$ rpki-client -vvf rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.mft File: 92edhcQsfjk3x9JAjAZ5uVznEXk.mft (raw, json) Hash identifier: O3gxIpYxoQEWCoZbNYlzKb02HfH86ij2e7TGNGboS34= Subject key identifier: 19:5A:07:F7:6F:DE:CF:9F:34:B8:81:6F:1D:F4:75:73:05:4A:E2:61 Authority key identifier: F7:67:9D:85:C4:2C:7E:39:37:C7:D2:40:8C:06:79:B9:5C:E7:11:79 Certificate issuer: /CN=A91A82F8/serialNumber=F7679D85C42C7E3937C7D2408C0679B95CE71179 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92edhcQsfjk3x9JAjAZ5uVznEXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.mft Manifest number: 26 Signing time: Tue 13 May 2025 07:01:55 +0000 Manifest this update: Tue 13 May 2025 07:01:54 +0000 Manifest next update: Tue 20 May 2025 07:01:54 +0000 Files and hashes: 1: 92edhcQsfjk3x9JAjAZ5uVznEXk.crl (hash: 4SiEHDSFKsrMq6VjP3Yw1akACQiVv9JdDU3I67rmnJs=) 2: 01103988FB5911EF8B32E613C4F9AE02.roa (hash: R1vera/J21wpLzxHOvQ0xtue7DdueGMpTshOHPQT8vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.crl rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92edhcQsfjk3x9JAjAZ5uVznEXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 07:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A82F8, serialNumber=F7679D85C42C7E3937C7D2408C0679B95CE71179 Validity Not Before: May 13 07:01:54 2025 GMT Not After : May 20 07:01:54 2025 GMT Subject: CN=6822ee62-580c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:94:84:6e:62:3e:c7:78:88:b7:75:7b:45:db: 94:bb:53:7d:ca:a3:90:55:10:f8:2b:c8:84:55:40: be:99:f2:93:fa:82:dd:fc:53:6b:01:6f:01:0f:59: 94:cf:13:00:dd:2a:2c:6b:c7:53:0b:ae:3c:bb:02: 07:e3:30:9b:9a:83:7c:ce:96:54:cc:3b:97:70:9f: 7d:7b:5a:5e:3b:52:9e:ba:ef:ff:2e:57:a9:5d:08: 72:82:72:3e:53:40:21:b0:27:c6:00:0b:14:a4:9e: 33:66:26:41:bd:fc:49:26:ac:a1:2e:f7:d3:0a:ed: 56:41:3f:d7:f9:4e:4f:af:49:52:38:a4:d8:90:89: 47:fa:d7:39:bd:93:07:09:bb:fa:57:02:f4:e2:9b: 48:44:de:f2:9d:c3:6d:17:1d:a8:29:e9:3d:23:89: cc:9f:7c:6b:45:57:15:7c:d4:a1:93:32:3b:db:89: 57:18:a9:0a:3f:17:40:d1:35:c5:e7:bf:02:23:20: 83:ef:48:fd:8c:7a:52:9f:95:5a:97:59:13:15:91: 23:2b:fc:ac:28:57:20:d8:f8:cd:e0:bc:b3:2b:9f: 98:a7:97:18:f2:9e:de:67:c7:cc:71:5f:b7:1b:4b: 76:9f:f1:05:06:fc:9e:ae:01:93:98:1b:0a:ca:99: 3f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:5A:07:F7:6F:DE:CF:9F:34:B8:81:6F:1D:F4:75:73:05:4A:E2:61 X509v3 Authority Key Identifier: