$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft File: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft (raw, json) Hash identifier: n+MOzgSRDHfo1KbJ1PbLRQBgIEzOCKLZWrtpTfX99ns= Subject key identifier: F2:58:6F:E4:F6:6E:64:9B:34:81:64:FA:35:CE:F2:E2:0D:8D:34:8E Authority key identifier: 31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF Certificate issuer: /CN=A91C8203/serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft Manifest number: 60 Signing time: Fri 25 Apr 2025 06:04:50 +0000 Manifest this update: Fri 25 Apr 2025 06:04:50 +0000 Manifest next update: Fri 02 May 2025 06:04:50 +0000 Files and hashes: 1: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl (hash: 8SC306OWLZ0lx4Pb06OkpC+Tqjr9wwThk18yzb6I54E=) 2: BE48D4AA927D11EF9651FC4AC4F9AE02.roa (hash: izRhlY7DGrfvs8MmjLdXrrQgAeYYKtyct/uQzFPAxkk=) 3: D9BE56E2927D11EFB83ACB5CC4F9AE02.roa (hash: gD5kq8/HSPW50HYpmldu2HRZWRqRsB+3dXKbKp9PeAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8203, serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Validity Not Before: Apr 25 06:04:50 2025 GMT Not After : May 2 06:04:50 2025 GMT Subject: CN=680b2602-df8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:de:a9:9f:a0:48:7a:a8:12:6d:60:e2:e1:b0: 26:35:f2:18:71:8c:f8:93:f2:74:2a:82:ab:5f:99: a7:ca:9b:fa:55:4c:6a:21:ba:34:2f:25:15:39:08: 5e:12:09:e3:7e:eb:89:cb:dd:05:00:58:c2:2c:80: a7:34:2e:5c:33:2f:ee:ad:ba:bd:88:4c:a7:7d:e0: 35:14:54:31:d7:e6:41:8d:2a:2b:97:a6:ea:49:b9: 6e:ee:0c:c1:c6:d9:34:c6:7a:b1:e6:34:e8:f2:a1: 39:5e:e1:a7:8b:d1:20:16:ec:e5:6f:da:1e:c6:a5: 3d:65:47:d8:82:ac:c8:f4:03:4f:24:d8:d3:f2:ac: 76:64:4b:f4:05:ba:a2:c0:2d:33:38:2c:c8:52:e2: 58:06:c0:a4:d9:d2:c9:6b:a6:4a:f3:a5:3c:21:24: 6a:71:7a:7d:12:a5:2a:14:41:c8:cf:42:d5:2c:98: 75:2d:8e:f9:1a:00:84:92:d4:d3:cd:25:4a:1e:f8: ce:43:b2:62:c9:26:bc:cd:86:3e:08:b0:82:68:c7: b8:c9:e6:73:78:ef:a2:9f:0f:7b:b6:15:60:e7:8c: 0d:d6:d7:65:e1:f9:1a:1f:0f:79:78:64:bc:b5:58: 53:b4:79:bd:12:6b:04:20:a0:df:c8:60:af:34:11: 5d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:58:6F:E4:F6:6E:64:9B:34:81:64:FA:35:CE:F2:E2:0D:8D:34:8E X509v3 Authority Key Identifier: keyid:31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:49:12:0f:2e:10:f3:ef:75:8b:65:29:ff:3d:54:25:9f:65: 85:35:ec:a0:ab:63:e5:c1:5b:10:95:4f:f4:c0:26:54:f7:ba: e7:cc:ec:a1:a9:11:3f:fc:3d:7d:9a:7c:b1:b1:9f:31:1c:47: 53:d1:9c:93:a0:03:17:28:58:7a:31:9a:f8:15:04:1c:2e:c9: a1:99:74:6b:77:38:61:95:26:40:9c:d0:42:42:2f:e6:4a:be: 91:ab:6a:48:c7:2b:b7:28:1d:d5:f2:bc:ee:00:cf:f3:bd:65: 4e:8f:95:02:55:a1:66:5f:18:13:28:9e:8b:34:20:6a:82:ea: ff:92:cd:44:56:8e:69:39:6e:7f:39:3e:86:77:e6:8e:2e:f9: 02:31:18:20:7d:fa:af:5b:9d:54:47:a6:7c:28:89:60:62:d1: 32:12:99:cd:39:39:84:4b:07:c3:d1:00:71:67:02:c9:49:e8: 76:0c:4a:b5:95:17:94:cf:ec:a2:11:bb:6f:4f:ca:de:92:8c: 16:57:02:e8:1a:bd:51:53:46:91:5d:f5:27:41:2a:b3:e5:52: 2b:52:52:f0:86:07:6c:5f:c7:e8:7a:63:b5:a9:17:bb:b5:02: d4:dd:2e:8e:50:79:24:78:29:53:de:98:0b:93:34:15:3d:ac: 09:8b:12:e9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD ODIwMzExMC8GA1UEBRMoMzFEMjFENUNFRTVGQUNERUYzQzhDMUM4N0QwRDczOTFG OUY3M0FGRjAeFw0yNTA0MjUwNjA0NTBaFw0yNTA1MDIwNjA0NTBaMBgxFjAUBgNV BAMTDTY4MGIyNjAyLWRmOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJ3qmfoEh6qBJtYOLhsCY18hhxjPiT8nQqgqtfmafKm/pVTGohujQvJRU5CF4S CeN+64nL3QUAWMIsgKc0LlwzL+6tur2ITKd94DUUVDHX5kGNKiuXpupJuW7uDMHG 2TTGerHmNOjyoTle4aeL0SAW7OVv2h7GpT1lR9iCrMj0A08k2NPyrHZkS/QFuqLA LTM4LMhS4lgGwKTZ0slrpkrzpTwhJGpxen0SpSoUQcjPQtUsmHUtjvkaAISS1NPN JUoe+M5DsmLJJrzNhj4IsIJox7jJ5nN476KfD3u2FWDnjA3W12Xh+RofD3l4ZLy1 WFO0eb0SawQgoN/IYK80EV0JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8lhv5PZu ZJs0gWT6Nc7y4g2NNI4wHwYDVR0jBBgwFoAUMdIdXO5frN7zyMHIfQ1zkfn3Ov8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4MjAzL0JDNTE1REFBOTI3 QTExRUZCNTY0M0M0RUM0RjlBRTAyL01kSWRYTzVmck43enlNSElmUTF6a2ZuM092 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWRJZFhPNWZyTjd6eU1ISWZRMXprZm4zT3Y4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4 MjAzL0JDNTE1REFBOTI3QTExRUZCNTY0M0M0RUM0RjlBRTAyL01kSWRYTzVmck43 enlNSElmUTF6a2ZuM092OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANtJEg8uEPPvdYtlKf89VCWfZYU17KCrY+XBWxCVT/TAJlT3uufM7KGp ET/8PX2afLGxnzEcR1PRnJOgAxcoWHoxmvgVBBwuyaGZdGt3OGGVJkCc0EJCL+ZK vpGrakjHK7coHdXyvO4Az/O9ZU6PlQJVoWZfGBMonos0IGqC6v+SzURWjmk5bn85 PoZ35o4u+QIxGCB9+q9bnVRHpnwoiWBi0TISmc05OYRLB8PRAHFnAslJ6HYMSrWV F5TP7KIRu29Pyt6SjBZXAugavVFTRpFd9SdBKrPlUitSUvCGB2xfx+h6Y7WpF7u1 AtTdLo5QeSR4KVPemAuTNBU9rAmLEuk= -----END CERTIFICATE-----Generated at Sat Apr 26 05:13:02 2025 by rpki-client