$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft File: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft (raw, json) Hash identifier: bnMwtcZI9c2jE18JSW4Apc4O5dc7KmbrqXJW9AJrbFo= Subject key identifier: C3:57:6E:8D:55:B5:3E:EE:00:65:1D:D6:36:01:94:9E:50:20:8C:78 Authority key identifier: B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04 Certificate issuer: /CN=A91A9197/serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504 Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft Manifest number: 0164 Signing time: Fri 25 Apr 2025 03:06:59 +0000 Manifest this update: Fri 25 Apr 2025 03:06:58 +0000 Manifest next update: Fri 02 May 2025 03:06:58 +0000 Files and hashes: 1: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl (hash: EgEh5RLawWUxAQ+iTGpE0QQ+p6s5WuMK9rmZsnfBzwM=) 2: F4260C1C68DC11EE842D825BC4F9AE02.roa (hash: ZHAMruYyeptNNpeohfIoYoif7sb87BSzSS5PG7gezGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9197, serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504 Validity Not Before: Apr 25 03:06:58 2025 GMT Not After : May 2 03:06:58 2025 GMT Subject: CN=680afc52-6218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:96:0f:11:b0:cd:85:5c:7a:48:5c:7b:81:80: 97:57:4a:f0:36:29:8e:62:bd:2a:49:25:e9:12:72: 1e:64:1d:6d:41:b7:88:90:df:15:e7:30:14:a6:f6: a0:80:cf:b9:d0:bc:e6:31:ba:d7:cb:83:84:a1:9a: 06:7e:08:36:58:d9:18:3c:c1:ba:7e:84:1f:36:fa: 2c:0d:3c:7a:a8:ff:34:1b:99:76:67:3a:48:22:ca: d9:a3:aa:e6:3f:c7:ef:5c:a9:4f:07:06:83:29:7b: 5e:80:0a:d1:e3:43:54:25:e1:57:b6:a4:0a:ff:a5: 19:75:e3:76:1a:58:90:c9:0f:a5:2f:87:ec:e0:7a: 79:50:5e:d6:75:3c:ab:3f:19:6b:04:34:c6:f1:e7: df:ab:96:35:d2:ad:0b:e7:bf:ca:c2:f4:ee:41:28: d4:22:4f:24:59:2b:56:70:f5:b9:6f:bd:d9:4d:5b: 14:a0:d6:cd:cc:32:f8:c9:4e:f6:15:e0:29:66:23: 7e:9a:ca:a6:b2:a7:91:4a:d7:df:7c:94:2d:a1:03: b0:35:ec:e9:42:08:35:60:0e:ec:e9:f7:8a:6a:1d: 26:0d:c6:8d:c9:6f:27:d1:6b:c4:07:70:88:b2:99: bd:30:8d:68:a9:70:1d:3f:ab:1b:70:7f:1f:80:a8: 3f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:57:6E:8D:55:B5:3E:EE:00:65:1D:D6:36:01:94:9E:50:20:8C:78 X509v3 Authority Key Identifier: keyid:B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:b6:20:c4:eb:c6:3f:c7:d5:7d:2e:38:b1:8b:50:be:9a:ae: 83:b8:64:a9:49:f4:85:78:25:46:6e:8c:8b:96:96:4a:fa:80: 83:a6:65:1a:34:07:1a:16:04:26:db:76:17:82:a0:fa:e4:61: 37:96:f8:55:f3:5c:f6:da:c2:2e:7e:05:51:0e:f5:0a:6e:42: 3a:4a:c6:e8:92:2d:96:0d:40:e7:12:9b:e1:ec:64:1b:cd:18: d8:35:f2:a5:9a:36:89:84:cf:9e:9d:76:53:29:ce:18:9f:12: e3:52:5a:ac:51:40:05:01:b3:ff:1c:de:64:b8:09:a1:be:60: ca:e8:76:bd:b1:ae:38:a1:3c:05:37:88:14:39:39:70:8d:c0: 7a:bd:83:bf:03:6e:2f:b1:65:8f:1f:56:22:19:64:96:16:46: 1d:ce:e2:6e:e5:c6:d4:41:40:2b:59:95:be:31:d0:b1:31:41: 64:9a:a6:96:2c:25:57:a4:d9:5e:51:0d:4e:3d:99:6f:bc:1c: 7f:6a:f2:e9:87:35:25:96:54:65:6b:fe:31:7c:37:86:44:58: 29:01:9e:c0:04:0f:df:12:2e:41:f7:51:dd:71:80:2a:d4:f2: 1f:94:35:40:57:f3:94:2f:2a:39:f0:29:97:04:1f:86:11:51: 71:8a:66:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxOTcxMTAvBgNVBAUTKEI3RkU2QTQyNERCNTY1MjYxQjQ3M0E3MTIzMUQ1OUUy MThEQzQ1MDQwHhcNMjUwNDI1MDMwNjU4WhcNMjUwNTAyMDMwNjU4WjAYMRYwFAYD VQQDEw02ODBhZmM1Mi02MjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmpYPEbDNhVx6SFx7gYCXV0rwNimOYr0qSSXpEnIeZB1tQbeIkN8V5zAUpvag gM+50LzmMbrXy4OEoZoGfgg2WNkYPMG6foQfNvosDTx6qP80G5l2ZzpIIsrZo6rm P8fvXKlPBwaDKXtegArR40NUJeFXtqQK/6UZdeN2GliQyQ+lL4fs4Hp5UF7WdTyr PxlrBDTG8effq5Y10q0L57/KwvTuQSjUIk8kWStWcPW5b73ZTVsUoNbNzDL4yU72 FeApZiN+msqmsqeRStfffJQtoQOwNezpQgg1YA7s6feKah0mDcaNyW8n0WvEB3CI spm9MI1oqXAdP6sbcH8fgKg/wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNXbo1V tT7uAGUd1jYBlJ5QIIx4MB8GA1UdIwQYMBaAFLf+akJNtWUmG0c6cSMdWeIY3EUE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTE5Ny80RjNDNzk4QTA2 OUQxMUVFQjg3OThEMTRDNEY5QUUwMi90XzVxUWsyMVpTWWJSenB4SXgxWjRoamNS UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RfNXFRazIxWlNZYlJ6cHhJeDFaNGhqY1JRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTE5Ny80RjNDNzk4QTA2OUQxMUVFQjg3OThEMTRDNEY5QUUwMi90XzVxUWsyMVpT WWJSenB4SXgxWjRoamNSUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBptiDE68Y/x9V9Ljixi1C+mq6DuGSpSfSFeCVGboyLlpZK+oCDpmUa NAcaFgQm23YXgqD65GE3lvhV81z22sIufgVRDvUKbkI6Ssboki2WDUDnEpvh7GQb zRjYNfKlmjaJhM+enXZTKc4YnxLjUlqsUUAFAbP/HN5kuAmhvmDK6Ha9sa44oTwF N4gUOTlwjcB6vYO/A24vsWWPH1YiGWSWFkYdzuJu5cbUQUArWZW+MdCxMUFkmqaW LCVXpNleUQ1OPZlvvBx/avLphzUlllRla/4xfDeGRFgpAZ7ABA/fEi5B91HdcYAq 1PIflDVAV/OULyo58CmXBB+GEVFximYG -----END CERTIFICATE-----Generated at Sat Apr 26 17:13:45 2025 by rpki-client