$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft File: -9GoSKH4mo0k2wtoF6CH-y313wg.mft (raw, json) Hash identifier: p9fvRNhpvBDmnNNuX0DiCl8Tb5s5h/5xmvY/pRGl4Gk= Subject key identifier: 6B:1B:1B:93:70:D7:7E:0B:09:B0:60:C0:5B:A6:23:B8:08:33:AC:98 Authority key identifier: FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08 Certificate issuer: /CN=A91BAFCE/serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08 Certificate serial: 019B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft Manifest number: 0198 Signing time: Fri 25 Apr 2025 02:33:58 +0000 Manifest this update: Fri 25 Apr 2025 02:33:57 +0000 Manifest next update: Fri 02 May 2025 02:33:57 +0000 Files and hashes: 1: -9GoSKH4mo0k2wtoF6CH-y313wg.crl (hash: eZ84lZigVSWqRN71xx8odJagVA9iD4ObGRIMOzn01q4=) 2: 37C8FE80B2A211ED9A5C4B53C4F9AE02.roa (hash: RFveBx12nYjQL7C6dI7Z0G+EUk4Kgzyh1OTU3yziD98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAFCE, serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08 Validity Not Before: Apr 25 02:33:57 2025 GMT Not After : May 2 02:33:57 2025 GMT Subject: CN=680af496-7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:05:b4:8c:d1:85:00:9e:91:fe:ae:7a:d5:a0: 3b:d5:97:e1:2b:65:8c:ef:14:d3:60:e3:a9:95:2e: b9:33:25:16:a8:34:ab:ac:06:8b:2c:d5:30:aa:2d: 79:f3:74:12:6a:71:83:02:8d:e8:80:38:61:7f:26: df:01:12:30:70:a2:67:ee:cd:e3:f0:f2:e0:f9:27: a9:4b:a0:68:50:35:70:b0:85:7c:c0:0d:66:43:48: fd:23:87:40:00:ca:a4:ad:60:82:80:62:1e:ec:f4: 7c:65:c8:85:22:7e:65:df:5a:38:3d:15:97:8f:0b: 01:ef:d4:28:b8:7b:0b:e2:c1:5f:5d:da:6e:09:52: 85:d6:2b:82:55:b9:6e:41:77:81:6e:e7:8f:71:b3: b2:4c:ba:60:d5:99:4e:81:dd:10:67:85:09:48:8e: 8e:e2:cb:2a:28:4b:7f:0d:a9:d4:8b:48:f8:4f:bf: cf:2c:59:26:39:85:4a:1b:b6:34:a4:8b:94:f0:85: 1f:eb:2d:db:bb:f2:93:7c:fa:7d:3e:a7:b1:d0:05: ec:06:9b:77:8c:bf:9a:77:fe:8c:39:28:38:3e:14: 8d:0b:7a:c1:95:c4:d8:f8:35:68:f6:6c:4b:02:25: c0:81:ca:ea:f7:7d:03:ce:54:76:74:1a:fd:68:db: b6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1B:1B:93:70:D7:7E:0B:09:B0:60:C0:5B:A6:23:B8:08:33:AC:98 X509v3 Authority Key Identifier: keyid:FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:78:44:1b:6e:f7:d2:8d:42:9d:cf:97:a0:82:f5:86:35:55: ae:82:47:8e:86:d1:23:67:17:80:cb:c3:be:58:ec:43:b2:14: 75:ad:fd:b1:d0:79:b9:4a:c8:9a:88:f0:79:2e:f8:2d:50:2a: cb:68:88:29:54:da:0f:45:a8:c7:58:15:a4:53:1c:98:35:96: 7f:c7:7a:91:22:ea:43:90:a9:d0:90:cf:a8:82:d4:ef:07:31: 92:73:02:0d:3b:ef:b3:5f:5d:29:13:50:04:60:87:98:2d:1b: 9f:a7:01:94:df:38:50:ad:40:21:0f:5b:03:50:bf:e5:77:c3: b5:8d:df:4e:ce:a8:e8:8e:66:a5:4f:cd:f3:2d:af:d7:4c:25: d5:6d:22:80:cc:f5:14:17:9e:03:69:bb:11:5d:37:ba:68:92: 8c:7d:2f:df:00:3c:38:69:da:89:62:0b:74:36:30:8b:e9:c3: 3c:41:fb:b9:a7:6d:f0:31:b7:3c:5e:1b:64:a1:e7:ee:cf:3f: 08:59:12:06:f6:de:75:1d:96:37:32:83:23:1e:86:7d:98:ca: 85:3b:68:71:49:9f:3c:ec:7f:41:cb:32:27:f8:53:9b:d1:28: b0:2b:16:c4:46:56:e1:5a:1a:2a:51:ec:a7:98:79:62:24:3f: 19:41:82:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFGQ0UxMTAvBgNVBAUTKEZCRDFBODQ4QTFGODlBOEQyNERCMEI2ODE3QTA4N0ZC MkRGNURGMDgwHhcNMjUwNDI1MDIzMzU3WhcNMjUwNTAyMDIzMzU3WjAYMRYwFAYD VQQDEw02ODBhZjQ5Ni03ZjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQW0jNGFAJ6R/q561aA71ZfhK2WM7xTTYOOplS65MyUWqDSrrAaLLNUwqi15 83QSanGDAo3ogDhhfybfARIwcKJn7s3j8PLg+SepS6BoUDVwsIV8wA1mQ0j9I4dA AMqkrWCCgGIe7PR8ZciFIn5l31o4PRWXjwsB79QouHsL4sFfXdpuCVKF1iuCVblu QXeBbuePcbOyTLpg1ZlOgd0QZ4UJSI6O4ssqKEt/DanUi0j4T7/PLFkmOYVKG7Y0 pIuU8IUf6y3bu/KTfPp9Pqex0AXsBpt3jL+ad/6MOSg4PhSNC3rBlcTY+DVo9mxL AiXAgcrq930DzlR2dBr9aNu2NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGsbG5Nw 134LCbBgwFumI7gIM6yYMB8GA1UdIwQYMBaAFPvRqEih+JqNJNsLaBegh/st9d8I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUZDRS8yRDM0QzM5MkIy OUMxMUVEOThBODMxNEFDNEY5QUUwMi8tOUdvU0tING1vMGsyd3RvRjZDSC15MzEz d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy05R29TS0g0bW8wazJ3dG9GNkNILXkzMTN3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUZDRS8yRDM0QzM5MkIyOUMxMUVEOThBODMxNEFDNEY5QUUwMi8tOUdvU0tING1v MGsyd3RvRjZDSC15MzEzd2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbeEQbbvfSjUKdz5eggvWGNVWugkeOhtEjZxeAy8O+WOxDshR1rf2x 0Hm5SsiaiPB5LvgtUCrLaIgpVNoPRajHWBWkUxyYNZZ/x3qRIupDkKnQkM+ogtTv BzGScwINO++zX10pE1AEYIeYLRufpwGU3zhQrUAhD1sDUL/ld8O1jd9Ozqjojmal T83zLa/XTCXVbSKAzPUUF54DabsRXTe6aJKMfS/fADw4adqJYgt0NjCL6cM8Qfu5 p23wMbc8Xhtkoefuzz8IWRIG9t51HZY3MoMjHoZ9mMqFO2hxSZ887H9ByzIn+FOb 0SiwKxbERlbhWhoqUeynmHliJD8ZQYLr -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:10 2025 by rpki-client