$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft File: -Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft (raw, json) Hash identifier: S4GzrzPRNOPVKvmBr0ytmCJhoggvXI/V9se9gs7f5uQ= Subject key identifier: 0C:9C:68:4F:FD:52:0E:C6:6A:10:4C:8D:88:B0:69:8F:C5:21:96:7D Authority key identifier: F9:2A:75:0B:52:47:94:D4:FB:BF:21:88:5B:DA:F6:D0:78:F1:E8:81 Certificate issuer: /CN=A91AA053/serialNumber=F92A750B524794D4FBBF21885BDAF6D078F1E881 Certificate serial: 0720 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft Manifest number: 071B Signing time: Thu 24 Apr 2025 21:39:15 +0000 Manifest this update: Thu 24 Apr 2025 21:39:15 +0000 Manifest next update: Thu 01 May 2025 21:39:15 +0000 Files and hashes: 1: -Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl (hash: a5JIb47cEsqWpK3zuhXGzzlKJJhKj3JoQboZjtZRC+Y=) 2: AD7A378C334411EB901EBB81C4F9AE02.roa (hash: qziDfsPw/gmvbvNR9GeSBAN/K4Vo5CvfMXXnhzWlgBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:39:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1824 (0x720) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA053, serialNumber=F92A750B524794D4FBBF21885BDAF6D078F1E881 Validity Not Before: Apr 24 21:39:15 2025 GMT Not After : May 1 21:39:15 2025 GMT Subject: CN=680aaf83-7b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ea:97:bd:5c:64:62:4a:36:a8:6a:e7:2d:dc: 57:21:9f:f8:ef:74:67:1a:f0:c2:67:e1:46:17:c0: 4e:8e:57:de:89:74:a1:75:9a:e6:57:d9:5a:ad:b4: 42:bf:a1:39:3d:54:f8:e8:0a:df:4f:43:8a:a3:c6: 74:c8:57:73:de:4e:20:66:68:22:96:73:d7:c2:3d: 37:59:d0:d6:ac:51:3a:f4:07:a5:eb:3e:d0:f3:26: 48:d0:3d:2c:95:ea:dd:52:3f:13:cc:b5:c5:6d:df: 56:3b:58:bc:22:04:8b:64:77:da:01:38:e4:47:91: ca:f7:e2:73:d6:5d:e4:e1:a3:57:15:b3:72:96:1a: 05:82:47:da:62:cf:cd:71:26:29:90:88:63:07:44: 15:9f:fe:73:2a:27:b9:04:57:5f:e6:e4:26:20:80: bd:15:53:b8:63:d7:c9:e4:20:00:5d:96:d9:ce:e3: 12:ac:8c:28:e8:87:ee:4e:ec:6a:8c:2e:0e:9d:79: 33:4b:e1:2a:e2:73:a9:3c:bc:b6:a6:f9:33:c1:69: b2:8a:e2:e7:eb:a2:32:1e:05:3f:c8:56:8b:00:e7: 2a:48:12:5d:a6:3d:e1:2f:47:1b:f2:1d:f5:28:dd: 7b:84:1f:c2:f2:5b:e8:b3:ad:b8:1f:93:c6:88:bc: 53:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9C:68:4F:FD:52:0E:C6:6A:10:4C:8D:88:B0:69:8F:C5:21:96:7D X509v3 Authority Key Identifier: keyid:F9:2A:75:0B:52:47:94:D4:FB:BF:21:88:5B:DA:F6:D0:78:F1:E8:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:29:54:92:8f:8e:11:b9:45:13:73:91:ee:1b:ac:c3:77:bb: 