$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft File: -65NuTksgZMhr1EdxrK1qomYGfo.mft (raw, json) Hash identifier: eOSAk09ORetGERWS4Ux/jDmCY3E/UT5I/V5lCFPWHSI= Subject key identifier: 79:38:5E:D4:EB:45:22:D9:10:D1:73:88:11:3C:76:72:86:01:D3:9E Authority key identifier: FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA Certificate issuer: /CN=A91F2D93/serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft Manifest number: 37 Signing time: Fri 25 Apr 2025 06:36:21 +0000 Manifest this update: Fri 25 Apr 2025 06:36:20 +0000 Manifest next update: Fri 02 May 2025 06:36:20 +0000 Files and hashes: 1: -65NuTksgZMhr1EdxrK1qomYGfo.crl (hash: DSo/uZSig9Q+lJ0PrsQ0xMApEIhAnkU6NgvSpyS+/F4=) 2: 93D86AAED76611EF9C982924C4F9AE02.roa (hash: LnJzBzEfTxjLgTZtBUJIJtCnRzaftx7eCk4WGWWItX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:36:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2D93, serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA Validity Not Before: Apr 25 06:36:20 2025 GMT Not After : May 2 06:36:20 2025 GMT Subject: CN=680b2d64-c88f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cf:44:3e:ec:21:0e:af:30:94:3b:d4:7b:ef: ea:d8:f0:57:0f:f8:5e:8c:95:d4:fe:b1:18:4f:35: 25:91:0a:35:de:52:b1:44:cf:ff:63:b9:24:22:c2: 48:01:3b:d8:93:40:e8:56:19:a5:cb:0a:46:de:1c: 6f:10:1f:66:f1:ca:ed:ed:f2:90:6d:39:64:8b:ec: 3c:43:61:fd:d2:d0:7b:cb:e4:b9:83:96:a0:c0:4e: 4e:74:d7:b4:1d:35:39:46:a4:5f:c8:95:53:38:2e: 8c:60:e0:3f:ad:ab:40:9d:07:d3:8a:57:20:a0:23: e2:67:76:32:ed:77:43:b4:99:7c:24:04:b6:3d:b9: f5:6a:8e:73:89:b4:e3:59:7e:51:9e:91:11:c7:cf: 54:a2:6a:42:a1:f6:ac:c5:92:ed:41:41:ca:e0:5c: 8d:2f:d8:02:ec:3e:b2:04:9a:92:e8:7e:26:3d:c1: fc:d8:29:21:3e:16:63:50:cb:9f:28:9a:67:42:bb: 1d:94:0d:57:9a:93:ea:2a:55:b8:2c:d9:ff:d4:d7: 6f:dc:05:dd:ce:19:d0:59:17:7c:cc:41:1b:08:d1: b8:b7:c4:2e:63:a7:1a:56:09:8c:03:d1:7d:7b:f8: 4b:47:02:ed:e3:a6:52:db:32:5b:07:33:ec:a0:2a: b7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:38:5E:D4:EB:45:22:D9:10:D1:73:88:11:3C:76:72:86:01:D3:9E X509v3 Authority Key Identifier: keyid:FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:72:d0:8d:4a:a4:b0:40:b5:a5:63:53:57:9c:74:74:b1:46: 03:7a:60:54:bb:02:eb:11:90:19:81:05:fe:26:fb:48:ee:43: 06:9a:52:78:91:c4:b1:a4:06:29:e3:e9:f9:5b:40:5e:f5:b5: 3c:a8:eb:7d:5b:5b:74:94:14:a0:00:4f:48:fa:99:19:d8:3a: 0d:6f:7f:14:9c:b2:95:04:e8:cf:9c:04:24:c9:b7:63:24:b6: 0f:d9:32:75:f3:54:c8:1b:ab:17:c2:a8:ed:af:f0:39:23:08: 2a:2a:7e:d0:84:61:d3:d3:33:da:0d:5c:62:d0:07:ea:52:25: 12:f5:35:bf:1d:b1:b3:92:8b:57:94:d5:65:11:e8:0e:a6:f2: b8:a9:39:44:6f:1e:3d:79:8f:a6:4e:34:9c:1e:45:01:1d:a0: 5a:d6:b3:6d:dd:15:f8:e9:e3:5e:9e:99:84:38:78:9a:aa:cc: d3:bf:c6:47:4f:74:ae:1c:29:c0:6a:d0:09:1c:a5:2e:96:8b: 08:af:a1:37:82:ab:61:f8:8d:45:da:88:16:c7:da:e3:be:86: 5c:bf:65:94:a7:ba:c7:de:1f:db:a1:25:56:a8:8c:2e:cf:b5: 86:74:d3:e5:64:5f:64:b7:ca:57:f5:3a:a5:47:54:44:8d:4c: 83:11:26:b6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MkQ5MzExMC8GA1UEBRMoRkJBRTREQjkzOTJDODE5MzIxQUY1MTFEQzZCMkI1QUE4 OTk4MTlGQTAeFw0yNTA0MjUwNjM2MjBaFw0yNTA1MDIwNjM2MjBaMBgxFjAUBgNV BAMTDTY4MGIyZDY0LWM4OGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbz0Q+7CEOrzCUO9R77+rY8FcP+F6MldT+sRhPNSWRCjXeUrFEz/9juSQiwkgB O9iTQOhWGaXLCkbeHG8QH2bxyu3t8pBtOWSL7DxDYf3S0HvL5LmDlqDATk5017Qd NTlGpF/IlVM4Loxg4D+tq0CdB9OKVyCgI+JndjLtd0O0mXwkBLY9ufVqjnOJtONZ flGekRHHz1SiakKh9qzFku1BQcrgXI0v2ALsPrIEmpLofiY9wfzYKSE+FmNQy58o mmdCux2UDVeak+oqVbgs2f/U12/cBd3OGdBZF3zMQRsI0bi3xC5jpxpWCYwD0X17 +EtHAu3jplLbMlsHM+ygKre1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeThe1OtF ItkQ0XOIETx2coYB054wHwYDVR0jBBgwFoAU+65NuTksgZMhr1EdxrK1qomYGfow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyRDkzLzgxOEZEQjc4RDQ0 RDExRUZCMTYwMEIyOEM0RjlBRTAyLy02NU51VGtzZ1pNaHIxRWR4cksxcW9tWUdm by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTY1TnVUa3NnWk1ocjFFZHhySzFxb21ZR2ZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy RDkzLzgxOEZEQjc4RDQ0RDExRUZCMTYwMEIyOEM0RjlBRTAyLy02NU51VGtzZ1pN aHIxRWR4cksxcW9tWUdmby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE5y0I1KpLBAtaVjU1ecdHSxRgN6YFS7AusRkBmBBf4m+0juQwaaUniR xLGkBinj6flbQF71tTyo631bW3SUFKAAT0j6mRnYOg1vfxScspUE6M+cBCTJt2Mk tg/ZMnXzVMgbqxfCqO2v8DkjCCoqftCEYdPTM9oNXGLQB+pSJRL1Nb8dsbOSi1eU 1WUR6A6m8ripOURvHj15j6ZONJweRQEdoFrWs23dFfjp416emYQ4eJqqzNO/xkdP dK4cKcBq0AkcpS6WiwivoTeCq2H4jUXaiBbH2uO+hly/ZZSnusfeH9uhJVaojC7P tYZ00+VkX2S3ylf1OqVHVESNTIMRJrY= -----END CERTIFICATE-----Generated at Sat Apr 26 12:29:24 2025 by rpki-client