$ rpki-client -vvf rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft File: rgDBosA0KnFSg1RO1ltGGGWC8mw.mft (raw, json) Hash identifier: ZMXTrExFomFtLlwympApUXN4Wc0ZHL0u89wwoQPIHVQ= Subject key identifier: 75:8D:9D:31:E3:CF:0C:69:68:89:E4:43:A4:1F:2C:4F:3B:55:41:46 Authority key identifier: AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C Certificate issuer: /CN=A91866D6/serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C Certificate serial: 08F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft Manifest number: 08E3 Signing time: Thu 24 Apr 2025 20:17:15 +0000 Manifest this update: Thu 24 Apr 2025 20:17:14 +0000 Manifest next update: Thu 01 May 2025 20:17:14 +0000 Files and hashes: 1: rgDBosA0KnFSg1RO1ltGGGWC8mw.crl (hash: nApirXf9eD+hNHIzvL+zt1Yr/qioI6OTlB9PAm2evBE=) 2: F99F89E2AAC211EABF603A0BC4F9AE02.roa (hash: 1cgPVh8WdtKfjeGj/rrD5cxiCucmJ6j+98VBK0Krq4o=) 3: 84FDF6D0AABA11EABB84756CC4F9AE02.roa (hash: DfbRrZ2co3f9GeR9Q8AQK2kJs9OcFCrj3LQOWU/ZriY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2288 (0x8f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91866D6, serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C Validity Not Before: Apr 24 20:17:14 2025 GMT Not After : May 1 20:17:14 2025 GMT Subject: CN=680a9c4b-353a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d1:82:85:3f:7d:07:22:8e:0c:1a:0f:4b:0c: 6f:55:79:48:04:02:74:a4:35:aa:ce:08:08:0d:d3: 80:ec:e9:69:9a:a9:34:08:ee:b5:bb:9c:b6:91:60: 4e:d3:25:33:e5:a2:11:a1:41:4f:53:f4:b2:16:7c: 3e:40:63:a4:b9:12:7f:3a:5b:ff:74:5e:43:c8:39: ce:51:45:56:de:67:49:cc:4c:68:ed:b8:cd:90:2f: f7:20:3e:81:c1:30:cb:fc:4e:ca:74:6f:08:3a:81: 8e:f7:44:ea:c1:0f:2c:12:ef:81:cc:ca:b0:0b:35: c7:e5:14:6b:81:e9:f0:c5:1b:be:de:fb:8b:35:ea: 5b:20:86:07:11:79:c6:67:d7:ad:60:9e:ff:27:84: 7f:d7:5f:d3:92:50:0a:f6:75:81:5a:f0:dc:19:6f: b0:b8:7d:f1:05:c1:6b:2b:55:23:5d:6b:13:12:5d: 89:34:b2:76:65:ae:f6:1a:c7:05:bb:80:e0:5c:3d: 0f:61:a0:bb:12:33:e4:bf:4f:e1:27:c0:13:96:66: c6:fb:91:e3:6d:b3:30:a2:51:f0:08:8e:2d:17:d9: 6e:0c:37:24:85:00:37:0b:eb:13:7e:ec:8c:1c:69: 00:85:83:e5:19:89:9f:06:e5:5f:78:00:2a:2f:5d: 28:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:8D:9D:31:E3:CF:0C:69:68:89:E4:43:A4:1F:2C:4F:3B:55:41:46 X509v3 Authority Key Identifier: keyid:AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:8c:d0:c3:23:77:70:f1:0e:42:0e:e9:3f:e7:11:19:6f:9f: 