$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft File: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft (raw, json) Hash identifier: jAxgBKtxHz4iJJiZtvtAmLqCpBbVd+Teh+cM6iYH9Vw= Subject key identifier: FB:F2:36:88:96:27:E8:54:88:76:08:DA:1D:60:9C:4B:3E:00:53:6C Authority key identifier: 69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74 Certificate issuer: /CN=A91EE5E5/serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft Manifest number: 4D Signing time: Fri 25 Apr 2025 06:19:21 +0000 Manifest this update: Fri 25 Apr 2025 06:19:21 +0000 Manifest next update: Fri 02 May 2025 06:19:21 +0000 Files and hashes: 1: aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl (hash: PoawXcvW3WNRUaqnHOGzgI19ko+QunQHONfIfOJ/4e8=) 2: 1506B298B00711EF863A582EC4F9AE02.roa (hash: PjiKcHZxo3PwYpPFYpla6KazUuXCJGnKHspIakJqo2E=) 3: 4965F84CAFC011EF82BB1055C4F9AE02.roa (hash: jpijFayg1AhLIehVWTrf1nyIqutL0nvGe/8hsMY0L/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:19:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE5E5, serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874 Validity Not Before: Apr 25 06:19:21 2025 GMT Not After : May 2 06:19:21 2025 GMT Subject: CN=680b2969-7ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3f:30:e5:71:0e:bb:c4:44:8c:c8:ab:db:d5: 60:9a:0b:e8:e8:0c:7d:6f:1d:3d:1b:05:84:79:b4: 9d:62:0f:b6:5d:ab:9d:71:06:92:bc:6c:08:9c:3e: ff:7d:19:a1:b8:86:5c:12:96:1d:c2:56:cb:75:bd: c6:37:37:5c:83:1c:f8:30:d2:0c:49:b7:49:00:f1: 8c:36:98:9e:fc:35:6b:27:eb:bb:19:b2:dd:7a:b4: 55:bf:c7:3c:d1:05:e9:be:97:91:28:5f:02:40:67: 59:d0:ed:51:b7:41:23:2c:64:ce:f8:a9:f1:4c:86: 16:c7:10:4d:4f:80:21:85:3f:2d:f4:eb:8c:66:67: 90:21:05:f0:31:2d:a8:2e:88:f8:30:f0:7f:b6:44: bc:9e:f9:bc:e7:73:9a:74:26:c5:3f:4e:84:24:02: 39:df:a4:75:2a:02:ab:be:53:a6:f3:e8:20:97:a4: 58:e7:08:c7:0e:dd:cd:7b:3c:fc:e3:bb:1b:86:50: a0:54:1a:03:b1:b3:ac:b2:60:fe:c2:42:26:1d:3b: 11:03:54:92:97:47:ad:cc:9f:9a:23:6b:fc:fd:45: e0:9b:8a:40:8f:00:9c:5a:05:74:fa:00:f3:6f:91: 97:0e:76:d1:02:a5:14:29:90:7e:7c:05:dc:10:af: 4a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F2:36:88:96:27:E8:54:88:76:08:DA:1D:60:9C:4B:3E:00:53:6C X509v3 Authority Key Identifier: keyid:69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:41:bc:ff:99:a3:70:99:92:5c:92:55:c0:95:19:fc:33:37: 34:e2:a9:29:e4:38:ba:d8:f6:f8:08:f9:dc:a4:f2:35:fc:b3: 70:7b:97:68:9c:e1:16:07:41:f1:70:db:96:5b:a5:4b:ee:55: 25:5c:2f:8a:90:f4:5c:42:ae:42:99:79:cf:7d:2d:f7:a3:aa: 70:ca:79:ec:9c:f9:77:33:01:1b:16:19:c4:79:e8:76:2e:27: 23:7d:4a:5b:c7:0b:2a:0a:65:09:c2:e1:9d:61:65:7f:7a:60: 2c:ac:a0:bf:c8:92:0f:84:4d:eb:a2:87:21:d3:51:98:21:18: d5:a5:96:5a:fa:0b:cc:6a:6d:a1:03:dc:67:17:b7:d1:37:ee: 63:cd:02:82:1e:26:5a:fe:07:3b:18:06:59:64:82:66:28:ae: 83:df:77:a9:5e:9c:1d:2c:e0:48:65:1f:f5:cc:cc:d4:32:c2: 7e:d0:71:29:58:a2:06:82:6d:f9:6f:a8:7f:0c:41:71:1c:75: 3d:86:af:96:90:60:5b:00:85:c7:6a:0b:4f:6e:7a:62:80:f6: f8:97:13:bf:71:a4:8a:56:4f:92:ff:2c:45:70:97:4c:d0:83: 71:84:d4:e3:49:c4:4b:cf:7e:71:cc:d7:e0:b0:3b:5f:4a:33: 06:c3:89:a9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RTVFNTExMC8GA1UEBRMoNjkyMzZFNTk5NjMwMEEyRkQ3ODVFRjg1NzgzQzVDMjlD NUI0RTg3NDAeFw0yNTA0MjUwNjE5MjFaFw0yNTA1MDIwNjE5MjFaMBgxFjAUBgNV BAMTDTY4MGIyOTY5LTdhZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGPzDlcQ67xESMyKvb1WCaC+joDH1vHT0bBYR5tJ1iD7Zdq51xBpK8bAicPv99 GaG4hlwSlh3CVst1vcY3N1yDHPgw0gxJt0kA8Yw2mJ78NWsn67sZst16tFW/xzzR Bem+l5EoXwJAZ1nQ7VG3QSMsZM74qfFMhhbHEE1PgCGFPy3064xmZ5AhBfAxLagu iPgw8H+2RLye+bznc5p0JsU/ToQkAjnfpHUqAqu+U6bz6CCXpFjnCMcO3c17PPzj uxuGUKBUGgOxs6yyYP7CQiYdOxEDVJKXR63Mn5oja/z9ReCbikCPAJxaBXT6APNv kZcOdtECpRQpkH58BdwQr0oHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+/I2iJYn 6FSIdgjaHWCcSz4AU2wwHwYDVR0jBBgwFoAUaSNuWZYwCi/Xhe+FeDxcKcW06HQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFNUU1L0YwRTc2RTEyQUZC RjExRUZBMjhBMzY1NEM0RjlBRTAyL2FTTnVXWll3Q2lfWGhlLUZlRHhjS2NXMDZI US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYVNOdVdaWXdDaV9YaGUtRmVEeGNLY1cwNkhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF NUU1L0YwRTc2RTEyQUZCRjExRUZBMjhBMzY1NEM0RjlBRTAyL2FTTnVXWll3Q2lf WGhlLUZlRHhjS2NXMDZIUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAANBvP+Zo3CZklySVcCVGfwzNzTiqSnkOLrY9vgI+dyk8jX8s3B7l2ic 4RYHQfFw25ZbpUvuVSVcL4qQ9FxCrkKZec99LfejqnDKeeyc+XczARsWGcR56HYu JyN9SlvHCyoKZQnC4Z1hZX96YCysoL/Ikg+ETeuihyHTUZghGNWlllr6C8xqbaED 3GcXt9E37mPNAoIeJlr+BzsYBllkgmYoroPfd6lenB0s4EhlH/XMzNQywn7QcSlY ogaCbflvqH8MQXEcdT2Gr5aQYFsAhcdqC09uemKA9viXE79xpIpWT5L/LEVwl0zQ g3GE1ONJxEvPfnHM1+CwO19KMwbDiak= -----END CERTIFICATE-----Generated at Sat Apr 26 19:07:35 2025 by rpki-client