$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft File: csG8nD23m0PzVvI_lWiEjJz7jdU.mft (raw, json) Hash identifier: OP6z3TbuIxz4T1zqzcLSKOeL2DjmSDvd3qfJjIhTYFY= Subject key identifier: 43:16:87:B0:6A:54:97:18:E9:AC:E9:4D:88:72:53:32:BD:26:4F:44 Authority key identifier: 72:C1:BC:9C:3D:B7:9B:43:F3:56:F2:3F:95:68:84:8C:9C:FB:8D:D5 Certificate issuer: /CN=A91820CE/serialNumber=72C1BC9C3DB79B43F356F23F9568848C9CFB8DD5 Certificate serial: 0691 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft Manifest number: 068B Signing time: Thu 24 Apr 2025 22:03:28 +0000 Manifest this update: Thu 24 Apr 2025 22:03:27 +0000 Manifest next update: Thu 01 May 2025 22:03:27 +0000 Files and hashes: 1: csG8nD23m0PzVvI_lWiEjJz7jdU.crl (hash: laEmaybjxLp2jNpRYuoyehGzD9U4dkQ/+BMkckM4A+A=) 2: EB292D8A6BF811EB8E899650C4F9AE02.roa (hash: QHZWlLh2PyAY4WTgaNICz7qTAAizZpA7yqBBQ8slHlk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.crl rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1681 (0x691) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91820CE, serialNumber=72C1BC9C3DB79B43F356F23F9568848C9CFB8DD5 Validity Not Before: Apr 24 22:03:27 2025 GMT Not After : May 1 22:03:27 2025 GMT Subject: CN=680ab52f-5791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:35:fd:bf:91:75:7e:14:d6:70:31:65:86:79: a9:59:c3:af:20:13:fa:00:5e:76:9c:c9:cb:4a:b1: a5:6e:c7:a4:ee:fe:e3:e8:69:d3:69:9e:f7:53:11: e0:cc:ee:65:7d:c6:c5:5c:4a:fb:1e:e5:a4:50:bb: be:da:31:34:75:81:d1:4d:19:1f:6c:b0:1f:34:e1: cf:ef:28:d8:d1:ca:cf:d7:05:13:e5:06:a5:c9:8d: 04:67:9a:ef:8c:30:e4:04:f6:b2:ed:18:a4:92:7a: 4f:38:07:d7:49:b6:de:97:ab:a4:6f:d5:b4:fa:60: c2:89:d6:4f:13:29:e7:34:4f:69:f1:05:40:b3:7f: 3d:76:11:67:76:25:43:14:26:c9:be:ca:7b:be:c9: 6f:ef:9a:d7:db:40:01:c8:d7:32:14:cd:05:42:b4: 83:5f:0e:8e:a6:b3:2e:7b:36:e9:aa:df:dd:0e:28: 68:ac:df:f1:0c:30:23:ec:04:85:3e:ba:d8:54:87: 0c:96:d2:c7:d6:2e:77:dc:89:08:b6:eb:74:05:3b: d1:9a:1e:9b:cf:92:6a:ef:56:a1:d5:0a:d3:04:a3: d0:1e:d2:e3:56:db:24:cd:dc:6e:f5:48:0b:34:bf: 2a:be:78:ce:e5:6b:3a:d9:ae:92:bc:ce:e4:10:6f: 2a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:16:87:B0:6A:54:97:18:E9:AC:E9:4D:88:72:53:32:BD:26:4F:44 X509v3 Authority Key Identifier: keyid:72:C1:BC:9C:3D:B7:9B:43:F3:56:F2:3F:95:68:84:8C:9C:FB:8D:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:ee:c5:0f:e9:df:ef:60:8d:d0:fb:c5:1f:93:14:0b:f7:8e: 