$ rpki-client -vvf rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.mft File: 92edhcQsfjk3x9JAjAZ5uVznEXk.mft (raw, json) Hash identifier: J9mAgeAq4Bl08RHab6kuC+K1t9UEqbgcfzQ+P3q6W48= Subject key identifier: D9:1F:23:29:13:09:9C:BB:11:24:F7:E8:B3:D8:0B:E4:92:AE:A7:EE Authority key identifier: F7:67:9D:85:C4:2C:7E:39:37:C7:D2:40:8C:06:79:B9:5C:E7:11:79 Certificate issuer: /CN=A91A82F8/serialNumber=F7679D85C42C7E3937C7D2408C0679B95CE71179 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92edhcQsfjk3x9JAjAZ5uVznEXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.mft Manifest number: 1D Signing time: Fri 25 Apr 2025 06:54:44 +0000 Manifest this update: Fri 25 Apr 2025 06:54:43 +0000 Manifest next update: Fri 02 May 2025 06:54:43 +0000 Files and hashes: 1: 92edhcQsfjk3x9JAjAZ5uVznEXk.crl (hash: RDgbw0h4GYZhqMyWfaveN4UZWc81jk5LNCSbTWA66oY=) 2: 01103988FB5911EF8B32E613C4F9AE02.roa (hash: R1vera/J21wpLzxHOvQ0xtue7DdueGMpTshOHPQT8vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.crl rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92edhcQsfjk3x9JAjAZ5uVznEXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:54:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A82F8, serialNumber=F7679D85C42C7E3937C7D2408C0679B95CE71179 Validity Not Before: Apr 25 06:54:43 2025 GMT Not After : May 2 06:54:43 2025 GMT Subject: CN=680b31b4-1bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fb:f3:1d:7a:bb:06:20:53:6d:8b:11:92:a6: 4a:76:ee:8f:f5:09:b4:0a:31:d9:7b:f8:fa:c8:d3: 97:65:40:06:64:71:7d:f5:33:73:d3:8e:48:22:33: e9:98:f3:ae:bf:25:c5:47:d7:e1:c0:ec:12:6d:5c: 4a:56:16:3b:d9:e3:fd:96:cc:b2:e4:d1:95:c5:a7: 6d:9d:d6:ff:14:30:89:aa:c5:56:6b:6f:5a:2e:44: d9:07:a8:fd:c0:0f:d6:71:f7:64:f9:e7:a8:3f:b2: 01:1b:76:fd:c8:80:a5:46:3d:f8:3a:1e:fc:bd:80: 86:bd:51:4f:d8:be:98:61:14:e2:bc:57:ae:42:38: ee:8e:72:6f:78:d7:c9:5b:9e:a1:b6:3b:2c:98:29: c0:4f:c1:9d:39:db:82:63:af:e0:be:e7:46:84:fc: 84:52:ee:08:10:79:e9:f3:08:75:ca:6c:f4:13:0d: 2a:5f:ef:27:92:3c:41:fb:e6:d1:8a:50:0d:8c:c1: 75:b1:91:59:c9:de:fd:21:d7:d7:a3:70:8c:0c:73: 44:c1:74:e3:f2:cf:18:23:1d:1d:bf:0f:d3:79:20: 48:96:1f:c7:dc:93:22:70:da:af:ca:30:59:80:64: 96:7c:6e:9e:b1:e6:71:23:74:bc:e7:6f:8d:99:5b: fe:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1F:23:29:13:09:9C:BB:11:24:F7:E8:B3:D8:0B:E4:92:AE:A7:EE X509v3 Authority Key Identifier: