$ rpki-client -vvf rpki.apnic.net/member_repository/A91D15BF/3DB0F9CA9F8811ECADA0C90DC4F9AE02/93GBTPa_DRm2MkkI0H4eQKu-924.mft File: 93GBTPa_DRm2MkkI0H4eQKu-924.mft (raw, json) Hash identifier: BjN73HnpEHYNFcFGjfDwlAqcuuCiYPbKh68EMKr701w= Subject key identifier: 71:40:77:9C:BC:F0:9B:C1:96:33:AC:9D:4C:17:3F:E9:1E:A9:44:5C Authority key identifier: F7:71:81:4C:F6:BF:0D:19:B6:32:49:08:D0:7E:1E:40:AB:BE:F7:6E Certificate issuer: /CN=A91D15BF/serialNumber=F771814CF6BF0D19B6324908D07E1E40ABBEF76E Certificate serial: 0385 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/93GBTPa_DRm2MkkI0H4eQKu-924.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D15BF/3DB0F9CA9F8811ECADA0C90DC4F9AE02/93GBTPa_DRm2MkkI0H4eQKu-924.mft Manifest number: 0380 Signing time: Fri 25 Apr 2025 00:39:20 +0000 Manifest this update: Fri 25 Apr 2025 00:39:19 +0000 Manifest next update: Fri 02 May 2025 00:39:19 +0000 Files and hashes: 1: 93GBTPa_DRm2MkkI0H4eQKu-924.crl (hash: RvZkzOBnNzpd7ygEXEyoeehFqsdgCauiSxks6gc35jE=) 2: 2A425550ADCA11EC9AD18044C4F9AE02.roa (hash: mUg2is3JQsGwm2KX2qhW2/i/JCscayj9EWo9Zd3Gl6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D15BF/3DB0F9CA9F8811ECADA0C90DC4F9AE02/93GBTPa_DRm2MkkI0H4eQKu-924.crl rsync://rpki.apnic.net/member_repository/A91D15BF/3DB0F9CA9F8811ECADA0C90DC4F9AE02/93GBTPa_DRm2MkkI0H4eQKu-924.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/93GBTPa_DRm2MkkI0H4eQKu-924.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:39:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 901 (0x385) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D15BF, serialNumber=F771814CF6BF0D19B6324908D07E1E40ABBEF76E Validity Not Before: Apr 25 00:39:19 2025 GMT Not After : May 2 00:39:19 2025 GMT Subject: CN=680ad9b8-73df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d4:db:89:1d:f7:61:23:07:4d:7c:b8:3e:55: ce:54:8d:f9:81:f2:4f:4e:38:b5:13:6e:6b:71:e1: f2:f9:a7:3e:5a:f3:77:9c:88:14:d1:5c:4d:dd:9c: 67:86:1e:01:83:10:2d:76:6f:88:d9:ba:ce:15:3c: 5d:a0:92:7d:6f:27:4c:8b:66:c8:b1:ce:05:74:31: a0:e9:85:9d:47:13:32:c5:ff:36:15:40:52:ff:94: 12:b3:2f:16:63:0b:dd:04:b5:fd:78:17:70:90:68: 85:32:a4:5a:ce:a1:b7:3b:04:11:74:d4:93:d9:ca: 48:c1:c2:9f:1d:3b:90:11:09:b5:75:9b:b3:da:56: 5c:bb:41:7e:ff:ed:ad:0d:9e:ed:8b:73:80:34:59: ae:c4:f0:94:b1:97:f2:71:95:6e:85:9b:ea:4f:98: 14:09:94:73:23:da:d6:74:96:02:86:d9:b2:e8:64: 50:4c:eb:ba:58:02:3b:ad:1b:f9:1f:2a:4d:3a:34: ae:f1:c0:76:3c:ba:f1:40:d8:b1:a6:e4:74:cf:ac: 69:31:2e:c2:1e:4b:02:7c:37:8c:e3:bd:71:df:92: 8e:fe:35:83:71:63:00:53:97:a6:00:06:bf:59:9f: f2:d4:fa:5f:4a:41:78:ac:ad:c2:08:11:30:c4:54: cc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:40:77:9C:BC:F0:9B:C1:96:33:AC:9D:4C:17:3F:E9:1E:A9:44:5C X509v3 Authority Key Identifier: keyid:F7:71:81:4C:F6:BF:0D:19:B6:32:49:08:D0:7E:1E:40:AB:BE:F7:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D15BF/3DB0F9CA9F8811ECADA0C90DC4F9AE02/93GBTPa_DRm2MkkI0H4eQKu-924.