$ rpki-client -vvf rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft File: _SqdXvq5ERsKWjAT80wsva_QH8I.mft (raw, json) Hash identifier: p1K52DKY5f8i6sMWePFEkeLAAgB0CY2AGd4hVWPbt2E= Subject key identifier: 32:38:E2:55:D4:E4:B4:E4:52:24:04:37:44:3E:95:A4:CC:35:68:6F Authority key identifier: FD:2A:9D:5E:FA:B9:11:1B:0A:5A:30:13:F3:4C:2C:BD:AF:D0:1F:C2 Certificate issuer: /CN=A91B189B/serialNumber=FD2A9D5EFAB9111B0A5A3013F34C2CBDAFD01FC2 Certificate serial: 0710 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft Manifest number: 070B Signing time: Thu 24 Apr 2025 21:41:48 +0000 Manifest this update: Thu 24 Apr 2025 21:41:47 +0000 Manifest next update: Thu 01 May 2025 21:41:47 +0000 Files and hashes: 1: _SqdXvq5ERsKWjAT80wsva_QH8I.crl (hash: i3gExJfAFeb8a9Ai/r+pWJIks/6fz/S5cc00afsXtkA=) 2: DFCE0CFC387311EBA0AC593EC4F9AE02.roa (hash: OHqpc630iPDrvxa3JYL+djk/kcEwI5eOHtscWctQIpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.crl rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:41:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1808 (0x710) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B189B, serialNumber=FD2A9D5EFAB9111B0A5A3013F34C2CBDAFD01FC2 Validity Not Before: Apr 24 21:41:47 2025 GMT Not After : May 1 21:41:47 2025 GMT Subject: CN=680ab01b-3e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:97:d0:d8:fa:51:e8:41:2f:b6:a0:05:13:86: 22:e2:d0:67:0f:28:52:6d:f1:e8:b7:9f:f9:20:48: 61:d3:8e:29:93:f4:20:61:ea:7f:04:01:73:a2:8c: 4a:1a:92:67:f1:f6:4d:77:15:98:ba:e1:6b:d6:91: 34:94:26:7f:61:e7:b9:25:bd:0e:c2:0a:0a:51:2c: 35:10:80:7f:17:da:69:9a:19:7c:20:ed:07:76:6d: 74:76:0e:e9:4d:30:ad:0b:e9:87:db:d0:46:ae:fd: 2f:3b:01:73:fe:8b:93:f3:42:6a:e0:0f:2a:71:07: 4d:31:cf:b9:d2:91:d5:47:98:f1:3a:98:e5:4b:e3: b3:8f:7b:52:e9:b0:23:43:7b:2b:ac:c2:39:bc:a9: f8:dc:d5:e6:c3:0b:53:15:6d:4f:5b:05:8d:a1:4b: 17:c3:94:9b:23:41:a6:71:3e:63:e3:53:26:67:61: ce:bc:03:b1:83:bf:35:09:04:5f:f0:a9:f1:1a:55: 60:80:44:14:f4:8d:a1:fd:b8:14:ad:13:f4:65:30: b7:af:8f:fe:de:53:ab:d4:47:9c:8e:65:8e:86:f5: 52:0f:d6:d5:5a:92:ab:ec:9e:0e:6e:f9:b5:17:34: 1f:3c:77:a1:e4:0b:10:29:03:66:41:45:69:47:8e: 27:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:38:E2:55:D4:E4:B4:E4:52:24:04:37:44:3E:95:A4:CC:35:68:6F X509v3 Authority Key Identifier: keyid:FD:2A:9D:5E:FA:B9:11:1B:0A:5A:30:13:F3:4C:2C:BD:AF:D0:1F:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SqdXvq5ERsKWjAT80wsva_QH8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B189B/328BDD40387211EB997AA23AC4F9AE02/_SqdXvq5ERsKWjAT80wsva_QH8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:5a:d5:d9:bc:32:4d:7f:d9:52:70:99:89:d3:29:13:5d:9c: