$ rpki-client -vvf rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft File: rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft (raw, json) Hash identifier: Set7EBJciihD+5FFlPZ3UDBRnCCTglRMUjT82fOOt6M= Subject key identifier: 31:EB:94:75:2D:56:BC:D1:75:9A:57:68:FF:EE:69:0D:5D:6D:F8:EC Authority key identifier: AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F Certificate issuer: /CN=A91A83B4/serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F Certificate serial: 03E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft Manifest number: 03D5 Signing time: Fri 25 Apr 2025 00:24:23 +0000 Manifest this update: Fri 25 Apr 2025 00:24:23 +0000 Manifest next update: Fri 02 May 2025 00:24:23 +0000 Files and hashes: 1: rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl (hash: jEYs+WUCWBSln6EBBF8cRzNJH8AeOiWU0GQiM7+VHyU=) 2: A98BD3DE91F211ECA28ADD36C4F9AE02.roa (hash: aC9p2yyQTb3Yh1HdZsc4PLjnJ/5VSg4x8HrvxdVV15Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:24:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 992 (0x3e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A83B4, serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F Validity Not Before: Apr 25 00:24:23 2025 GMT Not After : May 2 00:24:23 2025 GMT Subject: CN=680ad637-c669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a2:8b:ec:cc:d9:6e:d0:8d:99:81:5c:7e:2d: 83:90:b2:f9:95:28:ee:08:6a:22:24:e2:d9:ba:85: 50:f3:e2:e0:d8:21:35:6d:f7:a9:de:98:99:b7:ef: 8e:07:0d:8e:39:e6:b0:66:c6:80:84:bc:65:ea:db: 58:64:8a:62:21:7c:97:d0:40:c3:42:ec:45:5f:93: 68:41:af:33:f1:0c:c2:15:4f:3e:36:13:89:26:a2: 49:1b:28:91:0a:03:8a:5a:1c:46:f8:46:22:f9:ce: 22:c8:f4:20:b0:ec:e4:04:b2:3d:d3:e8:83:55:88: 0b:70:10:26:c3:3f:4d:74:f5:eb:2a:b3:6d:f8:23: 1e:66:74:aa:91:93:82:c6:4a:05:c4:2c:96:ee:19: 97:52:47:fe:6d:58:30:1b:37:41:b3:a5:ae:ad:a6: 60:d2:71:a5:e0:e5:df:00:5a:04:a1:0b:1c:16:87: 0a:bc:c7:f1:d4:5d:4a:15:76:37:aa:65:1e:51:19: 3f:12:9e:48:40:67:3c:57:90:43:33:c3:4d:d3:aa: 0e:e1:37:17:e6:25:a9:25:44:fb:5d:58:88:d0:e3: a5:f8:b8:ee:0b:f7:df:5c:0c:98:94:e0:e5:34:50: 8a:0e:00:72:49:c6:18:d9:91:89:77:6b:ca:16:60: b5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:EB:94:75:2D:56:BC:D1:75:9A:57:68:FF:EE:69:0D:5D:6D:F8:EC X509v3 Authority Key Identifier: keyid:AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:0c:22:8c:a3:6f:2f:a7:6a:07:59:67:1d:44:06:c1:b0:79: 1e:86:60:57:d7:b4:93:24:f8:5c:bc:20:99:41:9c:2d:25:67: 6c:c8:ae:34:c2:e3:33:ff:72:bd:a4:90:9e:de:dd:f7:dd:ba: fc:23:f6:6e:50:d6:19:3e:10:5d:aa:62:5f:6d:d5:be:31:d3: 94:90:3e:aa:59:e0:5d:9f:9a:3f:84:f8:db:cd:0d:36:21:e8: 01:c9:bc:98:18:48:f7:a5:c2:6e:53:e9:be:1e:3b:5f:c6:4f: 56:73:30:68:ae:88:de:26:0b:0a:ec:12:90:cb:56:c0:84:16: cd:71:c0:4e:f1:bd:cf:bd:c4:44:1c:54:55:2a:62:a0:8b:5e: 03:72:20:5f:24:30:44:98:1c:de:c4:8d:38:c5:be:0b:08:e1: 5f:d7:8e:c1:7e:b5:87:65:d9:19:b6:96:38:cb:e0:00:a5:5e: 8a:bc:91:50:fa:d2:91:05:4c:8c:8b:e9:11:a6:14:86:61:a3: cf:16:5f:41:17:26:66:99:2e:b2:f4:44:d8:47:0a:4a:0b:78: 38:ea:d3:c0:fa:23:24:f2:99:5e:c5:4f:c7:d0:92:5e:ab:0d: 96:ee:a2:18:bf:7e:0b:7b:dc:a3:72:bd:6c:df:c1:bc:53:da: a1:b8:23:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgzQjQxMTAvBgNVBAUTKEFFQjgzOUNDQkZBRDVCRDk4QTdBMERBOTA1M0JDMjcy NkYyNjkwNEYwHhcNMjUwNDI1MDAyNDIzWhcNMjUwNTAyMDAyNDIzWjAYMRYwFAYD VQQDEw02ODBhZDYzNy1jNjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3KKL7MzZbtCNmYFcfi2DkLL5lSjuCGoiJOLZuoVQ8+Lg2CE1bfep3piZt++O Bw2OOeawZsaAhLxl6ttYZIpiIXyX0EDDQuxFX5NoQa8z8QzCFU8+NhOJJqJJGyiR CgOKWhxG+EYi+c4iyPQgsOzkBLI90+iDVYgLcBAmwz9NdPXrKrNt+CMeZnSqkZOC xkoFxCyW7hmXUkf+bVgwGzdBs6WuraZg0nGl4OXfAFoEoQscFocKvMfx1F1KFXY3 qmUeURk/Ep5IQGc8V5BDM8NN06oO4TcX5iWpJUT7XViI0OOl+LjuC/ffXAyYlODl NFCKDgByScYY2ZGJd2vKFmC1VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDHrlHUt VrzRdZpXaP/uaQ1dbfjsMB8GA1UdIwQYMBaAFK64Ocy/rVvZinoNqQU7wnJvJpBP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODNCNC9FNzlFRDQ5MDgz RjcxMUVDQTQ3QTYyNjVDNEY5QUUwMi9ycmc1ekwtdFc5bUtlZzJwQlR2Q2NtOG1r RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JyZzV6TC10VzltS2VnMnBCVHZDY204bWtFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODNCNC9FNzlFRDQ5MDgzRjcxMUVDQTQ3QTYyNjVDNEY5QUUwMi9ycmc1ekwtdFc5 bUtlZzJwQlR2Q2NtOG1rRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2DCKMo28vp2oHWWcdRAbBsHkehmBX17STJPhcvCCZQZwtJWdsyK40 wuMz/3K9pJCe3t333br8I/ZuUNYZPhBdqmJfbdW+MdOUkD6qWeBdn5o/hPjbzQ02 IegBybyYGEj3pcJuU+m+Hjtfxk9WczBorojeJgsK7BKQy1bAhBbNccBO8b3PvcRE HFRVKmKgi14DciBfJDBEmBzexI04xb4LCOFf147BfrWHZdkZtpY4y+AApV6KvJFQ +tKRBUyMi+kRphSGYaPPFl9BFyZmmS6y9ETYRwpKC3g46tPA+iMk8plexU/H0JJe qw2W7qIYv34Le9yjcr1s38G8U9qhuCOL -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:16 2025 by rpki-client