$ rpki-client -vvf rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft File: 91FDq1voML6TvNd20zKw_Vt4fjs.mft (raw, json) Hash identifier: rJ5BqaG/FkGNC3vF0f64mK9DjG9owS8yEFc0EkrV/0w= Subject key identifier: 8E:B9:85:EB:08:DB:F2:1C:50:8B:FD:DC:8A:44:54:DC:E7:6D:E3:D9 Authority key identifier: F7:51:43:AB:5B:E8:30:BE:93:BC:D7:76:D3:32:B0:FD:5B:78:7E:3B Certificate issuer: /CN=A91717C0/serialNumber=F75143AB5BE830BE93BCD776D332B0FD5B787E3B Certificate serial: 07C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft Manifest number: 07BD Signing time: Thu 24 Apr 2025 20:57:49 +0000 Manifest this update: Thu 24 Apr 2025 20:57:48 +0000 Manifest next update: Thu 01 May 2025 20:57:48 +0000 Files and hashes: 1: 91FDq1voML6TvNd20zKw_Vt4fjs.crl (hash: bPVPn9JFdKFsV7jx5xHJQ8Sy4silSKiGrAzJWCHutqI=) 2: 94BF06A8F31D11EA8D62F57EC4F9AE02.roa (hash: KTuuAh3AHOrZB4qBHVBME28/yKLVl99NGNpmQ7xayeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.crl rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1987 (0x7c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91717C0, serialNumber=F75143AB5BE830BE93BCD776D332B0FD5B787E3B Validity Not Before: Apr 24 20:57:48 2025 GMT Not After : May 1 20:57:48 2025 GMT Subject: CN=680aa5cd-4b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d0:49:24:15:7d:b3:33:f0:63:45:70:8a:6f: e4:90:e7:6c:9a:fb:a4:f1:95:29:9e:e5:2f:e6:ef: 6a:15:5f:be:9c:5e:f7:37:9b:c4:6e:0a:5f:84:bb: 02:1d:03:3b:8d:f8:16:2c:02:1c:b1:2c:5f:f7:a7: 9e:5f:9a:71:30:4d:2e:77:74:d0:a4:60:81:30:b7: e4:ea:7c:e0:52:c7:e8:60:66:e1:4e:57:42:b9:9b: b4:26:7b:b2:34:87:e6:31:5b:9f:0d:d3:a7:5e:74: ac:ff:9c:18:7e:64:ae:5f:8b:20:eb:83:b1:2d:a6: 2b:94:e2:f4:85:24:e1:dd:7e:5a:66:16:95:90:2d: 10:ef:d7:ef:10:db:fd:73:68:11:da:f9:dd:b7:12: 7a:b1:9b:7e:d3:d3:c7:da:2d:16:1a:0e:e7:7d:9a: c2:15:96:3a:d7:a9:02:b7:a1:3b:c0:9e:d3:98:85: 66:69:80:31:d7:bf:c8:64:b3:57:94:40:fe:65:0a: 33:9f:81:a0:52:34:52:ad:f0:35:df:06:6f:76:ef: 83:71:37:fb:d1:6f:9b:f0:63:d3:ff:2a:c5:16:ed: 36:1f:38:bf:f0:01:1b:20:50:97:6d:33:ef:9d:8e: 13:aa:c1:75:d5:a3:05:25:96:0f:0c:15:1b:a9:77: 09:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B9:85:EB:08:DB:F2:1C:50:8B:FD:DC:8A:44:54:DC:E7:6D:E3:D9 X509v3 Authority Key Identifier: keyid:F7:51:43:AB:5B:E8:30:BE:93:BC:D7:76:D3:32:B0:FD:5B:78:7E:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:81:10:d1:dc:05:f4:a7:ac:d8:29:8e:2d:7f:0b:02:00:bf: 