$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft File: fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft (raw, json) Hash identifier: +QxjjRxL8XzsxUKvjAFOUfjtK9sZ8IFMOQCa+G5l7/o= Subject key identifier: 03:71:4B:69:BD:B9:F8:6A:DF:04:52:D3:7A:DB:AD:07:D9:8B:F8:7E Authority key identifier: 7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA Certificate issuer: /CN=A91AB92D/serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA Certificate serial: 019C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft Manifest number: 0198 Signing time: Sat 03 May 2025 02:54:56 +0000 Manifest this update: Sat 03 May 2025 02:54:55 +0000 Manifest next update: Sat 10 May 2025 02:54:55 +0000 Files and hashes: 1: fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl (hash: AM+YonreSjBlPmN4dHSEQI20Banu//1jy9fJVS4NFbM=) 2: 99B10EC4BD3511ED837DED0DC4F9AE02.roa (hash: VjsdP0zlKHnuUM/QDxE6pyiIHcCSV1/bdfYwggvcPkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 02:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB92D, serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA Validity Not Before: May 3 02:54:55 2025 GMT Not After : May 10 02:54:55 2025 GMT Subject: CN=6815857f-ccf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:57:6e:7d:64:17:d1:b3:4b:05:ce:93:53:85: 2f:66:cc:7a:7a:10:11:06:00:d2:17:74:9e:e5:df: c4:18:2e:d8:a6:8b:80:46:43:99:f2:ba:6e:10:5e: 48:02:11:95:f8:79:a1:f1:f9:27:0b:91:aa:9b:6a: 48:4f:80:33:11:a4:89:08:7a:34:8b:fb:0e:56:df: e5:30:f0:33:20:08:7d:3a:c0:f3:d0:45:82:8c:29: bc:1e:6b:27:da:8c:9d:86:9a:07:09:54:c6:2b:77: 7d:75:89:ef:f7:5f:26:19:d4:54:e4:84:1a:80:7c: cb:ea:c2:c2:44:da:32:61:0f:78:9f:fe:3f:f8:19: a9:3d:18:5a:39:1d:11:3b:d9:01:cc:0c:d7:20:25: 62:9a:6c:22:ff:68:62:55:fc:60:6b:29:20:92:a2: a4:e7:6e:0c:59:5f:8f:34:6a:6b:5d:8d:a2:30:b7: 64:5a:b4:73:e1:7b:dc:08:60:56:9c:a5:40:a2:80: 14:b0:0d:06:29:96:ef:7a:36:c7:9f:64:43:2d:d1: 56:e8:a0:a9:b8:c3:7f:6b:30:3f:c7:4a:64:46:a5: 6a:28:1d:82:41:8c:bc:1a:41:51:ea:10:e7:fe:86: 88:9a:6b:71:95:31:73:1d:2f:2a:b1:a7:d6:85:a3: 1d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:71:4B:69:BD:B9:F8:6A:DF:04:52:D3:7A:DB:AD:07:D9:8B:F8:7E X509v3 Authority Key Identifier: keyid:7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:89:5d:a0:cd:56:2c:ff:ab:42:76:2c:75:58:48:44:ff:5f: b2:e2:04:20:6d:7e:ac:c5:66:40:8b:6d:63:54:32:42:d9:c0: 52:ac:02:be:68:a3:25:55:70:6f:f6:c1:11:26:4a:49:05:22: a8:aa:ca:c8:d2:7d:e9:86:fe:a2:26:35:ec:e7:34:43:d0:12: f6:75:8c:eb:ed:82:62:97:96:79:2a:dd:28:2a:cb:22:1d:e3: 16:b0:af:6b:3c:5e:cd:b7:c9:95:2e:c3:9b:75:3f:cb:6b:13: 98:48:b6:b1:ec:c3:c0:50:ee:02:da:3f:59:86:b2:46:9d:54: 53:0c:a4:c1:87:b9:78:55:37:6d:eb:9d:40:7d:32:e5:87:d0: ed:dc:d6:0e:a0:97:09:b5:82:70:82:a9:fa:82:94:57:77:4a: e8:cd:fc:6e:28:9f:2f:bb:41:3a:d6:3b:d2:67:b6:95:8c:52: 96:c8:84:f7:0f:95:09:a1:7a:6b:f1:d1:8c:36:6f:a4:cf:e3: f5:50:e4:f6:e8:d6:db:e1:3c:e7:37:46:14:10:5f:27:56:51: c8:f2:8f:2f:d9:25:e2:38:9b:a5:07:0f:c9:5e:81:0a:8f:0a: 2a:d1:c0:d2:b0:25:92:06:d8:b8:c0:02:62:68:0f:e1:6e:5b: d6:16:73:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI5MkQxMTAvBgNVBAUTKDdERDg1RUM0Mzk3ODZGRDQyRTBCRjdCNzIxMzc3NjVG MDVEMEU5RkEwHhcNMjUwNTAzMDI1NDU1WhcNMjUwNTEwMDI1NDU1WjAYMRYwFAYD VQQDEw02ODE1ODU3Zi1jY2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ldufWQX0bNLBc6TU4UvZsx6ehARBgDSF3Se5d/EGC7YpouARkOZ8rpuEF5I AhGV+Hmh8fknC5Gqm2pIT4AzEaSJCHo0i/sOVt/lMPAzIAh9OsDz0EWCjCm8Hmsn 2oydhpoHCVTGK3d9dYnv918mGdRU5IQagHzL6sLCRNoyYQ94n/4/+BmpPRhaOR0R O9kBzAzXICVimmwi/2hiVfxgaykgkqKk524MWV+PNGprXY2iMLdkWrRz4XvcCGBW nKVAooAUsA0GKZbvejbHn2RDLdFW6KCpuMN/azA/x0pkRqVqKB2CQYy8GkFR6hDn /oaImmtxlTFzHS8qsafWhaMdCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANxS2m9 ufhq3wRS03rbrQfZi/h+MB8GA1UdIwQYMBaAFH3YXsQ5eG/ULgv3tyE3dl8F0On6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjkyRC82QkUyQ0FEMEJE MzIxMUVEODRBODI4MDlDNEY5QUUwMi9mZGhleERsNGI5UXVDX2UzSVRkMlh3WFE2 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkaGV4RGw0YjlRdUNfZTNJVGQyWHdYUTZmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjkyRC82QkUyQ0FEMEJEMzIxMUVEODRBODI4MDlDNEY5QUUwMi9mZGhleERsNGI5 UXVDX2UzSVRkMlh3WFE2Zm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7iV2gzVYs/6tCdix1WEhE/1+y4gQgbX6sxWZAi21jVDJC2cBSrAK+ aKMlVXBv9sERJkpJBSKoqsrI0n3phv6iJjXs5zRD0BL2dYzr7YJil5Z5Kt0oKssi HeMWsK9rPF7Nt8mVLsObdT/LaxOYSLax7MPAUO4C2j9ZhrJGnVRTDKTBh7l4VTdt 651AfTLlh9Dt3NYOoJcJtYJwgqn6gpRXd0rozfxuKJ8vu0E61jvSZ7aVjFKWyIT3 D5UJoXpr8dGMNm+kz+P1UOT26Nbb4TznN0YUEF8nVlHI8o8v2SXiOJulBw/JXoEK jwoq0cDSsCWSBti4wAJiaA/hblvWFnMZ -----END CERTIFICATE-----Generated at Mon May 5 02:25:56 2025 by rpki-client