$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft File: MSRAIBsu90t8rGwx-4X0HpxGhqA.mft (raw, json) Hash identifier: 3GKRKtcDJE/AQ+3r/mZV+mfkXWShp7GWOtk0yRza8MM= Subject key identifier: 57:BB:0A:D9:4C:F7:AB:C8:F1:C5:A3:8D:FF:E3:31:1C:FC:5D:BD:85 Authority key identifier: 31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0 Certificate issuer: /CN=A91EA80C/serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft Manifest number: 20 Signing time: Fri 25 Apr 2025 06:55:28 +0000 Manifest this update: Fri 25 Apr 2025 06:55:28 +0000 Manifest next update: Fri 02 May 2025 06:55:28 +0000 Files and hashes: 1: MSRAIBsu90t8rGwx-4X0HpxGhqA.crl (hash: w1bgkpsUfufjRPyLERvRNvLVa9J8hi/C50yRYSoNxwA=) 2: 070DB3BAFB6D11EFA5E39678C4F9AE02.roa (hash: q1x47yUs6U+uQS9ousQECTrxQCfwChHW+mjdafLrJuY=) 3: 2178DCD2FF3E11EF8D834053C4F9AE02.roa (hash: JSwC8LvkFFx+csBawa+WzjqR/g3wGIngxuIt67ID3sc=) 4: F5FC39B600F811F0BD702A69C4F9AE02.roa (hash: 8uwpV2NMP0utQgRKFvrYO1IhjVauGOu4rc/6wACuwjU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:55:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA80C, serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0 Validity Not Before: Apr 25 06:55:28 2025 GMT Not After : May 2 06:55:28 2025 GMT Subject: CN=680b31e0-cea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ee:5c:7b:81:d6:28:e3:cd:8b:e8:cf:4d:c0: 24:ca:8d:28:25:03:ad:fd:65:f7:1a:28:97:f1:28: ed:d8:72:e7:d5:15:ea:c6:57:55:98:05:2b:5a:8c: c4:13:54:76:d5:89:15:e4:47:5e:06:9b:ab:e8:d7: 56:b8:f0:2a:1f:98:ab:c6:d9:96:3c:11:b9:55:c6: 7b:56:0f:c4:0b:2c:13:e3:ce:4d:33:10:d8:11:f3: 5e:88:5a:61:57:16:ab:fb:07:72:8d:9b:3b:09:0a: a6:9f:a0:13:c0:e5:49:f4:37:3e:3f:71:c0:c3:c8: 84:86:db:e6:d1:3c:04:79:96:fd:18:d9:9f:93:0f: a2:a7:80:d5:af:2c:78:f2:11:4b:91:e1:8f:38:6a: 14:d9:4b:f2:80:eb:55:cb:30:92:ab:ee:35:34:e6: 25:2c:4a:4a:2e:3f:98:45:b2:0f:10:c4:a1:97:cd: d1:53:b4:b9:f4:eb:ab:5b:e4:1d:7f:e6:be:a6:09: 64:c6:66:26:28:df:ed:82:78:ee:73:86:5e:a7:c7: 0e:7b:b0:79:9e:d6:fd:c4:2d:21:c3:d8:ad:1b:1d: 8b:a9:0d:f2:99:97:bf:db:a9:91:85:8d:3d:57:97: 30:50:f0:89:a9:1d:aa:4f:64:e8:a2:0c:bc:9c:1e: d4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BB:0A:D9:4C:F7:AB:C8:F1:C5:A3:8D:FF:E3:31:1C:FC:5D:BD:85 X509v3 Authority Key Identifier: keyid:31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:cd:19:2a:42:84:cc:e8:e2:40:88:1f:3b:fa:c0:2e:b9:29: 