keyid:F7:67:9D:85:C4:2C:7E:39:37:C7:D2:40:8C:06:79:B9:5C:E7:11:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92edhcQsfjk3x9JAjAZ5uVznEXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A82F8/BCB8278CFB5811EFB32CFD12C4F9AE02/92edhcQsfjk3x9JAjAZ5uVznEXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:39:d2:c8:b3:10:c1:c1:48:be:71:b9:59:da:3d:74:31:59: 5c:67:b7:0e:db:f7:34:5f:a8:82:41:8c:63:77:c0:e6:18:30: 08:87:40:18:77:92:d1:f9:d5:d9:98:2a:01:38:84:e0:ae:2f: 8e:c3:00:b5:41:d4:8d:95:f0:f1:dd:d9:3b:5c:81:5a:cb:5b: 1f:e2:19:aa:38:64:73:53:60:27:d7:94:5e:83:d6:ab:7b:02: 92:59:bf:0c:82:cb:47:9d:f9:d9:1e:43:5a:ec:90:1a:d4:56: e6:c2:3f:d9:51:62:dd:b7:70:75:9c:13:e6:64:d4:35:5f:c0: eb:9c:b4:f8:42:7a:50:5b:01:0f:70:2e:e7:33:19:46:a6:9e: 32:ca:bf:ad:25:08:48:06:bd:93:94:99:96:1b:50:32:02:77: 85:8b:4b:ed:6a:5d:ea:f5:c4:59:40:0c:5b:f4:ed:1e:60:3b: 4a:43:7d:44:9b:bd:96:a9:ed:8c:8b:a6:d7:d7:e1:3f:76:ca: eb:dc:be:3c:1b:3a:1f:36:6e:44:ed:9b:76:c1:d2:b7:33:ce: 41:83:0e:62:5a:a2:d3:a8:94:5a:bf:7b:d7:55:ca:7d:1f:b1: 09:a3:11:f8:d9:b7:00:0c:dc:11:fa:88:64:a1:61:8d:6c:fe: 34:74:1d:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB ODJGODExMC8GA1UEBRMoRjc2NzlEODVDNDJDN0UzOTM3QzdEMjQwOEMwNjc5Qjk1 Q0U3MTE3OTAeFw0yNTA1MTMwNzAxNTRaFw0yNTA1MjAwNzAxNTRaMBgxFjAUBgNV BAMTDTY4MjJlZTYyLTU4MGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnlIRuYj7HeIi3dXtF25S7U33Ko5BVEPgryIRVQL6Z8pP6gt38U2sBbwEPWZTP EwDdKixrx1MLrjy7AgfjMJuag3zOllTMO5dwn317Wl47Up667/8uV6ldCHKCcj5T QCGwJ8YACxSknjNmJkG9/EkmrKEu99MK7VZBP9f5Tk+vSVI4pNiQiUf61zm9kwcJ u/pXAvTim0hE3vKdw20XHagp6T0jicyffGtFVxV81KGTMjvbiVcYqQo/F0DRNcXn vwIjIIPvSP2MelKflVqXWRMVkSMr/KwoVyDY+M3gvLMrn5inlxjynt5nx8xxX7cb S3af8QUG/J6uAZOYGwrKmT81AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGVoH92/e z580uIFvHfR1cwVK4mEwHwYDVR0jBBgwFoAU92edhcQsfjk3x9JAjAZ5uVznEXkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4MkY4L0JDQjgyNzhDRkI1 ODExRUZCMzJDRkQxMkM0RjlBRTAyLzkyZWRoY1FzZmprM3g5SkFqQVo1dVZ6bkVY ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOTJlZGhjUXNmamszeDlKQWpBWjV1VnpuRVhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4 MkY4L0JDQjgyNzhDRkI1ODExRUZCMzJDRkQxMkM0RjlBRTAyLzkyZWRoY1FzZmpr M3g5SkFqQVo1dVZ6bkVYay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADU50sizEMHBSL5xuVnaPXQxWVxntw7b9zRfqIJBjGN3wOYYMAiHQBh3 ktH51dmYKgE4hOCuL47DALVB1I2V8PHd2TtcgVrLWx/iGao4ZHNTYCfXlF6D1qt7 ApJZvwyCy0ed+dkeQ1rskBrUVubCP9lRYt23cHWcE+Zk1DVfwOuctPhCelBbAQ9w LuczGUamnjLKv60lCEgGvZOUmZYbUDICd4WLS+1qXer1xFlADFv07R5gO0pDfUSb vZap7YyLptfX4T92yuvcvjwbOh82bkTtm3bB0rczzkGDDmJaotOolFq/e9dVyn0f sQmjEfjZtwAM3BH6iGShYY1s/jR0HcE= -----END CERTIFICATE-----Generated at Wed May 14 13:26:26 2025 by rpki-client