$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft File: msuAZmP7D89uvEPAELk14FIU_J8.mft (raw, json) Hash identifier: MZhpfXplxNo1WOvPjIfy1K9Obkn1UDSVECoWDvN9lAI= Subject key identifier: 47:9D:FF:73:C8:9B:3E:4A:2E:24:D4:33:72:0C:F9:4E:C1:B7:4E:F8 Authority key identifier: 9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F Certificate issuer: /CN=A91C7B68/serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft Manifest number: 09B4 Signing time: Thu 24 Apr 2025 20:21:18 +0000 Manifest this update: Thu 24 Apr 2025 20:21:18 +0000 Manifest next update: Thu 01 May 2025 20:21:18 +0000 Files and hashes: 1: msuAZmP7D89uvEPAELk14FIU_J8.crl (hash: GOoqP9aKde0KdLQuJ1PdzHZd+sqoyAuL+1N3i9NwONY=) 2: 2EC10CF4071C11EFAD19C863C4F9AE02.roa (hash: Y+jK0YiITj1fWstmg7VEHVKcSXHK5MXXLGNw5LXxFzk=) 3: C4DB3710B0BC11EFA44BCA7DC4F9AE02.roa (hash: gWIB+Y9hTKP+TMLvq+0rVTxIDDpRJJpgLYlkfQUCFsY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B68, serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F Validity Not Before: Apr 24 20:21:18 2025 GMT Not After : May 1 20:21:18 2025 GMT Subject: CN=680a9d3e-5fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c9:0c:70:e6:89:1e:93:a2:57:2f:09:42:95: 0f:c4:a4:e7:c4:fc:3b:19:a6:ef:3b:89:0d:e2:79: 35:03:5f:ed:6a:13:79:8d:f7:32:e5:f0:7a:bb:65: d0:08:4f:92:b0:03:d7:e2:e2:2a:0b:7c:86:4f:97: 08:e1:97:1b:51:9a:89:ad:1a:92:96:2d:3c:50:70: c0:31:6e:47:b4:72:69:74:e2:9c:24:9d:d0:0f:93: 2d:ff:d1:43:b8:d8:af:64:ef:83:3d:39:26:ff:07: 94:34:b1:cd:92:70:c8:f5:54:c4:64:9a:94:19:28: 0f:8c:ec:55:5f:d9:5a:00:3f:c9:80:2a:d6:34:44: 0b:3f:86:43:7d:bb:cb:95:af:34:77:f3:0a:49:f0: fe:d7:10:c3:73:b2:37:91:e2:17:84:53:f4:23:db: 5d:37:a1:6c:c3:4d:e1:5b:6a:bd:b8:87:c1:13:90: 3c:27:61:79:ef:ee:b9:6c:b1:87:9e:23:a8:70:59: 49:b7:d1:36:1c:c5:32:fc:79:20:af:9e:65:87:a1: 8d:de:4b:b4:fe:db:a1:75:2a:27:61:0e:88:01:0e: b8:34:84:4a:ff:1a:18:ef:cc:49:d7:c7:38:93:07: f3:43:c3:54:7a:c4:62:08:11:6c:28:e9:4f:70:2e: e1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9D:FF:73:C8:9B:3E:4A:2E:24:D4:33:72:0C:F9:4E:C1:B7:4E:F8 X509v3 Authority Key Identifier: keyid:9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:57:c5:e9:01:f0:e1:90:7f:3b:95:b8:ee:cb:0f:9f:50:ce: 96:9b:8f:b3:62:70:de:5b:e1:56:0f:97:a3:9f:b1:05:be:3f: 