keyid:F7:67:9D:85:C4:2C:7E:39:37:C7:D2:40:8C:06:79:B9:5C:E7:11:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92edhcQsfjk3x9JAjAZ5uVznEXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:ba:f9:21:a7:9c:2d:f0:96:27:bc:ee:f7:7e:04:7d:14:81: 64:bb:fd:14:42:78:c5:bc:0d:9c:22:27:8f:0f:6c:f2:c3:99: 61:55:d5:10:f0:f2:a6:a2:e7:0a:5e:8b:f4:4c:a9:4f:e3:49: 8c:b9:83:c2:75:fe:f8:5f:92:0c:32:7e:40:41:e2:60:5c:3b: 40:75:2f:29:cc:80:94:a7:c0:7f:77:90:69:74:b8:92:04:38: 6d:3e:6b:f8:7a:11:29:55:5c:6d:f5:6f:7e:75:e0:f8:45:7f: 02:5b:2e:3c:79:6d:4d:8d:98:bb:da:14:e3:6a:35:3f:8c:47: 49:09:f7:20:d5:ba:2d:03:24:0e:14:de:a6:8e:22:59:e2:a7: 5e:20:e8:a6:89:28:87:d5:75:7b:16:33:84:1d:3c:87:9d:90: 11:4e:da:c4:a6:6a:ee:08:6e:ba:d7:98:d7:a3:7b:e6:6a:fc: 2c:77:a3:a7:59:f7:e1:7b:09:0a:c8:df:9e:7e:76:5f:f3:1c: 09:64:9a:ef:75:78:a7:c3:f3:f9:50:e0:2c:18:83:96:47:2b: 93:35:43:ec:7d:86:fc:b5:03:20:d9:e9:3e:8b:29:44:7f:81: d6:86:4f:92:fa:c4:68:e0:eb:d6:63:8b:c1:f9:ca:60:f8:db: 94:44:1e:a5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB ODJGODExMC8GA1UEBRMoRjc2NzlEODVDNDJDN0UzOTM3QzdEMjQwOEMwNjc5Qjk1 Q0U3MTE3OTAeFw0yNTA0MjUwNjU0NDNaFw0yNTA1MDIwNjU0NDNaMBgxFjAUBgNV BAMTDTY4MGIzMWI0LTFiZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3+/MdersGIFNtixGSpkp27o/1CbQKMdl7+PrI05dlQAZkcX31M3PTjkgiM+mY 866/JcVH1+HA7BJtXEpWFjvZ4/2WzLLk0ZXFp22d1v8UMImqxVZrb1ouRNkHqP3A D9Zx92T556g/sgEbdv3IgKVGPfg6Hvy9gIa9UU/YvphhFOK8V65COO6Ocm9418lb nqG2OyyYKcBPwZ0524Jjr+C+50aE/IRS7ggQeenzCHXKbPQTDSpf7yeSPEH75tGK UA2MwXWxkVnJ3v0h19ejcIwMc0TBdOPyzxgjHR2/D9N5IEiWH8fckyJw2q/KMFmA ZJZ8bp6x5nEjdLznb42ZW/6TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2R8jKRMJ nLsRJPfos9gL5JKup+4wHwYDVR0jBBgwFoAU92edhcQsfjk3x9JAjAZ5uVznEXkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4MkY4L0JDQjgyNzhDRkI1 ODExRUZCMzJDRkQxMkM0RjlBRTAyLzkyZWRoY1FzZmprM3g5SkFqQVo1dVZ6bkVY ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOTJlZGhjUXNmamszeDlKQWpBWjV1VnpuRVhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4 MkY4L0JDQjgyNzhDRkI1ODExRUZCMzJDRkQxMkM0RjlBRTAyLzkyZWRoY1FzZmpr M3g5SkFqQVo1dVZ6bkVYay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEa6+SGnnC3wlie87vd+BH0UgWS7/RRCeMW8DZwiJ48PbPLDmWFV1RDw 8qai5wpei/RMqU/jSYy5g8J1/vhfkgwyfkBB4mBcO0B1LynMgJSnwH93kGl0uJIE OG0+a/h6ESlVXG31b3514PhFfwJbLjx5bU2NmLvaFONqNT+MR0kJ9yDVui0DJA4U 3qaOIlnip14g6KaJKIfVdXsWM4QdPIedkBFO2sSmau4IbrrXmNeje+Zq/Cx3o6dZ 9+F7CQrI355+dl/zHAlkmu91eKfD8/lQ4CwYg5ZHK5M1Q+x9hvy1AyDZ6T6LKUR/ gdaGT5L6xGjg69Zji8H5ymD425REHqU= -----END CERTIFICATE-----Generated at Sat Apr 26 03:59:05 2025 by rpki-client