43:52:64:0a:c7:36:3d:98:f9:3d:a4:a2:a1:22:35:9e:6f:0f: c4:83:0c:39:83:e1:4a:8d:64:1d:38:05:8d:45:f8:8e:95:c9: b6:23:b8:e0:f6:06:61:b0:37:46:40:40:69:21:3d:4b:3f:e9: 8b:d1:d7:ec:ce:66:25:8f:d4:01:ce:45:08:77:6c:cb:be:0f: 61:fb:5e:a6:f7:69:d5:d7:90:a9:52:0b:c0:2e:25:83:80:0f: 56:2a:4c:53:45:8f:84:a3:7e:cb:21:b5:32:3f:c2:e0:a0:a6: 50:30:47:ba:a1:a4:32:52:95:ad:1b:42:52:ef:a5:b6:7c:20: 96:f4:a2:80:6c:d9:7f:a9:9c:de:bf:9d:74:49:ee:41:9c:da: 18:f3:23:1a:4d:ee:d0:a2:1a:16:42:09:2a:02:41:0c:5b:b1: 8c:bd:a3:85:0b:f9:b2:dd:8b:28:df:e5:1f:25:67:55:6c:14: 0f:f9:fd:d0:b4:06:23:a8:9d:f9:e1:53:07:63:4e:04:f8:ae: 89:3b:d2:cb:66:9b:9d:fe:d4:c2:11:55:dd:fb:7b:e0:ba:14: aa:94:72:d9:67:40:00:26:82:02:7d:cb:03:4f:71:1c:79:99: 2c:0a:a4:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY2RDYxMTAvBgNVBAUTKEFFMDBDMUEyQzAzNDJBNzE1MjgzNTQ0RUQ2NUI0NjE4 NjU4MkYyNkMwHhcNMjUwNDI0MjAxNzE0WhcNMjUwNTAxMjAxNzE0WjAYMRYwFAYD VQQDEw02ODBhOWM0Yi0zNTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNGChT99ByKODBoPSwxvVXlIBAJ0pDWqzggIDdOA7Olpmqk0CO61u5y2kWBO 0yUz5aIRoUFPU/SyFnw+QGOkuRJ/Olv/dF5DyDnOUUVW3mdJzExo7bjNkC/3ID6B wTDL/E7KdG8IOoGO90TqwQ8sEu+BzMqwCzXH5RRrgenwxRu+3vuLNepbIIYHEXnG Z9etYJ7/J4R/11/TklAK9nWBWvDcGW+wuH3xBcFrK1UjXWsTEl2JNLJ2Za72GscF u4DgXD0PYaC7EjPkv0/hJ8ATlmbG+5HjbbMwolHwCI4tF9luDDckhQA3C+sTfuyM HGkAhYPlGYmfBuVfeAAqL10oEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHWNnTHj zwxpaInkQ6QfLE87VUFGMB8GA1UdIwQYMBaAFK4AwaLANCpxUoNUTtZbRhhlgvJs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjZENi85QTU2Q0MyRUFB QjkxMUVBOTRENjgxNkJDNEY5QUUwMi9yZ0RCb3NBMEtuRlNnMVJPMWx0R0dHV0M4 bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JnREJvc0EwS25GU2cxUk8xbHRHR0dXQzhtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjZENi85QTU2Q0MyRUFBQjkxMUVBOTRENjgxNkJDNEY5QUUwMi9yZ0RCb3NBMEtu RlNnMVJPMWx0R0dHV0M4bXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrjNDDI3dw8Q5CDuk/5xEZb59DUmQKxzY9mPk9pKKhIjWebw/Egww5 g+FKjWQdOAWNRfiOlcm2I7jg9gZhsDdGQEBpIT1LP+mL0dfszmYlj9QBzkUId2zL vg9h+16m92nV15CpUgvALiWDgA9WKkxTRY+Eo37LIbUyP8LgoKZQMEe6oaQyUpWt G0JS76W2fCCW9KKAbNl/qZzev510Se5BnNoY8yMaTe7QohoWQgkqAkEMW7GMvaOF C/my3Yso3+UfJWdVbBQP+f3QtAYjqJ354VMHY04E+K6JO9LLZpud/tTCEVXd+3vg uhSqlHLZZ0AAJoICfcsDT3EceZksCqRi -----END CERTIFICATE-----Generated at Sat Apr 26 13:01:33 2025 by rpki-client