$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft File: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft (raw, json) Hash identifier: 0bj4saGW1E1Pmt1rF3P10IwYBeOKL33JH8OvFvUPNz0= Subject key identifier: C0:E7:FB:AD:FF:7C:19:10:C0:DF:A9:F7:C8:B4:19:B9:4B:17:6C:C7 Authority key identifier: 69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34 Certificate issuer: /CN=A91FCF44/serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft Manifest number: 92 Signing time: Fri 25 Apr 2025 16:12:45 +0000 Manifest this update: Fri 25 Apr 2025 16:12:44 +0000 Manifest next update: Fri 02 May 2025 16:12:44 +0000 Files and hashes: 1: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl (hash: PtuB6fmD05L2lH/sQE324n8V+qa4jn8+SWWUkTBoAfg=) 2: B2A0074EAD4F11EF93ECF282C4F9AE02.roa (hash: Vji2bwj5pG0AmszlyVBCPumUcxu21MvYnK8Tx2Nah1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 16:12:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCF44, serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34 Validity Not Before: Apr 25 16:12:44 2025 GMT Not After : May 2 16:12:44 2025 GMT Subject: CN=680bb47c-fdc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e0:99:fb:0f:0e:90:0d:e7:ff:80:7d:28:66: 01:65:bf:05:5d:4b:16:e9:05:09:40:31:b6:12:a9: 54:7c:05:bd:60:04:84:bb:08:d7:5a:7a:79:9b:da: 9e:00:00:dc:83:79:47:7e:87:f8:ac:65:11:4e:45: ea:bb:30:82:61:29:5f:d4:d6:89:f3:68:f9:cd:ba: ae:34:57:f5:51:01:5a:35:c3:31:de:9e:b3:b3:b9: 34:d1:36:b5:d5:1e:a2:2b:d9:44:f5:b6:da:f8:46: be:b9:09:e2:02:59:26:70:c8:fc:71:11:af:74:19: 71:8c:53:1a:38:6a:18:d3:8d:ed:67:bc:70:12:f1: e0:33:c0:db:a8:88:45:f7:a9:46:75:e9:1b:c8:5d: 67:8d:e2:21:c9:72:0d:8e:48:4f:8d:5b:cd:40:17: 03:b2:9f:92:21:33:99:c0:c0:1f:2b:27:02:9c:c0: 37:47:aa:67:57:4d:31:35:93:ee:d8:8b:26:bd:7c: 48:0d:0b:6e:1a:1a:1e:08:8c:e8:04:c3:00:4b:76: 4c:23:2c:a1:93:5d:6a:5e:0f:0d:a9:89:fb:de:61: 12:3a:15:c6:15:af:a3:cd:07:70:52:4b:10:10:25: 80:d9:cb:4c:04:e8:c9:e9:3e:b5:2c:53:40:4e:bc: 93:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E7:FB:AD:FF:7C:19:10:C0:DF:A9:F7:C8:B4:19:B9:4B:17:6C:C7 X509v3 Authority Key Identifier: keyid:69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d6:66:e8:28:17:7e:f0:df:77:25:fd:fd:06:e0:19:5e:5d: 03:67:c7:28:a5:3d:11:50:30:9f:b3:36:b8:da:b4:46:23:15: 40:fd:32:23:c4:a3:20:24:17:8e:9a:1b:ea:e8:5e:06:c9:9e: 78:ad:f5:62:2f:7a:21:77:71:b2:bd:b4:24:4b:45:02:fd:d2: 62:0f:56:f4:d8:79:6b:f8:a3:41:78:9c:25:79:0c:bf:d3:be: 6b:a6:01:82:90:99:6c:e6:af:f3:dc:e1:34:8b:e5:52:45:80: 67:ee:07:aa:3c:df:2d:02:87:70:e5:2f:dd:56:13:6b:8a:2e: 3d:6b:82:e0:4e:77:08:f5:17:ac:ec:3c:39:95:43:27:45:f2: 50:6b:7e:bd:d6:94:9e:c2:c1:75:d8:48:09:a0:b9:07:52:d3: 88:5b:14:50:00:9b:5b:41:5b:57:9a:1b:d5:a6:3d:61:f8:65: ba:22:92:3b:fb:37:ce:d5:45:88:8b:e8:39:9c:bb:db:f2:36: 1b:72:1a:81:ee:5c:92:9b:63:0f:32:d0:59:bd:5c:f1:ee:f1: 35:80:e2:5c:08:91:b2:42:24:b0:9f:a9:c4:62:60:52:28:d2: 5b:c6:e6:59:23:ed:1f:29:78:8b:35:27:8a:0e:81:59:fc:be: 9e:a4:d5:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNGNDQxMTAvBgNVBAUTKDY5OThEOUI1MzI3QkJGODk0RUQ1NjE5N0M0N0VDODk2 RkFFNTlFMzQwHhcNMjUwNDI1MTYxMjQ0WhcNMjUwNTAyMTYxMjQ0WjAYMRYwFAYD VQQDEw02ODBiYjQ3Yy1mZGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1eCZ+w8OkA3n/4B9KGYBZb8FXUsW6QUJQDG2EqlUfAW9YASEuwjXWnp5m9qe AADcg3lHfof4rGURTkXquzCCYSlf1NaJ82j5zbquNFf1UQFaNcMx3p6zs7k00Ta1 1R6iK9lE9bba+Ea+uQniAlkmcMj8cRGvdBlxjFMaOGoY043tZ7xwEvHgM8DbqIhF 96lGdekbyF1njeIhyXINjkhPjVvNQBcDsp+SITOZwMAfKycCnMA3R6pnV00xNZPu 2IsmvXxIDQtuGhoeCIzoBMMAS3ZMIyyhk11qXg8NqYn73mESOhXGFa+jzQdwUksQ ECWA2ctMBOjJ6T61LFNATryTPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDn+63/ fBkQwN+p98i0GblLF2zHMB8GA1UdIwQYMBaAFGmY2bUye7+JTtVhl8R+yJb65Z40 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0Y0NC85NDExMDYwNDYw MkMxMUVGOTdENzNDNUZDNEY5QUUwMi9hWmpadFRKN3Y0bE8xV0dYeEg3SWx2cmxu alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Faalp0VEo3djRsTzFXR1h4SDdJbHZybG5qUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0Y0NC85NDExMDYwNDYwMkMxMUVGOTdENzNDNUZDNEY5QUUwMi9hWmpadFRKN3Y0 bE8xV0dYeEg3SWx2cmxualEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa1mboKBd+8N93Jf39BuAZXl0DZ8copT0RUDCfsza42rRGIxVA/TIj xKMgJBeOmhvq6F4GyZ54rfViL3ohd3GyvbQkS0UC/dJiD1b02Hlr+KNBeJwleQy/ 075rpgGCkJls5q/z3OE0i+VSRYBn7geqPN8tAodw5S/dVhNrii49a4LgTncI9Res 7Dw5lUMnRfJQa3691pSewsF12EgJoLkHUtOIWxRQAJtbQVtXmhvVpj1h+GW6IpI7 +zfO1UWIi+g5nLvb8jYbchqB7lySm2MPMtBZvVzx7vE1gOJcCJGyQiSwn6nEYmBS KNJbxuZZI+0fKXiLNSeKDoFZ/L6epNVN -----END CERTIFICATE-----Generated at Sat Apr 26 14:12:59 2025 by rpki-client