e7:91:94:c7:e0:eb:e2:0b:85:1d:6d:e0:14:04:53:68:5d:c0: 07:9f:4f:4e:96:b1:52:c1:96:9b:3c:91:ae:c5:f1:c6:ee:cc: 38:82:e5:09:a7:12:a4:83:6c:60:49:40:a6:46:e6:bd:bc:86: 14:64:7d:2d:6a:33:6f:c5:b0:cc:bc:ef:02:12:30:88:1c:ac: 12:d0:34:a5:cd:b6:0f:54:8c:c7:24:17:7a:75:4a:aa:49:2f: ba:48:6a:dc:18:2d:fd:17:2b:af:17:78:9b:15:c3:9a:6c:42: fa:31:ff:5e:99:ca:55:ae:64:64:81:8e:01:74:ca:d2:41:d3: ea:8c:aa:49:57:e3:fd:e7:97:04:ed:8c:4a:74:72:ac:1c:6c: 0a:d2:b2:35:e7:42:14:69:e4:92:17:00:a6:d3:6b:2f:8e:93: 07:1e:8c:eb:55:26:fb:0a:6d:af:63:d4:c1:ff:79:5b:a5:e7: 3e:5f:1f:3d:75:ef:1d:fb:f8:2f:de:7c:3b:d9:07:00:67:ec: 53:58:4f:81:43:ef:0a:71:96:e2:c8:f6:54:39:bd:85:0c:b8: 97:f2:31:65:9d:fe:b7:23:a0:a9:ac:82:0b:3d:cc:7c:13:06: a9:87:05:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE4OUIxMTAvBgNVBAUTKEZEMkE5RDVFRkFCOTExMUIwQTVBMzAxM0YzNEMyQ0JE QUZEMDFGQzIwHhcNMjUwNDI0MjE0MTQ3WhcNMjUwNTAxMjE0MTQ3WjAYMRYwFAYD VQQDEw02ODBhYjAxYi0zZThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5fQ2PpR6EEvtqAFE4Yi4tBnDyhSbfHot5/5IEhh044pk/QgYep/BAFzooxK GpJn8fZNdxWYuuFr1pE0lCZ/Yee5Jb0OwgoKUSw1EIB/F9ppmhl8IO0Hdm10dg7p TTCtC+mH29BGrv0vOwFz/ouT80Jq4A8qcQdNMc+50pHVR5jxOpjlS+Ozj3tS6bAj Q3srrMI5vKn43NXmwwtTFW1PWwWNoUsXw5SbI0GmcT5j41MmZ2HOvAOxg781CQRf 8KnxGlVggEQU9I2h/bgUrRP0ZTC3r4/+3lOr1EecjmWOhvVSD9bVWpKr7J4Obvm1 FzQfPHeh5AsQKQNmQUVpR44ndQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDI44lXU 5LTkUiQEN0Q+laTMNWhvMB8GA1UdIwQYMBaAFP0qnV76uREbClowE/NMLL2v0B/C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTg5Qi8zMjhCREQ0MDM4 NzIxMUVCOTk3QUEyM0FDNEY5QUUwMi9fU3FkWHZxNUVSc0tXakFUODB3c3ZhX1FI OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19TcWRYdnE1RVJzS1dqQVQ4MHdzdmFfUUg4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTg5Qi8zMjhCREQ0MDM4NzIxMUVCOTk3QUEyM0FDNEY5QUUwMi9fU3FkWHZxNUVS c0tXakFUODB3c3ZhX1FIOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFWtXZvDJNf9lScJmJ0ykTXZznkZTH4OviC4UdbeAUBFNoXcAHn09O lrFSwZabPJGuxfHG7sw4guUJpxKkg2xgSUCmRua9vIYUZH0tajNvxbDMvO8CEjCI HKwS0DSlzbYPVIzHJBd6dUqqSS+6SGrcGC39FyuvF3ibFcOabEL6Mf9emcpVrmRk gY4BdMrSQdPqjKpJV+P955cE7YxKdHKsHGwK0rI150IUaeSSFwCm02svjpMHHozr VSb7Cm2vY9TB/3lbpec+Xx89de8d+/gv3nw72QcAZ+xTWE+BQ+8KcZbiyPZUOb2F DLiX8jFlnf63I6CprIILPcx8EwaphwXP -----END CERTIFICATE-----Generated at Sat Apr 26 16:48:42 2025 by rpki-client