$ rpki-client -vvf rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft File: F19zLkbbq-mqcYHfg8cm729vW8I.mft (raw, json) Hash identifier: tYTQ15IX74r1C9a/DSh29mBo1Ihxb1/I6RrskiDHga0= Subject key identifier: 45:6C:7D:A6:57:3A:DF:E2:47:E6:21:E6:63:F3:55:5B:CC:1D:7F:44 Authority key identifier: 17:5F:73:2E:46:DB:AB:E9:AA:71:81:DF:83:C7:26:EF:6F:6F:5B:C2 Certificate issuer: /CN=A91F680E/serialNumber=175F732E46DBABE9AA7181DF83C726EF6F6F5BC2 Certificate serial: 03D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F19zLkbbq-mqcYHfg8cm729vW8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft Manifest number: 03D2 Signing time: Fri 25 Apr 2025 00:21:13 +0000 Manifest this update: Fri 25 Apr 2025 00:21:12 +0000 Manifest next update: Fri 02 May 2025 00:21:12 +0000 Files and hashes: 1: F19zLkbbq-mqcYHfg8cm729vW8I.crl (hash: QEuANN+NIK94iqr1cMm73u0c+zOpAFuYTOySDS/iW/0=) 2: 76FA00E87EE811EC8D796C6EC4F9AE02.roa (hash: wgDb1KnVQWBoZ1T5BXpX71TMMnESBtSdKYU93dImmgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.crl rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F19zLkbbq-mqcYHfg8cm729vW8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 982 (0x3d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F680E, serialNumber=175F732E46DBABE9AA7181DF83C726EF6F6F5BC2 Validity Not Before: Apr 25 00:21:12 2025 GMT Not After : May 2 00:21:12 2025 GMT Subject: CN=680ad579-8e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:34:53:75:23:9f:c7:a5:dc:5b:bf:b3:64:d6: e2:5d:61:bb:13:f5:b2:4b:d4:36:39:e6:6b:22:f7: eb:6b:47:29:4c:db:2d:51:8c:f9:8a:ab:d2:0a:b0: 04:c4:b6:4b:f6:b4:c7:22:c0:12:b2:2e:b5:b9:ff: 23:b8:c6:73:36:a9:79:8c:22:88:4b:2f:6e:55:2d: de:49:00:dd:dc:76:18:d7:11:e1:ae:3d:43:b8:ef: 42:1f:30:28:1a:3f:73:d3:98:7f:36:2f:44:4e:12: f1:a5:a6:43:a3:c8:8a:ce:d9:b9:9d:7b:23:0b:59: 71:fe:12:5b:2b:d3:43:88:f9:ea:79:4a:d4:d1:69: f2:fa:4f:e9:7e:2b:1a:dc:db:4e:e8:39:3e:c8:d4: aa:a1:e8:12:ca:10:86:d9:9a:c8:0f:c9:0c:2e:e7: b2:e9:c2:15:f0:60:2a:60:da:2e:48:9c:d9:39:d2: 92:87:a2:d5:4f:96:30:00:c1:88:a2:24:83:09:a6: b0:8f:d4:ab:b6:61:80:41:d8:df:da:52:a3:ae:5f: 31:db:78:0c:0f:59:2c:23:85:7a:f0:de:6e:c2:70: 5e:45:f7:9e:01:38:0d:42:22:7c:48:17:c6:88:a4: 99:d8:44:8d:b6:60:eb:bf:d2:a3:07:eb:6a:17:a9: e0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6C:7D:A6:57:3A:DF:E2:47:E6:21:E6:63:F3:55:5B:CC:1D:7F:44 X509v3 Authority Key Identifier: