$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft File: fSkuhkI7U8Czc7eZZYghkTSp5hA.mft (raw, json) Hash identifier: 0kT+Zpq++KhxpjANhAM7F26PtZvrrs5QcD/AUl0778Q= Subject key identifier: 19:AC:F7:D9:20:C6:75:29:AB:2C:88:F0:3B:C8:28:9A:AE:7C:86:0E Authority key identifier: 7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 Certificate issuer: /CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Certificate serial: 0CCF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft Manifest number: 0CC6 Signing time: Thu 24 Apr 2025 18:06:31 +0000 Manifest this update: Thu 24 Apr 2025 18:06:31 +0000 Manifest next update: Thu 01 May 2025 18:06:31 +0000 Files and hashes: 1: fSkuhkI7U8Czc7eZZYghkTSp5hA.crl (hash: JAzX3ezqFJN11ZHsNB0ZdHa5Vpojl/RoHjSO7R1o1VI=) 2: 7B3163F0072A11EA9E314D4CC4F9AE02.roa (hash: 8KRCIYlWeIU1RFVFOTA+MnkOIQ/xaefXlo2pRQaFi20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3279 (0xccf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3430, serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Validity Not Before: Apr 24 18:06:31 2025 GMT Not After : May 1 18:06:31 2025 GMT Subject: CN=680a7da7-ee1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:75:b0:7f:c6:cc:2a:f3:e8:5c:ce:43:ac:77: d8:a2:31:82:a3:70:ea:bd:6c:2c:6e:ff:ca:8d:86: 17:b9:ea:b7:b9:01:65:ae:5f:fc:70:7a:fc:a1:2b: da:19:8a:84:4e:30:f2:0e:88:d6:a7:3c:55:9d:ad: e7:46:ba:a4:48:bf:c3:99:b0:03:e3:fb:3f:6d:58: ac:1a:4c:e6:07:4f:b7:d7:c4:27:93:76:bf:b9:62: 73:69:a4:4d:2a:4d:ac:39:81:dc:74:5b:7f:f4:2c: 4e:55:60:c5:be:43:37:10:1d:2e:69:4d:92:a8:ba: e9:1b:4a:a3:ae:25:a9:a6:cd:4e:08:70:45:78:ba: 6b:1b:24:4b:35:9a:cb:f1:36:7a:93:43:56:44:07: a3:1e:2f:21:8e:0f:9d:57:11:38:07:7d:cd:35:39: 7f:65:06:78:b0:4b:d7:c8:74:cb:f6:ab:ba:29:73: 6c:27:d5:b7:54:0a:57:c1:de:66:f0:1b:1c:19:de: f9:de:0e:d0:e9:20:83:88:4e:29:73:fe:94:f4:61: ea:92:d5:15:c8:56:ff:70:a7:46:f5:28:9f:63:c1: 86:ef:f1:0e:db:11:51:4e:aa:89:b0:6e:3b:5b:d1: 58:b3:e8:30:23:41:c7:51:bf:6c:ec:9c:2e:07:cb: d5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:AC:F7:D9:20:C6:75:29:AB:2C:88:F0:3B:C8:28:9A:AE:7C:86:0E X509v3 Authority Key Identifier: keyid:7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:23:42:c6:22:46:ef:49:c6:b7:10:28:1d:f4:7c:11:8e:df: 4c:d1:5b:3f:65:c1:74:0c:79:43:52:d7:24:cf:72:47:32:c0: 6f:fa:01:bf:a4:5f:ea:27:67:ab:f1:15:e8:62:47:b0:b3:23: a7:9c:ef:37:1e:33:82:fb:1f:88:16:b9:45:90:d1:f0:e4:25: d6:63:66:fe:96:1b:ec:29:36:b0:13:1e:db:be:81:34:86:e2: 0a:f0:83:29:2c:f2:2a:d1:a0:a1:a0:94:1d:e4:dc:b3:09:6f: 65:1b:df:3b:05:05:d5:95:57:df:09:80:80:46:c3:28:71:af: 8c:7b:33:f0:90:9f:2f:47:c6:9d:23:9d:ca:e7:af:8b:c1:66: 64:70:29:e7:89:83:34:64:33:99:a4:74:8b:52:83:48:ec:70: 81:22:04:31:23:0a:42:14:13:a5:1c:eb:f0:bd:c5:6f:75:b7: cc:6b:70:54:a7:86:06:86:97:2e:cf:8d:a6:e0:cd:c7:93:50: c1:15:1d:65:a9:0b:a9:51:05:68:c2:c4:f9:b1:de:cf:a5:72: 3b:d3:fa:76:8f:f1:36:76:e3:67:9f:0e:9c:71:68:a4:d4:76: bb:26:3e:da:3e:cf:c4:d2:fd:26:8e:f6:9f:2b:b7:8f:c3:1f: 4c:f0:2f:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM0MzAxMTAvBgNVBAUTKDdEMjkyRTg2NDIzQjUzQzBCMzczQjc5OTY1ODgyMTkx MzRBOUU2MTAwHhcNMjUwNDI0MTgwNjMxWhcNMjUwNTAxMTgwNjMxWjAYMRYwFAYD VQQDEw02ODBhN2RhNy1lZTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6nWwf8bMKvPoXM5DrHfYojGCo3DqvWwsbv/KjYYXueq3uQFlrl/8cHr8oSva GYqETjDyDojWpzxVna3nRrqkSL/DmbAD4/s/bVisGkzmB0+318Qnk3a/uWJzaaRN Kk2sOYHcdFt/9CxOVWDFvkM3EB0uaU2SqLrpG0qjriWpps1OCHBFeLprGyRLNZrL 8TZ6k0NWRAejHi8hjg+dVxE4B33NNTl/ZQZ4sEvXyHTL9qu6KXNsJ9W3VApXwd5m 8BscGd753g7Q6SCDiE4pc/6U9GHqktUVyFb/cKdG9SifY8GG7/EO2xFRTqqJsG47 W9FYs+gwI0HHUb9s7JwuB8vVgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBms99kg xnUpqyyI8DvIKJqufIYOMB8GA1UdIwQYMBaAFH0pLoZCO1PAs3O3mWWIIZE0qeYQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzQzMC84NkFDODlEMEU4 N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4Q3pjN2VaWllnaGtUU3A1 aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTa3Voa0k3VThDemM3ZVpaWWdoa1RTcDVoQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzQzMC84NkFDODlEMEU4N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4 Q3pjN2VaWllnaGtUU3A1aEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/I0LGIkbvSca3ECgd9HwRjt9M0Vs/ZcF0DHlDUtckz3JHMsBv+gG/ pF/qJ2er8RXoYkewsyOnnO83HjOC+x+IFrlFkNHw5CXWY2b+lhvsKTawEx7bvoE0 huIK8IMpLPIq0aChoJQd5NyzCW9lG987BQXVlVffCYCARsMoca+MezPwkJ8vR8ad I53K56+LwWZkcCnniYM0ZDOZpHSLUoNI7HCBIgQxIwpCFBOlHOvwvcVvdbfMa3BU p4YGhpcuz42m4M3Hk1DBFR1lqQupUQVowsT5sd7PpXI70/p2j/E2duNnnw6ccWik 1Ha7Jj7aPs/E0v0mjvafK7ePwx9M8C/d -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:37 2025 by rpki-client