94:8a:0a:e6:c5:ab:c8:6d:26:96:bc:6b:c5:81:ae:f3:ab:4a: ba:63:7b:8a:71:b5:18:7d:e7:7c:fc:ee:87:83:ae:b9:64:31: 47:f1:cd:e0:e2:34:b7:a5:72:28:d6:28:fb:8b:71:d8:72:39: 46:a8:af:4a:3b:53:9c:cf:76:d9:ce:70:e0:66:f6:38:f9:4e: 65:60:d7:78:c6:e7:62:bc:df:0e:ff:49:06:08:98:b1:3a:a0: 1c:0d:a3:3e:ab:24:d0:26:7f:1b:b8:11:63:9e:3e:7d:f2:e5: 16:4a:f4:70:33:0b:1d:77:d3:34:e8:43:58:c0:ef:20:2f:bc: 68:96:0f:0a:28:98:c9:29:3c:71:f5:59:97:92:b6:65:fc:ab: 16:ae:1a:53:fb:08:97:0b:47:22:1a:52:a0:bc:16:0f:79:a5: 5c:59:0d:48:75:d2:58:bb:49:d9:a4:13:4e:d0:ab:80:26:36: 29:d8:90:ed:ac:3d:4d:55:14:51:e4:5f:8a:67:16:ba:6f:a4: bc:87:e1:92:7d:cf:5e:58:20:97:b9:e0:35:21:90:51:0a:9d: dc:0d:4b:0c:d9:04:1e:07:ba:bd:c2:0c:0d:bf:01:33:df:b7: fb:69:30:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3QzAxMTAvBgNVBAUTKEY3NTE0M0FCNUJFODMwQkU5M0JDRDc3NkQzMzJCMEZE NUI3ODdFM0IwHhcNMjUwNDI0MjA1NzQ4WhcNMjUwNTAxMjA1NzQ4WjAYMRYwFAYD VQQDEw02ODBhYTVjZC00YjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3NBJJBV9szPwY0Vwim/kkOdsmvuk8ZUpnuUv5u9qFV++nF73N5vEbgpfhLsC HQM7jfgWLAIcsSxf96eeX5pxME0ud3TQpGCBMLfk6nzgUsfoYGbhTldCuZu0Jnuy NIfmMVufDdOnXnSs/5wYfmSuX4sg64OxLaYrlOL0hSTh3X5aZhaVkC0Q79fvENv9 c2gR2vndtxJ6sZt+09PH2i0WGg7nfZrCFZY616kCt6E7wJ7TmIVmaYAx17/IZLNX lED+ZQozn4GgUjRSrfA13wZvdu+DcTf70W+b8GPT/yrFFu02Hzi/8AEbIFCXbTPv nY4TqsF11aMFJZYPDBUbqXcJAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI65hesI 2/IcUIv93IpEVNznbePZMB8GA1UdIwQYMBaAFPdRQ6tb6DC+k7zXdtMysP1beH47 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTdDMC8wMThFQkU1OEYz MUExMUVBQkMwMENDNUNDNEY5QUUwMi85MUZEcTF2b01MNlR2TmQyMHpLd19WdDRm anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkxRkRxMXZvTUw2VHZOZDIwekt3X1Z0NGZqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTdDMC8wMThFQkU1OEYzMUExMUVBQkMwMENDNUNDNEY5QUUwMi85MUZEcTF2b01M NlR2TmQyMHpLd19WdDRmanMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdgRDR3AX0p6zYKY4tfwsCAL+UigrmxavIbSaWvGvFga7zq0q6Y3uK cbUYfed8/O6Hg665ZDFH8c3g4jS3pXIo1ij7i3HYcjlGqK9KO1Ocz3bZznDgZvY4 +U5lYNd4xudivN8O/0kGCJixOqAcDaM+qyTQJn8buBFjnj598uUWSvRwMwsdd9M0 6ENYwO8gL7xolg8KKJjJKTxx9VmXkrZl/KsWrhpT+wiXC0ciGlKgvBYPeaVcWQ1I ddJYu0nZpBNO0KuAJjYp2JDtrD1NVRRR5F+KZxa6b6S8h+GSfc9eWCCXueA1IZBR Cp3cDUsM2QQeB7q9wgwNvwEz37f7aTBZ -----END CERTIFICATE-----Generated at Sat Apr 26 12:22:50 2025 by rpki-client