$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft File: _J3Ma6xPPZvsntHpBk2bytz5o6k.mft (raw, json) Hash identifier: asajQQCe/eKas1yI+FhEPE3sCcgXOsnmHaBZT95AA74= Subject key identifier: 85:DB:F3:F0:14:7D:B8:64:3D:D0:BD:B8:A8:F3:50:9A:FF:1D:09:52 Authority key identifier: FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9 Certificate issuer: /CN=A91B673B/serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft Manifest number: 82 Signing time: Fri 25 Apr 2025 05:37:10 +0000 Manifest this update: Fri 25 Apr 2025 05:37:09 +0000 Manifest next update: Fri 02 May 2025 05:37:09 +0000 Files and hashes: 1: _J3Ma6xPPZvsntHpBk2bytz5o6k.crl (hash: 47mya6+oROftGIGhisPNN6ctSM+CtyKEcfmxz8hfPDQ=) 2: 390757225E1511EFB04EDA1DC4F9AE02.roa (hash: AOHVL3D6FsryT04X8+k30AkGqkWA0TurnsDlj6WqM9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B673B, serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9 Validity Not Before: Apr 25 05:37:09 2025 GMT Not After : May 2 05:37:09 2025 GMT Subject: CN=680b1f86-abb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d9:b2:38:27:14:9d:90:f6:89:2d:10:49:f7: 71:e5:b1:cc:e1:03:fa:a6:d6:c1:bc:a2:55:25:c6: db:a2:9a:5d:15:f6:40:d4:cd:bf:d8:12:ab:90:b7: 17:43:42:35:14:00:b4:ab:dd:3f:3d:c9:39:57:2d: 25:80:7e:60:03:26:9c:c0:72:33:6b:9f:e5:ca:aa: ee:ae:98:6e:4c:1c:79:45:87:5b:27:dc:5c:bd:8c: 1a:94:bf:46:17:ac:3a:e8:61:df:f9:d2:5a:48:0d: ab:ad:12:3b:5d:b4:ab:78:c1:f8:00:72:2e:06:ce: ce:4d:96:ce:5f:4e:12:9a:10:27:5c:6c:40:85:50: 66:83:3c:80:5b:1e:0a:6e:26:05:42:78:12:3f:28: d0:6c:e0:ab:6f:de:3a:28:7c:bc:c0:c3:6a:53:23: df:0c:af:a7:cf:90:14:27:fe:e2:97:ec:91:8a:b8: b1:bb:2c:20:bc:9e:dc:ea:1d:97:6e:de:71:29:aa: 95:0f:73:08:6a:8a:9b:4b:52:31:ea:4c:d8:3b:17: a5:a4:15:1a:60:03:e8:0c:c0:5d:7a:2e:b6:2f:01: de:2c:f1:76:cd:f9:5f:9b:82:f2:44:dd:36:fb:55: 0b:fd:8c:92:54:26:17:2d:77:d4:3b:0c:f8:6d:ad: 00:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DB:F3:F0:14:7D:B8:64:3D:D0:BD:B8:A8:F3:50:9A:FF:1D:09:52 X509v3 Authority Key Identifier: keyid:FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:81:6c:8a:94:da:c6:b3:0c:bd:b4:13:95:e2:62:c7:49:e1: a3:df:a3:1d:20:da:14:42:82:0a:5c:a7:b8:73:94:93:93:c7: 56:56:d3:10:93:83:ce:4e:ed:ae:b6:4e:d8:83:ee:81:77:87: 2e:ce:ff:fb:3b:75:2e:96:13:68:69:58:bf:bd:b5:0a:82:bf: 06:1d:9c:60:f9:6d:16:88:ec:d0:36:49:5c:59:97:99:59:4e: 8f:77:69:86:96:20:fc:28:85:e1:44:75:65:79:15:02:29:56: 83:f2:8f:ee:12:90:b7:b1:32:4a:68:d4:c2:47:42:f5:ab:8a: ce:69:f2:b5:64:79:08:38:ab:b7:f2:27:aa:8a:63:d2:d9:84: 89:f6:ef:31:c4:52:13:66:d1:41:4d:c8:f9:10:cb:6d:74:8e: 14:f6:f5:df:c6:b5:15:83:91:a9:18:94:cf:1c:85:d6:f9:fb: 9c:ef:61:16:d9:6c:d9:c0:ee:8d:43:8f:16:3e:23:e7:29:1e: cb:2f:ae:50:4a:06:41:df:4d:b5:46:43:ae:b0:90:4f:7c:da: e2:df:21:97:66:c0:8d:4c:52:78:aa:4d:4f:71:eb:eb:40:1f: 61:46:3a:95:f5:37:79:c6:08:b2:d2:ec:09:7c:12:fe:8c:47: cb:aa:5e:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY3M0IxMTAvBgNVBAUTKEZDOURDQzZCQUM0RjNEOUJFQzlFRDFFOTA2NEQ5QkNB RENGOUEzQTkwHhcNMjUwNDI1MDUzNzA5WhcNMjUwNTAyMDUzNzA5WjAYMRYwFAYD VQQDEw02ODBiMWY4Ni1hYmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2NmyOCcUnZD2iS0QSfdx5bHM4QP6ptbBvKJVJcbboppdFfZA1M2/2BKrkLcX Q0I1FAC0q90/Pck5Vy0lgH5gAyacwHIza5/lyqrurphuTBx5RYdbJ9xcvYwalL9G F6w66GHf+dJaSA2rrRI7XbSreMH4AHIuBs7OTZbOX04SmhAnXGxAhVBmgzyAWx4K biYFQngSPyjQbOCrb946KHy8wMNqUyPfDK+nz5AUJ/7il+yRirixuywgvJ7c6h2X bt5xKaqVD3MIaoqbS1Ix6kzYOxelpBUaYAPoDMBdei62LwHeLPF2zflfm4LyRN02 +1UL/YySVCYXLXfUOwz4ba0ApQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXb8/AU fbhkPdC9uKjzUJr/HQlSMB8GA1UdIwQYMBaAFPydzGusTz2b7J7R6QZNm8rc+aOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjczQi83OTQ2MzBDQzVE RkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9fSjNNYTZ4UFBadnNudEhwQmsyYnl0ejVv NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19KM01hNnhQUFp2c250SHBCazJieXR6NW82ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjczQi83OTQ2MzBDQzVERkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9fSjNNYTZ4UFBa dnNudEhwQmsyYnl0ejVvNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMgWyKlNrGswy9tBOV4mLHSeGj36MdINoUQoIKXKe4c5STk8dWVtMQ k4POTu2utk7Yg+6Bd4cuzv/7O3UulhNoaVi/vbUKgr8GHZxg+W0WiOzQNklcWZeZ WU6Pd2mGliD8KIXhRHVleRUCKVaD8o/uEpC3sTJKaNTCR0L1q4rOafK1ZHkIOKu3 8ieqimPS2YSJ9u8xxFITZtFBTcj5EMttdI4U9vXfxrUVg5GpGJTPHIXW+fuc72EW 2WzZwO6NQ48WPiPnKR7LL65QSgZB3021RkOusJBPfNri3yGXZsCNTFJ4qk1Pcevr QB9hRjqV9Td5xgiy0uwJfBL+jEfLql6n -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:14 2025 by rpki-client