$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft File: B82dMe1hhir1A-UglCjHyyfqiB8.mft (raw, json) Hash identifier: 1g0rIqdQBMlyVmIBBsqsT0cpK8CfGUa+u+xfzqwFZYI= Subject key identifier: 9F:A9:70:E5:39:EE:61:93:2B:26:FA:C6:FF:35:91:DF:CF:21:A4:61 Authority key identifier: 07:CD:9D:31:ED:61:86:2A:F5:03:E5:20:94:28:C7:CB:27:EA:88:1F Certificate issuer: /CN=A91FD609/serialNumber=07CD9D31ED61862AF503E5209428C7CB27EA881F Certificate serial: 07DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft Manifest number: 07D4 Signing time: Thu 24 Apr 2025 20:52:55 +0000 Manifest this update: Thu 24 Apr 2025 20:52:55 +0000 Manifest next update: Thu 01 May 2025 20:52:55 +0000 Files and hashes: 1: B82dMe1hhir1A-UglCjHyyfqiB8.crl (hash: AlvYmbgeb5PzxsDk3cfyhpvcQgY56dWYmkjMySZc+ss=) 2: 765DBCFEEC1A11EAA8520072C4F9AE02.roa (hash: LwXV2swiHkwzhmRJHgtxVwl/mp8FDjhnbQvKS2GLsds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.crl rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2014 (0x7de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD609, serialNumber=07CD9D31ED61862AF503E5209428C7CB27EA881F Validity Not Before: Apr 24 20:52:55 2025 GMT Not After : May 1 20:52:55 2025 GMT Subject: CN=680aa4a7-71c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:00:36:3f:7f:ea:77:9b:d3:4e:dc:eb:40:da: f7:93:f9:7c:42:96:07:f2:98:a6:bb:37:03:71:be: 55:82:19:f2:91:f9:bb:7c:56:73:f4:6c:b0:c7:90: 3c:26:3d:35:b7:f5:fa:09:7b:67:c2:3c:2a:d5:ec: 44:60:0e:9f:58:1f:c3:51:39:c4:bc:07:50:e3:7a: d0:5d:75:1c:0d:a1:d0:2c:d9:0b:e4:9c:28:fe:ee: fd:bb:e3:0e:0b:6b:8d:05:3d:36:4d:c6:b6:d7:36: b5:ba:00:4d:96:04:e2:a6:bd:67:2c:19:82:83:a4: 6a:8a:85:3c:f3:34:d6:27:07:ef:ca:c6:72:90:e7: 5d:f9:a7:42:83:e3:bc:e2:08:51:8a:ed:2b:84:3f: b5:3d:25:55:e5:5c:15:0e:6f:fd:cb:fc:98:27:32: 5d:12:ab:95:84:fb:7c:20:3d:de:fd:93:25:f2:0c: 6b:3e:e2:9b:0b:27:27:40:6d:dd:a2:8a:97:42:36: ad:68:b2:1f:7b:70:75:51:43:28:87:0d:9a:25:9d: cd:f0:24:14:3a:b4:02:52:74:92:9e:67:2e:24:5d: 07:6f:27:5e:ea:5b:a1:5a:78:0c:9c:94:4d:55:b6: 4f:1f:d7:d0:cd:49:43:5e:53:45:6d:4a:ec:41:48: 0a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A9:70:E5:39:EE:61:93:2B:26:FA:C6:FF:35:91:DF:CF:21:A4:61 X509v3 Authority Key Identifier: keyid:07:CD:9D:31:ED:61:86:2A:F5:03:E5:20:94:28:C7:CB:27:EA:88:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:d2:8b:07:0a:b3:bd:58:ca:ef:ad:37:74:7f:e7:ea:2b:1c: