$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft File: acgZi9o_0JBT9CVT1z7qFRIdJBw.mft (raw, json) Hash identifier: Oe+MDCUR+CDGBD3MzwXwa/Duwxb94P8Sc7lroWheOoI= Subject key identifier: F4:5C:C5:54:F1:83:BB:9C:E2:1A:33:0F:0A:28:98:9D:DB:EE:D3:0E Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C Certificate issuer: /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C Certificate serial: 0B44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft Manifest number: 0B38 Signing time: Thu 24 Apr 2025 19:04:30 +0000 Manifest this update: Thu 24 Apr 2025 19:04:29 +0000 Manifest next update: Thu 01 May 2025 19:04:29 +0000 Files and hashes: 1: acgZi9o_0JBT9CVT1z7qFRIdJBw.crl (hash: kovTRZk/R/a+89l0Li1ZRRRo4Haq/eZLbWL4UP8KYAE=) 2: A3BE70CCD5AE11EE909D5C40C4F9AE02.roa (hash: It+EzOgB+4GwVpz41BOeTUKf/RikBUyvJSCbvGF22zE=) 3: C53629FEEACE11EEA8513D34C4F9AE02.roa (hash: m2mZEmy+jYi2Exf5MsZvNb+d8UP/lXqWFf7D/THaytE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2884 (0xb44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4F66, serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C Validity Not Before: Apr 24 19:04:29 2025 GMT Not After : May 1 19:04:29 2025 GMT Subject: CN=680a8b3d-33a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d2:90:4b:38:22:6d:12:64:b2:3e:25:a0:f4: b1:68:6b:a9:9e:77:9d:50:69:48:cb:6f:0a:43:dd: 23:db:29:aa:0d:a3:54:eb:35:19:a7:e8:65:86:dd: c5:10:87:b8:62:f4:d0:15:81:42:c0:e8:85:f4:1e: e9:a2:f7:f1:f0:f9:d1:3f:86:c9:bc:5d:db:c6:de: 6e:f5:2b:79:44:a3:3b:48:37:62:88:61:89:2e:a9: e3:04:b2:ee:61:ba:19:90:b2:17:0d:c4:f3:60:2f: 62:63:5a:50:3c:c1:42:46:87:46:50:1d:da:6f:3a: 8d:01:0d:4e:2b:a1:43:30:a4:56:d6:db:5d:25:e4: c8:d9:15:72:f3:e1:71:85:e0:bd:36:c5:e6:16:6e: 3f:be:20:f2:c7:a8:c9:c3:1b:36:b3:31:f8:76:ce: 6e:c7:79:eb:6d:d3:52:6a:88:42:4f:5c:fd:ea:d5: 3c:8e:fb:48:26:9e:8c:f5:b1:5f:b5:27:41:ac:29: f2:a0:f5:f0:0b:1e:35:36:f4:b4:5f:02:ee:5a:c9: bd:6e:d1:d4:b6:7d:3b:bc:a0:7b:52:b5:95:4d:57: d9:b8:55:05:d2:55:93:2d:94:1e:1c:1e:9e:4b:e7: 34:1f:c7:42:52:d5:47:78:df:9d:66:18:a9:7a:09: 7c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:5C:C5:54:F1:83:BB:9C:E2:1A:33:0F:0A:28:98:9D:DB:EE:D3:0E X509v3 Authority Key Identifier: keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:71:84:b5:cd:54:8e:40:c4:25:1b:15:28:aa:0a:cc:41:43: 