAyL3Jkc3I4OFFZSnRiUS0talN2eThGTFppbDJV ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcmRzcjg4UVlKdGJRLS1qU3Z5OEZMWmlsMlVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 OUM4LzM4QjM4RTVFOERENzExRUQ4NTIyNUE3RUM0RjlBRTAyL3Jkc3I4OFFZSnRi US0talN2eThGTFppbDJVay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALvOotgnv+U45DTEhS5+0/t643Bxi31GVR1EqTlOM4jidANvn7drfodf SyP1sHfRveLx8BXC/ZFfSdT8LvFSy3OmysjpRGjwQ4Gcw5t3KKRcn23qKMTyue7R T7aVbWdjnnlppUKBWkQp55GjA3hVXKjEm8c1rhiq7cNNbQ2WcyJ75S4eOjtDF+da t36wrbEzgjV+jQ4E1s3xRXtcmqAomRaYRdBGZmvpNb47OStTXWQThMYLAL7Y+2H7 n+/kEgm6hExRBkTRx3QFebi8EwgKMp/3/LSi/paGd3VMFF5uDNAzvEoOqNDdSbvs f4yNHPJge62FeWIcZTA56kOS+0izGpQ= -----END CERTIFICATE-----Generated at Sat Apr 26 07:58:26 2025 by rpki-client