$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft File: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft (raw, json) Hash identifier: N+a5uurWy5JUC+AkptF5LaMk66fddhv+xTL14s53bZk= Subject key identifier: 02:00:77:BA:9B:83:65:0C:96:51:F2:EC:30:06:1E:63:CA:63:D7:53 Authority key identifier: 7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4 Certificate issuer: /CN=A91E2AE5/serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4 Certificate serial: 14BD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft Manifest number: 14AC Signing time: Thu 24 Apr 2025 15:33:32 +0000 Manifest this update: Thu 24 Apr 2025 15:33:31 +0000 Manifest next update: Thu 01 May 2025 15:33:31 +0000 Files and hashes: 1: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl (hash: JhIGWub8dB28FQZU7TTsbyWOSulto/81mzM8vZFezjU=) 2: C163B1881A4711EDA547FE24C4F9AE02.roa (hash: YyHC9fQHplsWKxQpqgQ61v95ti092y+Fsw7rZXStZmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5309 (0x14bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2AE5, serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4 Validity Not Before: Apr 24 15:33:31 2025 GMT Not After : May 1 15:33:31 2025 GMT Subject: CN=680a59cb-9836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9c:e4:b3:65:fa:b7:9c:7c:87:90:e1:92:fc: a5:31:e7:b1:ec:2e:8b:a3:ea:4a:58:3a:ab:23:99: 55:fb:80:4e:76:be:14:43:85:6d:2c:dd:06:38:d5: 7e:bb:9f:a6:41:7e:62:3d:00:d5:9e:fc:e5:79:2c: 57:35:ed:38:18:4b:e0:2c:72:b9:99:dc:ae:e9:af: 85:be:01:6e:0b:ca:e3:68:fe:ef:cf:a4:62:ee:b6: c1:3f:70:79:d7:a7:15:fe:e1:31:b6:aa:12:22:7f: a8:cb:37:2a:79:fb:3d:50:9d:24:2d:2d:fd:bc:69: bb:6e:95:95:c6:8f:9b:5a:f8:f8:5b:59:b0:be:e4: 35:1e:f7:3d:47:9f:2b:bf:4b:90:d6:38:50:a0:3f: 48:61:d7:2f:09:de:c1:5f:6f:87:c6:13:5e:32:b9: cd:f5:c3:3c:9a:80:15:f7:1d:c3:99:08:cf:5a:f0: 29:28:7d:e2:44:ed:1c:04:5e:13:11:f1:34:d5:7f: 5a:67:10:13:a0:91:c4:0d:6e:c8:e6:32:ee:bf:13: 43:c2:2d:99:83:77:f4:48:db:14:f6:15:48:b7:a1: 6a:7c:75:af:a7:b1:ca:4a:7e:cd:b1:48:38:45:18: 8b:02:9a:f3:2c:8a:d7:68:bd:90:65:e4:8a:6d:01: d6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:00:77:BA:9B:83:65:0C:96:51:F2:EC:30:06:1E:63:CA:63:D7:53 X509v3 Authority Key Identifier: keyid:7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:35:38:1a:03:7c:c2:66:bf:d9:69:a7:ab:46:2f:b8:f3:a4: 4d:1b:da:4a:84:a5:b5:31:07:12:86:17:da:27:b3:34:95:b6: a3:bc:47:40:a4:03:a0:a9:79:a7:4c:e4:cd:2e:78:4f:56:59: 6f:c2:02:77:2b:f8:ef:9d:52:c6:bc:ae:21:98:2d:34:68:33: 2c:58:39:14:30:77:54:51:71:61:e0:b8:74:6d:94:d7:42:2c: 9c:21:94:f3:dd:72:ee:b2:be:51:5a:80:1f:72:c1:71:4c:fa: 30:4a:7f:2c:24:a1:65:22:dc:b1:d7:6b:0d:6c:0a:10:4b:0a: 10:25:f3:73:1e:05:8d:ad:9f:77:c3:19:44:1f:1f:0c:57:8b: be:ff:f1:61:5e:a0:0d:6d:8c:82:07:25:53:dc:03:f0:02:14: 63:05:a6:ae:0f:08:f0:e4:2c:f0:af:f9:f4:bd:58:29:81:e3: c1:9b:e5:33:6e:86:21:ba:c8:62:2e:d9:4e:ce:53:b9:e6:72: 58:f9:7e:ed:75:75:13:bc:d9:e5:4c:90:c4:ee:c9:6e:1d:1b: 21:c5:c4:9a:00:5a:7d:11:08:cf:59:ee:e4:e6:9a:b5:40:a5: fb:45:ab:d1:e9:83:ab:f3:76:02:0f:8b:f5:ec:a9:db:65:f9: 82:a6:88:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBRTUxMTAvBgNVBAUTKDdDNjNCMjgzRDlCOEEwNkVFQUQwNjIxQjgyM0VEMEY0 RTY5OURERjQwHhcNMjUwNDI0MTUzMzMxWhcNMjUwNTAxMTUzMzMxWjAYMRYwFAYD VQQDEw02ODBhNTljYi05ODM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJzks2X6t5x8h5DhkvylMeex7C6Lo+pKWDqrI5lV+4BOdr4UQ4VtLN0GONV+ u5+mQX5iPQDVnvzleSxXNe04GEvgLHK5mdyu6a+FvgFuC8rjaP7vz6Ri7rbBP3B5 16cV/uExtqoSIn+oyzcqefs9UJ0kLS39vGm7bpWVxo+bWvj4W1mwvuQ1Hvc9R58r v0uQ1jhQoD9IYdcvCd7BX2+HxhNeMrnN9cM8moAV9x3DmQjPWvApKH3iRO0cBF4T EfE01X9aZxAToJHEDW7I5jLuvxNDwi2Zg3f0SNsU9hVIt6FqfHWvp7HKSn7NsUg4 RRiLAprzLIrXaL2QZeSKbQHWbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIAd7qb g2UMllHy7DAGHmPKY9dTMB8GA1UdIwQYMBaAFHxjsoPZuKBu6tBiG4I+0PTmmd30 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkFFNS85RDcyNzZCNjVD QTkxMUU4QUE0MkEzNDZDNEY5QUUwMi9mR095ZzltNG9HN3EwR0liZ2o3UTlPYVoz ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZHT3lnOW00b0c3cTBHSWJnajdROU9hWjNmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkFFNS85RDcyNzZCNjVDQTkxMUU4QUE0MkEzNDZDNEY5QUUwMi9mR095ZzltNG9H N3EwR0liZ2o3UTlPYVozZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCINTgaA3zCZr/ZaaerRi+486RNG9pKhKW1MQcShhfaJ7M0lbajvEdA pAOgqXmnTOTNLnhPVllvwgJ3K/jvnVLGvK4hmC00aDMsWDkUMHdUUXFh4Lh0bZTX QiycIZTz3XLusr5RWoAfcsFxTPowSn8sJKFlItyx12sNbAoQSwoQJfNzHgWNrZ93 wxlEHx8MV4u+//FhXqANbYyCByVT3APwAhRjBaauDwjw5Czwr/n0vVgpgePBm+Uz boYhushiLtlOzlO55nJY+X7tdXUTvNnlTJDE7sluHRshxcSaAFp9EQjPWe7k5pq1 QKX7RavR6YOr83YCD4v17KnbZfmCpohr -----END CERTIFICATE-----Generated at Sat Apr 26 13:09:22 2025 by rpki-client