$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft File: RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft (raw, json) Hash identifier: LFB675sefUaVj1rYB1vi2OgdAjP0DhSIGg7UHKXDluA= Subject key identifier: 47:7E:6B:EF:6C:CA:4D:04:B4:2D:88:F6:D3:FD:68:8C:7E:F9:C3:DD Authority key identifier: 45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1 Certificate issuer: /CN=A91C6833/serialNumber=45C808A8ACDE24AC9613E01A49596100ED5E8CF1 Certificate serial: 1E3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft Manifest number: 1E2A Signing time: Thu 24 Apr 2025 16:05:35 +0000 Manifest this update: Thu 24 Apr 2025 16:05:35 +0000 Manifest next update: Thu 01 May 2025 16:05:35 +0000 Files and hashes: 1: RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl (hash: 0+66jSyOoaK/YMOoWUVFbI/kDLfdf5WXgswSlszfzn8=) 2: 3F1BB7A09BC011EF995CBB11C4F9AE02.roa (hash: ppVaHDx1dLxEzXzKs4B/Bei6naIiQDjP+g7Sivk4L7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7743 (0x1e3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6833, serialNumber=45C808A8ACDE24AC9613E01A49596100ED5E8CF1 Validity Not Before: Apr 24 16:05:35 2025 GMT Not After : May 1 16:05:35 2025 GMT Subject: CN=680a614f-0398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1c:55:db:d8:eb:53:8c:aa:54:ad:2a:18:dd: d8:c0:a8:f3:08:05:fd:dd:0e:6e:1e:44:be:68:9f: 9e:2c:9e:4d:e1:47:96:6f:04:ba:cf:8c:26:b2:94: d8:3a:bc:80:f8:86:d3:de:73:de:6d:d7:26:2d:0e: 8f:15:c4:3f:ea:d6:e7:5b:97:b1:5c:58:f0:e2:a4: 99:51:33:a7:c1:f0:9e:f1:58:03:a1:f4:78:ec:91: 19:11:f0:bd:1d:c2:37:1f:c1:a3:ed:c2:4c:d3:bd: 18:19:35:f3:e4:d6:08:bf:60:c3:8b:44:11:da:5f: 2b:8f:35:36:ef:68:d3:0e:52:00:03:95:99:10:86: ad:f3:01:09:1d:a7:36:81:fc:d0:5a:33:2b:91:94: a3:4f:55:18:39:de:e4:af:c2:90:0d:82:da:c6:26: e0:29:2d:a1:56:2b:58:dc:b0:72:5b:cb:46:c6:37: 01:cc:44:64:e9:e1:98:e3:54:ae:6e:30:74:02:8a: f1:a3:e7:81:ed:15:8d:19:e1:7d:cd:71:a1:f3:39: c4:e0:c5:e5:95:36:b3:2c:79:90:04:4f:27:ab:6c: 1e:6d:4d:d2:56:3f:ef:0d:e6:95:e7:6b:6d:24:88: 7c:c9:0e:6d:3c:0f:c4:9d:15:f6:24:07:14:07:64: 29:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:7E:6B:EF:6C:CA:4D:04:B4:2D:88:F6:D3:FD:68:8C:7E:F9:C3:DD X509v3 Authority Key Identifier: keyid:45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:eb:cd:11:92:f9:8a:70:a6:0d:59:83:73:98:4e:82:d0:3f: 6d:13:c9:69:f6:4d:30:f1:18:82:a8:6a:a4:96:05:bb:0c:2e: 29:39:3d:c4:71:c1:e7:29:c7:82:89:00:3a:d9:87:c4:03:82: 5f:36:4b:06:60:5f:cc:53:33:ec:d1:99:5e:7f:36:9c:72:e0: d4:d4:34:df:e6:66:f2:f2:94:16:64:13:8d:c3:1d:e2:14:00: 8e:c3:60:f5:f3:e7:0d:ed:6c:c7:f5:56:bb:5a:20:37:84:17: 1a:70:eb:ab:d4:56:f3:63:03:34:f2:8b:71:45:ba:7f:d3:25: f1:4d:25:ac:f4:a3:4d:db:23:51:3a:3a:e0:f9:8e:95:97:11: c3:17:59:4c:d7:23:0c:f4:c0:b3:da:8f:22:30:3c:4d:94:08: ea:55:e5:93:b1:6f:87:e3:3a:fc:80:0c:a6:aa:14:20:f5:73: 67:38:e1:55:ea:42:0e:fa:87:44:83:78:ba:61:56:72:e4:dd: 7f:31:d6:8f:79:f8:71:fe:a8:f2:36:f4:c1:ce:50:a0:04:a3: e1:b8:43:5c:19:5d:21:b4:13:6a:4a:a4:b9:e2:1f:30:95:5a: 8b:6d:08:7b:19:fd:ef:10:32:9d:2c:51:36:6c:43:ef:f5:17: 29:a0:4e:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4MzMxMTAvBgNVBAUTKDQ1QzgwOEE4QUNERTI0QUM5NjEzRTAxQTQ5NTk2MTAw RUQ1RThDRjEwHhcNMjUwNDI0MTYwNTM1WhcNMjUwNTAxMTYwNTM1WjAYMRYwFAYD VQQDEw02ODBhNjE0Zi0wMzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6BxV29jrU4yqVK0qGN3YwKjzCAX93Q5uHkS+aJ+eLJ5N4UeWbwS6z4wmspTY OryA+IbT3nPebdcmLQ6PFcQ/6tbnW5exXFjw4qSZUTOnwfCe8VgDofR47JEZEfC9 HcI3H8Gj7cJM070YGTXz5NYIv2DDi0QR2l8rjzU272jTDlIAA5WZEIat8wEJHac2 gfzQWjMrkZSjT1UYOd7kr8KQDYLaxibgKS2hVitY3LByW8tGxjcBzERk6eGY41Su bjB0Aorxo+eB7RWNGeF9zXGh8znE4MXllTazLHmQBE8nq2webU3SVj/vDeaV52tt JIh8yQ5tPA/EnRX2JAcUB2QpHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEd+a+9s yk0EtC2I9tP9aIx++cPdMB8GA1UdIwQYMBaAFEXICKis3iSslhPgGklZYQDtXozx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjgzMy9GM0Q0ODBFQzgz QjMxMUU2OUREODY3MzBDNEY5QUUwMi9SY2dJcUt6ZUpLeVdFLUFhU1ZsaEFPMWVq UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JjZ0lxS3plSkt5V0UtQWFTVmxoQU8xZWpQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjgzMy9GM0Q0ODBFQzgzQjMxMUU2OUREODY3MzBDNEY5QUUwMi9SY2dJcUt6ZUpL eVdFLUFhU1ZsaEFPMWVqUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB680RkvmKcKYNWYNzmE6C0D9tE8lp9k0w8RiCqGqklgW7DC4pOT3E ccHnKceCiQA62YfEA4JfNksGYF/MUzPs0ZlefzaccuDU1DTf5mby8pQWZBONwx3i FACOw2D18+cN7WzH9Va7WiA3hBcacOur1FbzYwM08otxRbp/0yXxTSWs9KNN2yNR Ojrg+Y6VlxHDF1lM1yMM9MCz2o8iMDxNlAjqVeWTsW+H4zr8gAymqhQg9XNnOOFV 6kIO+odEg3i6YVZy5N1/MdaPefhx/qjyNvTBzlCgBKPhuENcGV0htBNqSqS54h8w lVqLbQh7Gf3vEDKdLFE2bEPv9RcpoE4/ -----END CERTIFICATE-----Generated at Sat Apr 26 13:07:34 2025 by rpki-client