$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft File: fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft (raw, json) Hash identifier: zT0tune+X+YadG36ZaCNZnEWwwDZrNlfu+4QEIBA4ag= Subject key identifier: 92:E0:D5:E7:32:97:D8:4E:D6:67:B2:43:E3:22:73:57:D2:98:DA:BC Authority key identifier: 7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA Certificate issuer: /CN=A91AB92D/serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft Manifest number: 0194 Signing time: Fri 25 Apr 2025 02:38:02 +0000 Manifest this update: Fri 25 Apr 2025 02:38:01 +0000 Manifest next update: Fri 02 May 2025 02:38:01 +0000 Files and hashes: 1: fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl (hash: DH0WLG9FXv9bLvXMeshUyUi6fxopcWQSyntxAZAoOVQ=) 2: 99B10EC4BD3511ED837DED0DC4F9AE02.roa (hash: VjsdP0zlKHnuUM/QDxE6pyiIHcCSV1/bdfYwggvcPkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB92D, serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA Validity Not Before: Apr 25 02:38:01 2025 GMT Not After : May 2 02:38:01 2025 GMT Subject: CN=680af589-a7e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:09:5f:44:c1:9d:b1:b4:0c:d9:f9:85:6c:41: d3:92:89:b9:5f:86:f6:50:45:0c:07:69:95:fd:55: f3:10:a6:31:7b:b0:2e:1e:d0:03:14:43:c3:db:37: 62:eb:dc:e2:94:e2:ea:55:2e:57:20:d8:85:2e:65: 01:d4:48:8e:45:8a:4e:55:ee:6d:cc:dc:60:eb:70: 59:94:3c:46:1b:09:73:f9:75:49:54:7a:ec:ab:04: 3f:d9:16:d5:da:5b:6b:75:83:c2:8a:55:99:c5:de: 04:bf:07:84:23:0d:ac:c0:af:ce:7d:82:4c:a9:51: f2:70:c7:8c:9f:76:76:66:4a:f7:84:b6:e4:17:c7: 4c:8d:64:6e:e1:23:a8:f1:87:21:8b:2e:75:b9:bb: 1a:4b:3c:b1:1c:80:a9:b2:bc:3e:d7:4a:40:d5:13: 0e:59:c6:f0:5a:23:a4:d2:b5:e8:81:24:76:20:a1: 88:6a:1d:a4:71:5d:7a:3e:07:90:72:a4:5c:3d:b9: 40:d7:99:72:f3:32:43:02:70:5b:e7:f8:f0:0d:fb: d0:bb:13:1f:96:f2:9a:91:c1:e3:fc:24:b6:6d:05: 2e:3a:63:ad:5f:5f:92:bf:e8:bc:e6:99:5e:7e:33: a5:f6:bd:e0:fc:bb:c8:a7:f3:f0:d0:0f:71:4c:a3: 7f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E0:D5:E7:32:97:D8:4E:D6:67:B2:43:E3:22:73:57:D2:98:DA:BC X509v3 Authority Key Identifier: keyid:7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:55:df:b0:a3:4f:c2:2c:cd:5e:4a:d3:b8:3f:73:1b:bb:c0: c1:c9:8b:cf:13:3d:6a:46:1c:6c:f7:a4:ed:40:49:18:b8:9f: 90:be:6b:0d:55:a0:bd:5b:c3:be:06:1d:50:81:52:1f:88:59: ef:f0:95:62:dc:52:37:96:b3:36:72:f9:de:21:8b:60:84:f4: 7f:0e:c0:4e:09:3d:34:95:5d:b5:bf:1e:66:e2:48:f0:61:79: b0:50:04:ee:2d:dd:25:d6:8c:45:60:8a:3a:f3:18:9b:23:60: 9b:bd:47:d8:5d:10:18:f2:a7:42:03:5e:ac:b0:a0:cc:5e:f4: b2:5f:24:03:a2:2e:a1:0d:5d:bd:8c:94:95:b9:0d:96:19:d8: 5a:f4:c7:80:37:06:e4:79:63:a8:01:de:36:f5:f3:2f:9f:c4: 31:cc:52:d8:ae:10:55:25:32:bf:49:26:49:9e:4c:ad:04:95: 16:d5:f6:56:c5:77:28:d2:3f:58:86:67:56:c8:b0:94:1b:8e: da:84:7e:1b:a5:6d:62:0d:7c:a1:26:d0:4b:dc:a5:72:af:35: d3:bb:75:ba:24:0d:95:ff:3f:0a:01:63:de:0d:c1:20:de:4f: 98:32:36:23:fa:39:54:fd:30:ec:17:f5:b0:b5:8b:66:ff:a7: 96:d6:69:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI5MkQxMTAvBgNVBAUTKDdERDg1RUM0Mzk3ODZGRDQyRTBCRjdCNzIxMzc3NjVG MDVEMEU5RkEwHhcNMjUwNDI1MDIzODAxWhcNMjUwNTAyMDIzODAxWjAYMRYwFAYD VQQDEw02ODBhZjU4OS1hN2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoAlfRMGdsbQM2fmFbEHTkom5X4b2UEUMB2mV/VXzEKYxe7AuHtADFEPD2zdi 69zilOLqVS5XINiFLmUB1EiORYpOVe5tzNxg63BZlDxGGwlz+XVJVHrsqwQ/2RbV 2ltrdYPCilWZxd4EvweEIw2swK/OfYJMqVHycMeMn3Z2Zkr3hLbkF8dMjWRu4SOo 8Ychiy51ubsaSzyxHICpsrw+10pA1RMOWcbwWiOk0rXogSR2IKGIah2kcV16PgeQ cqRcPblA15ly8zJDAnBb5/jwDfvQuxMflvKakcHj/CS2bQUuOmOtX1+Sv+i85ple fjOl9r3g/LvIp/Pw0A9xTKN/lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLg1ecy l9hO1meyQ+Mic1fSmNq8MB8GA1UdIwQYMBaAFH3YXsQ5eG/ULgv3tyE3dl8F0On6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjkyRC82QkUyQ0FEMEJE MzIxMUVEODRBODI4MDlDNEY5QUUwMi9mZGhleERsNGI5UXVDX2UzSVRkMlh3WFE2 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkaGV4RGw0YjlRdUNfZTNJVGQyWHdYUTZmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjkyRC82QkUyQ0FEMEJEMzIxMUVEODRBODI4MDlDNEY5QUUwMi9mZGhleERsNGI5 UXVDX2UzSVRkMlh3WFE2Zm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaVd+wo0/CLM1eStO4P3Mbu8DByYvPEz1qRhxs96TtQEkYuJ+QvmsN VaC9W8O+Bh1QgVIfiFnv8JVi3FI3lrM2cvneIYtghPR/DsBOCT00lV21vx5m4kjw YXmwUATuLd0l1oxFYIo68xibI2CbvUfYXRAY8qdCA16ssKDMXvSyXyQDoi6hDV29 jJSVuQ2WGdha9MeANwbkeWOoAd429fMvn8QxzFLYrhBVJTK/SSZJnkytBJUW1fZW xXco0j9YhmdWyLCUG47ahH4bpW1iDXyhJtBL3KVyrzXTu3W6JA2V/z8KAWPeDcEg 3k+YMjYj+jlU/TDsF/WwtYtm/6eW1mkT -----END CERTIFICATE-----Generated at Sat Apr 26 19:10:52 2025 by rpki-client