7a:46:7a:c9:ff:92:fa:20:18:6a:8c:e5:e2:6c:89:28:9e:50: 15:6c:0d:51:60:63:60:86:61:97:60:c5:09:fd:72:70:9f:2e: 90:66:9b:4a:d8:3a:70:b8:9d:84:d2:b2:61:9f:f5:f2:af:49: 0f:7e:e0:cb:6e:14:fc:26:06:1a:2a:79:0a:7a:18:e7:90:44: 46:9f:3f:86:b9:f3:95:7d:28:a8:5a:a2:3d:4e:c5:1d:a6:99: d2:24:49:58:f4:25:26:b5:9d:ee:41:2a:8a:db:52:6a:a5:43: 0e:ed:e7:5b:9f:4d:cf:dd:c3:65:cd:92:74:da:3c:a0:25:3b: a5:11:83:0e:d1:4e:45:d9:3c:79:96:a2:0f:d1:58:61:28:e4: b8:34:39:ca:14:98:69:5d:33:3f:d5:40:84:ef:ab:f0:7e:5b: 58:64:a1:77:56:15:6d:29:49:3f:8a:24:35:15:f5:ce:36:40: 96:1d:5c:e1:27:46:41:86:5c:5b:5d:c4:68:14:c6:63:60:92: f0:56:75:6d:e6:18:31:75:c3:32:87:fa:96:1a:b2:d2:ca:3e: f4:41:33:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCNjgxMTAvBgNVBAUTKDlBQ0I4MDY2NjNGQjBGQ0Y2RUJDNDNDMDEwQjkzNUUw NTIxNEZDOUYwHhcNMjUwNDI0MjAyMTE4WhcNMjUwNTAxMjAyMTE4WjAYMRYwFAYD VQQDEw02ODBhOWQzZS01ZmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA28kMcOaJHpOiVy8JQpUPxKTnxPw7GabvO4kN4nk1A1/tahN5jfcy5fB6u2XQ CE+SsAPX4uIqC3yGT5cI4ZcbUZqJrRqSli08UHDAMW5HtHJpdOKcJJ3QD5Mt/9FD uNivZO+DPTkm/weUNLHNknDI9VTEZJqUGSgPjOxVX9laAD/JgCrWNEQLP4ZDfbvL la80d/MKSfD+1xDDc7I3keIXhFP0I9tdN6Fsw03hW2q9uIfBE5A8J2F57+65bLGH niOocFlJt9E2HMUy/Hkgr55lh6GN3ku0/tuhdSonYQ6IAQ64NIRK/xoY78xJ18c4 kwfzQ8NUesRiCBFsKOlPcC7hMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEed/3PI mz5KLiTUM3IM+U7Bt074MB8GA1UdIwQYMBaAFJrLgGZj+w/PbrxDwBC5NeBSFPyf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0I2OC81M0E3QjkyQ0Iw QTUxMUVBOEY5MkVEMTdDNEY5QUUwMi9tc3VBWm1QN0Q4OXV2RVBBRUxrMTRGSVVf SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21zdUFabVA3RDg5dXZFUEFFTGsxNEZJVV9KOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0I2OC81M0E3QjkyQ0IwQTUxMUVBOEY5MkVEMTdDNEY5QUUwMi9tc3VBWm1QN0Q4 OXV2RVBBRUxrMTRGSVVfSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByV8XpAfDhkH87lbjuyw+fUM6Wm4+zYnDeW+FWD5ejn7EFvj96RnrJ /5L6IBhqjOXibIkonlAVbA1RYGNghmGXYMUJ/XJwny6QZptK2DpwuJ2E0rJhn/Xy r0kPfuDLbhT8JgYaKnkKehjnkERGnz+GufOVfSioWqI9TsUdppnSJElY9CUmtZ3u QSqK21JqpUMO7edbn03P3cNlzZJ02jygJTulEYMO0U5F2Tx5lqIP0VhhKOS4NDnK FJhpXTM/1UCE76vwfltYZKF3VhVtKUk/iiQ1FfXONkCWHVzhJ0ZBhlxbXcRoFMZj YJLwVnVt5hgxdcMyh/qWGrLSyj70QTM9 -----END CERTIFICATE-----Generated at Sat Apr 26 04:32:22 2025 by rpki-client