$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft File: -SrbMNtsD5zpgLXbl3FF-MGcgks.mft (raw, json) Hash identifier: rTpc5OZFS68WkHKumBxnm1qfl1dF6CcnLsKLV0634qk= Subject key identifier: 01:AE:CC:8C:48:64:8E:7D:3E:74:60:BF:36:2F:51:E3:04:B7:7B:BE Authority key identifier: F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B Certificate issuer: /CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Certificate serial: 090A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft Manifest number: 0904 Signing time: Thu 24 Apr 2025 20:12:56 +0000 Manifest this update: Thu 24 Apr 2025 20:12:56 +0000 Manifest next update: Thu 01 May 2025 20:12:56 +0000 Files and hashes: 1: -SrbMNtsD5zpgLXbl3FF-MGcgks.crl (hash: VpfNXIw/wWOBFpu/0HmEXEPYEyHiWcwzvAe68EIE4Zk=) 2: A778AAF6A42111EAB3108934C4F9AE02.roa (hash: y624BzVkuEiikHslOtq6hgxDkVhcX1eWu3QlNuMQNRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2314 (0x90a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0FCC, serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Validity Not Before: Apr 24 20:12:56 2025 GMT Not After : May 1 20:12:56 2025 GMT Subject: CN=680a9b48-7c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5d:4a:48:97:b0:93:fc:6d:2c:b2:0c:30:3f: f0:be:b2:18:1f:8b:c4:0c:4b:fd:ed:19:58:98:3a: 2d:00:d3:2e:d3:1c:e8:c2:ba:84:c1:50:58:59:dc: 08:b4:1c:58:ff:1c:d8:3b:09:26:07:fb:d7:d7:48: 6e:a0:41:7f:84:fa:97:d4:bf:25:ae:24:0a:6a:80: 84:d9:e2:61:aa:7e:9c:04:4a:0b:4f:08:15:03:bd: 2e:d0:f0:92:82:c6:f9:38:0e:1c:a7:9f:ab:3a:cf: de:de:27:73:2a:30:e0:24:ff:a4:32:c0:a7:80:31: cd:b9:75:2f:15:13:38:59:b3:ef:f6:af:b2:43:24: 97:a3:02:7c:71:04:67:7c:39:2e:49:3a:95:fa:e8: 61:df:c9:12:f0:ac:5c:c4:3a:6f:58:84:84:25:d7: 30:1e:ed:8e:89:b9:bc:46:06:00:88:59:5c:31:04: e3:90:cc:73:76:6a:a1:a7:7f:63:c7:60:fc:eb:39: 5c:56:26:47:99:ed:c6:ad:f4:5a:08:cb:4e:4e:5e: 1f:fb:49:c5:d9:bb:55:a1:c2:e1:71:e7:69:4e:27: 05:48:65:95:e8:60:17:3d:e4:cc:0b:29:ec:65:2b: e0:1e:1b:15:b3:18:5c:c2:92:40:ce:b6:72:a4:46: be:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:AE:CC:8C:48:64:8E:7D:3E:74:60:BF:36:2F:51:E3:04:B7:7B:BE X509v3 Authority Key Identifier: keyid:F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:e4:f6:f8:02:e8:88:d3:b5:6a:46:23:c3:72:cb:fa:92:09: 1f:4a:ae:9f:67:8a:b0:5f:71:33:3c:ee:1a:57:51:96:6d:10: 1f:50:37:95:74:06:9e:56:a0:e3:29:24:f9:3d:ba:dc:b5:ab: 15:66:41:5b:ee:11:88:d8:f1:35:9c:9f:3f:fd:a9:6c:2d:a1: 27:62:e6:9f:26:1c:a8:6e:42:ad:da:71:24:5d:26:85:17:10: 7a:a9:59:42:e1:25:90:ca:3d:c2:12:46:5a:48:21:9f:8f:0b: b6:1d:10:02:46:fc:b9:1d:74:a3:3a:48:b5:24:e7:7e:53:e6: dd:c4:54:6b:4d:2f:61:03:c3:f1:02:df:88:61:dd:54:27:15: ee:e9:f8:9c:69:7b:0c:e8:28:98:7a:63:12:83:89:2b:27:3f: b1:01:16:1e:26:3c:4c:b4:35:fc:6d:13:1a:fd:21:d5:e1:4e: c8:e2:49:96:83:3b:9a:44:0b:94:43:15:26:85:eb:a5:6c:1f: 8c:a6:f4:36:da:1d:ce:e9:21:ba:87:fd:e9:e5:f3:ad:a7:1d: cc:80:84:0d:eb:79:19:13:d7:c9:f6:93:13:f0:72:29:16:a1: c7:e0:63:44:b2:79:62:b0:d4:77:42:81:af:7b:64:f1:fd:0f: 88:b8:21:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBGQ0MxMTAvBgNVBAUTKEY5MkFEQjMwREI2QzBGOUNFOTgwQjVEQjk3NzE0NUY4 QzE5QzgyNEIwHhcNMjUwNDI0MjAxMjU2WhcNMjUwNTAxMjAxMjU2WjAYMRYwFAYD VQQDEw02ODBhOWI0OC03YzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA611KSJewk/xtLLIMMD/wvrIYH4vEDEv97RlYmDotANMu0xzowrqEwVBYWdwI tBxY/xzYOwkmB/vX10huoEF/hPqX1L8lriQKaoCE2eJhqn6cBEoLTwgVA70u0PCS gsb5OA4cp5+rOs/e3idzKjDgJP+kMsCngDHNuXUvFRM4WbPv9q+yQySXowJ8cQRn fDkuSTqV+uhh38kS8KxcxDpvWISEJdcwHu2Oibm8RgYAiFlcMQTjkMxzdmqhp39j x2D86zlcViZHme3GrfRaCMtOTl4f+0nF2btVocLhcedpTicFSGWV6GAXPeTMCyns ZSvgHhsVsxhcwpJAzrZypEa+SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGuzIxI ZI59PnRgvzYvUeMEt3u+MB8GA1UdIwQYMBaAFPkq2zDbbA+c6YC125dxRfjBnIJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZDQy9GNUM0MjQwOEE0 MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1enBnTFhibDNGRi1NR2Nn a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1TcmJNTnRzRDV6cGdMWGJsM0ZGLU1HY2drcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEZDQy9GNUM0MjQwOEE0MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1 enBnTFhibDNGRi1NR2Nna3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ5Pb4AuiI07VqRiPDcsv6kgkfSq6fZ4qwX3EzPO4aV1GWbRAfUDeV dAaeVqDjKST5PbrctasVZkFb7hGI2PE1nJ8//alsLaEnYuafJhyobkKt2nEkXSaF FxB6qVlC4SWQyj3CEkZaSCGfjwu2HRACRvy5HXSjOki1JOd+U+bdxFRrTS9hA8Px At+IYd1UJxXu6ficaXsM6CiYemMSg4krJz+xARYeJjxMtDX8bRMa/SHV4U7I4kmW gzuaRAuUQxUmheulbB+MpvQ22h3O6SG6h/3p5fOtpx3MgIQN63kZE9fJ9pMT8HIp FqHH4GNEsnlisNR3QoGve2Tx/Q+IuCGv -----END CERTIFICATE-----Generated at Sat Apr 26 12:30:15 2025 by rpki-client