02:a4:ba:9a:6c:56:5a:cd:a5:ec:64:99:e0:26:9a:d0:c4:58: 69:e3:99:fc:6f:98:3a:1a:ca:49:5e:c5:5b:db:b3:4f:90:58: 23:a5:34:7b:1f:9b:16:2a:be:e9:e5:e9:88:42:52:ff:b2:55: 92:df:fe:7d:4f:2c:da:46:a6:8c:c9:f6:55:31:34:9d:2d:a3: 90:a8:91:16:b7:16:55:34:36:e3:4e:e3:04:b9:30:b5:5d:70: 85:e0:90:d7:00:52:23:d1:ef:a9:15:49:7a:b0:51:4e:86:a5: b3:dd:0d:78:a4:18:5d:11:c4:1a:bf:80:4a:36:f2:ee:a6:03: 68:41:49:83:d9:95:1e:9e:56:92:61:8d:da:a7:cd:f4:ba:3d: 4c:3a:a7:09:75:ed:a8:cb:e4:a9:e5:9c:98:1c:28:ac:3b:0c: 83:e5:f7:e1:69:c1:b8:6a:2f:31:91:ee:48:e0:38:2d:32:fb: 80:1a:80:ae:6f:4b:06:40:4a:f2:29:44:e9:0e:a2:52:c1:cf: 06:a8:a5:ff:52:f5:2e:84:80:50:31:5c:5b:03:d0:77:e9:3d: 10:26:0d:47:90:21:48:37:01:10:4f:59:d0:58:21:ad:07:2e: fa:63:df:cd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTgwQzExMC8GA1UEBRMoMzEyNDQwMjAxQjJFRjc0QjdDQUM2QzMxRkI4NUY0MUU5 QzQ2ODZBMDAeFw0yNTA0MjUwNjU1MjhaFw0yNTA1MDIwNjU1MjhaMBgxFjAUBgNV BAMTDTY4MGIzMWUwLWNlYTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/7lx7gdYo482L6M9NwCTKjSglA639ZfcaKJfxKO3YcufVFerGV1WYBStajMQT VHbViRXkR14Gm6vo11a48CofmKvG2ZY8EblVxntWD8QLLBPjzk0zENgR816IWmFX Fqv7B3KNmzsJCqafoBPA5Un0Nz4/ccDDyISG2+bRPAR5lv0Y2Z+TD6KngNWvLHjy EUuR4Y84ahTZS/KA61XLMJKr7jU05iUsSkouP5hFsg8QxKGXzdFTtLn066tb5B1/ 5r6mCWTGZiYo3+2CeO5zhl6nxw57sHme1v3ELSHD2K0bHYupDfKZl7/bqZGFjT1X lzBQ8ImpHapPZOiiDLycHtTBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUV7sK2Uz3 q8jxxaON/+MxHPxdvYUwHwYDVR0jBBgwFoAUMSRAIBsu90t8rGwx+4X0HpxGhqAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBODBDL0RFOThFQUYwRkI2 NTExRUZBMzc2RTQ0OUM0RjlBRTAyL01TUkFJQnN1OTB0OHJHd3gtNFgwSHB4R2hx QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTVNSQUlCc3U5MHQ4ckd3eC00WDBIcHhHaHFBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB ODBDL0RFOThFQUYwRkI2NTExRUZBMzc2RTQ0OUM0RjlBRTAyL01TUkFJQnN1OTB0 OHJHd3gtNFgwSHB4R2hxQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAITNGSpChMzo4kCIHzv6wC65KQKkuppsVlrNpexkmeAmmtDEWGnjmfxv mDoayklexVvbs0+QWCOlNHsfmxYqvunl6YhCUv+yVZLf/n1PLNpGpozJ9lUxNJ0t o5CokRa3FlU0NuNO4wS5MLVdcIXgkNcAUiPR76kVSXqwUU6GpbPdDXikGF0RxBq/ gEo28u6mA2hBSYPZlR6eVpJhjdqnzfS6PUw6pwl17ajL5KnlnJgcKKw7DIPl9+Fp wbhqLzGR7kjgOC0y+4AagK5vSwZASvIpROkOolLBzwaopf9S9S6EgFAxXFsD0Hfp PRAmDUeQIUg3ARBPWdBYIa0HLvpj380= -----END CERTIFICATE-----Generated at Sat Apr 26 13:06:48 2025 by rpki-client