$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft File: fVVGmSbR-TTzrylkXrbBC7YGm8k.mft (raw, json) Hash identifier: 1iuiYb9jMSwovxMc86NKqUhmtBtKjusMHF+6u4dq68g= Subject key identifier: 72:0C:04:6F:B1:D1:65:55:03:09:F5:9A:12:29:C3:40:1E:1D:E6:70 Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 Certificate issuer: /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Certificate serial: 0949 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft Manifest number: 08E3 Signing time: Thu 24 Apr 2025 20:31:37 +0000 Manifest this update: Thu 24 Apr 2025 20:31:37 +0000 Manifest next update: Thu 01 May 2025 20:31:37 +0000 Files and hashes: 1: fVVGmSbR-TTzrylkXrbBC7YGm8k.crl (hash: 9MXW9bKQjqeAWpvnCCDZmExXFDUZvXoLgtIg18XirFQ=) 2: 49E75ECAD66F11EF8C443287C4F9AE02.roa (hash: a0K/4suOukzalMmGXoAuXRRlPLJmkTGLqgOEswzREmw=) 3: 501941C093F211EEA029A113C4F9AE02.roa (hash: AzLlJkV6uweEFCMcx/o9vS17187fN+9zNJtq2qRlwjg=) 4: 781C64FAF58611ED89273159C4F9AE02.roa (hash: KQsiNAY3rgJSqaPcQR/vrNEFqpIv1dzI+sj/d5igWno=) 5: FECBA2C23B2611EFAF167E83C4F9AE02.roa (hash: tfdFxm7zDzSNY8KLHsb30XY14VNoD7lmA8Phn0Ip+7k=) 6: 9672E862793811EE92C54834C4F9AE02.roa (hash: VZDkUmHUSNQz0PuWGeefW0AZnX5klCTCiKAwXgSpJ9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:31:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2377 (0x949) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Validity Not Before: Apr 24 20:31:37 2025 GMT Not After : May 1 20:31:37 2025 GMT Subject: CN=680a9fa9-103e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5d:b3:8c:a0:10:68:63:ff:e0:78:c0:ab:0b: 18:cc:5a:46:77:ef:dd:0a:24:97:ee:f2:f5:0d:71: 08:66:6d:b4:c7:76:60:7b:36:28:3a:ef:af:78:fa: df:80:e0:fc:ae:6d:e2:a9:7a:4a:37:b5:9a:3f:93: 5c:3d:d4:e5:91:2e:78:49:03:fb:e1:8c:c2:65:1f: cf:1a:26:7e:c4:32:80:21:24:b0:68:08:90:e9:15: 19:65:7c:36:d9:91:fd:22:8f:a7:2a:6a:a7:22:d0: 8d:fd:03:a8:7a:cd:f8:c1:39:0c:8f:5f:28:b1:1d: a6:ef:c7:40:15:d4:93:89:47:00:d3:33:3e:ba:56: ba:48:27:d0:c2:7b:f6:51:b6:7d:b5:9d:45:49:ba: 7b:dd:cd:0e:44:a4:0a:23:fd:5d:64:59:30:8f:ee: 93:41:55:23:1f:a8:71:20:2e:21:09:72:2f:ea:f7: a6:05:1b:d4:fd:f6:28:57:54:64:84:f3:67:9e:c1: 55:68:c0:37:95:8c:5b:4c:fb:62:0f:74:85:26:6e: 7b:dc:37:81:b9:8e:24:6e:d3:18:c1:90:c1:8c:2d: c9:4c:78:b8:8e:c9:46:f1:ea:36:9a:9a:85:c6:5f: f7:c0:51:f7:74:0c:08:dc:de:cb:06:8d:51:1b:ed: 6b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0C:04:6F:B1:D1:65:55:03:09:F5:9A:12:29:C3:40:1E:1D:E6:70 X509v3 Authority