$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft File: 148wkE5135TOt1lmr4OOdj6ol2I.mft (raw, json) Hash identifier: LCsmDB1O9xP+cnseBUfbQDfz26UcyV4dJot5ck1PT2o= Subject key identifier: 70:76:92:7E:76:72:7F:D6:8E:7F:DE:9D:16:DF:71:BB:19:CD:19:E0 Authority key identifier: D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62 Certificate issuer: /CN=A91CE403/serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762 Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft Manifest number: AF Signing time: Fri 25 Apr 2025 05:03:44 +0000 Manifest this update: Fri 25 Apr 2025 05:03:44 +0000 Manifest next update: Fri 02 May 2025 05:03:44 +0000 Files and hashes: 1: 148wkE5135TOt1lmr4OOdj6ol2I.crl (hash: U8T6G3vNbZQltI4TOF3PmIhFhljWTbZ3/wf+Jszhvpw=) 2: B74BF7F018BF11EFB54AFB20C4F9AE02.roa (hash: 3q4SG/qlGVDYq4EV5cqZmr+jLzfEittQVkz7pS+z/KE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE403, serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762 Validity Not Before: Apr 25 05:03:44 2025 GMT Not After : May 2 05:03:44 2025 GMT Subject: CN=680b17b0-8b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:da:72:1c:b1:d1:a9:a8:ea:f3:1f:41:a5:97: 94:86:30:46:96:a8:ce:05:a6:d7:39:42:5b:8a:cc: 13:62:df:86:2f:f5:7c:2e:16:cf:d7:6a:5a:d7:3d: f1:78:86:b7:5a:09:8b:22:83:e6:a8:14:87:2d:17: 07:4f:33:d8:13:1e:1c:59:43:0e:6e:22:a0:97:21: 60:c7:98:6b:ed:b8:de:d5:70:86:69:7e:0c:a7:ca: a8:5b:12:e2:46:ca:22:17:27:bf:c9:e6:58:64:27: ee:5f:86:ac:0e:0b:d9:87:e7:50:5f:99:10:d6:91: ab:c1:0b:68:58:91:e8:a8:d4:be:6f:19:61:27:63: de:49:21:ee:13:d5:d1:69:04:7b:79:28:6b:f6:50: 40:9c:4a:73:e7:3c:c4:e4:ca:c6:35:1b:38:29:8d: 30:26:38:fc:84:6c:25:67:2d:11:fc:04:db:6b:8b: df:48:88:3d:85:ff:38:f4:5b:ba:a6:66:e3:af:4c: a0:39:50:bf:91:59:91:7f:54:62:02:97:8d:f0:f8: 74:7a:2d:d1:4f:5f:7f:0f:46:59:6b:cd:2d:e4:7b: e2:96:0d:b9:4a:ee:ad:ef:be:40:e5:27:ed:7c:f8: 8e:6f:16:bc:ea:86:fb:ac:b3:79:69:c0:01:e6:de: 95:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:76:92:7E:76:72:7F:D6:8E:7F:DE:9D:16:DF:71:BB:19:CD:19:E0 X509v3 Authority Key Identifier: keyid:D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ec:29:0f:7b:1e:26:40:6f:eb:35:87:83:ec:9a:02:61:00: 75:21:e1:74:cd:3d:76:77:e7:4d:88:65:67:e9:4e:06:9a:b5: 03:35:b6:f3:f8:4d:f8:0c:da:c1:7c:b4:0a:f5:5c:4b:2a:85: 6e:af:b3:0e:b5:d0:b6:99:01:3a:5a:36:ef:cb:a7:2e:6f:86: 2d:68:14:94:07:ee:2a:4b:23:a4:71:49:e6:f6:af:db:8b:2e: 5c:80:38:24:6e:a1:cc:5b:65:63:4e:46:b4:35:34:bd:89:d8: 86:d8:16:d0:1d:3b:b6:b8:d4:a9:42:c3:cc:64:a0:1b:53:a2: 39:92:56:2c:fa:8a:15:ef:48:47:fb:98:6e:58:92:1b:d6:2c: 7b:16:24:d1:31:65:32:1f:8c:4e:c4:68:e7:55:f3:1b:3e:05: b9:f4:97:52:a1:2f:c2:ef:ce:e7:97:33:00:8c:b9:31:cf:94: 25:11:3f:72:ec:82:cf:96:97:d5:9b:a3:3a:91:f2:a0:68:4f: 06:7e:cb:80:bd:d4:9a:2e:9f:25:e6:ba:1c:08:73:b1:83:d1: 0f:6b:a7:9f:d5:1c:81:08:4f:8b:f8:21:f2:ce:ff:21:42:c2: eb:b1:06:6b:b4:f6:eb:88:3d:5d:97:b3:a8:79:12:fb:a0:c2: 51:e5:30:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U0MDMxMTAvBgNVBAUTKEQ3OEYzMDkwNEU3NURGOTRDRUI3NTk2NkFGODM4RTc2 M0VBODk3NjIwHhcNMjUwNDI1MDUwMzQ0WhcNMjUwNTAyMDUwMzQ0WjAYMRYwFAYD VQQDEw02ODBiMTdiMC04YjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmdpyHLHRqajq8x9BpZeUhjBGlqjOBabXOUJbiswTYt+GL/V8LhbP12pa1z3x eIa3WgmLIoPmqBSHLRcHTzPYEx4cWUMObiKglyFgx5hr7bje1XCGaX4Mp8qoWxLi RsoiFye/yeZYZCfuX4asDgvZh+dQX5kQ1pGrwQtoWJHoqNS+bxlhJ2PeSSHuE9XR aQR7eShr9lBAnEpz5zzE5MrGNRs4KY0wJjj8hGwlZy0R/ATba4vfSIg9hf849Fu6 pmbjr0ygOVC/kVmRf1RiApeN8Ph0ei3RT19/D0ZZa80t5Hvilg25Su6t775A5Sft fPiObxa86ob7rLN5acAB5t6VkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHB2kn52 cn/Wjn/enRbfcbsZzRngMB8GA1UdIwQYMBaAFNePMJBOdd+UzrdZZq+DjnY+qJdi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTQwMy84MDIwNzJFODE4 QkUxMUVGQURBN0U1MURDNEY5QUUwMi8xNDh3a0U1MTM1VE90MWxtcjRPT2RqNm9s MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE0OHdrRTUxMzVUT3QxbG1yNE9PZGo2b2wySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTQwMy84MDIwNzJFODE4QkUxMUVGQURBN0U1MURDNEY5QUUwMi8xNDh3a0U1MTM1 VE90MWxtcjRPT2RqNm9sMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf7CkPex4mQG/rNYeD7JoCYQB1IeF0zT12d+dNiGVn6U4GmrUDNbbz +E34DNrBfLQK9VxLKoVur7MOtdC2mQE6Wjbvy6cub4YtaBSUB+4qSyOkcUnm9q/b iy5cgDgkbqHMW2VjTka0NTS9idiG2BbQHTu2uNSpQsPMZKAbU6I5klYs+ooV70hH +5huWJIb1ix7FiTRMWUyH4xOxGjnVfMbPgW59JdSoS/C787nlzMAjLkxz5QlET9y 7ILPlpfVm6M6kfKgaE8GfsuAvdSaLp8l5rocCHOxg9EPa6ef1RyBCE+L+CHyzv8h QsLrsQZrtPbriD1dl7OoeRL7oMJR5TAk -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:00 2025 by rpki-client