$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft File: _-G3qHKaDsu-yLL9mpe3SCbM28U.mft (raw, json) Hash identifier: asJpIoRxauNYZo00DXFKXbRiaXhDBD4EODYJoqPFYNc= Subject key identifier: 4B:5B:53:EE:7E:0C:7F:E4:84:4F:7B:C0:D0:E3:52:DB:9F:A2:71:53 Authority key identifier: FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5 Certificate issuer: /CN=A91AE3F2/serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5 Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft Manifest number: 01E5 Signing time: Fri 25 Apr 2025 01:53:50 +0000 Manifest this update: Fri 25 Apr 2025 01:53:50 +0000 Manifest next update: Fri 02 May 2025 01:53:50 +0000 Files and hashes: 1: _-G3qHKaDsu-yLL9mpe3SCbM28U.crl (hash: eeh01GRAS5dy9YNrtIgbZ3i6JclxHiGJtdwwBnBlMLM=) 2: EEA8968C461A11ED898DD14FC4F9AE02.roa (hash: xvgbQt4eEZhtv3D2xw3qg4iJxZwYxghUdqa6K5JPB6M=) 3: 41669A1AFA7111EFBBC5374BC4F9AE02.roa (hash: xErCMLXYoA0hL6AVT+7fD9OFndfuVCyqiiQ1j2stZZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE3F2, serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5 Validity Not Before: Apr 25 01:53:50 2025 GMT Not After : May 2 01:53:50 2025 GMT Subject: CN=680aeb2e-c0ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7e:b2:8c:e0:7c:9c:8c:8d:92:60:a4:be:a7: 57:e6:1e:87:c5:1b:7f:72:ef:6b:f8:e1:6b:d2:f4: cd:70:11:c3:ac:f9:94:ab:3d:b4:96:80:14:ef:b8: 0d:09:86:06:09:54:8a:20:36:da:9e:52:fc:1a:ad: 84:90:e5:6b:db:18:80:18:e9:e9:c0:ac:65:10:2c: 01:28:a5:0b:51:e6:7b:d2:c2:a2:b7:92:d9:5a:92: c5:78:3e:01:61:71:6f:3c:18:be:5e:3c:e9:8a:20: ec:78:fb:e4:cd:c9:41:b6:9c:97:22:72:4c:6c:ca: 3d:47:07:b3:21:43:0e:d9:bd:28:49:0e:5d:c2:25: 3d:d3:13:65:1a:6b:6e:af:5e:99:46:5a:36:3a:75: 15:d6:71:0a:c9:08:46:c6:f5:75:f6:e5:e6:84:be: b1:f1:67:38:cd:d7:92:50:ef:61:e2:f0:c9:01:d8: b9:45:8f:16:87:27:74:70:2c:83:36:a9:83:d3:da: 07:6d:81:2b:52:9e:92:84:08:26:49:4a:64:a8:d3: 2d:0f:e2:78:22:5e:e0:95:eb:6f:63:83:c0:ea:b5: 3d:23:a9:22:6e:51:22:40:8c:61:a7:2b:6b:26:49: 10:5c:38:f9:c7:5b:58:38:3f:60:2c:0a:53:ab:aa: ee:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5B:53:EE:7E:0C:7F:E4:84:4F:7B:C0:D0:E3:52:DB:9F:A2:71:53 X509v3 Authority Key Identifier: keyid:FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:81:6a:fd:86:dc:41:79:fd:1f:da:6a:fe:f1:96:c5:24:da: 