$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft File: Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft (raw, json) Hash identifier: Z951cNid8iItAWYEsCWlBkjDm0fuhYIRv+Qx4uOzQL8= Subject key identifier: 83:4F:3F:6A:74:A7:40:5A:04:F0:1D:87:C4:03:0C:D0:4E:1F:1A:0D Authority key identifier: 0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7 Certificate issuer: /CN=A91D462A/serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft Manifest number: 8B Signing time: Thu 24 Apr 2025 16:22:57 +0000 Manifest this update: Thu 24 Apr 2025 16:22:57 +0000 Manifest next update: Thu 01 May 2025 16:22:57 +0000 Files and hashes: 1: Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl (hash: 6Haf7Jv3yrFERNY4mCHmscoAQRDxe8bzighErYLYk3Q=) 2: D5BFBE9E591811EF80AA9F21C4F9AE02.roa (hash: Be1e/Cdz8VdYcqGFGYCyAGRq8xP47qVzQCL7lbjwbsc=) 3: 626CA672591911EFAF1F1D23C4F9AE02.roa (hash: qW4tv57PdJFsLgd8tlpnpMjIsJF0H5vXkIX6yK4Jq7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D462A, serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7 Validity Not Before: Apr 24 16:22:57 2025 GMT Not After : May 1 16:22:57 2025 GMT Subject: CN=680a6561-aeeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a0:7c:19:28:20:d9:44:9a:30:e8:25:66:95: 60:25:27:73:36:73:4e:aa:8b:8d:80:95:17:22:af: f6:3d:e6:32:4b:ed:49:b9:d9:90:74:32:32:e7:08: 8a:0c:2c:d5:5b:69:19:a8:bc:27:df:bf:d4:73:b4: b3:6d:92:b0:83:47:11:94:c9:70:77:aa:cb:8e:7c: 33:fa:2f:36:7d:56:ed:f1:51:2b:29:87:a3:77:da: 85:ca:b3:4d:f0:21:4c:b9:c6:d1:01:1c:01:2d:c9: 35:52:f6:68:a7:b1:c6:75:1c:58:00:2a:3e:80:bb: 73:c3:72:99:64:37:64:f6:fd:12:83:ee:88:88:af: 98:c9:44:37:e9:f3:ca:8a:ec:b8:6c:f4:ae:16:b4: 5a:2a:93:7d:4d:41:1a:42:fd:a6:83:1b:13:0c:f2: 8e:d1:1b:7e:34:38:ac:6d:70:17:12:25:6d:51:da: 6f:2e:82:09:c6:1b:b5:4f:ae:17:e6:b2:cd:7e:a5: 35:b7:4b:a6:39:ba:34:84:50:78:c5:ff:c9:bf:6b: 4b:a4:74:73:64:87:6f:37:10:cb:4e:26:d3:ed:31: 81:61:50:65:bd:19:d8:fa:4c:76:d0:5a:1b:5d:64: 2a:4c:16:f0:de:7f:ae:58:80:e6:33:6d:98:a0:ca: 6c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:4F:3F:6A:74:A7:40:5A:04:F0:1D:87:C4:03:0C:D0:4E:1F:1A:0D X509v3 Authority Key Identifier: keyid:0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:69:ef:f4:6a:5a:ca:0f:ff:a1:af:a0:97:3d:29:55:6b:5d: 2e:8b:9a:f7:cd:ad:d8:da:6f:d3:16:1c:89:b4:3a:1c:f4:75: de:d6:2d:05:26:55:c8:be:95:8a:35:8f:52:c7:e3:9e:95:3a: 70:65:0e:60:91:16:7b:9d:e9:a1:39:b0:cc:8c:af:63:a5:32: a7:24:eb:71:32:9a:c2:d4:48:45:7b:a6:08:92:a1:58:9a:42: a6:8b:08:65:0c:ef:64:6a:a5:5f:84:30:63:ad:73:87:75:68: cd:00:b8:f0:a9:13:7e:8b:43:b0:d2:f3:96:fa:b3:96:b9:c6: 99:0d:81:81:cb:f2:3f:c4:a2:9a:f3:34:de:cc:ff:39:0b:90: 5d:bc:3c:d0:24:46:3f:32:9c:8d:e6:a2:78:60:06:3e:d7:27: b1:92:aa:cf:b3:51:db:2f:25:9a:9c:f2:e5:a7:8b:d2:c5:1b: e2:8a:b7:e7:4b:5c:e1:de:15:e0:a5:e6:c5:c6:fb:15:35:08: 19:c4:9d:0b:82:0d:21:14:df:7a:22:06:e2:de:a7:b0:56:80: 65:90:67:9b:3c:54:a2:b5:d7:3e:60:02:69:c6:47:88:ef:2b: bb:d7:41:1a:e5:f0:f4:20:be:ff:0f:20:03:c8:86:e8:6a:fc: 3f:37:1b:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MkExMTAvBgNVBAUTKDBEQUY0RjFBQzU4MTk4OTMxQUQ1QzAwMDdGNTI1NUE3 OUREMEU0QzcwHhcNMjUwNDI0MTYyMjU3WhcNMjUwNTAxMTYyMjU3WjAYMRYwFAYD VQQDEw02ODBhNjU2MS1hZWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKB8GSgg2USaMOglZpVgJSdzNnNOqouNgJUXIq/2PeYyS+1JudmQdDIy5wiK DCzVW2kZqLwn37/Uc7SzbZKwg0cRlMlwd6rLjnwz+i82fVbt8VErKYejd9qFyrNN 8CFMucbRARwBLck1UvZop7HGdRxYACo+gLtzw3KZZDdk9v0Sg+6IiK+YyUQ36fPK iuy4bPSuFrRaKpN9TUEaQv2mgxsTDPKO0Rt+NDisbXAXEiVtUdpvLoIJxhu1T64X 5rLNfqU1t0umObo0hFB4xf/Jv2tLpHRzZIdvNxDLTibT7TGBYVBlvRnY+kx20Fob XWQqTBbw3n+uWIDmM22YoMps3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINPP2p0 p0BaBPAdh8QDDNBOHxoNMB8GA1UdIwQYMBaAFA2vTxrFgZiTGtXAAH9SVaed0OTH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYyQS80RUJBODQ2RTU4 NTYxMUVGOTQxNDQ1NUZDNEY5QUUwMi9EYTlQR3NXQm1KTWExY0FBZjFKVnA1M1E1 TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RhOVBHc1dCbUpNYTFjQUFmMUpWcDUzUTVNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDYyQS80RUJBODQ2RTU4NTYxMUVGOTQxNDQ1NUZDNEY5QUUwMi9EYTlQR3NXQm1K TWExY0FBZjFKVnA1M1E1TWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgae/0alrKD/+hr6CXPSlVa10ui5r3za3Y2m/TFhyJtDoc9HXe1i0F JlXIvpWKNY9Sx+OelTpwZQ5gkRZ7nemhObDMjK9jpTKnJOtxMprC1EhFe6YIkqFY mkKmiwhlDO9kaqVfhDBjrXOHdWjNALjwqRN+i0Ow0vOW+rOWucaZDYGBy/I/xKKa 8zTezP85C5BdvDzQJEY/MpyN5qJ4YAY+1yexkqrPs1HbLyWanPLlp4vSxRviirfn S1zh3hXgpebFxvsVNQgZxJ0Lgg0hFN96Igbi3qewVoBlkGebPFSitdc+YAJpxkeI 7yu710Ea5fD0IL7/DyADyIboavw/Nxtp -----END CERTIFICATE-----Generated at Sat Apr 26 13:43:43 2025 by rpki-client