$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft File: exEvnr7DQt_Kx3TrXCaBElxl4M8.mft (raw, json) Hash identifier: RjpLfJQmIjNelPZRDPvl0NDoktTefn50PgKEJ8cqn44= Subject key identifier: 6F:76:00:87:A0:35:BA:0E:54:9C:F3:C6:24:14:AC:00:B4:28:29:91 Authority key identifier: 7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF Certificate issuer: /CN=A91BFCB1/serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF Certificate serial: 0F62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft Manifest number: 0F5B Signing time: Thu 24 Apr 2025 17:33:50 +0000 Manifest this update: Thu 24 Apr 2025 17:33:50 +0000 Manifest next update: Thu 01 May 2025 17:33:50 +0000 Files and hashes: 1: exEvnr7DQt_Kx3TrXCaBElxl4M8.crl (hash: 43IzEdmBkkabAiB480OEIBgk2RORGq8ZZlxkC9g1zvU=) 2: FD58613E7B7B11E99CCAAF73C4F9AE02.roa (hash: 090bVc+Qwt8YDuc/RlwXjl9kZ0cXU70VKlUww1lp6Co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3938 (0xf62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFCB1, serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF Validity Not Before: Apr 24 17:33:50 2025 GMT Not After : May 1 17:33:50 2025 GMT Subject: CN=680a75fe-bc88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9f:3f:42:7b:6a:bb:b7:80:71:08:11:75:ed: cf:c9:a1:d6:4b:ea:6a:f3:16:6e:20:dd:4e:02:91: 62:ee:b1:e1:d1:6f:59:31:bb:29:99:08:54:52:69: 7c:f7:d7:3d:70:b8:a3:c9:8b:bf:b5:89:b5:91:9c: 80:a7:09:05:e2:3a:10:01:0e:0b:72:12:83:f9:b2: f9:83:86:88:ad:12:95:42:84:b3:40:b1:f7:f9:51: 12:84:6a:e3:33:85:20:7a:67:63:b3:f9:8a:9c:99: 43:c3:5a:a6:ee:0a:ea:e3:15:97:81:21:6c:34:91: 86:bc:59:63:c0:8f:06:d5:23:e1:56:3c:a7:5b:97: e7:b2:56:fc:39:1f:18:9a:06:7f:38:46:bc:f6:c3: 3d:ef:4f:15:f9:e8:33:36:1a:08:86:b1:13:c7:1f: bf:1e:84:8f:1e:dd:82:5e:2a:b5:69:df:2c:22:ab: b5:14:ed:b1:4e:fd:3e:89:b1:23:6f:01:0b:e2:3d: 3b:05:9f:da:8d:dd:b7:9a:6e:41:82:b4:68:c6:a2: d1:96:18:d9:c3:b9:d4:f6:01:69:f1:aa:9a:32:7b: 13:64:0b:fc:1c:bd:b1:e0:1f:c4:a7:3c:3a:7e:da: 3e:bb:0b:fa:8c:d0:a1:21:a3:79:d9:15:04:43:05: 2f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:76:00:87:A0:35:BA:0E:54:9C:F3:C6:24:14:AC:00:B4:28:29:91 X509v3 Authority Key Identifier: keyid:7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:44:dd:fe:5d:af:1b:8a:a3:46:b5:7d:39:4e:47:77:96:76: 86:a5:12:1b:9a:e2:af:2e:dd:f5:07:93:ed:5f:9a:d6:ae:09: 66:b7:58:f7:de:f3:f5:1e:8a:b5:71:97:4c:e8:81:fa:e7:5b: ae:3c:5d:fb:9d:22:5a:6f:08:28:44:53:72:d7:27:30:2e:c2: ac:4f:c6:fd:6c:8a:a5:64:66:5c:23:ef:b4:df:f2:f4:33:e1: 6e:05:73:4c:56:0d:69:10:28:cd:3d:61:00:73:c7:ce:33:89: f7:ff:6c:29:78:4c:76:fd:8b:93:48:09:a5:cc:72:48:dc:8f: 5b:a9:61:75:d2:bd:20:b1:97:9e:76:8c:a0:c0:28:66:b5:04: 37:0f:be:fa:59:61:54:7d:a4:ac:e9:9d:e7:77:c0:55:21:be: 5a:4d:4b:b0:01:68:d8:fe:5c:30:58:4f:6a:3f:22:2c:df:6c: 2f:d4:1a:1a:f3:43:fe:57:42:0d:41:1a:4f:69:76:91:51:af: 72:a9:e9:6a:7c:6f:17:68:15:fc:f6:e6:8a:02:22:42:40:e2: 9e:95:b2:fc:c3:05:4f:51:4f:bf:d1:9d:44:18:3e:b8:d3:89: fe:8c:2f:da:8a:93:fa:81:77:9e:09:7c:59:13:90:ad:bf:12: f3:7f:9d:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZDQjExMTAvBgNVBAUTKDdCMTEyRjlFQkVDMzQyREZDQUM3NzRFQjVDMjY4MTEy NUM2NUUwQ0YwHhcNMjUwNDI0MTczMzUwWhcNMjUwNTAxMTczMzUwWjAYMRYwFAYD VQQDEw02ODBhNzVmZS1iYzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtp8/Qntqu7eAcQgRde3PyaHWS+pq8xZuIN1OApFi7rHh0W9ZMbspmQhUUml8 99c9cLijyYu/tYm1kZyApwkF4joQAQ4LchKD+bL5g4aIrRKVQoSzQLH3+VEShGrj M4Ugemdjs/mKnJlDw1qm7grq4xWXgSFsNJGGvFljwI8G1SPhVjynW5fnslb8OR8Y mgZ/OEa89sM9708V+egzNhoIhrETxx+/HoSPHt2CXiq1ad8sIqu1FO2xTv0+ibEj bwEL4j07BZ/ajd23mm5BgrRoxqLRlhjZw7nU9gFp8aqaMnsTZAv8HL2x4B/Epzw6 fto+uwv6jNChIaN52RUEQwUvswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG92AIeg NboOVJzzxiQUrAC0KCmRMB8GA1UdIwQYMBaAFHsRL56+w0Lfysd061wmgRJcZeDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkNCMS82RTg3MkQ1RTY1 NkYxMUU5QkJFOEY3MjRDNEY5QUUwMi9leEV2bnI3RFF0X0t4M1RyWENhQkVseGw0 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4RXZucjdEUXRfS3gzVHJYQ2FCRWx4bDRNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkNCMS82RTg3MkQ1RTY1NkYxMUU5QkJFOEY3MjRDNEY5QUUwMi9leEV2bnI3RFF0 X0t4M1RyWENhQkVseGw0TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVRN3+Xa8biqNGtX05Tkd3lnaGpRIbmuKvLt31B5PtX5rWrglmt1j3 3vP1Hoq1cZdM6IH651uuPF37nSJabwgoRFNy1ycwLsKsT8b9bIqlZGZcI++03/L0 M+FuBXNMVg1pECjNPWEAc8fOM4n3/2wpeEx2/YuTSAmlzHJI3I9bqWF10r0gsZee doygwChmtQQ3D776WWFUfaSs6Z3nd8BVIb5aTUuwAWjY/lwwWE9qPyIs32wv1Boa 80P+V0INQRpPaXaRUa9yqelqfG8XaBX89uaKAiJCQOKelbL8wwVPUU+/0Z1EGD64 04n+jC/aipP6gXeeCXxZE5CtvxLzf539 -----END CERTIFICATE-----Generated at Sat Apr 26 12:59:32 2025 by rpki-client