82:d2:23:36:18:25:01:ed:ad:b4:e9:06:1a:98:e2:09:b8:e5: b6:12:da:3c:79:a2:69:18:01:aa:61:9f:a6:ea:d7:98:5b:e1: db:1b:9b:d8:5a:20:68:32:dc:2d:66:a2:dd:f7:da:6a:59:b4: 14:ed:2d:c7:c3:f1:91:8e:db:d3:d1:df:ab:0b:ba:91:cb:8c: 44:28:6c:80:6a:53:6d:17:78:35:c9:29:b5:56:30:82:40:8c: 9a:44:c8:98:48:9a:64:df:b8:38:4a:48:ac:27:72:90:d3:55: 5a:5b:00:ec:ce:64:21:fc:69:cb:50:ef:78:6c:81:9a:38:ae: 71:b5:24:d2:94:36:44:e6:5d:a8:35:bb:d6:af:9c:11:2b:a9: 70:e5:b2:71:f3:e2:c8:c8:37:a4:81:3c:5b:26:7a:0b:d5:2e: 1d:4c:60:d3:88:a6:8b:5f:48:00:83:af:ba:2f:3d:13:8d:0f: 29:70:60:06:b6:2a:42:7e:6f:a2:ba:b7:26:d9:ff:d4:d5:f1: 80:67:97:39:96:e2:e7:82:ad:68:b5:f6:b1:20:9c:1a:cc:6a: c3:92:34:a1:c3:0c:6f:5a:4b:2e:3a:f1:a4:f4:69:e8:5f:55: e7:6f:a2:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUzRjIxMTAvBgNVBAUTKEZGRTFCN0E4NzI5QTBFQ0JCRUM4QjJGRDlBOTdCNzQ4 MjZDQ0RCQzUwHhcNMjUwNDI1MDE1MzUwWhcNMjUwNTAyMDE1MzUwWjAYMRYwFAYD VQQDEw02ODBhZWIyZS1jMGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1n6yjOB8nIyNkmCkvqdX5h6HxRt/cu9r+OFr0vTNcBHDrPmUqz20loAU77gN CYYGCVSKIDbanlL8Gq2EkOVr2xiAGOnpwKxlECwBKKULUeZ70sKit5LZWpLFeD4B YXFvPBi+XjzpiiDsePvkzclBtpyXInJMbMo9RwezIUMO2b0oSQ5dwiU90xNlGmtu r16ZRlo2OnUV1nEKyQhGxvV19uXmhL6x8Wc4zdeSUO9h4vDJAdi5RY8Whyd0cCyD NqmD09oHbYErUp6ShAgmSUpkqNMtD+J4Il7gletvY4PA6rU9I6kiblEiQIxhpytr JkkQXDj5x1tYOD9gLApTq6ru2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtbU+5+ DH/khE97wNDjUtufonFTMB8GA1UdIwQYMBaAFP/ht6hymg7Lvsiy/ZqXt0gmzNvF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTNGMi84NkEwRkIyODQ2 MTYxMUVEOTJFQUFEMjBDNEY5QUUwMi9fLUczcUhLYURzdS15TEw5bXBlM1NDYk0y OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18tRzNxSEthRHN1LXlMTDltcGUzU0NiTTI4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTNGMi84NkEwRkIyODQ2MTYxMUVEOTJFQUFEMjBDNEY5QUUwMi9fLUczcUhLYURz dS15TEw5bXBlM1NDYk0yOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3gWr9htxBef0f2mr+8ZbFJNqC0iM2GCUB7a206QYamOIJuOW2Eto8 eaJpGAGqYZ+m6teYW+HbG5vYWiBoMtwtZqLd99pqWbQU7S3Hw/GRjtvT0d+rC7qR y4xEKGyAalNtF3g1ySm1VjCCQIyaRMiYSJpk37g4SkisJ3KQ01VaWwDszmQh/GnL UO94bIGaOK5xtSTSlDZE5l2oNbvWr5wRK6lw5bJx8+LIyDekgTxbJnoL1S4dTGDT iKaLX0gAg6+6Lz0TjQ8pcGAGtipCfm+iurcm2f/U1fGAZ5c5luLngq1otfaxIJwa zGrDkjShwwxvWksuOvGk9GnoX1Xnb6LE -----END CERTIFICATE-----Generated at Sat Apr 26 14:10:49 2025 by rpki-client