$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft File: l85Wj2RoJWRz-Es4s84D6jVJ64k.mft (raw, json) Hash identifier: 5oet+lZyOXVkvQ7mRst22XX/J+fsnMXmul4emZXekxg= Subject key identifier: AE:73:BF:4F:A2:C2:33:15:C7:D9:31:41:34:DC:3D:2B:C6:D5:DC:57 Authority key identifier: 97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 Certificate issuer: /CN=A91FCABC/serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft Manifest number: 0161 Signing time: Fri 25 Apr 2025 03:06:17 +0000 Manifest this update: Fri 25 Apr 2025 03:06:16 +0000 Manifest next update: Fri 02 May 2025 03:06:16 +0000 Files and hashes: 1: l85Wj2RoJWRz-Es4s84D6jVJ64k.crl (hash: Uu7C4oSlM43hYCHefYfEeZYmbXQ3jFcclxPjGn5Piac=) 2: 35BBCFB005C111EEA3A8584CC4F9AE02.roa (hash: HMZ69Vk7ZS0Jv78BueT5h2a9dKdT1kZJMuqKYnjLHLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCABC, serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Validity Not Before: Apr 25 03:06:16 2025 GMT Not After : May 2 03:06:16 2025 GMT Subject: CN=680afc28-37f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5d:8d:24:d8:73:3a:7d:c2:d0:f5:69:23:1e: 1d:f3:57:1f:40:fe:ed:7e:50:b1:0c:bf:81:83:29: 40:40:9a:fd:a9:9e:b5:5e:2f:a3:92:db:98:19:a5: 7f:25:9c:c3:0c:03:d9:bc:3e:a4:11:ec:9b:75:4f: 0c:60:30:04:67:19:ac:bc:16:c8:a6:55:30:e6:46: 7c:ab:22:af:9c:a3:a6:6e:ff:e9:0b:2c:b8:c3:a8: 67:f7:26:32:71:fd:4c:19:5a:c8:8e:09:17:63:f5: dd:40:bd:82:3c:7b:8a:74:bc:58:02:72:ca:d6:2e: 77:93:a6:d0:79:94:bf:6e:59:69:ad:ae:1c:16:eb: fd:e5:6a:5a:14:30:58:b2:5d:29:fc:ab:17:52:2f: 83:9b:ec:2e:f4:30:f1:4d:bc:03:1d:3d:2b:db:e4: e1:38:15:e0:5a:ee:a1:7b:8f:7c:ed:cd:2b:3a:15: 39:58:63:e2:99:ee:aa:43:61:ac:2d:69:55:50:49: 99:67:54:65:dd:d2:cb:03:63:94:da:d9:82:d6:72: 78:46:e5:38:36:c1:6b:c8:47:7f:41:a9:cf:ef:c5: 63:8b:db:2d:b9:02:a2:1e:96:83:d9:8f:55:99:33: 56:3e:52:8e:cc:5f:d3:fe:26:0c:a3:11:6d:49:fd: 61:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:73:BF:4F:A2:C2:33:15:C7:D9:31:41:34:DC:3D:2B:C6:D5:DC:57 X509v3 Authority Key Identifier: keyid:97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:7f:14:d9:f4:7d:35:13:df:ff:17:da:1d:68:5b:cb:d4:a1: e5:a1:02:2a:a7:79:0c:ca:30:1f:da:0f:b4:4a:c7:86:d4:46: 7f:b9:f5:c6:d1:92:88:e1:3a:6f:f7:00:a7:e1:da:cb:58:f0: be:62:84:ce:22:e8:bc:29:9e:1c:54:d4:cb:0e:32:b7:b3:a2: 3b:32:f3:0a:3f:6e:b1:01:d5:0f:77:44:27:09:a8:10:57:4d: 27:02:26:a8:a2:d2:af:d9:23:23:44:34:bc:85:cb:5c:82:90: 57:44:2d:22:f4:ad:73:42:5f:e7:c5:2c:5c:91:2c:22:1b:de: a9:b0:01:98:c8:5d:e4:09:23:1f:5a:60:e5:c4:b5:3a:9d:df: b2:d2:0c:29:c0:80:fc:82:c3:d7:97:a1:4b:af:61:7c:25:8e: 58:8e:9f:b9:bc:a5:15:25:ea:ee:57:c0:13:46:fa:15:af:9a: 80:aa:7a:ce:59:4b:f8:6d:6b:09:90:f8:fb:a6:45:67:85:70: 30:e5:e9:27:e0:ca:c8:ce:6b:a6:da:74:ce:b4:f6:95:e2:8e: 3b:a6:46:4f:2c:50:9a:3a:32:37:65:ea:e4:45:22:a5:9e:9d: 74:92:d6:47:bc:7e:0e:a9:b3:c5:a0:76:72:e1:57:a8:72:2d: fb:9f:93:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBQkMxMTAvBgNVBAUTKDk3Q0U1NjhGNjQ2ODI1NjQ3M0Y4NEIzOEIzQ0UwM0VB MzU0OUVCODkwHhcNMjUwNDI1MDMwNjE2WhcNMjUwNTAyMDMwNjE2WjAYMRYwFAYD VQQDEw02ODBhZmMyOC0zN2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoV2NJNhzOn3C0PVpIx4d81cfQP7tflCxDL+BgylAQJr9qZ61Xi+jktuYGaV/ JZzDDAPZvD6kEeybdU8MYDAEZxmsvBbIplUw5kZ8qyKvnKOmbv/pCyy4w6hn9yYy cf1MGVrIjgkXY/XdQL2CPHuKdLxYAnLK1i53k6bQeZS/bllpra4cFuv95WpaFDBY sl0p/KsXUi+Dm+wu9DDxTbwDHT0r2+ThOBXgWu6he4987c0rOhU5WGPime6qQ2Gs LWlVUEmZZ1Rl3dLLA2OU2tmC1nJ4RuU4NsFryEd/QanP78Vji9stuQKiHpaD2Y9V mTNWPlKOzF/T/iYMoxFtSf1hdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK5zv0+i wjMVx9kxQTTcPSvG1dxXMB8GA1UdIwQYMBaAFJfOVo9kaCVkc/hLOLPOA+o1SeuJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0FCQy9DNTUxNjQxMjA1 QjkxMUVFQTkxMzBCMzdDNEY5QUUwMi9sODVXajJSb0pXUnotRXM0czg0RDZqVko2 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2w4NVdqMlJvSldSei1FczRzODRENmpWSjY0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0FCQy9DNTUxNjQxMjA1QjkxMUVFQTkxMzBCMzdDNEY5QUUwMi9sODVXajJSb0pX UnotRXM0czg0RDZqVko2NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3fxTZ9H01E9//F9odaFvL1KHloQIqp3kMyjAf2g+0SseG1EZ/ufXG 0ZKI4Tpv9wCn4drLWPC+YoTOIui8KZ4cVNTLDjK3s6I7MvMKP26xAdUPd0QnCagQ V00nAiaootKv2SMjRDS8hctcgpBXRC0i9K1zQl/nxSxckSwiG96psAGYyF3kCSMf WmDlxLU6nd+y0gwpwID8gsPXl6FLr2F8JY5Yjp+5vKUVJeruV8ATRvoVr5qAqnrO WUv4bWsJkPj7pkVnhXAw5ekn4MrIzmum2nTOtPaV4o47pkZPLFCaOjI3ZerkRSKl np10ktZHvH4OqbPFoHZy4Veoci37n5Mg -----END CERTIFICATE-----Generated at Sat Apr 26 12:32:59 2025 by rpki-client