$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft File: 62gLfeTEobRDq9eZuvUkndSw6pA.mft (raw, json) Hash identifier: /h3gv5eKCq21gRcQ6dDMpwhOsSMR9UEjIC/RuVDRDkI= Subject key identifier: 82:73:66:A5:05:86:B9:7E:F5:A7:41:E1:13:18:A8:01:DE:D4:77:BC Authority key identifier: EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90 Certificate issuer: /CN=A91DC866/serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90 Certificate serial: 3499 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft Manifest number: 3487 Signing time: Thu 24 Apr 2025 14:49:19 +0000 Manifest this update: Thu 24 Apr 2025 14:49:18 +0000 Manifest next update: Thu 01 May 2025 14:49:18 +0000 Files and hashes: 1: 62gLfeTEobRDq9eZuvUkndSw6pA.crl (hash: ej5n9FLxpns4pv0y4szZl+SvTl1/f1ImEiRidEmsrUY=) 2: D55D2990561F11E7B9B5FB2CC4F9AE02.roa (hash: 6l+okkOVayeN3r7Oa8ISbsZRxypv5sX/p1C5qPHUzI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13465 (0x3499) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC866, serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90 Validity Not Before: Apr 24 14:49:18 2025 GMT Not After : May 1 14:49:18 2025 GMT Subject: CN=680a4f6f-c5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:76:e8:b9:84:8d:96:a5:27:04:a1:33:2f:8a: a3:f7:57:48:86:ff:fc:db:69:69:73:69:c1:56:2a: 35:5c:bb:31:aa:0d:17:16:92:6c:7b:38:13:f2:11: c0:c0:c9:bc:9d:e6:84:a8:6e:90:92:ff:68:01:e3: 8d:f8:7e:b0:1c:21:2d:e6:af:4b:e7:51:bd:5a:97: c2:c1:46:30:ef:7e:58:0b:a0:3d:37:61:9a:7b:81: 73:94:cf:28:73:1c:96:fe:49:d9:f5:eb:5e:78:5b: 90:75:9b:8c:b5:0c:80:b4:8e:99:f7:b7:b0:3d:2f: 3a:f1:c9:2d:6f:42:59:a1:be:3a:58:e2:5b:22:4a: 8f:0d:55:88:70:02:ab:f2:e5:b3:4d:f1:57:1f:b7: 2d:3d:6d:fa:44:84:55:61:b4:90:f4:13:7e:23:57: b9:61:ff:b6:19:7d:93:82:11:2f:20:8c:d3:cc:9b: 2a:b5:0f:36:9b:3d:4e:42:26:91:e3:c5:77:5e:9f: 4b:da:53:c7:ad:7b:3b:eb:bb:f7:8a:1b:18:59:11: 7a:bf:b9:c3:05:49:69:e1:fc:13:b6:e3:81:5d:84: 21:11:1d:00:21:de:88:19:a6:fd:0a:da:48:05:4d: 0d:16:01:5c:dd:95:c9:58:79:40:f3:b9:34:fc:91: 1e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:73:66:A5:05:86:B9:7E:F5:A7:41:E1:13:18:A8:01:DE:D4:77:BC X509v3 Authority Key Identifier: keyid:EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:99:b5:0c:dc:ac:d9:1e:bd:3b:79:91:76:15:ad:fc:3d:05: ec:e7:97:42:8d:88:8f:c4:fc:3c:5c:a4:64:2b:c6:90:15:e7: ca:d8:26:c6:71:88:9a:1c:31:f7:1d:64:11:64:8c:43:57:eb: b9:90:3a:92:8b:76:0b:8d:be:cd:06:83:fa:d1:a4:2c:29:fe: 1b:1a:01:cd:7f:3e:41:91:07:b5:c5:8a:2d:ae:50:f6:0e:d8: 8d:31:be:89:03:a1:72:db:01:ac:92:f0:5b:a4:25:dd:3b:7c: cb:c7:80:b3:40:34:fb:cd:79:a7:95:0a:43:ad:c2:f9:2c:ad: 5a:3f:09:0e:c3:43:f7:72:86:f4:fa:f9:77:ac:d1:c9:c1:ff: a5:fd:51:3e:30:5c:84:70:43:0a:e5:e1:3c:70:be:a1:02:3e: 7e:dc:7e:b9:de:28:ea:a9:bf:45:03:28:6d:4b:5c:d4:3f:16: f9:14:1c:b3:be:2b:b6:9e:59:24:8b:ee:7f:ee:27:0a:ed:b7: 0e:41:18:19:23:72:9c:ec:ca:de:ed:2c:bc:e7:50:5c:6d:25: 4f:93:52:47:ef:18:b5:a4:04:7e:f8:24:89:4d:ee:93:66:a2: fe:bd:5f:ed:8f:b4:2e:8b:3d:7e:e3:db:ef:a1:3d:9c:f0:61: 89:fa:e2:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4NjYxMTAvBgNVBAUTKEVCNjgwQjdERTRDNEExQjQ0M0FCRDc5OUJBRjUyNDlE RDRCMEVBOTAwHhcNMjUwNDI0MTQ0OTE4WhcNMjUwNTAxMTQ0OTE4WjAYMRYwFAYD VQQDEw02ODBhNGY2Zi1jNWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHbouYSNlqUnBKEzL4qj91dIhv/822lpc2nBVio1XLsxqg0XFpJsezgT8hHA wMm8neaEqG6Qkv9oAeON+H6wHCEt5q9L51G9WpfCwUYw735YC6A9N2Gae4FzlM8o cxyW/knZ9eteeFuQdZuMtQyAtI6Z97ewPS868cktb0JZob46WOJbIkqPDVWIcAKr 8uWzTfFXH7ctPW36RIRVYbSQ9BN+I1e5Yf+2GX2TghEvIIzTzJsqtQ82mz1OQiaR 48V3Xp9L2lPHrXs767v3ihsYWRF6v7nDBUlp4fwTtuOBXYQhER0AId6IGab9CtpI BU0NFgFc3ZXJWHlA87k0/JEehQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJzZqUF hrl+9adB4RMYqAHe1He8MB8GA1UdIwQYMBaAFOtoC33kxKG0Q6vXmbr1JJ3UsOqQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzg2Ni82QTBERjlCQTFE OTYxMUUyQjdCNTA1N0YwOEIwMkNEMi82MmdMZmVURW9iUkRxOWVadXZVa25kU3c2 cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYyZ0xmZVRFb2JSRHE5ZVp1dlVrbmRTdzZwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Qzg2Ni82QTBERjlCQTFEOTYxMUUyQjdCNTA1N0YwOEIwMkNEMi82MmdMZmVURW9i UkRxOWVadXZVa25kU3c2cEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKmbUM3KzZHr07eZF2Fa38PQXs55dCjYiPxPw8XKRkK8aQFefK2CbG cYiaHDH3HWQRZIxDV+u5kDqSi3YLjb7NBoP60aQsKf4bGgHNfz5BkQe1xYotrlD2 DtiNMb6JA6Fy2wGskvBbpCXdO3zLx4CzQDT7zXmnlQpDrcL5LK1aPwkOw0P3cob0 +vl3rNHJwf+l/VE+MFyEcEMK5eE8cL6hAj5+3H653ijqqb9FAyhtS1zUPxb5FByz viu2nlkki+5/7icK7bcOQRgZI3Kc7Mre7Sy851BcbSVPk1JH7xi1pAR++CSJTe6T ZqL+vV/tj7Quiz1+49vvoT2c8GGJ+uLg -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:53 2025 by rpki-client