$ rpki-client -vvf rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft File: J23PPyNBrcfQvEbzY0T3FWANmlg.mft (raw, json) Hash identifier: SmtxkuSEMe/7NIINk2KZ2w9UXrxpfANRE3yV0q8vzDw= Subject key identifier: 97:3E:AE:99:8B:A9:94:25:D5:3F:96:E2:ED:32:57:64:53:6F:0E:0D Authority key identifier: 27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 Certificate issuer: /CN=A91A04B9/serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft Manifest number: 36 Signing time: Fri 25 Apr 2025 06:35:17 +0000 Manifest this update: Fri 25 Apr 2025 06:35:17 +0000 Manifest next update: Fri 02 May 2025 06:35:17 +0000 Files and hashes: 1: J23PPyNBrcfQvEbzY0T3FWANmlg.crl (hash: 1VVjgGwI75sq5tjM3V6O6wubgVgYeH/vtpdqwtxAdi8=) 2: 197A8B3CD23611EF9EA7495DC4F9AE02.roa (hash: cWI1CNGvgjuWGw7j5Q/yYWJkIlWwLO+A7fIPZIXhqyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A04B9, serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58 Validity Not Before: Apr 25 06:35:17 2025 GMT Not After : May 2 06:35:17 2025 GMT Subject: CN=680b2d25-f329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b6:c5:78:9d:fa:9a:3a:b4:be:79:cd:8d:92: 5a:18:27:bb:37:0c:3c:d1:3e:b6:d4:b2:b0:e2:1a: 43:4c:bb:5f:e5:2f:ad:6c:f1:b3:e8:70:90:a5:64: 65:6a:89:10:14:69:e8:54:69:29:ee:52:b0:1e:24: fc:f6:a5:97:21:6a:dd:42:ae:aa:67:f5:ea:09:96: 86:e9:3c:22:58:bd:6a:6e:9a:70:85:23:65:8b:29: 57:01:13:0d:09:ee:6e:7c:7b:26:dd:c3:95:3c:80: 35:93:31:5a:17:c1:b2:96:22:51:5e:6b:70:b8:e3: d3:f8:c8:22:9d:56:e8:6a:ff:3c:ce:6b:10:3c:3a: 7c:9b:53:7b:c6:a6:83:0c:a7:c8:47:17:e2:93:c9: ab:4e:d4:7f:01:89:9c:62:ec:38:f1:44:df:c8:ee: 65:23:47:d7:b3:e2:7c:e2:57:db:ef:97:46:19:e7: 48:c2:f7:a1:f2:b7:8d:76:85:e6:49:91:8a:9f:49: 51:da:0c:d6:a1:8f:55:1d:7f:a3:3a:5a:af:67:73: 24:c2:3a:28:a5:64:e4:72:8d:53:50:90:f3:26:34: cf:63:ac:db:9d:87:b4:5f:e0:f6:f6:98:24:3f:d0: 74:06:8f:8a:a9:dd:0c:db:93:11:64:1a:c2:3f:3a: 87:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3E:AE:99:8B:A9:94:25:D5:3F:96:E2:ED:32:57:64:53:6F:0E:0D X509v3 Authority Key Identifier: keyid:27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:3b:12:23:4a:a6:99:ef:bb:8c:6e:f8:8a:a9:ff:59:5c:ef: a5:b5:25:59:41:74:6e:1a:6a:85:4d:8b:67:5b:50:c6:e8:25: 46:6f:96:1b:0f:30:b7:85:4c:4a:e1:45:bf:11:f3:02:55:c0: 9a:99:c2:d5:e7:b6:5d:79:4e:fa:02:13:ef:10:7c:3e:9d:7d: b6:05:16:22:3d:cf:d0:c4:a4:cc:d5:d1:5c:7e:b3:f9:2a:c5: bd:29:70:56:de:fc:22:8b:ce:7d:21:28:19:9d:2e:1d:cd:e6: 46:45:5f:8d:d7:7d:13:f4:70:0f:c7:2a:46:4d:d2:30:b2:20: 06:63:df:80:fa:60:5c:27:9f:32:11:b1:5b:f1:dc:0d:e2:49: 5b:99:3d:71:13:aa:be:09:94:20:08:5c:95:63:ae:63:31:23: a1:cd:be:2a:d2:31:79:d0:7d:fc:30:71:e1:01:65:8f:44:9e: 1f:47:af:cc:b2:21:21:42:ad:f5:02:0d:7e:c4:95:00:44:35: da:5b:02:df:89:c5:e2:ad:b4:57:13:57:58:8d:fe:0e:10:86: 65:65:1c:f1:d6:3a:ae:20:4a:39:ad:d3:cf:f3:ba:5c:08:0f: 3a:7d:4e:15:ab:90:b0:03:a3:6e:51:3d:3c:4d:bb:5b:b9:ec: a4:26:9f:38 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDRCOTExMC8GA1UEBRMoMjc2RENGM0YyMzQxQURDN0QwQkM0NkYzNjM0NEY3MTU2 MDBEOUE1ODAeFw0yNTA0MjUwNjM1MTdaFw0yNTA1MDIwNjM1MTdaMBgxFjAUBgNV BAMTDTY4MGIyZDI1LWYzMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDytsV4nfqaOrS+ec2NkloYJ7s3DDzRPrbUsrDiGkNMu1/lL61s8bPocJClZGVq iRAUaehUaSnuUrAeJPz2pZchat1Crqpn9eoJlobpPCJYvWpumnCFI2WLKVcBEw0J 7m58eybdw5U8gDWTMVoXwbKWIlFea3C449P4yCKdVuhq/zzOaxA8OnybU3vGpoMM p8hHF+KTyatO1H8BiZxi7DjxRN/I7mUjR9ez4nziV9vvl0YZ50jC96Hyt412heZJ kYqfSVHaDNahj1Udf6M6Wq9ncyTCOiilZORyjVNQkPMmNM9jrNudh7Rf4Pb2mCQ/ 0HQGj4qp3QzbkxFkGsI/OodZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlz6umYup lCXVP5bi7TJXZFNvDg0wHwYDVR0jBBgwFoAUJ23PPyNBrcfQvEbzY0T3FWANmlgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwNEI5L0NFODQwNTY4RDIz NTExRUY4RkUyOUM1Q0M0RjlBRTAyL0oyM1BQeU5CcmNmUXZFYnpZMFQzRldBTm1s Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSjIzUFB5TkJyY2ZRdkVielkwVDNGV0FObWxnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw NEI5L0NFODQwNTY4RDIzNTExRUY4RkUyOUM1Q0M0RjlBRTAyL0oyM1BQeU5CcmNm UXZFYnpZMFQzRldBTm1sZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHI7EiNKppnvu4xu+Iqp/1lc76W1JVlBdG4aaoVNi2dbUMboJUZvlhsP MLeFTErhRb8R8wJVwJqZwtXntl15TvoCE+8QfD6dfbYFFiI9z9DEpMzV0Vx+s/kq xb0pcFbe/CKLzn0hKBmdLh3N5kZFX43XfRP0cA/HKkZN0jCyIAZj34D6YFwnnzIR sVvx3A3iSVuZPXETqr4JlCAIXJVjrmMxI6HNvirSMXnQffwwceEBZY9Enh9Hr8yy ISFCrfUCDX7ElQBENdpbAt+JxeKttFcTV1iN/g4QhmVlHPHWOq4gSjmt08/zulwI Dzp9ThWrkLADo25RPTxNu1u57KQmnzg= -----END CERTIFICATE-----Generated at Sat Apr 26 12:34:38 2025 by rpki-client