3f:4f:5d:c8:e0:11:0a:32:aa:72:35:06:5f:87:43:c3:5d:74: bb:fa:a2:5a:1a:b3:b2:f4:57:d2:22:35:14:fd:bd:93:0b:42: 62:c0:90:b1:80:9d:c3:3f:12:8f:1d:0e:74:2a:e9:f8:b7:85: 7d:9e:90:2b:b4:f3:19:a3:3c:c7:5d:51:bf:d6:7f:76:26:60: da:3f:04:7b:56:ea:d0:c4:45:09:5b:4c:b9:c8:59:9a:b2:2b: d9:c9:62:6c:a8:fc:4d:10:c5:bd:99:57:30:53:41:16:b5:0a: 9a:71:67:30:de:69:a3:d3:15:91:de:de:c6:c1:9e:9a:4c:d0: c3:ed:23:93:2e:72:a8:50:f6:19:bb:93:8c:d5:2d:e8:11:13: ff:35:86:75:6e:ca:cc:94:9f:df:b9:3b:78:4f:f7:54:14:74: 8e:aa:da:5f:18:77:e8:93:a0:01:c9:c4:4a:21:1c:bf:ef:bd: b3:6c:4b:7a:0c:28:64:5e:de:be:6a:54:75:bf:0d:a2:f2:df: 22:95:db:0e:8b:76:56:bd:bb:db:75:45:79:af:98:5b:bf:8f: 72:d8:6c:e0:e0:ae:af:d9:d3:31:7d:19:db:34:23:36:44:e3: df:44:43:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRGNjYxMTAvBgNVBAUTKDY5QzgxOThCREEzRkQwOTA1M0Y0MjU1M0Q3M0VFQTE1 MTIxRDI0MUMwHhcNMjUwNDI0MTkwNDI5WhcNMjUwNTAxMTkwNDI5WjAYMRYwFAYD VQQDEw02ODBhOGIzZC0zM2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNKQSzgibRJksj4loPSxaGupnnedUGlIy28KQ90j2ymqDaNU6zUZp+hlht3F EIe4YvTQFYFCwOiF9B7povfx8PnRP4bJvF3bxt5u9St5RKM7SDdiiGGJLqnjBLLu YboZkLIXDcTzYC9iY1pQPMFCRodGUB3abzqNAQ1OK6FDMKRW1ttdJeTI2RVy8+Fx heC9NsXmFm4/viDyx6jJwxs2szH4ds5ux3nrbdNSaohCT1z96tU8jvtIJp6M9bFf tSdBrCnyoPXwCx41NvS0XwLuWsm9btHUtn07vKB7UrWVTVfZuFUF0lWTLZQeHB6e S+c0H8dCUtVHeN+dZhipegl8XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRcxVTx g7uc4hozDwoomJ3b7tMOMB8GA1UdIwQYMBaAFGnIGYvaP9CQU/QlU9c+6hUSHSQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEY2Ni9FNUY2NThBQTM2 OEExMUVBQjU3NDkyNzJDNEY5QUUwMi9hY2daaTlvXzBKQlQ5Q1ZUMXo3cUZSSWRK QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FjZ1ppOW9fMEpCVDlDVlQxejdxRlJJZEpCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEY2Ni9FNUY2NThBQTM2OEExMUVBQjU3NDkyNzJDNEY5QUUwMi9hY2daaTlvXzBK QlQ5Q1ZUMXo3cUZSSWRKQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCcYS1zVSOQMQlGxUoqgrMQUM/T13I4BEKMqpyNQZfh0PDXXS7+qJa GrOy9FfSIjUU/b2TC0JiwJCxgJ3DPxKPHQ50Kun4t4V9npArtPMZozzHXVG/1n92 JmDaPwR7VurQxEUJW0y5yFmasivZyWJsqPxNEMW9mVcwU0EWtQqacWcw3mmj0xWR 3t7GwZ6aTNDD7SOTLnKoUPYZu5OM1S3oERP/NYZ1bsrMlJ/fuTt4T/dUFHSOqtpf GHfok6ABycRKIRy/772zbEt6DChkXt6+alR1vw2i8t8ildsOi3ZWvbvbdUV5r5hb v49y2Gzg4K6v2dMxfRnbNCM2ROPfREOJ -----END CERTIFICATE-----Generated at Sat Apr 26 17:09:04 2025 by rpki-client