8e:46:5e:2a:e5:7e:6b:bd:51:e0:70:b6:1e:18:61:ff:af:d5: d6:1e:d1:b8:df:4c:24:e3:aa:58:d3:7e:30:4b:64:63:06:20: 37:24:2c:73:46:f0:b2:3e:03:d2:85:de:5e:e4:c0:40:6e:9a: 8d:9c:66:a5:74:4d:a2:03:8a:db:ba:39:e8:ff:f9:58:4d:c3: a0:40:d7:dc:59:1a:f5:bd:45:dc:af:6e:d9:89:45:eb:0a:b1: 22:95:a2:d2:10:07:b0:d3:04:3d:aa:1c:db:ff:62:b5:4d:26: dc:a2:47:ed:19:5d:be:4f:9d:03:3f:b7:d4:37:84:32:ba:62: b3:15:b9:32:f3:8a:78:21:b5:42:9e:ae:38:fa:d7:70:d1:02: 9f:21:0a:c5:c8:44:ed:b3:bf:e6:c6:cd:bb:89:a8:7e:b0:52: 48:bf:8c:13:80:7c:f6:a4:59:b6:59:2a:8e:fa:25:47:e8:e6: a5:5a:46:d5:95:56:fd:96:6a:d0:33:87:4a:6c:d5:c0:11:c3: ab:60:36:83:16:12:07:de:86:4c:e4:0e:8b:b4:b5:05:51:0e: 31:d8:e3:70:2a:19:00:6c:72:b5:56:24:11:5c:b5:89:17:4e: 36:9c:a2:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIwQ0UxMTAvBgNVBAUTKDcyQzFCQzlDM0RCNzlCNDNGMzU2RjIzRjk1Njg4NDhD OUNGQjhERDUwHhcNMjUwNDI0MjIwMzI3WhcNMjUwNTAxMjIwMzI3WjAYMRYwFAYD VQQDEw02ODBhYjUyZi01NzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDX9v5F1fhTWcDFlhnmpWcOvIBP6AF52nMnLSrGlbsek7v7j6GnTaZ73UxHg zO5lfcbFXEr7HuWkULu+2jE0dYHRTRkfbLAfNOHP7yjY0crP1wUT5QalyY0EZ5rv jDDkBPay7RikknpPOAfXSbbel6ukb9W0+mDCidZPEynnNE9p8QVAs389dhFndiVD FCbJvsp7vslv75rX20AByNcyFM0FQrSDXw6OprMuezbpqt/dDihorN/xDDAj7ASF PrrYVIcMltLH1i533IkItut0BTvRmh6bz5Jq71ah1QrTBKPQHtLjVtskzdxu9UgL NL8qvnjO5Ws62a6SvM7kEG8qwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMWh7Bq VJcY6azpTYhyUzK9Jk9EMB8GA1UdIwQYMBaAFHLBvJw9t5tD81byP5VohIyc+43V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjBDRS9CNzMwNjlDNjZC RTkxMUVCQjdENTU2MERDNEY5QUUwMi9jc0c4bkQyM20wUHpWdklfbFdpRWpKejdq ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NzRzhuRDIzbTBQelZ2SV9sV2lFakp6N2pkVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjBDRS9CNzMwNjlDNjZCRTkxMUVCQjdENTU2MERDNEY5QUUwMi9jc0c4bkQyM20w UHpWdklfbFdpRWpKejdqZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz7sUP6d/vYI3Q+8UfkxQL946ORl4q5X5rvVHgcLYeGGH/r9XWHtG4 30wk46pY034wS2RjBiA3JCxzRvCyPgPShd5e5MBAbpqNnGaldE2iA4rbujno//lY TcOgQNfcWRr1vUXcr27ZiUXrCrEilaLSEAew0wQ9qhzb/2K1TSbcokftGV2+T50D P7fUN4QyumKzFbky84p4IbVCnq44+tdw0QKfIQrFyETts7/mxs27iah+sFJIv4wT gHz2pFm2WSqO+iVH6OalWkbVlVb9lmrQM4dKbNXAEcOrYDaDFhIH3oZM5A6LtLUF UQ4x2ONwKhkAbHK1ViQRXLWJF042nKLd -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:11 2025 by rpki-client