$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft File: RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft (raw, json) Hash identifier: Nv+HKcpxB5q6856BJ3oHZBnyVJt46yOOAadNuCtue3Q= Subject key identifier: F8:13:10:18:FE:8B:1F:1F:AD:39:FB:97:95:21:04:45:BC:CC:8C:09 Authority key identifier: 46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0 Certificate issuer: /CN=A91DF31D/serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0 Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft Manifest number: 011F Signing time: Fri 25 Apr 2025 03:57:33 +0000 Manifest this update: Fri 25 Apr 2025 03:57:32 +0000 Manifest next update: Fri 02 May 2025 03:57:32 +0000 Files and hashes: 1: RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl (hash: MRvhT5zVZ6DbFnEbsSdJyl43zjusddAAywKZAl3YrY8=) 2: FA272BC67EBE11EEABD00B4DC4F9AE02.roa (hash: xhKR4yggkkDIE2Jc3UBJzAhUDN7Y6iIUFjJh/ZjCHKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:57:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF31D, serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0 Validity Not Before: Apr 25 03:57:32 2025 GMT Not After : May 2 03:57:32 2025 GMT Subject: CN=680b082c-b27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b6:f2:e3:44:4f:12:89:ee:c6:b9:6e:03:ca: 5f:c7:3b:b9:83:b4:d5:d9:99:a2:88:80:68:49:14: 21:8a:f0:58:db:c7:da:ae:cd:f8:f1:0c:69:b3:1f: d5:15:bb:43:c2:7f:89:6a:25:ad:f5:20:f2:44:99: 67:81:34:32:6b:83:0c:1e:eb:9e:d4:e9:ba:b3:9f: f3:5b:46:31:a2:91:f5:76:f5:19:30:e1:f5:65:fa: 5e:c4:3b:09:ea:26:23:f6:45:96:4a:d9:86:68:66: 6c:de:f3:30:c4:d3:44:a5:27:89:0f:24:de:b2:7c: de:ab:91:3d:2d:15:b1:7b:78:5c:51:8d:fb:9f:2a: 6a:62:5c:1a:23:ff:4d:b6:8f:80:53:7a:4e:fe:5b: 64:b5:75:35:e9:a2:03:d6:fc:74:90:09:ba:c8:3e: 3e:59:e7:cb:9c:0e:76:9f:5d:cf:d7:7c:84:f1:28: 43:82:b9:53:ab:ad:8d:d5:be:d3:e6:b5:04:a7:3b: 2d:1c:d8:4e:de:99:59:50:31:ed:5a:8e:b3:56:82: bd:7c:1f:b2:32:db:9a:06:60:d6:78:79:df:e9:f5: 70:78:76:12:dd:72:a1:19:47:0c:ef:69:bd:f7:55: e4:bc:12:8e:58:32:73:56:c5:4f:8a:c7:1d:08:12: b8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:13:10:18:FE:8B:1F:1F:AD:39:FB:97:95:21:04:45:BC:CC:8C:09 X509v3 Authority Key Identifier: keyid:46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ab:35:52:ec:81:b4:1c:de:27:a5:d4:b4:20:ea:87:c9:ca: 9e:f2:01:72:e9:d5:5b:b0:4b:22:2d:5c:9f:04:05:56:0a:3f: 8b:2b:e2:b9:d1:6a:79:97:3b:45:ff:8d:94:c7:39:63:f0:4a: ad:eb:2e:fd:8c:ac:f9:90:7c:67:b4:ea:b7:59:7c:b7:a5:33: 1a:b1:d9:45:5d:55:74:93:e3:da:c2:48:6e:d3:cf:b2:a3:29: d8:86:7e:aa:df:dd:b0:9f:0c:9b:7e:2e:fa:df:98:a9:bf:9c: 26:be:1c:7f:69:2d:68:14:e8:4c:c9:1b:ba:14:b6:95:4e:dd: 29:28:5b:2b:e9:39:42:c5:e8:cd:dc:42:39:db:b0:e3:05:46: 8e:58:02:cf:92:e5:2a:02:3d:04:76:39:0c:d2:cd:23:4d:ae: 65:f2:34:27:f3:19:ce:40:fb:42:72:89:8a:b5:35:fb:ed:3a: 7c:82:2c:8b:06:ef:80:30:0c:94:25:4d:29:4d:80:ad:92:08: 11:75:85:5c:29:bc:6c:d0:13:e3:f6:7c:6e:a8:ca:bf:39:b0: 7f:b1:fb:ff:06:e7:2a:01:02:a2:16:e4:79:eb:18:59:98:15: 80:a3:ce:92:5b:34:90:7f:7a:08:99:eb:73:02:95:89:55:87: 83:ca:4f:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYzMUQxMTAvBgNVBAUTKDQ2MDBDMThENjJDNkY3MjRENUM5NTUwNkY0MUI4Qzk1 RkMzOTBEQzAwHhcNMjUwNDI1MDM1NzMyWhcNMjUwNTAyMDM1NzMyWjAYMRYwFAYD VQQDEw02ODBiMDgyYy1iMjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA37by40RPEonuxrluA8pfxzu5g7TV2ZmiiIBoSRQhivBY28fars348Qxpsx/V FbtDwn+JaiWt9SDyRJlngTQya4MMHuue1Om6s5/zW0YxopH1dvUZMOH1ZfpexDsJ 6iYj9kWWStmGaGZs3vMwxNNEpSeJDyTesnzeq5E9LRWxe3hcUY37nypqYlwaI/9N to+AU3pO/ltktXU16aID1vx0kAm6yD4+WefLnA52n13P13yE8ShDgrlTq62N1b7T 5rUEpzstHNhO3plZUDHtWo6zVoK9fB+yMtuaBmDWeHnf6fVweHYS3XKhGUcM72m9 91XkvBKOWDJzVsVPiscdCBK4TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgTEBj+ ix8frTn7l5UhBEW8zIwJMB8GA1UdIwQYMBaAFEYAwY1ixvck1clVBvQbjJX8OQ3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjMxRC8wNTVBQjU0NDdE RjcxMUVFODdCN0Q0MzBDNEY5QUUwMi9SZ0RCaldMRzl5VFZ5VlVHOUJ1TWxmdzVE Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JnREJqV0xHOXlUVnlWVUc5QnVNbGZ3NURjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjMxRC8wNTVBQjU0NDdERjcxMUVFODdCN0Q0MzBDNEY5QUUwMi9SZ0RCaldMRzl5 VFZ5VlVHOUJ1TWxmdzVEY0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKqzVS7IG0HN4npdS0IOqHycqe8gFy6dVbsEsiLVyfBAVWCj+LK+K5 0Wp5lztF/42Uxzlj8Eqt6y79jKz5kHxntOq3WXy3pTMasdlFXVV0k+Pawkhu08+y oynYhn6q392wnwybfi7635ipv5wmvhx/aS1oFOhMyRu6FLaVTt0pKFsr6TlCxejN 3EI527DjBUaOWALPkuUqAj0EdjkM0s0jTa5l8jQn8xnOQPtCcomKtTX77Tp8giyL Bu+AMAyUJU0pTYCtkggRdYVcKbxs0BPj9nxuqMq/ObB/sfv/BucqAQKiFuR56xhZ mBWAo86SWzSQf3oImetzApWJVYeDyk9e -----END CERTIFICATE-----Generated at Sat Apr 26 16:39:43 2025 by rpki-client