$ rpki-client -vvf rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft File: 024QQmH4GdaND3C7Ka3-jvRjsu0.mft (raw, json) Hash identifier: v/UpYLtwYF1WTAjkV+6ni9fuIzj0Y6hjJltfEGpkVeE= Subject key identifier: 3C:E6:7A:17:20:D7:42:6C:07:44:60:DB:CC:86:1C:BA:3D:CC:9B:25 Authority key identifier: D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED Certificate issuer: /CN=A91B15DC/serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft Manifest number: 38 Signing time: Fri 25 Apr 2025 06:32:45 +0000 Manifest this update: Fri 25 Apr 2025 06:32:44 +0000 Manifest next update: Fri 02 May 2025 06:32:44 +0000 Files and hashes: 1: 024QQmH4GdaND3C7Ka3-jvRjsu0.crl (hash: W5zSVu5wcWehCS2S1qhHQRow+mTNQ9LgiV89PjIYYac=) 2: 0A65ADB6CEEE11EFAA2CA812C4F9AE02.roa (hash: BnzgVRQY1lWGd2cFrP1xnxB6cOmKQA86fc66ckx28mQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:32:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B15DC, serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED Validity Not Before: Apr 25 06:32:44 2025 GMT Not After : May 2 06:32:44 2025 GMT Subject: CN=680b2c8c-870f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e4:52:8f:85:16:57:d8:0a:a5:08:ac:86:d6: 23:8c:de:30:4b:03:65:e1:7b:0a:82:08:3b:cf:be: 5f:a8:ba:2c:11:2d:8e:50:a4:8f:9a:c4:b1:77:78: 53:87:81:b7:57:a3:76:9f:cf:e6:6e:75:85:39:e0: 17:14:f1:7e:3c:53:7d:22:e6:fb:ca:9c:35:25:79: 05:6f:9d:48:63:d3:29:d1:41:3a:1b:a6:51:00:77: 1f:85:72:eb:21:91:36:1c:86:4f:2d:93:7d:f2:1a: 68:1a:f3:2d:c5:32:5b:06:8d:c0:bb:74:cc:fe:6c: 73:57:44:2f:0a:b2:57:a5:4e:9a:4f:5e:23:8a:bf: c4:c8:a4:49:23:9e:7e:80:b7:de:f7:eb:ce:e8:26: 76:d3:20:67:ef:f7:28:b8:d6:d4:f9:16:d9:57:23: 15:a7:68:19:33:b6:91:5b:3c:02:61:a4:64:0b:e4: 32:7d:91:5d:9e:99:3c:0b:cd:c1:49:8d:17:b1:fe: bd:93:b9:21:c6:7a:4d:ff:91:5a:38:7d:bf:44:2f: ae:c3:50:02:bc:cf:46:be:12:7f:5d:83:86:13:ae: 34:24:2d:b8:bc:7d:68:71:ee:cc:e1:7b:3e:cd:bc: 99:33:e8:64:fd:0b:96:1a:18:1f:54:a4:3e:a0:3f: 10:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E6:7A:17:20:D7:42:6C:07:44:60:DB:CC:86:1C:BA:3D:CC:9B:25 X509v3 Authority Key Identifier: keyid:D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:b9:86:be:d0:d0:98:72:60:82:a3:7b:ad:2a:54:e2:53:91: d8:10:06:d5:26:85:d3:1a:c9:25:0f:2c:18:9a:93:cb:51:6c: 7a:64:54:83:da:04:ba:f9:1a:46:a3:2d:ae:ae:99:a5:97:04: d1:41:c1:30:0e:ad:49:43:49:72:28:fb:e4:7f:3f:62:8c:4a: cb:0b:38:73:96:31:7c:55:fe:a6:38:55:4b:e8:82:0e:8d:a0: 6a:4e:c4:f5:5f:7f:c0:10:20:9d:67:f0:5b:af:96:e2:78:0a: 9d:e9:84:e6:5d:25:e3:6b:6c:0f:20:a8:6a:73:e2:09:d3:0c: a9:3e:6a:c8:30:c4:e7:3a:da:e4:95:0b:e4:c1:2c:fb:67:ba: ed:5c:42:73:92:f2:80:e5:0e:0f:1c:3d:b6:47:c6:9c:e3:1a: 39:ec:6b:4c:91:9b:02:84:9e:99:e0:2c:d8:4d:1a:ec:70:f4: 14:28:67:16:8f:78:72:e6:f3:8a:ca:69:44:44:33:be:57:26: 53:2a:20:ea:0d:d0:1b:78:27:aa:1d:58:90:e9:6e:61:6f:3b: 07:6e:d3:c5:61:a5:6b:1b:6b:e5:0a:d7:ac:1b:ce:7e:e9:c6: 37:e7:2f:3d:c5:cf:e5:fc:e8:c0:95:a9:c9:00:06:4d:24:b7: 56:ee:d1:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTVEQzExMC8GA1UEBRMoRDM2RTEwNDI2MUY4MTlENjhEMEY3MEJCMjlBREZFOEVG NDYzQjJFRDAeFw0yNTA0MjUwNjMyNDRaFw0yNTA1MDIwNjMyNDRaMBgxFjAUBgNV BAMTDTY4MGIyYzhjLTg3MGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA5FKPhRZX2AqlCKyG1iOM3jBLA2XhewqCCDvPvl+ouiwRLY5QpI+axLF3eFOH gbdXo3afz+ZudYU54BcU8X48U30i5vvKnDUleQVvnUhj0ynRQTobplEAdx+Fcush kTYchk8tk33yGmga8y3FMlsGjcC7dMz+bHNXRC8KslelTppPXiOKv8TIpEkjnn6A t973687oJnbTIGfv9yi41tT5FtlXIxWnaBkztpFbPAJhpGQL5DJ9kV2emTwLzcFJ jRex/r2TuSHGek3/kVo4fb9EL67DUAK8z0a+En9dg4YTrjQkLbi8fWhx7szhez7N vJkz6GT9C5YaGB9UpD6gPxDlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPOZ6FyDX QmwHRGDbzIYcuj3MmyUwHwYDVR0jBBgwFoAU024QQmH4GdaND3C7Ka3+jvRjsu0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxNURDLzRGRUMxQzA0Q0VF RDExRUZCRDY1NTUxMUM0RjlBRTAyLzAyNFFRbUg0R2RhTkQzQzdLYTMtanZSanN1 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMDI0UVFtSDRHZGFORDNDN0thMy1qdlJqc3UwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx NURDLzRGRUMxQzA0Q0VFRDExRUZCRDY1NTUxMUM0RjlBRTAyLzAyNFFRbUg0R2Rh TkQzQzdLYTMtanZSanN1MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJi5hr7Q0JhyYIKje60qVOJTkdgQBtUmhdMaySUPLBiak8tRbHpkVIPa BLr5GkajLa6umaWXBNFBwTAOrUlDSXIo++R/P2KMSssLOHOWMXxV/qY4VUvogg6N oGpOxPVff8AQIJ1n8FuvluJ4Cp3phOZdJeNrbA8gqGpz4gnTDKk+asgwxOc62uSV C+TBLPtnuu1cQnOS8oDlDg8cPbZHxpzjGjnsa0yRmwKEnpngLNhNGuxw9BQoZxaP eHLm84rKaUREM75XJlMqIOoN0Bt4J6odWJDpbmFvOwdu08VhpWsba+UK16wbzn7p xjfnLz3Fz+X86MCVqckABk0kt1bu0YY= -----END CERTIFICATE-----Generated at Sat Apr 26 12:21:07 2025 by rpki-client