$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft File: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft (raw, json) Hash identifier: M8HDVdnaAEPvyf5NYZumOaFnPNsydJYwbUHFY7zygJA= Subject key identifier: 3E:6C:47:8E:F1:AF:3C:F8:1A:4D:92:84:8F:51:3E:DD:AC:1D:4E:94 Authority key identifier: 71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B Certificate issuer: /CN=A91EA6C6/serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft Manifest number: 0199 Signing time: Fri 25 Apr 2025 02:34:15 +0000 Manifest this update: Fri 25 Apr 2025 02:34:15 +0000 Manifest next update: Fri 02 May 2025 02:34:15 +0000 Files and hashes: 1: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl (hash: VizyLNX5IR32Imr3qBZ58OkDz3YDtsbsiohvHtoNWDI=) 2: BC69DF32B33E11EDAA6D117BC4F9AE02.roa (hash: db2NWeg4HG/QWHWjQkMvsucOm2s5WuaDwiakb3D08Rk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:34:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA6C6, serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B Validity Not Before: Apr 25 02:34:15 2025 GMT Not After : May 2 02:34:15 2025 GMT Subject: CN=680af4a7-9a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:83:97:1b:22:81:a3:91:97:e2:28:61:e4:de: 5f:bb:2d:d2:02:b4:5a:8a:fd:2e:0f:3e:01:f8:89: 44:fa:f3:ed:2d:eb:6e:f9:eb:66:93:27:b4:e0:9b: 71:bc:a8:18:8e:4e:92:be:ff:63:fc:bc:5f:86:e7: c2:ce:e7:e3:69:f9:b3:aa:4e:87:b6:d5:37:12:50: 7c:bd:86:d6:b1:fa:b5:17:24:8a:d4:9e:f1:7c:b8: 87:ea:69:43:75:9c:7c:f1:f7:6c:86:a5:95:c2:9a: 02:d9:bf:ff:13:d9:39:60:23:c9:87:20:a9:05:ed: d4:90:47:57:11:b0:03:3a:69:94:65:fc:72:56:d5: 1a:ed:07:fb:05:0d:95:d1:c1:5b:c0:ec:81:95:49: 56:f9:d1:dc:a2:a1:3a:64:ab:49:8d:ee:89:2d:47: e6:73:43:11:d8:19:b1:5e:35:0b:d8:63:4f:08:ff: b0:2e:91:c0:f2:1c:2c:46:0e:9e:48:68:08:4f:e1: 78:1d:38:bd:ee:47:0a:dd:64:d8:ec:64:cd:34:30: db:e3:c4:a7:80:74:39:d7:c0:26:47:bc:c9:9e:12: b3:f0:c6:1e:ff:2d:3c:11:e5:ea:02:16:7e:9f:b5: 83:10:8f:f0:e9:40:93:63:3b:da:37:53:66:d8:6e: 55:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6C:47:8E:F1:AF:3C:F8:1A:4D:92:84:8F:51:3E:DD:AC:1D:4E:94 X509v3 Authority Key Identifier: keyid:71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:b8:c8:b8:e6:05:41:e1:21:8d:d4:bb:6f:48:2d:e4:d3:2e: 4c:64:b0:a4:6b:4a:97:7d:90:f2:5f:31:40:89:7d:41:4b:8c: 62:95:73:f2:98:31:8b:6a:76:f2:17:fa:8b:31:01:fa:30:67: 27:c1:23:9f:25:22:75:49:17:9f:ff:c2:72:f7:04:62:2c:fd: de:30:60:30:bb:61:d5:c7:cd:57:e1:70:d5:e9:af:44:89:00: d7:47:5a:ec:e4:bb:9b:c1:9b:60:30:39:93:e2:94:f3:c8:50: de:9f:95:b4:a2:54:d4:40:14:f7:31:7f:d6:c5:3c:55:4d:1a: e3:53:f2:ff:f0:14:19:0e:29:57:ce:fb:b6:13:df:0b:9d:61: 87:44:eb:be:9d:34:77:2e:52:11:03:9f:ce:c1:09:b8:24:9a: 53:9b:75:f4:e9:60:df:11:db:c7:88:81:72:95:97:22:d0:cf: 89:1f:29:69:cb:eb:b5:2b:c4:37:47:0f:bd:e5:e5:b4:cf:a5: 85:56:f8:7f:7b:66:2e:51:66:3c:57:98:b0:d3:69:8a:01:87: eb:95:e2:12:2a:95:d3:ff:d4:b3:d7:31:b5:2a:c6:e3:7d:45: 4e:68:a9:bf:e0:ea:3c:87:61:83:23:f3:f5:79:5d:e7:b1:9f: 3f:41:3e:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2QzYxMTAvBgNVBAUTKDcxNTQ2MDczQkQwOTI3RUJFQjg1MEYwNkRBNzZBNzI3 NjlFNzEzNkIwHhcNMjUwNDI1MDIzNDE1WhcNMjUwNTAyMDIzNDE1WjAYMRYwFAYD VQQDEw02ODBhZjRhNy05YTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4OXGyKBo5GX4ihh5N5fuy3SArRaiv0uDz4B+IlE+vPtLetu+etmkye04Jtx vKgYjk6Svv9j/LxfhufCzufjafmzqk6HttU3ElB8vYbWsfq1FySK1J7xfLiH6mlD dZx88fdshqWVwpoC2b//E9k5YCPJhyCpBe3UkEdXEbADOmmUZfxyVtUa7Qf7BQ2V 0cFbwOyBlUlW+dHcoqE6ZKtJje6JLUfmc0MR2BmxXjUL2GNPCP+wLpHA8hwsRg6e SGgIT+F4HTi97kcK3WTY7GTNNDDb48SngHQ518AmR7zJnhKz8MYe/y08EeXqAhZ+ n7WDEI/w6UCTYzvaN1Nm2G5VoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5sR47x rzz4Gk2ShI9RPt2sHU6UMB8GA1UdIwQYMBaAFHFUYHO9CSfr64UPBtp2pydp5xNr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTZDNi8yQ0FFQUQwNEIz M0ExMUVEOUZCRDBFNUNDNEY5QUUwMi9jVlJnYzcwSkotdnJoUThHMm5hbkoybm5F MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWUmdjNzBKSi12cmhROEcybmFuSjJubkUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTZDNi8yQ0FFQUQwNEIzM0ExMUVEOUZCRDBFNUNDNEY5QUUwMi9jVlJnYzcwSkot dnJoUThHMm5hbkoybm5FMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+uMi45gVB4SGN1LtvSC3k0y5MZLCka0qXfZDyXzFAiX1BS4xilXPy mDGLanbyF/qLMQH6MGcnwSOfJSJ1SRef/8Jy9wRiLP3eMGAwu2HVx81X4XDV6a9E iQDXR1rs5LubwZtgMDmT4pTzyFDen5W0olTUQBT3MX/WxTxVTRrjU/L/8BQZDilX zvu2E98LnWGHROu+nTR3LlIRA5/OwQm4JJpTm3X06WDfEdvHiIFylZci0M+JHylp y+u1K8Q3Rw+95eW0z6WFVvh/e2YuUWY8V5iw02mKAYfrleISKpXT/9Sz1zG1Ksbj fUVOaKm/4Oo8h2GDI/P1eV3nsZ8/QT7n -----END CERTIFICATE-----Generated at Sat Apr 26 16:37:57 2025 by rpki-client