$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft File: 0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft (raw, json) Hash identifier: zGcLAXzsORrA/jkK7jitbwH1xfFNqEDYwU8SbUdiMxM= Subject key identifier: AF:93:AD:18:05:CF:C1:7B:B8:B9:54:2A:55:17:4A:DA:48:A8:5F:E8 Authority key identifier: D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4 Certificate issuer: /CN=A91AE08E/serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4 Certificate serial: 0884 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft Manifest number: 087A Signing time: Thu 24 Apr 2025 20:30:36 +0000 Manifest this update: Thu 24 Apr 2025 20:30:35 +0000 Manifest next update: Thu 01 May 2025 20:30:35 +0000 Files and hashes: 1: 0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl (hash: yt8Z8o6mJ91//7FVcaapCj5EiSgCGPV+YnhFsxbjP4k=) 2: 6E038820BF6211EA94C2957CC4F9AE02.roa (hash: z3K04y8FAXseRSAao3Z4/OGvZnmija66bg8pyXugrIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2180 (0x884) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE08E, serialNumber=D290DD167222C39B134F81E527F022D85EDF23F4 Validity Not Before: Apr 24 20:30:35 2025 GMT Not After : May 1 20:30:35 2025 GMT Subject: CN=680a9f6c-bb4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cb:de:e4:7c:d8:46:c8:2b:7a:94:82:ee:e0: 5a:87:c8:b3:87:b5:81:86:cf:1d:97:50:10:de:3c: ba:a3:3d:d4:9d:d0:00:40:32:79:33:41:43:b0:3c: e6:9d:01:d1:03:d9:de:3b:c1:be:3f:26:8a:fd:04: 6f:df:dc:e1:57:be:55:2f:08:f0:82:aa:46:4f:b0: b9:2e:57:43:d5:c6:8f:b0:63:f0:1b:b0:50:86:af: 3f:38:9b:0f:f8:0c:a8:70:2c:66:01:fd:8e:15:2f: 9f:80:15:e1:86:e2:25:60:9c:e6:b2:0c:2e:35:5a: 90:61:bf:66:79:54:c7:34:94:70:2a:c1:a5:d8:4c: a2:e8:7e:2f:22:54:bd:d5:46:1b:0e:e1:ca:1a:1e: c4:99:5c:78:2a:a7:e6:de:16:1c:a8:67:62:92:59: 96:b4:8b:2b:ef:6a:3d:62:af:db:42:a1:16:b0:6f: af:10:fa:f5:cd:9c:ce:80:6a:2d:d3:df:35:af:73: 8f:95:1c:20:7e:2d:aa:98:03:25:27:01:5a:ae:76: 37:b3:ba:a5:7a:f9:bd:df:da:3b:93:1f:c2:63:14: 0a:72:d3:fe:5a:df:46:e0:e9:d4:01:92:0a:48:8e: 14:7d:ce:55:ee:1b:8c:fd:fa:cc:9e:c9:a6:7e:cd: 62:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:93:AD:18:05:CF:C1:7B:B8:B9:54:2A:55:17:4A:DA:48:A8:5F:E8 X509v3 Authority Key Identifier: keyid:D2:90:DD:16:72:22:C3:9B:13:4F:81:E5:27:F0:22:D8:5E:DF:23:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE08E/B2A3C23CBF4A11EA8C315D31C4F9AE02/0pDdFnIiw5sTT4HlJ_Ai2F7fI_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:5a:75:5d:c9:c3:e4:d0:d3:fe:4e:ab:23:e9:4c:f4:9b:a3: 