$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft File: 81QJOUhm-0CKDRiOC30AzFpzlI4.mft (raw, json) Hash identifier: Gn5LAhdbqGd9CCAXaJoeu/04MZMXrZEBadGS9pmpncY= Subject key identifier: 40:05:CF:38:5A:E4:A7:C1:17:D9:A1:AA:96:A7:43:1A:C5:CD:42:76 Authority key identifier: F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E Certificate issuer: /CN=A91FDBE8/serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E Certificate serial: 0782 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft Manifest number: 0774 Signing time: Thu 24 Apr 2025 21:21:17 +0000 Manifest this update: Thu 24 Apr 2025 21:21:16 +0000 Manifest next update: Thu 01 May 2025 21:21:16 +0000 Files and hashes: 1: 81QJOUhm-0CKDRiOC30AzFpzlI4.crl (hash: 0qTkIOKMXnugcRjiO4uM+n9pHDqgYp5sXAysuUC5zjI=) 2: 06F011A2134B11F0AA41F90AC4F9AE02.roa (hash: YTvlEQrf2/CpKkJlEJSGtIQ8Px/n8vlq3KbTCRS5T8Q=) 3: 407DD9CED09211EE843A0F22C4F9AE02.roa (hash: DYjETZSzXLPZu6k/scGKmt/lU3UqCl+3wtEbXL9L8Pg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1922 (0x782) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDBE8, serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E Validity Not Before: Apr 24 21:21:16 2025 GMT Not After : May 1 21:21:16 2025 GMT Subject: CN=680aab4d-da37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:69:ef:ef:73:1e:17:93:7f:60:96:2c:a0:f4: 28:71:4d:7f:86:8a:83:bf:a7:0e:3a:d3:0e:ba:4d: 08:31:f7:5a:a9:dc:d3:d4:38:f0:09:75:b7:b5:b3: a7:b3:6e:64:77:1c:5d:dd:69:08:e8:bd:0a:70:82: 54:96:a6:88:37:bb:e9:1c:ab:db:1c:4a:2d:fe:28: 95:57:f0:24:8d:50:94:2d:e7:60:52:9d:ba:f9:99: 1d:a7:85:fb:82:d1:59:79:b0:e1:f3:25:98:45:0b: a0:3c:26:4e:c0:09:69:39:e9:b4:99:0e:cb:a0:17: 84:9e:71:fa:d8:94:f7:86:e6:bc:9a:3c:6e:8a:66: e1:e6:ef:12:08:22:0c:2e:3c:d9:6a:30:de:76:0b: 3b:52:7d:82:2e:04:a6:4f:30:53:c7:94:f6:87:ce: 48:55:11:5c:97:ab:43:b1:a6:a9:be:3c:4d:3c:43: 02:8d:21:76:cd:f9:2c:89:bc:b4:06:ba:80:8d:64: 29:62:7a:9a:38:62:19:fa:4b:58:60:8e:73:82:a6: 4f:23:9a:9c:ea:44:74:7c:f0:c0:15:ec:72:ad:60: 43:d8:48:c1:2c:ea:54:ce:91:45:65:57:c3:49:9f: 9e:e6:58:9a:7f:cc:cf:6f:75:0c:94:84:4b:35:2d: 5b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:05:CF:38:5A:E4:A7:C1:17:D9:A1:AA:96:A7:43:1A:C5:CD:42:76 X509v3 Authority Key Identifier: keyid:F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:7d:bd:b7:29:9e:ed:15:f7:73:35:f5:0d:74:65:02:07:fe: 