$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft File: G5HVFg99VrcFqFFsahz0L0ln71Y.mft (raw, json) Hash identifier: i8YKNl28h7dfyv2o4o5XBCh1Lr9EDJu9wf2ZyTjdwfI= Subject key identifier: B7:E0:75:9D:F2:CB:B6:D1:FE:AB:7E:F6:0A:5C:26:21:CC:92:0E:9E Authority key identifier: 1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 Certificate issuer: /CN=A91EF554/serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Certificate serial: 092A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft Manifest number: 0923 Signing time: Thu 24 Apr 2025 20:10:29 +0000 Manifest this update: Thu 24 Apr 2025 20:10:28 +0000 Manifest next update: Thu 01 May 2025 20:10:28 +0000 Files and hashes: 1: G5HVFg99VrcFqFFsahz0L0ln71Y.crl (hash: Sw+HukOhLJvKVAqxVGGV+EPzlWLF7dPq0OIFSrmjxbI=) 2: 156CEB62DC6011ECB2698C14C4F9AE02.roa (hash: oKOcbNnwPGTy3q5emliwbRxX0Ls/8MFVWMAhcz5HBKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2346 (0x92a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF554, serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Validity Not Before: Apr 24 20:10:28 2025 GMT Not After : May 1 20:10:28 2025 GMT Subject: CN=680a9ab5-dee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:92:d6:b7:9a:d5:07:7e:f8:49:49:8a:0f:90: 4a:be:81:b1:63:62:e0:bf:9b:72:fd:13:af:ac:4f: 33:59:f9:10:b2:58:e7:ae:49:d9:df:7e:ca:ae:1c: 92:12:35:e5:48:44:fb:02:6f:0a:06:31:46:e6:17: aa:f1:b6:80:de:14:1c:4d:a6:c2:09:42:d5:22:46: 6d:bd:fd:38:75:5c:29:95:ae:eb:df:1e:bf:75:d4: dc:4a:b9:de:4b:c3:67:d1:df:69:2a:35:4e:9f:88: 23:e5:0e:ee:57:d8:a3:00:02:0b:e3:31:2d:03:dc: b0:f5:d0:b1:84:95:8d:5c:62:de:14:33:03:a7:4c: 8a:4a:2e:bc:3e:66:80:4e:3f:36:b4:1e:7a:87:d9: 8f:3b:db:23:31:e1:88:29:7c:36:5d:7a:ac:da:2d: 69:b7:a0:83:d7:64:9a:18:de:d5:86:41:6b:fa:d7: 04:83:e9:5c:52:38:d2:82:b9:bd:b0:dd:31:2a:40: 68:e9:19:25:cd:eb:08:8a:72:ec:da:0f:a0:ec:62: c5:78:f1:53:d7:26:90:9c:97:fd:d2:74:8b:7f:1a: cd:70:0c:99:be:ed:c2:27:4c:11:af:81:0c:a9:29: 0f:b2:3b:3b:5b:ca:bb:f6:b2:1b:e1:40:28:87:24: 1f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E0:75:9D:F2:CB:B6:D1:FE:AB:7E:F6:0A:5C:26:21:CC:92:0E:9E X509v3 Authority Key Identifier: keyid:1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:3f:68:18:4b:ef:26:24:f8:8c:1f:a6:ce:ef:47:13:13:7c: 5a:d6:83:8d:7e:3b:ba:25:f2:29:90:00:c4:26:88:37:11:c0: 72:e0:cb:ba:10:ad:12:5c:fa:28:8e:71:c2:bf:b3:1b:f5:0b: 93:8d:dd:1e:08:cf:47:7e:5f:32:f5:65:bb:00:7f:58:47:a1: 32:f0:1d:8f:f5:81:a1:b3:8c:c8:9d:0e:63:52:67:f2:01:6e: bc:62:a8:a4:31:cc:c8:c5:2d:0e:1a:c5:1c:2e:43:78:6d:34: 22:a7:07:57:40:16:76:6f:da:54:a8:32:f1:f3:12:6c:6f:de: 42:92:ea:dc:c5:25:a5:bd:fa:53:17:5a:61:89:35:6d:32:31: 00:4a:46:45:20:ff:23:29:63:c5:e8:0b:aa:de:3f:30:5a:93: 0a:42:44:3b:e2:5f:d1:7b:27:9a:f3:57:7d:fc:6a:7d:f4:94: f9:00:62:b8:99:91:04:33:3a:2e:92:05:56:6e:b3:7f:42:5a: 55:3c:2d:3f:38:ec:18:28:18:19:80:e0:cb:86:33:33:dd:51: ff:4c:fa:3b:de:cd:50:43:f2:d7:60:15:1c:6e:b3:29:dd:05: 0d:2c:dc:17:dd:4c:49:05:ca:2b:db:27:a1:36:95:ba:d7:30: 7a:da:9e:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1NTQxMTAvBgNVBAUTKDFCOTFENTE2MEY3RDU2QjcwNUE4NTE2QzZBMUNGNDJG NDk2N0VGNTYwHhcNMjUwNDI0MjAxMDI4WhcNMjUwNTAxMjAxMDI4WjAYMRYwFAYD VQQDEw02ODBhOWFiNS1kZWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0pLWt5rVB374SUmKD5BKvoGxY2Lgv5ty/ROvrE8zWfkQsljnrknZ337KrhyS EjXlSET7Am8KBjFG5heq8baA3hQcTabCCULVIkZtvf04dVwpla7r3x6/ddTcSrne S8Nn0d9pKjVOn4gj5Q7uV9ijAAIL4zEtA9yw9dCxhJWNXGLeFDMDp0yKSi68PmaA Tj82tB56h9mPO9sjMeGIKXw2XXqs2i1pt6CD12SaGN7VhkFr+tcEg+lcUjjSgrm9 sN0xKkBo6RklzesIinLs2g+g7GLFePFT1yaQnJf90nSLfxrNcAyZvu3CJ0wRr4EM qSkPsjs7W8q79rIb4UAohyQfTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfgdZ3y y7bR/qt+9gpcJiHMkg6eMB8GA1UdIwQYMBaAFBuR1RYPfVa3BahRbGoc9C9JZ+9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU1NC9FQjFDQkJFMjlF NUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZyY0ZxRkZzYWh6MEwwbG43 MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c1SFZGZzk5VnJjRnFGRnNhaHowTDBsbjcxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjU1NC9FQjFDQkJFMjlFNUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZy Y0ZxRkZzYWh6MEwwbG43MVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9P2gYS+8mJPiMH6bO70cTE3xa1oONfju6JfIpkADEJog3EcBy4Mu6 EK0SXPoojnHCv7Mb9QuTjd0eCM9Hfl8y9WW7AH9YR6Ey8B2P9YGhs4zInQ5jUmfy AW68YqikMczIxS0OGsUcLkN4bTQipwdXQBZ2b9pUqDLx8xJsb95CkurcxSWlvfpT F1phiTVtMjEASkZFIP8jKWPF6Auq3j8wWpMKQkQ74l/Reyea81d9/Gp99JT5AGK4 mZEEMzoukgVWbrN/QlpVPC0/OOwYKBgZgODLhjMz3VH/TPo73s1QQ/LXYBUcbrMp 3QUNLNwX3UxJBcor2yehNpW61zB62p4h -----END CERTIFICATE-----Generated at Sat Apr 26 04:01:31 2025 by rpki-client