$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft File: grPUpZa7l4hVoVXKr6iyYlMw3o0.mft (raw, json) Hash identifier: CIcLOE+fffOOA8FxhsfgAYEdw3GD4HxVKIuZ2/6WazI= Subject key identifier: B5:15:C6:D7:15:B2:44:72:BE:C8:E0:0A:CA:81:33:9D:1C:56:98:64 Authority key identifier: 82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D Certificate issuer: /CN=A91FC42A/serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D Certificate serial: 0D68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft Manifest number: 0D62 Signing time: Thu 24 Apr 2025 17:55:49 +0000 Manifest this update: Thu 24 Apr 2025 17:55:49 +0000 Manifest next update: Thu 01 May 2025 17:55:49 +0000 Files and hashes: 1: grPUpZa7l4hVoVXKr6iyYlMw3o0.crl (hash: d1hjZcF8ySisAKlRduLe1bMDcHonxoeAuexU0xhpUWY=) 2: E4653316C87211E9ADADA185C4F9AE02.roa (hash: YVUIxsB3E3XvSbRByHJIlW/SMSZ9WdbizIM0/QfshuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.crl rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:55:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3432 (0xd68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC42A, serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D Validity Not Before: Apr 24 17:55:49 2025 GMT Not After : May 1 17:55:49 2025 GMT Subject: CN=680a7b25-3b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e4:28:80:29:50:22:23:c5:c7:98:19:e0:ca: d9:dd:6a:72:b0:2c:7e:80:25:49:ab:42:22:70:96: 3a:fc:5a:37:3b:c0:30:8b:bb:c9:93:b9:bc:f6:5d: 7c:cc:6f:3b:b3:c1:c1:d3:72:b1:27:1d:65:77:99: f1:e4:d0:8a:ae:70:7f:c0:00:64:8d:e4:fe:dd:46: ee:a3:ed:48:43:10:05:84:af:94:e0:09:13:e5:29: cf:a7:d2:82:e1:58:c0:23:f1:c1:4b:20:79:32:16: fe:7e:23:9b:aa:c1:cd:ec:89:69:43:bb:33:c9:5e: 08:66:cf:3f:e5:e6:a2:33:84:63:44:2a:98:3a:85: 80:e9:d6:13:6e:23:43:c6:08:8c:69:d9:cd:ce:45: 3b:7d:ca:fa:cd:d1:8d:b7:08:a2:d7:01:79:84:d9: 0a:5d:ba:49:42:d0:be:7e:50:ee:17:32:7e:e1:d9: 95:2d:00:b5:40:b1:bc:8d:b4:84:d1:ca:c6:6e:6b: 7a:a6:01:b6:01:22:14:d2:69:ba:f1:21:f0:86:6b: 9f:dc:13:5e:80:86:2b:8c:db:a7:a6:9b:0e:90:43: 25:2d:aa:8c:3c:63:78:7d:18:ba:9f:34:0e:05:06: 13:6a:5b:3f:50:56:71:88:6f:f9:01:96:1a:6e:e0: dc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:15:C6:D7:15:B2:44:72:BE:C8:E0:0A:CA:81:33:9D:1C:56:98:64 X509v3 Authority Key Identifier: keyid:82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:b6:fc:f2:45:fa:af:e0:f8:e0:d7:71:a6:56:71:28:fa:d9: fa:96:cf:4b:3b:5c:88:47:c5:c2:fa:d0:3f:49:e7:81:0e:dd: 4c:71:ff:29:73:d6:0e:75:e9:98:b9:6d:0a:3e:8e:9a:52:2f: 30:f2:d0:f7:34:84:d5:45:e0:da:e3:1b:75:2e:15:5c:c8:f5: 2d:d2:8c:ac:80:d5:c4:31:21:1a:a3:bf:32:fd:c2:da:a8:13: 98:33:58:2d:3e:d7:55:68:34:29:5e:23:18:f2:f4:0e:9b:d6: 60:08:8f:6f:61:e4:01:08:f6:33:82:a0:17:44:f2:3a:5f:09: a4:43:d3:9f:09:9d:9b:0b:4e:6d:a4:80:e8:03:70:f6:b0:e8: 01:8d:6c:75:7c:2b:22:31:54:56:87:5d:54:70:04:98:71:7a: d8:5a:eb:b2:11:49:b9:cc:00:d9:42:cc:f6:26:9a:19:51:75: 8a:b1:50:23:9c:13:d5:e5:5d:c0:f0:a5:a1:b1:cd:80:87:f8: 4c:6c:c2:d3:57:87:c5:e8:8b:34:b8:fe:9d:05:4a:61:eb:4f: 10:49:30:e4:53:53:c1:f7:a6:66:99:2f:c2:51:35:bc:df:03: 5a:79:ca:5e:1e:ba:6b:01:d3:97:70:29:7b:b6:5f:c0:5f:65: 10:c3:fd:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM0MkExMTAvBgNVBAUTKDgyQjNENEE1OTZCQjk3ODg1NUExNTVDQUFGQThCMjYy NTMzMERFOEQwHhcNMjUwNDI0MTc1NTQ5WhcNMjUwNTAxMTc1NTQ5WjAYMRYwFAYD VQQDEw02ODBhN2IyNS0zYjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteQogClQIiPFx5gZ4MrZ3WpysCx+gCVJq0IicJY6/Fo3O8Awi7vJk7m89l18 zG87s8HB03KxJx1ld5nx5NCKrnB/wABkjeT+3Ubuo+1IQxAFhK+U4AkT5SnPp9KC 4VjAI/HBSyB5Mhb+fiObqsHN7IlpQ7szyV4IZs8/5eaiM4RjRCqYOoWA6dYTbiND xgiMadnNzkU7fcr6zdGNtwii1wF5hNkKXbpJQtC+flDuFzJ+4dmVLQC1QLG8jbSE 0crGbmt6pgG2ASIU0mm68SHwhmuf3BNegIYrjNunppsOkEMlLaqMPGN4fRi6nzQO BQYTals/UFZxiG/5AZYabuDczwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUVxtcV skRyvsjgCsqBM50cVphkMB8GA1UdIwQYMBaAFIKz1KWWu5eIVaFVyq+osmJTMN6N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzQyQS9GM0I1MkU3MkM4 NzAxMUU5OERFQ0E1ODFDNEY5QUUwMi9nclBVcFphN2w0aFZvVlhLcjZpeVlsTXcz bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dyUFVwWmE3bDRoVm9WWEtyNml5WWxNdzNvMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzQyQS9GM0I1MkU3MkM4NzAxMUU5OERFQ0E1ODFDNEY5QUUwMi9nclBVcFphN2w0 aFZvVlhLcjZpeVlsTXczbzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABtvzyRfqv4Pjg13GmVnEo+tn6ls9LO1yIR8XC+tA/SeeBDt1Mcf8p c9YOdemYuW0KPo6aUi8w8tD3NITVReDa4xt1LhVcyPUt0oysgNXEMSEao78y/cLa qBOYM1gtPtdVaDQpXiMY8vQOm9ZgCI9vYeQBCPYzgqAXRPI6XwmkQ9OfCZ2bC05t pIDoA3D2sOgBjWx1fCsiMVRWh11UcASYcXrYWuuyEUm5zADZQsz2JpoZUXWKsVAj nBPV5V3A8KWhsc2Ah/hMbMLTV4fF6Is0uP6dBUph608QSTDkU1PB96ZmmS/CUTW8 3wNaecpeHrprAdOXcCl7tl/AX2UQw/21 -----END CERTIFICATE-----Generated at Sat Apr 26 16:39:33 2025 by rpki-client