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/93GBTPa_DRm2MkkI0H4eQKu-924.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D15BF/3DB0F9CA9F8811ECADA0C90DC4F9AE02/93GBTPa_DRm2MkkI0H4eQKu-924.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c3:b0:81:99:87:5c:b5:ef:e6:bb:39:be:19:03:8c:ec:73: fb:85:7b:96:4a:59:a0:31:a6:b8:d5:6b:c2:aa:6c:3a:0d:25: 20:eb:62:1a:d2:85:b3:3d:8b:a1:15:c4:0c:8b:e9:c0:e0:ac: 0e:6d:3a:60:1d:7e:91:b7:bc:00:39:9d:1e:f2:98:82:99:aa: 11:d1:8b:70:64:10:71:f4:fe:b0:a6:52:52:03:20:eb:c1:25: b7:c0:16:c0:a6:85:0d:ea:ac:ab:02:e0:83:c5:4a:20:7d:0f: d2:9b:40:90:e8:2d:c7:f3:bc:71:49:ef:61:96:3e:82:a3:67: a7:cb:1e:cb:06:7a:3c:7c:4d:df:d8:5d:74:15:85:fe:f8:dc: 5e:39:1f:19:29:4d:f9:87:06:0e:92:ac:09:31:83:cf:29:5b: c6:d5:e1:6c:af:ff:f6:0b:c5:a0:24:a9:34:3f:a5:2e:3d:15: 86:5b:04:5d:9b:28:fd:8c:2b:c0:71:1f:d2:fa:c4:bb:9b:63: 52:a5:48:fb:c7:54:8b:52:45:2a:cd:cd:d5:4b:66:6b:6e:45: d6:b2:0b:fe:8d:53:c2:10:f9:2b:33:92:7f:e9:44:36:9a:fe: cf:d7:c6:69:0c:df:38:d0:1a:3d:3a:3e:9c:dd:1a:53:41:1e: 33:c6:91:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE1QkYxMTAvBgNVBAUTKEY3NzE4MTRDRjZCRjBEMTlCNjMyNDkwOEQwN0UxRTQw QUJCRUY3NkUwHhcNMjUwNDI1MDAzOTE5WhcNMjUwNTAyMDAzOTE5WjAYMRYwFAYD VQQDEw02ODBhZDliOC03M2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNTbiR33YSMHTXy4PlXOVI35gfJPTji1E25rceHy+ac+WvN3nIgU0VxN3Zxn hh4BgxAtdm+I2brOFTxdoJJ9bydMi2bIsc4FdDGg6YWdRxMyxf82FUBS/5QSsy8W YwvdBLX9eBdwkGiFMqRazqG3OwQRdNST2cpIwcKfHTuQEQm1dZuz2lZcu0F+/+2t DZ7ti3OANFmuxPCUsZfycZVuhZvqT5gUCZRzI9rWdJYChtmy6GRQTOu6WAI7rRv5 HypNOjSu8cB2PLrxQNixpuR0z6xpMS7CHksCfDeM471x35KO/jWDcWMAU5emAAa/ WZ/y1PpfSkF4rK3CCBEwxFTMfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFAd5y8 8JvBljOsnUwXP+keqURcMB8GA1UdIwQYMBaAFPdxgUz2vw0ZtjJJCNB+HkCrvvdu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTVCRi8zREIwRjlDQTlG ODgxMUVDQURBMEM5MERDNEY5QUUwMi85M0dCVFBhX0RSbTJNa2tJMEg0ZVFLdS05 MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkzR0JUUGFfRFJtMk1ra0kwSDRlUUt1LTkyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTVCRi8zREIwRjlDQTlGODgxMUVDQURBMEM5MERDNEY5QUUwMi85M0dCVFBhX0RS bTJNa2tJMEg0ZVFLdS05MjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPw7CBmYdcte/muzm+GQOM7HP7hXuWSlmgMaa41WvCqmw6DSUg62Ia 0oWzPYuhFcQMi+nA4KwObTpgHX6Rt7wAOZ0e8piCmaoR0YtwZBBx9P6wplJSAyDr wSW3wBbApoUN6qyrAuCDxUogfQ/Sm0CQ6C3H87xxSe9hlj6Co2enyx7LBno8fE3f 2F10FYX++NxeOR8ZKU35hwYOkqwJMYPPKVvG1eFsr//2C8WgJKk0P6UuPRWGWwRd myj9jCvAcR/S+sS7m2NSpUj7x1SLUkUqzc3VS2ZrbkXWsgv+jVPCEPkrM5J/6UQ2 mv7P18ZpDN840Bo9Oj6c3RpTQR4zxpF+ -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:49 2025 by rpki-client