$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft File: RJ0H2pINoCY0K_biaJzH4PCjyvw.mft (raw, json) Hash identifier: 0dLqKOWc9rU/OQ9Kpn9KrifPHM8TX93zMvq/xwICpnw= Subject key identifier: 1D:FA:32:B4:20:D2:92:9D:D5:DD:B0:69:3C:73:04:EE:F6:CC:4B:5E Authority key identifier: 44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC Certificate issuer: /CN=A91DAC6A/serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft Manifest number: 5B Signing time: Fri 25 Apr 2025 06:08:01 +0000 Manifest this update: Fri 25 Apr 2025 06:08:00 +0000 Manifest next update: Fri 02 May 2025 06:08:00 +0000 Files and hashes: 1: RJ0H2pINoCY0K_biaJzH4PCjyvw.crl (hash: kkuco/oARv+MSEvI5ETitvgscJmx3hgF65yHVFvzeV4=) 2: 24E9EF3C9C0B11EFABD74439C4F9AE02.roa (hash: UxagGWZX5GRBTZt0jQYki52H3QWf9jW1QGZTQhh7RfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DAC6A, serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC Validity Not Before: Apr 25 06:08:00 2025 GMT Not After : May 2 06:08:00 2025 GMT Subject: CN=680b26c0-39c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7c:ed:43:e1:29:47:41:dc:86:1d:f8:0b:83: b3:a5:9f:b8:21:04:18:a9:f4:37:16:c6:f6:32:cc: d8:1f:74:8c:f3:b7:02:a9:9d:c1:43:f6:24:b5:3f: 93:79:8f:45:70:1f:4a:aa:e6:66:14:67:2a:d5:79: 7e:d1:b4:ac:44:9a:f6:15:a2:0e:1c:74:ef:b9:2c: 26:2c:2a:18:88:73:98:67:bf:c5:a4:27:a1:13:81: 9f:d9:d6:6d:00:c8:c5:79:f7:52:76:18:0e:b8:33: 30:97:79:13:9d:75:64:22:e3:a7:d6:06:e8:e8:84: 94:77:96:06:c1:a7:3c:18:41:36:12:14:64:b3:b0: b5:d5:46:94:b7:1c:d3:fa:7c:7f:11:63:b3:c7:08: 5e:57:e3:5b:f8:fe:ca:b9:fa:c1:2b:e9:bf:6e:76: 4a:de:c8:68:c5:02:e2:f9:09:08:e8:36:fd:f8:88: 03:85:fb:f1:d0:4d:12:ab:27:b9:86:ea:5d:be:de: 47:9c:15:e6:21:2b:29:49:0d:99:3a:74:9c:87:9b: f9:9c:ca:6b:57:f6:14:04:9a:d1:20:0b:4d:81:5a: 3a:d9:4f:10:30:42:4e:5d:3c:43:2b:2e:70:7c:31: 72:99:0f:46:bc:89:34:f7:44:aa:5a:96:c9:ab:12: 16:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FA:32:B4:20:D2:92:9D:D5:DD:B0:69:3C:73:04:EE:F6:CC:4B:5E X509v3 Authority Key Identifier: keyid:44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:8e:8d:94:c3:3f:42:17:d8:c2:68:78:9a:cc:8c:d9:c7:1f: 57:42:4b:43:f5:0c:0d:00:4d:12:c9:4e:cc:71:e7:a6:43:0d: 3e:27:03:13:ae:bf:f9:9f:a7:67:0a:c2:3f:17:82:4b:ba:83: ad:29:63:c6:25:ce:9f:db:60:c9:ce:68:08:42:9c:0c:a1:dc: ff:70:33:36:25:16:c8:d6:e0:7c:8c:64:07:33:25:bd:a6:bc: fc:bb:24:d2:a5:60:15:4c:5a:27:00:b0:6f:1d:92:3a:fb:ed: 73:ea:e8:b5:ea:95:1e:a7:e0:d5:55:7d:37:52:0a:78:83:e9: 49:3f:34:4e:74:32:58:52:34:51:60:92:6d:d1:84:7a:8d:3c: 38:18:3a:1e:dc:2e:d2:85:04:1b:27:72:b1:b4:5c:ec:81:ba: 3a:0e:ce:01:b6:c3:18:89:10:88:5a:f2:b2:30:0a:f2:82:f8: 76:3e:15:d2:ff:3a:ce:98:b0:a8:1d:35:9b:e7:2a:d4:03:51: 6f:7a:2c:19:cc:bd:b6:01:47:09:0b:13:31:0b:41:77:62:ac: b9:84:66:52:9d:07:6c:1e:ab:d6:61:33:e8:b8:63:4c:4a:94: e7:7b:c7:b4:09:8c:54:93:f2:c4:6a:46:b1:11:c1:87:2d:84: cd:60:bf:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QUM2QTExMC8GA1UEBRMoNDQ5RDA3REE5MjBEQTAyNjM0MkJGNkUyNjg5Q0M3RTBG MEEzQ0FGQzAeFw0yNTA0MjUwNjA4MDBaFw0yNTA1MDIwNjA4MDBaMBgxFjAUBgNV BAMTDTY4MGIyNmMwLTM5YzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRfO1D4SlHQdyGHfgLg7Oln7ghBBip9DcWxvYyzNgfdIzztwKpncFD9iS1P5N5 j0VwH0qq5mYUZyrVeX7RtKxEmvYVog4cdO+5LCYsKhiIc5hnv8WkJ6ETgZ/Z1m0A yMV591J2GA64MzCXeROddWQi46fWBujohJR3lgbBpzwYQTYSFGSzsLXVRpS3HNP6 fH8RY7PHCF5X41v4/sq5+sEr6b9udkreyGjFAuL5CQjoNv34iAOF+/HQTRKrJ7mG 6l2+3kecFeYhKylJDZk6dJyHm/mcymtX9hQEmtEgC02BWjrZTxAwQk5dPEMrLnB8 MXKZD0a8iTT3RKpalsmrEhadAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHfoytCDS kp3V3bBpPHME7vbMS14wHwYDVR0jBBgwFoAURJ0H2pINoCY0K/biaJzH4PCjyvww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBQzZBLzkwNjYyRUI2OUMw QTExRUZBRUQ2NTczOEM0RjlBRTAyL1JKMEgycElOb0NZMEtfYmlhSnpINFBDanl2 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUkowSDJwSU5vQ1kwS19iaWFKekg0UENqeXZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB QzZBLzkwNjYyRUI2OUMwQTExRUZBRUQ2NTczOEM0RjlBRTAyL1JKMEgycElOb0NZ MEtfYmlhSnpINFBDanl2dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIaOjZTDP0IX2MJoeJrMjNnHH1dCS0P1DA0ATRLJTsxx56ZDDT4nAxOu v/mfp2cKwj8Xgku6g60pY8Ylzp/bYMnOaAhCnAyh3P9wMzYlFsjW4HyMZAczJb2m vPy7JNKlYBVMWicAsG8dkjr77XPq6LXqlR6n4NVVfTdSCniD6Uk/NE50MlhSNFFg km3RhHqNPDgYOh7cLtKFBBsncrG0XOyBujoOzgG2wxiJEIha8rIwCvKC+HY+FdL/ Os6YsKgdNZvnKtQDUW96LBnMvbYBRwkLEzELQXdirLmEZlKdB2weq9ZhM+i4Y0xK lOd7x7QJjFST8sRqRrERwYcthM1gv5k= -----END CERTIFICATE-----Generated at Sat Apr 26 12:30:20 2025 by rpki-client