70:f6:d2:2a:65:89:7d:4a:19:1c:c4:d0:94:b5:db:21:bd:f3: 9a:6b:dd:15:dd:1d:71:aa:e5:1b:9a:cc:d8:67:28:17:74:b5: 12:d7:64:1e:00:92:4d:42:c7:a7:c6:94:d7:59:c0:ae:32:eb: 5c:27:df:0a:42:96:04:41:ee:2a:5f:49:ac:07:76:14:cf:00: 9e:a0:1d:8e:a1:82:f2:43:1c:c6:9a:95:de:48:58:84:2c:64: 0e:e0:ca:16:01:93:27:22:ae:e0:ec:cc:c2:d6:58:00:07:04: 9b:ce:3c:fc:e5:ae:9e:29:a9:39:fd:74:15:10:96:2f:35:bb: fe:ed:03:fc:72:94:78:84:d1:e1:ee:e5:c0:6d:d9:12:a4:ce: f8:8f:20:88:f4:03:ff:df:39:7d:2f:75:95:0b:ac:94:20:65: bd:fa:22:5e:56:6e:59:95:fe:d1:66:41:6e:12:e0:48:ae:ca: d5:19:e6:1f:83:47:1d:8b:66:3b:0a:9f:c2:ba:72:e8:fb:dc: c5:4e:ac:44:cb:ba:a5:d9:da:d6:ae:e2:36:b9:fd:41:c6:b8: 58:3b:c6:2a:73:4f:ce:3c:28:72:51:e2:47:d5:c3:4c:34:8e: 31:40:b5:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRCRTgxMTAvBgNVBAUTKEYzNTQwOTM5NDg2NkZCNDA4QTBEMTg4RTBCN0QwMEND NUE3Mzk0OEUwHhcNMjUwNDI0MjEyMTE2WhcNMjUwNTAxMjEyMTE2WjAYMRYwFAYD VQQDEw02ODBhYWI0ZC1kYTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWnv73MeF5N/YJYsoPQocU1/hoqDv6cOOtMOuk0IMfdaqdzT1DjwCXW3tbOn s25kdxxd3WkI6L0KcIJUlqaIN7vpHKvbHEot/iiVV/AkjVCULedgUp26+Zkdp4X7 gtFZebDh8yWYRQugPCZOwAlpOem0mQ7LoBeEnnH62JT3hua8mjxuimbh5u8SCCIM LjzZajDedgs7Un2CLgSmTzBTx5T2h85IVRFcl6tDsaapvjxNPEMCjSF2zfksiby0 BrqAjWQpYnqaOGIZ+ktYYI5zgqZPI5qc6kR0fPDAFexyrWBD2EjBLOpUzpFFZVfD SZ+e5liaf8zPb3UMlIRLNS1bFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAFzzha 5KfBF9mhqpanQxrFzUJ2MB8GA1UdIwQYMBaAFPNUCTlIZvtAig0Yjgt9AMxac5SO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREJFOC85RDM2MzE3ODE1 MkIxMUVCOUJENEVCNDZDNEY5QUUwMi84MVFKT1VobS0wQ0tEUmlPQzMwQXpGcHps STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgxUUpPVWhtLTBDS0RSaU9DMzBBekZwemxJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REJFOC85RDM2MzE3ODE1MkIxMUVCOUJENEVCNDZDNEY5QUUwMi84MVFKT1VobS0w Q0tEUmlPQzMwQXpGcHpsSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADfb23KZ7tFfdzNfUNdGUCB/5w9tIqZYl9ShkcxNCUtdshvfOaa90V 3R1xquUbmszYZygXdLUS12QeAJJNQsenxpTXWcCuMutcJ98KQpYEQe4qX0msB3YU zwCeoB2OoYLyQxzGmpXeSFiELGQO4MoWAZMnIq7g7MzC1lgABwSbzjz85a6eKak5 /XQVEJYvNbv+7QP8cpR4hNHh7uXAbdkSpM74jyCI9AP/3zl9L3WVC6yUIGW9+iJe Vm5Zlf7RZkFuEuBIrsrVGeYfg0cdi2Y7Cp/CunLo+9zFTqxEy7ql2drWruI2uf1B xrhYO8Yqc0/OPChyUeJH1cNMNI4xQLVQ -----END CERTIFICATE-----Generated at Sat Apr 26 04:25:46 2025 by rpki-client