85:01:27:b7:be:6f:ab:17:d8:05:ab:8b:cd:c7:f3:bc:d3:77: 03:73:fe:4b:9f:6e:72:8b:ce:8c:cc:67:cc:e9:de:d7:60:9b: 30:63:47:56:87:7f:f9:db:c1:c3:9f:d6:87:91:f3:c1:b0:fa: 73:77:6f:79:79:19:5b:d2:06:5a:0b:26:9f:8d:70:e3:58:0f: 3c:0b:68:9c:f6:83:96:c4:fe:86:c9:cf:b3:b1:de:a5:4f:2d: 1c:c1:ae:79:9f:03:39:0d:fc:11:42:35:e0:2e:89:92:7b:23: 8f:f9:09:8f:68:80:d9:97:ec:79:dc:e7:cd:f1:61:c4:39:ae: 54:bd:a9:94:57:68:d3:f5:d7:f5:60:c1:13:af:6d:f7:9d:ee: 92:cb:a3:cb:ee:3e:ab:d8:e0:e4:b7:c6:6e:fc:54:5e:aa:7f: 8d:93:5b:0f:95:13:4d:fb:0e:fc:7b:49:ce:cb:cc:1d:3c:7d: c5:ed:30:19:d4:65:f3:ac:8b:29:64:e3:52:47:c1:5c:c4:51: d6:1e:73:47:28:96:b1:12:df:1a:4f:e2:89:97:a6:d3:55:86: 1f:3f:01:16:08:18:2a:70:04:aa:17:fb:cb:73:d2:02:fc:ad: 6e:1d:ae:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUwOEUxMTAvBgNVBAUTKEQyOTBERDE2NzIyMkMzOUIxMzRGODFFNTI3RjAyMkQ4 NUVERjIzRjQwHhcNMjUwNDI0MjAzMDM1WhcNMjUwNTAxMjAzMDM1WjAYMRYwFAYD VQQDEw02ODBhOWY2Yy1iYjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcve5HzYRsgrepSC7uBah8izh7WBhs8dl1AQ3jy6oz3UndAAQDJ5M0FDsDzm nQHRA9neO8G+PyaK/QRv39zhV75VLwjwgqpGT7C5LldD1caPsGPwG7BQhq8/OJsP +AyocCxmAf2OFS+fgBXhhuIlYJzmsgwuNVqQYb9meVTHNJRwKsGl2Eyi6H4vIlS9 1UYbDuHKGh7EmVx4Kqfm3hYcqGdiklmWtIsr72o9Yq/bQqEWsG+vEPr1zZzOgGot 0981r3OPlRwgfi2qmAMlJwFarnY3s7qlevm939o7kx/CYxQKctP+Wt9G4OnUAZIK SI4Ufc5V7huM/frMnsmmfs1i3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+TrRgF z8F7uLlUKlUXStpIqF/oMB8GA1UdIwQYMBaAFNKQ3RZyIsObE0+B5SfwIthe3yP0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTA4RS9CMkEzQzIzQ0JG NEExMUVBOEMzMTVEMzFDNEY5QUUwMi8wcERkRm5JaXc1c1RUNEhsSl9BaTJGN2ZJ X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBwRGRGbklpdzVzVFQ0SGxKX0FpMkY3ZklfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTA4RS9CMkEzQzIzQ0JGNEExMUVBOEMzMTVEMzFDNEY5QUUwMi8wcERkRm5JaXc1 c1RUNEhsSl9BaTJGN2ZJX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrWnVdycPk0NP+Tqsj6Uz0m6OFASe3vm+rF9gFq4vNx/O803cDc/5L n25yi86MzGfM6d7XYJswY0dWh3/528HDn9aHkfPBsPpzd295eRlb0gZaCyafjXDj WA88C2ic9oOWxP6Gyc+zsd6lTy0cwa55nwM5DfwRQjXgLomSeyOP+QmPaIDZl+x5 3OfN8WHEOa5UvamUV2jT9df1YMETr233ne6Sy6PL7j6r2ODkt8Zu/FReqn+Nk1sP lRNN+w78e0nOy8wdPH3F7TAZ1GXzrIspZONSR8FcxFHWHnNHKJaxEt8aT+KJl6bT VYYfPwEWCBgqcASqF/vLc9IC/K1uHa4P -----END CERTIFICATE-----Generated at Sat Apr 26 17:18:55 2025 by rpki-client