$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft File: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft (raw, json) Hash identifier: jmxywCQI4Ng8JbGOBW4lihmuOUtDu9vJ5wCd5VKwHYU= Subject key identifier: 93:C6:31:D6:70:40:CD:73:4C:FB:56:67:F4:04:89:9F:02:DE:BA:78 Authority key identifier: A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04 Certificate issuer: /CN=A91EFD20/serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604 Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft Manifest number: 92 Signing time: Fri 25 Apr 2025 05:23:36 +0000 Manifest this update: Fri 25 Apr 2025 05:23:36 +0000 Manifest next update: Fri 02 May 2025 05:23:36 +0000 Files and hashes: 1: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl (hash: qVhMK3yDHSo8sT3WrU6cZrq+qbKRvGxIu+1NDVQvTm0=) 2: 80A57534433311EF94E79D23C4F9AE02.roa (hash: /DX7dbxTLTAh+dFwT5n2PZNSYyr7e+Nh1d2b2XOmU5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFD20, serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604 Validity Not Before: Apr 25 05:23:36 2025 GMT Not After : May 2 05:23:36 2025 GMT Subject: CN=680b1c58-4b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d2:b7:d0:66:97:e3:09:67:18:1a:a2:49:f4: b6:11:db:1c:a0:64:7f:45:e6:5e:38:06:55:d0:98: 5d:01:63:cf:54:aa:c6:57:51:df:db:5e:af:32:1f: 23:bd:90:b0:c6:23:1c:96:dc:b7:88:98:dc:2a:52: 13:da:11:12:c5:59:c7:10:ff:2e:4e:ac:20:9c:b1: 1a:7a:de:f4:35:d6:fc:08:4d:ce:96:73:f5:e8:29: 36:d1:aa:74:70:2d:02:92:95:02:e0:7e:c8:8e:9c: 4d:2e:e5:07:8d:50:68:20:5e:d0:fe:c3:31:c9:1d: 32:75:a1:5b:a6:c1:ac:9d:15:41:02:d5:f0:c3:8f: 14:03:7e:db:37:72:58:74:b7:c4:9a:68:ef:c1:40: 67:03:f5:98:48:42:9c:fe:14:3b:ca:33:39:8d:49: 72:03:35:f2:27:d7:46:38:56:c0:d3:54:fc:91:48: 7b:e5:e3:4a:ca:66:21:f1:af:51:65:c0:11:e5:8e: 6d:71:4d:7f:5e:7b:b0:82:8a:63:6a:a6:3d:c6:21: be:c5:7d:a4:ac:60:8f:e8:83:d5:2b:2c:4c:eb:98: 9c:0b:b6:34:2c:13:58:94:f4:a3:a7:38:54:57:3f: a6:36:64:9e:65:ad:d1:7b:46:3b:ef:90:43:cb:64: 00:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C6:31:D6:70:40:CD:73:4C:FB:56:67:F4:04:89:9F:02:DE:BA:78 X509v3 Authority Key Identifier: keyid:A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:b3:a1:95:b8:62:e1:78:19:59:06:d4:fd:b2:84:4c:4d:f0: 98:fe:1f:53:80:42:65:dc:d5:88:d8:72:73:60:87:7d:b1:43: b8:4a:3b:14:58:50:5b:6b:5b:0f:93:97:63:93:8d:5d:26:9f: e0:1e:9e:61:fe:8e:27:d7:15:88:12:69:44:18:79:ca:f4:71: 10:ba:a2:60:5b:bc:ad:57:1a:9d:b9:6e:da:6e:22:51:ea:98: ba:d0:87:f3:3b:a9:1b:ac:2c:e0:19:72:47:76:88:5f:c7:d6: e1:fa:64:98:b7:23:b2:a1:8a:2a:00:d5:5d:02:11:b0:5f:6d: 0d:61:e1:c0:35:d0:79:1f:64:ac:18:04:84:d6:a2:17:45:07: fa:0f:3c:b1:1f:69:69:06:48:54:2b:66:09:3f:e6:14:ef:be: 53:73:de:8c:57:c4:19:37:fe:d9:61:4e:2f:e8:0b:3d:c7:73: 4a:65:37:ba:c9:ca:23:ff:55:c5:76:87:ac:d1:54:e5:93:f4: c5:30:e7:20:da:b5:de:c9:41:e0:21:f7:34:b2:86:70:f8:f5: 7a:bc:8b:41:84:ed:43:db:16:4c:64:73:68:45:ef:19:53:16: 35:02:f3:b9:cb:5c:99:a3:38:d4:66:d2:50:5b:c1:25:09:a0: 5b:b1:d3:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZEMjAxMTAvBgNVBAUTKEE3NkI3MTBDRDIzNjBBMkUyNjgyRkQyQjgwNzE4QTE5 ODgzOTY2MDQwHhcNMjUwNDI1MDUyMzM2WhcNMjUwNTAyMDUyMzM2WjAYMRYwFAYD VQQDEw02ODBiMWM1OC00YjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttK30GaX4wlnGBqiSfS2EdscoGR/ReZeOAZV0JhdAWPPVKrGV1Hf216vMh8j vZCwxiMclty3iJjcKlIT2hESxVnHEP8uTqwgnLEaet70Ndb8CE3OlnP16Ck20ap0 cC0CkpUC4H7IjpxNLuUHjVBoIF7Q/sMxyR0ydaFbpsGsnRVBAtXww48UA37bN3JY dLfEmmjvwUBnA/WYSEKc/hQ7yjM5jUlyAzXyJ9dGOFbA01T8kUh75eNKymYh8a9R ZcAR5Y5tcU1/XnuwgopjaqY9xiG+xX2krGCP6IPVKyxM65icC7Y0LBNYlPSjpzhU Vz+mNmSeZa3Re0Y775BDy2QAywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPGMdZw QM1zTPtWZ/QEiZ8C3rp4MB8GA1UdIwQYMBaAFKdrcQzSNgouJoL9K4BxihmIOWYE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkQyMC9BODI1M0I5QzQz MzAxMUVGOUVEQkNENkNDNEY5QUUwMi9wMnR4RE5JMkNpNG1ndjByZ0hHS0dZZzVa Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3AydHhETkkyQ2k0bWd2MHJnSEdLR1lnNVpnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkQyMC9BODI1M0I5QzQzMzAxMUVGOUVEQkNENkNDNEY5QUUwMi9wMnR4RE5JMkNp NG1ndjByZ0hHS0dZZzVaZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCms6GVuGLheBlZBtT9soRMTfCY/h9TgEJl3NWI2HJzYId9sUO4SjsU WFBba1sPk5djk41dJp/gHp5h/o4n1xWIEmlEGHnK9HEQuqJgW7ytVxqduW7abiJR 6pi60IfzO6kbrCzgGXJHdohfx9bh+mSYtyOyoYoqANVdAhGwX20NYeHANdB5H2Ss GASE1qIXRQf6DzyxH2lpBkhUK2YJP+YU775Tc96MV8QZN/7ZYU4v6As9x3NKZTe6 ycoj/1XFdoes0VTlk/TFMOcg2rXeyUHgIfc0soZw+PV6vItBhO1D2xZMZHNoRe8Z UxY1AvO5y1yZozjUZtJQW8ElCaBbsdOC -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:03 2025 by rpki-client