$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft File: -gEnQNykk8ziA6-q3o68cZqsI7Q.mft (raw, json) Hash identifier: h/hYXUWOu4jCstB80qL49iPCrhkm8IRj9Wu+rXGlECo= Subject key identifier: F5:89:9C:54:BC:12:58:B5:36:4A:85:61:6D:91:07:D7:5A:52:19:19 Authority key identifier: FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4 Certificate issuer: /CN=A91AF404/serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4 Certificate serial: 0178 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft Manifest number: 0173 Signing time: Fri 25 Apr 2025 03:00:16 +0000 Manifest this update: Fri 25 Apr 2025 03:00:16 +0000 Manifest next update: Fri 02 May 2025 03:00:16 +0000 Files and hashes: 1: -gEnQNykk8ziA6-q3o68cZqsI7Q.crl (hash: 1FbQku4eDDmqefKRWPt6ZsI/YNJyC14fZcuDE9CVYJI=) 2: D8674A0C0ED911EE8A4E0A23C4F9AE02.roa (hash: XDKLEB0Itrm1xWCw6e4E/02jNXmBNEL6rySB0+zkMHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF404, serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4 Validity Not Before: Apr 25 03:00:16 2025 GMT Not After : May 2 03:00:16 2025 GMT Subject: CN=680afac0-ed70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:26:92:9a:2a:b3:fe:af:05:56:96:b8:05:10: a1:4f:3e:6c:92:dc:77:65:f4:4a:bb:97:24:5a:a5: 12:33:f4:1e:d9:ef:08:aa:12:c5:a8:a5:73:ed:b7: 60:16:5a:5e:7f:8a:49:a5:ab:8e:8d:3b:5b:5d:e7: 93:80:91:c1:64:5d:e9:6f:aa:8e:15:1d:60:c1:84: 74:2d:fd:0f:f5:b2:2d:cb:8e:62:4d:c2:13:93:8a: 00:97:14:44:d5:1c:ea:f6:23:3c:1e:53:c7:89:fe: 55:d9:f3:5f:f2:f9:96:40:ab:fb:0a:82:d9:88:1d: c9:6e:ac:20:ad:a1:76:c1:82:14:41:4a:17:31:a2: 75:19:cc:42:54:88:3f:55:60:86:a8:6a:71:29:54: b2:66:9b:15:e0:3b:8e:eb:d3:d3:d2:ee:12:b9:58: 71:e6:dc:c9:d5:85:a3:bb:59:1c:c1:4a:2b:b5:d5: b5:54:22:0b:ff:ae:f2:c8:d0:83:fb:2b:3d:53:68: 05:f9:8c:8c:81:9c:54:3b:d8:60:8f:95:38:22:54: 0d:7d:64:e0:7c:fa:5b:5e:6d:27:2a:a1:d9:7d:2d: 6d:8a:ad:80:80:bb:10:c2:d8:fb:43:eb:1a:fa:24: 2f:65:5e:91:9b:37:0e:07:5b:90:58:3a:51:2b:cb: ff:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:89:9C:54:BC:12:58:B5:36:4A:85:61:6D:91:07:D7:5A:52:19:19 X509v3 Authority Key Identifier: keyid:FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:af:7e:52:60:0d:b3:95:9f:87:43:0a:80:cd:86:14:90:e7: 61:48:7f:a1:6a:3c:f0:68:d9:24:a4:5f:46:e5:9a:f3:90:59: 16:10:d9:9f:21:37:b9:66:9b:a7:04:f6:7c:68:68:f4:0a:d8: 12:8f:1e:76:1e:f9:2d:fe:ef:0a:86:dc:ed:41:b9:bd:d2:1d: 45:b0:e0:42:fa:ee:18:c1:1b:36:76:6c:4b:67:32:b7:47:a3: 43:30:7f:b1:2b:4e:3f:a8:10:29:15:5d:ba:47:3b:22:e5:bc: 78:bb:00:21:5f:09:0d:f1:38:af:f6:e2:c2:50:0b:94:be:af: a2:ba:05:d0:38:6e:da:1e:c9:4b:a4:47:34:60:d8:78:2a:e5: 0c:c9:f9:d0:a8:3e:9d:e8:70:51:1a:b6:0c:56:94:07:11:56: 44:3b:e0:24:10:8b:94:29:29:f6:ac:8a:f5:62:61:f8:a5:a4: a0:ac:ea:52:59:ac:16:df:ce:e9:c0:d7:34:4d:36:66:d9:ed: 2c:80:e6:86:ee:9d:a3:62:f4:a6:1b:2d:82:b1:d9:77:45:3a: 76:2b:15:c8:1a:f6:bf:1e:b8:63:4c:34:ed:0c:77:d4:44:6a: 18:5b:02:f3:47:a9:28:4d:06:b6:fc:ae:d9:89:ba:7b:3c:12: b7:f5:3c:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0MDQxMTAvBgNVBAUTKEZBMDEyNzQwRENBNDkzQ0NFMjAzQUZBQURFOEVCQzcx OUFBQzIzQjQwHhcNMjUwNDI1MDMwMDE2WhcNMjUwNTAyMDMwMDE2WjAYMRYwFAYD VQQDEw02ODBhZmFjMC1lZDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3CaSmiqz/q8FVpa4BRChTz5sktx3ZfRKu5ckWqUSM/Qe2e8IqhLFqKVz7bdg Flpef4pJpauOjTtbXeeTgJHBZF3pb6qOFR1gwYR0Lf0P9bIty45iTcITk4oAlxRE 1Rzq9iM8HlPHif5V2fNf8vmWQKv7CoLZiB3JbqwgraF2wYIUQUoXMaJ1GcxCVIg/ VWCGqGpxKVSyZpsV4DuO69PT0u4SuVhx5tzJ1YWju1kcwUortdW1VCIL/67yyNCD +ys9U2gF+YyMgZxUO9hgj5U4IlQNfWTgfPpbXm0nKqHZfS1tiq2AgLsQwtj7Q+sa +iQvZV6RmzcOB1uQWDpRK8v/YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWJnFS8 Eli1NkqFYW2RB9daUhkZMB8GA1UdIwQYMBaAFPoBJ0DcpJPM4gOvqt6OvHGarCO0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjQwNC81NDQwODFEMkY0 RDgxMUVEOTgwNDZDNEFDNEY5QUUwMi8tZ0VuUU55a2s4emlBNi1xM282OGNacXNJ N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1nRW5RTnlrazh6aUE2LXEzbzY4Y1pxc0k3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjQwNC81NDQwODFEMkY0RDgxMUVEOTgwNDZDNEFDNEY5QUUwMi8tZ0VuUU55a2s4 emlBNi1xM282OGNacXNJN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOr35SYA2zlZ+HQwqAzYYUkOdhSH+hajzwaNkkpF9G5ZrzkFkWENmf ITe5ZpunBPZ8aGj0CtgSjx52Hvkt/u8KhtztQbm90h1FsOBC+u4YwRs2dmxLZzK3 R6NDMH+xK04/qBApFV26Rzsi5bx4uwAhXwkN8Tiv9uLCUAuUvq+iugXQOG7aHslL pEc0YNh4KuUMyfnQqD6d6HBRGrYMVpQHEVZEO+AkEIuUKSn2rIr1YmH4paSgrOpS WawW387pwNc0TTZm2e0sgOaG7p2jYvSmGy2Csdl3RTp2KxXIGva/HrhjTDTtDHfU RGoYWwLzR6koTQa2/K7Zibp7PBK39TzW -----END CERTIFICATE-----Generated at Sat Apr 26 17:03:01 2025 by rpki-client