$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft File: P32buu18W_27o6NJq-lrIa0n2mc.mft (raw, json) Hash identifier: aFGgm2f6lAvbsCVSdj3smaoEVeeKwhB4oJx8O5TpzJ0= Subject key identifier: C8:93:87:6C:E5:09:2B:6B:DC:1D:24:B5:65:BA:7C:60:78:82:91:B1 Authority key identifier: 3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67 Certificate issuer: /CN=A91C4D8E/serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67 Certificate serial: 0C36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft Manifest number: 0C2E Signing time: Thu 24 Apr 2025 18:26:37 +0000 Manifest this update: Thu 24 Apr 2025 18:26:36 +0000 Manifest next update: Thu 01 May 2025 18:26:36 +0000 Files and hashes: 1: P32buu18W_27o6NJq-lrIa0n2mc.crl (hash: mEYQeg5lXNj1alPgz//H5XLvj6VxOdqxfNfRKp1wFyY=) 2: C9FF2A7E06A511EAA1FFDB3DC4F9AE02.roa (hash: WK/JV9u6bxzN5pWyJs08YddvdU/3rwCasfFO2UjwIic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:26:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3126 (0xc36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4D8E, serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67 Validity Not Before: Apr 24 18:26:36 2025 GMT Not After : May 1 18:26:36 2025 GMT Subject: CN=680a825d-dda1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:df:77:76:7a:5a:97:7b:0c:c3:13:a3:63:4b: 58:a4:15:79:0f:22:0b:7d:39:4a:56:1f:73:1e:ec: 1e:50:8d:8d:27:02:30:0f:1f:24:d8:a3:ce:df:42: 5b:30:0d:3d:8d:43:a4:5d:a1:50:58:cb:3b:26:8e: 75:0f:a6:b7:53:10:6d:24:5d:46:fe:6a:72:25:40: b0:4c:36:74:92:87:c6:35:1e:ba:45:57:b1:d7:83: b1:f2:d9:26:6a:52:2e:83:01:25:be:91:b3:56:55: cf:ce:34:74:cf:81:c8:0e:c2:db:f3:95:50:e8:a8: 74:f7:55:ef:d4:7e:89:29:0d:ed:b1:7b:b4:e0:5d: 6c:d1:44:4e:2b:77:ca:93:9e:92:be:b8:10:55:89: 5b:66:8d:cc:48:39:30:03:e0:91:32:88:1c:6f:98: 85:29:94:06:1e:68:43:f2:6d:0c:d3:38:5b:cd:a0: 79:79:1c:d5:cd:2e:8c:02:46:cc:ab:41:ad:20:95: 5b:ae:0f:9f:7c:41:3c:a5:e7:d2:99:25:99:79:0d: 36:d0:73:91:56:88:3b:5c:75:ce:f4:37:a4:5a:75: cf:a2:bd:01:b6:c5:30:86:c8:1d:e9:9c:4d:e6:d9: 67:ad:e6:3f:da:1a:c5:4a:6b:e6:a8:1c:de:d0:01: 0c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:93:87:6C:E5:09:2B:6B:DC:1D:24:B5:65:BA:7C:60:78:82:91:B1 X509v3 Authority Key Identifier: keyid:3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:55:e7:36:b4:47:fe:95:c5:5c:fd:60:4a:f8:c7:48:8f:e8: f8:07:03:f5:b2:7a:4d:bf:86:f0:d4:a4:36:23:6c:fd:71:28: 96:00:9a:bc:ea:39:93:02:82:1e:76:f0:ec:5f:86:3b:a3:3a: b5:e2:97:3f:c6:02:4e:87:53:c3:b4:6d:de:c1:1d:c7:8f:37: 31:f3:d7:a9:68:27:08:45:01:aa:07:8f:95:33:4f:64:51:eb: d3:3c:c4:4b:00:c9:fa:bf:20:9f:56:4a:1a:ff:99:5d:a9:2e: 81:8b:a5:e7:f0:44:2b:46:04:57:70:fa:23:b7:cb:81:09:b2: 4c:ec:fe:54:e0:af:73:d5:36:7e:22:c1:c7:bd:31:f8:bf:d6: b8:a9:ab:9b:71:f1:5f:3a:87:6a:a4:95:09:0b:00:8f:a6:ce: 9d:b8:0f:2b:02:8b:30:63:d7:5e:ab:4c:cd:de:3e:f5:2b:72: 73:d1:61:b8:5c:af:c0:26:d9:a7:2a:a4:e7:9e:74:5c:6d:95: bc:17:6a:1f:03:05:65:1d:fc:58:28:3d:0d:30:ec:5e:4c:e1: 9b:05:da:66:8e:d4:b6:d9:51:d7:2f:1d:65:c6:23:e7:86:e3: 84:57:cf:9c:81:b9:48:dc:ef:62:2e:49:5f:d3:62:a1:68:a4: 49:0d:a8:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzREOEUxMTAvBgNVBAUTKDNGN0Q5QkJBRUQ3QzVCRkRCQkEzQTM0OUFCRTk2QjIx QUQyN0RBNjcwHhcNMjUwNDI0MTgyNjM2WhcNMjUwNTAxMTgyNjM2WjAYMRYwFAYD VQQDEw02ODBhODI1ZC1kZGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq993dnpal3sMwxOjY0tYpBV5DyILfTlKVh9zHuweUI2NJwIwDx8k2KPO30Jb MA09jUOkXaFQWMs7Jo51D6a3UxBtJF1G/mpyJUCwTDZ0kofGNR66RVex14Ox8tkm alIugwElvpGzVlXPzjR0z4HIDsLb85VQ6Kh091Xv1H6JKQ3tsXu04F1s0UROK3fK k56SvrgQVYlbZo3MSDkwA+CRMogcb5iFKZQGHmhD8m0M0zhbzaB5eRzVzS6MAkbM q0GtIJVbrg+ffEE8pefSmSWZeQ020HORVog7XHXO9DekWnXPor0BtsUwhsgd6ZxN 5tlnreY/2hrFSmvmqBze0AEMzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMiTh2zl CStr3B0ktWW6fGB4gpGxMB8GA1UdIwQYMBaAFD99m7rtfFv9u6OjSavpayGtJ9pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEQ4RS81ODlCOTMzQzA2 QTQxMUVBQjNDNjZCMzhDNEY5QUUwMi9QMzJidXUxOFdfMjdvNk5KcS1scklhMG4y bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AzMmJ1dTE4V18yN282TkpxLWxySWEwbjJtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEQ4RS81ODlCOTMzQzA2QTQxMUVBQjNDNjZCMzhDNEY5QUUwMi9QMzJidXUxOFdf MjdvNk5KcS1scklhMG4ybWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4Vec2tEf+lcVc/WBK+MdIj+j4BwP1snpNv4bw1KQ2I2z9cSiWAJq8 6jmTAoIedvDsX4Y7ozq14pc/xgJOh1PDtG3ewR3Hjzcx89epaCcIRQGqB4+VM09k UevTPMRLAMn6vyCfVkoa/5ldqS6Bi6Xn8EQrRgRXcPojt8uBCbJM7P5U4K9z1TZ+ IsHHvTH4v9a4qaubcfFfOodqpJUJCwCPps6duA8rAoswY9deq0zN3j71K3Jz0WG4 XK/AJtmnKqTnnnRcbZW8F2ofAwVlHfxYKD0NMOxeTOGbBdpmjtS22VHXLx1lxiPn huOEV8+cgblI3O9iLklf02KhaKRJDahp -----END CERTIFICATE-----Generated at Sat Apr 26 14:18:28 2025 by rpki-client