b4:53:18:12:f7:30:2a:e3:e9:57:5f:e9:98:e2:1b:e7:ac:ce: bf:52:4f:dd:1e:9e:00:de:74:f2:9e:e7:62:a8:91:ab:e5:46: 68:a0:d5:6a:e5:68:df:df:a6:e6:4e:78:70:84:38:ab:c7:b7: 3b:43:45:d2:f8:72:b9:4a:18:68:69:98:69:ac:20:b5:21:4c: e1:4a:bb:7c:4a:0b:11:fc:f9:5c:4f:a5:61:d7:09:2e:63:d6: e5:86:5f:80:6f:95:18:67:04:cf:76:be:b0:7f:c9:2f:13:48: 9e:10:6a:fa:e6:58:8d:e6:9c:7a:a5:f6:4b:81:2c:24:06:c8: 6d:26:9a:54:d4:7d:f0:0e:68:b5:6c:c6:59:97:2d:53:e9:46: 57:45:fd:f8:f6:ca:8c:c8:10:a2:41:34:85:db:54:ce:1c:44: 94:5b:f2:05:bd:f9:0e:27:fe:4c:d5:f6:fb:da:67:70:78:97: 85:1a:57:b6:97:c5:25:d5:90:bf:48:04:d9:a4:c6:01:f7:40: 64:f3:f4:39:46:76:63:d1:39:c5:35:fd:c6:c3:12:ac:7d:1e: c7:c8:9f:62:af:57:db:b6:92:e1:ee:34:c9:42:cd:3c:2c:e4: 67:33:85:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ2MDkxMTAvBgNVBAUTKDA3Q0Q5RDMxRUQ2MTg2MkFGNTAzRTUyMDk0MjhDN0NC MjdFQTg4MUYwHhcNMjUwNDI0MjA1MjU1WhcNMjUwNTAxMjA1MjU1WjAYMRYwFAYD VQQDEw02ODBhYTRhNy03MWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wA2P3/qd5vTTtzrQNr3k/l8QpYH8pimuzcDcb5Vghnykfm7fFZz9Gywx5A8 Jj01t/X6CXtnwjwq1exEYA6fWB/DUTnEvAdQ43rQXXUcDaHQLNkL5Jwo/u79u+MO C2uNBT02Tca21za1ugBNlgTipr1nLBmCg6RqioU88zTWJwfvysZykOdd+adCg+O8 4ghRiu0rhD+1PSVV5VwVDm/9y/yYJzJdEquVhPt8ID3e/ZMl8gxrPuKbCycnQG3d ooqXQjataLIfe3B1UUMohw2aJZ3N8CQUOrQCUnSSnmcuJF0Hbyde6luhWngMnJRN VbZPH9fQzUlDXlNFbUrsQUgKpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+pcOU5 7mGTKyb6xv81kd/PIaRhMB8GA1UdIwQYMBaAFAfNnTHtYYYq9QPlIJQox8sn6ogf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDYwOS8wQzYwOUI5Q0VD MTkxMUVBOTI1REZDNkZDNEY5QUUwMi9CODJkTWUxaGhpcjFBLVVnbENqSHl5ZnFp QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I4MmRNZTFoaGlyMUEtVWdsQ2pIeXlmcWlCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDYwOS8wQzYwOUI5Q0VDMTkxMUVBOTI1REZDNkZDNEY5QUUwMi9CODJkTWUxaGhp cjFBLVVnbENqSHl5ZnFpQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR0osHCrO9WMrvrTd0f+fqKxy0UxgS9zAq4+lXX+mY4hvnrM6/Uk/d Hp4A3nTynudiqJGr5UZooNVq5Wjf36bmTnhwhDirx7c7Q0XS+HK5ShhoaZhprCC1 IUzhSrt8SgsR/PlcT6Vh1wkuY9blhl+Ab5UYZwTPdr6wf8kvE0ieEGr65liN5px6 pfZLgSwkBshtJppU1H3wDmi1bMZZly1T6UZXRf349sqMyBCiQTSF21TOHESUW/IF vfkOJ/5M1fb72mdweJeFGle2l8Ul1ZC/SATZpMYB90Bk8/Q5RnZj0TnFNf3GwxKs fR7HyJ9ir1fbtpLh7jTJQs08LORnM4VQ -----END CERTIFICATE-----Generated at Sat Apr 26 05:02:38 2025 by rpki-client