$ rpki-client -vvf rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft File: 92dQUVu3YtGADFrmxsLbJP6VLQI.mft (raw, json) Hash identifier: S48ICrRSAzGpwAgSN/DBkXE3S5e34lj/R6v7DtLYEEo= Subject key identifier: 51:30:BB:67:C4:F1:C2:4E:73:9F:68:59:FA:73:37:38:7A:69:CC:86 Authority key identifier: F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02 Certificate issuer: /CN=A91C83EA/serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02 Certificate serial: 2A7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft Manifest number: 2A64 Signing time: Thu 24 Apr 2025 15:34:43 +0000 Manifest this update: Thu 24 Apr 2025 15:34:43 +0000 Manifest next update: Thu 01 May 2025 15:34:43 +0000 Files and hashes: 1: 92dQUVu3YtGADFrmxsLbJP6VLQI.crl (hash: gl8rK/l6H9iZz/1FnwqSCHN4djs5GN/6k1qTQERxGsY=) 2: 2ED1150C561D11E7B003DF26C4F9AE02.roa (hash: VWQv/IH7NsqTcNchTqEWHo8sER9hJVbk+Ml69dI7l0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10874 (0x2a7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C83EA, serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02 Validity Not Before: Apr 24 15:34:43 2025 GMT Not After : May 1 15:34:43 2025 GMT Subject: CN=680a5a13-1295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c0:3f:77:bc:9b:1d:51:c8:7c:a3:ee:aa:fd: 5e:17:6c:d6:06:12:b7:24:02:99:cd:55:e6:eb:8b: 69:54:09:f7:72:cc:d4:df:11:0a:41:26:24:76:be: 9b:00:26:b0:39:22:a3:60:51:92:77:17:c0:94:ef: 49:2d:f1:1f:cc:c0:c5:86:2b:81:c1:17:b5:cf:1d: 14:23:34:b7:a0:a9:f2:51:89:e7:14:6c:04:9d:74: ac:79:56:23:a1:a8:d3:af:26:3e:53:6e:d2:dc:ca: 2a:0c:17:a7:6b:16:fa:7c:6e:97:37:31:68:93:0b: 2a:79:34:9c:d5:cc:6f:85:9e:f7:52:10:8e:48:36: aa:b2:32:22:35:8d:79:01:4e:02:09:e3:5b:87:57: 62:fc:bd:2f:d6:94:f5:9c:03:97:ea:3c:a1:bd:49: 3d:d7:51:09:b6:b1:ed:8b:71:be:39:ca:a8:72:76: 9c:25:50:ad:5d:99:e9:ac:ae:a6:f9:9d:16:38:1c: 93:86:41:8d:ed:b2:bc:e4:e9:9f:40:e6:dc:ca:d5: 3d:1a:29:4b:72:70:50:21:79:28:66:b6:f6:66:0b: 9a:78:e1:e1:4e:b1:86:b2:85:49:c1:90:68:07:36: 11:ea:ff:06:fe:88:50:6a:8d:a4:96:3f:99:dd:32: e8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:30:BB:67:C4:F1:C2:4E:73:9F:68:59:FA:73:37:38:7A:69:CC:86 X509v3 Authority Key Identifier: keyid:F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:dd:9e:01:dd:00:d9:0a:39:12:73:59:de:9f:32:6a:6d:e4: a0:f8:dc:81:25:ae:75:a8:3a:e6:ca:22:b1:e6:ac:78:ae:71: dc:c6:9f:12:1f:5e:3c:f1:35:63:a3:3c:c0:b3:8f:d4:8d:d2: b9:a0:19:e9:03:ed:01:01:10:09:70:28:be:8e:32:46:f4:ad: 56:41:39:b1:55:25:a9:6b:7d:87:ae:f0:b3:e4:23:62:8e:f0: aa:10:b4:32:2a:4f:0c:5c:c9:aa:d7:01:8b:3d:9e:e7:6a:b5: 75:63:ec:90:c8:c5:36:68:68:27:cd:1e:62:39:1c:2c:08:bc: 95:af:4e:22:ad:db:2c:a4:fa:e0:9f:46:dd:8a:d5:cb:fb:be: 91:c6:b3:17:0a:2f:b7:0a:21:b8:d3:e3:2a:28:4b:bc:52:13: ba:ca:18:ea:bf:ea:8f:19:b7:d8:bb:bc:95:1b:20:34:0b:d9: 17:84:4e:73:6a:43:14:87:74:c5:65:d9:0d:f7:c4:7a:8a:43: 27:10:ee:4d:c1:cf:91:48:3e:fb:29:b0:bc:32:be:be:f4:57: 3f:8e:6e:aa:2d:5c:c9:cf:e8:7b:dd:06:4f:9e:5f:b4:98:f0: 22:93:a9:25:6b:bf:53:e0:bc:43:dd:58:c2:1b:0e:2c:c9:4f: 11:5f:33:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgzRUExMTAvBgNVBAUTKEY3Njc1MDUxNUJCNzYyRDE4MDBDNUFFNkM2QzJEQjI0 RkU5NTJEMDIwHhcNMjUwNDI0MTUzNDQzWhcNMjUwNTAxMTUzNDQzWjAYMRYwFAYD VQQDEw02ODBhNWExMy0xMjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmcA/d7ybHVHIfKPuqv1eF2zWBhK3JAKZzVXm64tpVAn3cszU3xEKQSYkdr6b ACawOSKjYFGSdxfAlO9JLfEfzMDFhiuBwRe1zx0UIzS3oKnyUYnnFGwEnXSseVYj oajTryY+U27S3MoqDBenaxb6fG6XNzFokwsqeTSc1cxvhZ73UhCOSDaqsjIiNY15 AU4CCeNbh1di/L0v1pT1nAOX6jyhvUk911EJtrHti3G+OcqocnacJVCtXZnprK6m +Z0WOByThkGN7bK85OmfQObcytU9GilLcnBQIXkoZrb2ZguaeOHhTrGGsoVJwZBo BzYR6v8G/ohQao2klj+Z3TLoaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEwu2fE 8cJOc59oWfpzNzh6acyGMB8GA1UdIwQYMBaAFPdnUFFbt2LRgAxa5sbC2yT+lS0C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODNFQS9EODJDNjFFODFD NDUxMUU0OTRBNzZGMUJDNEY5QUUwMi85MmRRVVZ1M1l0R0FERnJteHNMYkpQNlZM UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkyZFFVVnUzWXRHQURGcm14c0xiSlA2VkxRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODNFQS9EODJDNjFFODFDNDUxMUU0OTRBNzZGMUJDNEY5QUUwMi85MmRRVVZ1M1l0 R0FERnJteHNMYkpQNlZMUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV3Z4B3QDZCjkSc1nenzJqbeSg+NyBJa51qDrmyiKx5qx4rnHcxp8S H1488TVjozzAs4/UjdK5oBnpA+0BARAJcCi+jjJG9K1WQTmxVSWpa32HrvCz5CNi jvCqELQyKk8MXMmq1wGLPZ7narV1Y+yQyMU2aGgnzR5iORwsCLyVr04irdsspPrg n0bditXL+76RxrMXCi+3CiG40+MqKEu8UhO6yhjqv+qPGbfYu7yVGyA0C9kXhE5z akMUh3TFZdkN98R6ikMnEO5Nwc+RSD77KbC8Mr6+9Fc/jm6qLVzJz+h73QZPnl+0 mPAik6kla79T4LxD3VjCGw4syU8RXzMZ -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:50 2025 by rpki-client