3b:4e:89:fb:60:4b:c1:cf:28:57:12:0b:7a:9e:75:87:8b:bb: 9d:24:e9:0e:c5:0d:d7:6f:8b:18:ee:72:e1:90:e1:9b:d8:46: 4d:36:06:50:a0:3f:dd:45:22:c2:42:67:6a:5a:8a:2a:e7:ce: 81:14:5d:31:b7:5c:6d:f3:92:9e:91:03:6e:6c:6f:48:2e:33: 9f:49:f7:dc:5b:f2:00:0e:b7:e0:0b:05:39:f7:e3:96:86:55: bf:5a:17:bd:80:f2:fc:2c:15:0a:6d:0a:89:3f:da:0c:72:79: f2:1a:08:c0:dd:15:f1:20:e5:de:72:6b:57:5a:85:b0:66:17: d8:7d:29:e9:34:ff:cf:41:e9:8a:2d:02:b0:b0:7f:26:f1:07: 2d:4d:ca:42:1e:d3:25:94:0a:28:2c:b7:51:0e:89:87:c4:5e: 0e:c5:9c:92:27:b3:6e:e6:03:1e:ba:77:a5:60:bb:92:a4:56: 2e:48:38:eb:67:28:1a:97:72:fe:43:66:f6:f0:87:82:dc:33: 42:df:d6:53:aa:78:f4:3b:45:20:89:dd:a4:e5:8e:46:35:fb: 2f:61:ad:0c:8f:96:0f:55:21:7a:93:34:e5:bd:b6:65:77:16: a0:75:fe:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUEwNTMxMTAvBgNVBAUTKEY5MkE3NTBCNTI0Nzk0RDRGQkJGMjE4ODVCREFGNkQw NzhGMUU4ODEwHhcNMjUwNDI0MjEzOTE1WhcNMjUwNTAxMjEzOTE1WjAYMRYwFAYD VQQDEw02ODBhYWY4My03YjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOqXvVxkYko2qGrnLdxXIZ/473RnGvDCZ+FGF8BOjlfeiXShdZrmV9larbRC v6E5PVT46ArfT0OKo8Z0yFdz3k4gZmgilnPXwj03WdDWrFE69Ael6z7Q8yZI0D0s lerdUj8TzLXFbd9WO1i8IgSLZHfaATjkR5HK9+Jz1l3k4aNXFbNylhoFgkfaYs/N cSYpkIhjB0QVn/5zKie5BFdf5uQmIIC9FVO4Y9fJ5CAAXZbZzuMSrIwo6IfuTuxq jC4OnXkzS+Eq4nOpPLy2pvkzwWmyiuLn66IyHgU/yFaLAOcqSBJdpj3hL0cb8h31 KN17hB/C8lvos624H5PGiLxThQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAycaE/9 Ug7GahBMjYiwaY/FIZZ9MB8GA1UdIwQYMBaAFPkqdQtSR5TU+78hiFva9tB48eiB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTA1My9BRkI2QkY3NjMz NDMxMUVCQjUzNjVFODFDNEY5QUUwMi8tU3AxQzFKSGxOVDd2eUdJVzlyMjBIang2 SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1TcDFDMUpIbE5UN3Z5R0lXOXIyMEhqeDZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTA1My9BRkI2QkY3NjMzNDMxMUVCQjUzNjVFODFDNEY5QUUwMi8tU3AxQzFKSGxO VDd2eUdJVzlyMjBIang2SUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgKVSSj44RuUUTc5HuG6zDd7s7Ton7YEvBzyhXEgt6nnWHi7udJOkO xQ3Xb4sY7nLhkOGb2EZNNgZQoD/dRSLCQmdqWooq586BFF0xt1xt85KekQNubG9I LjOfSffcW/IADrfgCwU59+OWhlW/Whe9gPL8LBUKbQqJP9oMcnnyGgjA3RXxIOXe cmtXWoWwZhfYfSnpNP/PQemKLQKwsH8m8QctTcpCHtMllAooLLdRDomHxF4OxZyS J7Nu5gMeunelYLuSpFYuSDjrZygal3L+Q2b28IeC3DNC39ZTqnj0O0Ugid2k5Y5G NfsvYa0Mj5YPVSF6kzTlvbZldxagdf7p -----END CERTIFICATE-----Generated at Sat Apr 26 13:11:42 2025 by rpki-client