Key Identifier: keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:1c:a7:71:5b:59:c5:1f:88:b5:f6:40:71:0c:0c:15:8d:93: 8d:52:2d:7e:66:3d:ce:a2:f4:3e:87:45:93:9d:37:8a:5b:29: 62:16:55:19:fe:1f:b8:b6:cf:21:5e:c2:51:bd:56:fc:8a:44: 9f:bb:0d:cb:ae:d2:65:12:dc:15:9e:61:03:fb:71:fd:d0:90: 98:19:de:22:f4:48:48:12:b5:02:ff:3d:54:15:88:80:cc:69: be:0c:7a:07:fa:48:f6:f4:49:5e:2f:15:31:df:d3:e3:03:d7: 68:ea:4a:25:50:4e:6f:eb:2b:7c:65:1b:a4:cb:5d:23:2b:1e: 17:de:06:4e:45:8a:49:3c:e9:c3:6e:9c:84:6a:37:82:41:42: 26:73:ee:4e:a9:29:d3:8e:5d:42:1d:78:47:65:65:f3:cc:9b: 78:36:1a:51:1b:7f:ca:cd:38:7b:4b:50:7b:ce:d0:ec:2e:fa: 95:a3:70:ef:6b:5e:39:1b:c5:ac:0c:a8:e5:27:6d:9c:bc:01: c3:9f:ba:82:74:b5:c4:92:d8:57:38:ad:57:57:25:b6:ad:36: ad:1d:b6:66:e7:f4:c9:bd:85:18:d0:80:b3:0e:1d:d2:01:6b: f0:50:44:37:0e:4a:26:ae:f8:e7:f5:fb:ae:30:05:dd:71:25: 5c:3a:1f:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3NzAxMTAvBgNVBAUTKDdENTU0Njk5MjZEMUY5MzRGM0FGMjk2NDVFQjZDMTBC QjYwNjlCQzkwHhcNMjUwNDI0MjAzMTM3WhcNMjUwNTAxMjAzMTM3WjAYMRYwFAYD VQQDEw02ODBhOWZhOS0xMDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArl2zjKAQaGP/4HjAqwsYzFpGd+/dCiSX7vL1DXEIZm20x3ZgezYoOu+vePrf gOD8rm3iqXpKN7WaP5NcPdTlkS54SQP74YzCZR/PGiZ+xDKAISSwaAiQ6RUZZXw2 2ZH9Io+nKmqnItCN/QOoes34wTkMj18osR2m78dAFdSTiUcA0zM+ula6SCfQwnv2 UbZ9tZ1FSbp73c0ORKQKI/1dZFkwj+6TQVUjH6hxIC4hCXIv6vemBRvU/fYoV1Rk hPNnnsFVaMA3lYxbTPtiD3SFJm573DeBuY4kbtMYwZDBjC3JTHi4jslG8eo2mpqF xl/3wFH3dAwI3N7LBo1RG+1reQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHIMBG+x 0WVVAwn1mhIpw0AeHeZwMB8GA1UdIwQYMBaAFH1VRpkm0fk0868pZF62wQu2BpvJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3MC9FNjgxMDQxMEMw QUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1UVHpyeWxrWHJiQkM3WUdt OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZWVkdtU2JSLVRUenJ5bGtYcmJCQzdZR204ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3MC9FNjgxMDQxMEMwQUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1U VHpyeWxrWHJiQkM3WUdtOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiHKdxW1nFH4i19kBxDAwVjZONUi1+Zj3OovQ+h0WTnTeKWyliFlUZ /h+4ts8hXsJRvVb8ikSfuw3LrtJlEtwVnmED+3H90JCYGd4i9EhIErUC/z1UFYiA zGm+DHoH+kj29EleLxUx39PjA9do6kolUE5v6yt8ZRuky10jKx4X3gZORYpJPOnD bpyEajeCQUImc+5OqSnTjl1CHXhHZWXzzJt4NhpRG3/KzTh7S1B7ztDsLvqVo3Dv a145G8WsDKjlJ22cvAHDn7qCdLXEkthXOK1XVyW2rTatHbZm5/TJvYUY0ICzDh3S AWvwUEQ3Dkomrvjn9fuuMAXdcSVcOh/E -----END CERTIFICATE-----Generated at Sat Apr 26 14:15:46 2025 by rpki-client