keyid:17:5F:73:2E:46:DB:AB:E9:AA:71:81:DF:83:C7:26:EF:6F:6F:5B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F19zLkbbq-mqcYHfg8cm729vW8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:87:dc:ca:25:1a:02:57:c5:88:37:c4:2e:c1:ba:d1:0a:12: 3d:99:14:a4:0c:a8:9b:f4:7f:10:c2:04:f2:8d:02:0c:7e:58: c2:1e:83:0a:fd:59:be:6d:ad:c7:bf:11:c9:97:93:cc:d9:9f: 04:4e:fd:88:7c:11:2d:46:2a:89:3c:47:b0:c4:8d:77:9e:0d: 8f:15:dd:3c:32:03:58:bb:89:bf:c7:1f:c4:d1:22:c1:78:df: f4:b6:dc:c4:44:06:90:15:d9:34:09:db:22:7c:9e:be:d9:7d: 42:b6:bc:6c:5f:25:aa:28:28:9d:a4:f0:29:25:b6:d4:c8:df: 24:80:88:42:7d:72:e7:d3:9d:22:6d:37:80:99:09:4c:ec:74: 3b:d5:78:64:d8:9c:79:c5:8a:10:46:0e:8c:21:81:a7:71:c5: c0:08:e7:1d:06:85:c3:0f:12:de:04:ed:9d:56:a1:04:ae:c8: 01:3c:d0:b7:de:15:ce:9e:04:9d:15:b5:25:59:08:af:9c:f5: 29:9f:fd:d9:08:74:66:b1:4c:89:b5:0e:48:ae:87:4d:fe:df: 35:1a:d3:53:3b:c2:ec:78:09:0d:27:5e:a8:87:0e:d2:26:09: 4a:6e:93:a7:7b:87:c6:5c:ad:0f:0b:f7:85:61:6f:d5:75:57: 86:ce:30:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY4MEUxMTAvBgNVBAUTKDE3NUY3MzJFNDZEQkFCRTlBQTcxODFERjgzQzcyNkVG NkY2RjVCQzIwHhcNMjUwNDI1MDAyMTEyWhcNMjUwNTAyMDAyMTEyWjAYMRYwFAYD VQQDEw02ODBhZDU3OS04ZTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6jRTdSOfx6XcW7+zZNbiXWG7E/WyS9Q2OeZrIvfra0cpTNstUYz5iqvSCrAE xLZL9rTHIsASsi61uf8juMZzNql5jCKISy9uVS3eSQDd3HYY1xHhrj1DuO9CHzAo Gj9z05h/Ni9EThLxpaZDo8iKztm5nXsjC1lx/hJbK9NDiPnqeUrU0Wny+k/pfisa 3NtO6Dk+yNSqoegSyhCG2ZrID8kMLuey6cIV8GAqYNouSJzZOdKSh6LVT5YwAMGI oiSDCaawj9SrtmGAQdjf2lKjrl8x23gMD1ksI4V68N5uwnBeRfeeATgNQiJ8SBfG iKSZ2ESNtmDrv9KjB+tqF6ng5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVsfaZX Ot/iR+Yh5mPzVVvMHX9EMB8GA1UdIwQYMBaAFBdfcy5G26vpqnGB34PHJu9vb1vC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjgwRS9ENkY3QkFEODdF RTUxMUVDOTRFQjVENkNDNEY5QUUwMi9GMTl6TGtiYnEtbXFjWUhmZzhjbTcyOXZX OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YxOXpMa2JicS1tcWNZSGZnOGNtNzI5dlc4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjgwRS9ENkY3QkFEODdFRTUxMUVDOTRFQjVENkNDNEY5QUUwMi9GMTl6TGtiYnEt bXFjWUhmZzhjbTcyOXZXOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXh9zKJRoCV8WIN8QuwbrRChI9mRSkDKib9H8QwgTyjQIMfljCHoMK /Vm+ba3HvxHJl5PM2Z8ETv2IfBEtRiqJPEewxI13ng2PFd08MgNYu4m/xx/E0SLB eN/0ttzERAaQFdk0CdsifJ6+2X1CtrxsXyWqKCidpPApJbbUyN8kgIhCfXLn050i bTeAmQlM7HQ71Xhk2Jx5xYoQRg6MIYGnccXACOcdBoXDDxLeBO2dVqEErsgBPNC3 3hXOngSdFbUlWQivnPUpn/3ZCHRmsUyJtQ5IrodN/t81GtNTO8LseAkNJ16ohw7S JglKbpOne4fGXK0PC/eFYW/VdVeGzjCX -----END CERTIFICATE-----Generated at Sat Apr 26 12:20:10 2025 by rpki-client