$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft File: 90n3b5KhbSqHFDf3LIbQ0F3imtU.mft (raw, json) Hash identifier: VRp5saTb+WLPBaEUJv42W2TeuaDfvdC2y/jlSAq7BXE= Subject key identifier: 52:2B:A4:E7:D8:BF:4E:23:60:15:EA:98:63:01:B6:EB:EA:4D:BC:A2 Authority key identifier: F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5 Certificate issuer: /CN=A91DDDED/serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5 Certificate serial: 01A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft Manifest number: 01A4 Signing time: Fri 25 Apr 2025 02:28:08 +0000 Manifest this update: Fri 25 Apr 2025 02:28:08 +0000 Manifest next update: Fri 02 May 2025 02:28:08 +0000 Files and hashes: 1: 90n3b5KhbSqHFDf3LIbQ0F3imtU.crl (hash: TUPvVlqR3Bg3AMwGET/cD/w0pYtsFWf+x2plLtw9Sg8=) 2: 69B6C14A9DF611ED8D51D272C4F9AE02.roa (hash: 54OZtiC3lpeukDDzmCUDt697LQ+SuKtxGSa0nhIWHEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.crl rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 423 (0x1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDDED, serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5 Validity Not Before: Apr 25 02:28:08 2025 GMT Not After : May 2 02:28:08 2025 GMT Subject: CN=680af338-e078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5a:36:1e:18:89:e6:26:59:28:09:7b:fb:4e: bd:1e:95:8c:48:c8:83:c9:b1:8b:0d:38:f3:70:33: 93:67:ac:aa:28:57:ec:70:c1:5e:ed:15:03:1a:40: 66:0d:a8:1f:61:9c:1e:56:30:58:a4:0c:48:46:4e: e1:9f:28:9c:42:92:aa:75:2d:04:d5:fe:a7:66:6b: ec:f4:4a:93:ce:a4:31:e1:c2:ba:47:86:7f:2b:d5: 60:6a:0e:6b:d1:5e:94:bc:e9:b1:40:a9:40:fa:c0: 6e:0c:95:08:ff:ed:10:ea:22:e9:88:43:88:41:8c: 88:99:5e:46:7f:b8:89:21:0b:4c:f7:37:22:ec:c3: 56:bb:0e:41:b5:a6:79:8f:96:72:84:a7:e2:c9:4d: 87:36:a6:c2:4b:2d:e8:3d:ab:d6:b1:ab:ef:ac:4e: 93:65:b8:d4:8a:8a:cf:aa:a9:d2:e0:22:4e:64:9a: f6:67:05:02:e3:ce:80:0c:77:e2:1b:77:6e:a5:dc: cc:42:9a:b6:b8:d2:b9:fa:d8:e3:e7:17:4b:f8:35: b2:99:44:cd:07:ec:79:4a:39:4c:31:43:99:bd:38: 4d:74:8c:97:cc:2a:56:81:c7:e0:5d:3d:b8:fe:84: bc:d2:3b:5f:41:7d:15:b0:14:85:14:49:5d:47:0c: b8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2B:A4:E7:D8:BF:4E:23:60:15:EA:98:63:01:B6:EB:EA:4D:BC:A2 X509v3 Authority Key Identifier: keyid:F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:09:82:39:ec:bd:fb:e7:c5:35:c8:f4:55:50:1b:af:80:52: d9:6e:c7:42:34:8c:cc:ab:a1:88:d9:b9:67:c1:da:50:ff:2e: 2f:b9:73:df:14:5c:11:e5:f9:b8:52:22:e4:1c:71:c8:6a:15: 39:c9:b6:05:60:45:c0:f4:eb:ec:5e:d9:c0:e0:88:1f:ff:33: a5:b5:2d:32:ce:39:26:c3:8c:9f:04:05:c9:d3:f3:64:6a:6c: 3b:b0:02:70:ec:f8:5d:b7:02:7a:79:fe:62:9f:7d:cb:c7:44: df:d7:c5:67:b1:1e:17:98:32:6c:24:09:5a:68:f1:03:c8:84: ef:af:8d:f8:7f:f4:88:b8:0d:f6:14:84:5e:a3:bf:00:87:32: cc:d5:32:9c:49:ef:d8:0b:d1:65:3e:1d:c0:e7:c5:42:3c:4d: 6f:ea:88:3f:d2:28:28:4d:52:e1:f4:bd:06:06:bc:af:16:95: c4:79:26:88:7a:80:36:fa:53:e1:ee:cc:45:d6:86:5b:5c:46: b5:6e:ed:29:2d:bb:e2:d7:7f:04:bc:06:ac:be:62:a7:00:a3: 78:3e:d2:28:04:51:64:96:ea:38:9a:c1:48:5a:b9:d0:fa:33: 1c:f9:a9:47:35:dc:ce:bf:47:5b:96:0b:50:2f:9e:94:67:db: 3b:40:99:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERERUQxMTAvBgNVBAUTKEY3NDlGNzZGOTJBMTZEMkE4NzE0MzdGNzJDODZEMEQw NURFMjlBRDUwHhcNMjUwNDI1MDIyODA4WhcNMjUwNTAyMDIyODA4WjAYMRYwFAYD VQQDEw02ODBhZjMzOC1lMDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulo2HhiJ5iZZKAl7+069HpWMSMiDybGLDTjzcDOTZ6yqKFfscMFe7RUDGkBm DagfYZweVjBYpAxIRk7hnyicQpKqdS0E1f6nZmvs9EqTzqQx4cK6R4Z/K9Vgag5r 0V6UvOmxQKlA+sBuDJUI/+0Q6iLpiEOIQYyImV5Gf7iJIQtM9zci7MNWuw5BtaZ5 j5ZyhKfiyU2HNqbCSy3oPavWsavvrE6TZbjUiorPqqnS4CJOZJr2ZwUC486ADHfi G3dupdzMQpq2uNK5+tjj5xdL+DWymUTNB+x5SjlMMUOZvThNdIyXzCpWgcfgXT24 /oS80jtfQX0VsBSFFEldRwy4twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFIrpOfY v04jYBXqmGMBtuvqTbyiMB8GA1UdIwQYMBaAFPdJ92+SoW0qhxQ39yyG0NBd4prV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERERFRC83OUNDMDE2NjlE RjIxMUVEOTU5NDlGNTdDNEY5QUUwMi85MG4zYjVLaGJTcUhGRGYzTEliUTBGM2lt dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkwbjNiNUtoYlNxSEZEZjNMSWJRMEYzaW10VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RERFRC83OUNDMDE2NjlERjIxMUVEOTU5NDlGNTdDNEY5QUUwMi85MG4zYjVLaGJT cUhGRGYzTEliUTBGM2ltdFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCCYI57L3758U1yPRVUBuvgFLZbsdCNIzMq6GI2blnwdpQ/y4vuXPf FFwR5fm4UiLkHHHIahU5ybYFYEXA9OvsXtnA4Igf/zOltS0yzjkmw4yfBAXJ0/Nk amw7sAJw7PhdtwJ6ef5in33Lx0Tf18VnsR4XmDJsJAlaaPEDyITvr434f/SIuA32 FIReo78AhzLM1TKcSe/YC9FlPh3A58VCPE1v6og/0igoTVLh9L0GBryvFpXEeSaI eoA2+lPh7sxF1oZbXEa1bu0pLbvi138EvAasvmKnAKN4PtIoBFFkluo4msFIWrnQ +jMc+alHNdzOv0dblgtQL56UZ9s7QJny -----END CERTIFICATE-----Generated at Sat Apr 26 12:59:42 2025 by rpki-client