$ rpki-client -vvf rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft File: 92dQUVu3YtGADFrmxsLbJP6VLQI.mft (raw, json) Hash identifier: X41NsQkLI9HK95JJxooS1+6Gjk7utcFJY5YqnrKKUvU= Subject key identifier: 3D:B9:61:95:A0:8A:FB:4A:53:68:A8:ED:0A:D6:86:6C:A8:CB:83:25 Authority key identifier: F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02 Certificate issuer: /CN=A91C83EA/serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02 Certificate serial: 2A83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft Manifest number: 2A6D Signing time: Mon 12 May 2025 15:33:22 +0000 Manifest this update: Mon 12 May 2025 15:33:21 +0000 Manifest next update: Mon 19 May 2025 15:33:21 +0000 Files and hashes: 1: 92dQUVu3YtGADFrmxsLbJP6VLQI.crl (hash: eoZeAzF8K2skVhwUghs73hfIMGIHsuxXhWv5yR4EiKo=) 2: 2ED1150C561D11E7B003DF26C4F9AE02.roa (hash: VWQv/IH7NsqTcNchTqEWHo8sER9hJVbk+Ml69dI7l0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10883 (0x2a83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C83EA, serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02 Validity Not Before: May 12 15:33:21 2025 GMT Not After : May 19 15:33:21 2025 GMT Subject: CN=682214c2-d53a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cf:8c:6f:11:3a:fa:cf:fd:60:0b:38:e0:84: a1:92:98:8c:c2:bb:45:8b:5e:40:28:dd:ff:d3:0f: 9e:ac:f1:97:e5:82:1f:bc:46:9e:cf:a1:32:7b:7b: 71:85:44:79:e8:0a:d8:57:6d:06:3e:26:ae:d9:22: 20:80:03:6a:29:ff:92:1a:46:85:a0:c9:5b:9c:88: 39:6f:b3:36:af:15:28:11:e4:62:24:42:dd:4f:72: 37:75:23:a0:33:59:6b:80:28:e1:57:9a:85:83:c5: 7b:43:91:fc:9f:95:5b:48:70:ad:93:b5:6f:5b:a4: 20:e7:a6:37:2f:7a:b1:64:25:14:21:d9:f5:f0:d1: 60:d7:ba:4d:ae:da:8f:31:4d:c4:2e:32:fd:88:13: 17:37:69:8f:fd:13:8b:f1:a3:a9:18:d1:86:8e:54: cb:af:6c:fc:76:6e:af:dc:09:db:d2:e5:a4:d6:22: 3b:a6:44:28:cb:57:2d:43:59:4b:3e:69:0b:b5:66: 11:b8:4b:a7:fd:cd:60:09:27:f4:91:b5:e6:98:42: 2c:be:64:e5:7e:4a:f2:44:6c:5a:fa:f7:8c:50:eb: c9:cf:ee:58:72:5e:88:18:fc:28:d8:d4:11:55:61: fc:83:8c:a4:a8:63:54:61:2f:cf:3b:d7:17:14:5a: a7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B9:61:95:A0:8A:FB:4A:53:68:A8:ED:0A:D6:86:6C:A8:CB:83:25 X509v3 Authority Key Identifier: keyid:F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:9d:2f:07:7c:7f:a5:e2:9e:8a:a1:57:2c:4b:57:46:86:9e: d8:25:ca:78:fa:15:1b:d5:61:fe:b6:08:f1:23:21:fd:f2:fb: f8:61:fd:65:c6:84:a1:83:73:22:27:c3:69:8b:a6:d5:94:4b: 2a:7d:fb:17:77:3c:77:e6:94:96:84:9d:aa:7c:4b:98:af:65: a7:eb:88:0e:16:81:8d:69:c3:c0:02:27:fe:63:84:90:a7:75: 79:1e:53:a8:39:33:68:b5:6a:04:7e:3d:f5:aa:20:ce:f1:05: b0:37:3f:11:0a:17:91:9b:f3:81:29:57:a0:55:79:fb:59:d8: ff:69:db:04:73:5d:bf:b2:e6:aa:c1:20:eb:6e:b5:a4:e2:6c: f4:85:88:91:4a:70:5a:0a:26:9e:b7:4d:2a:0b:d7:90:4b:96: 06:8f:c5:58:71:b7:a9:0f:8d:9c:82:b9:e3:25:c1:3e:46:08: 3e:cd:39:02:71:e0:02:40:20:13:d6:a6:56:bf:21:04:94:d4: 54:4d:33:f5:9e:cb:ca:d0:ab:4b:27:a9:86:4b:ae:eb:9c:5d: d7:62:d4:1f:6a:ee:d4:2b:da:61:44:53:e5:d7:75:e9:6b:66: bd:82:4c:72:a0:0a:a8:a5:29:d6:14:26:a3:57:c6:9e:8c:fd: 66:1c:5b:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgzRUExMTAvBgNVBAUTKEY3Njc1MDUxNUJCNzYyRDE4MDBDNUFFNkM2QzJEQjI0 RkU5NTJEMDIwHhcNMjUwNTEyMTUzMzIxWhcNMjUwNTE5MTUzMzIxWjAYMRYwFAYD VQQDEw02ODIyMTRjMi1kNTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8+MbxE6+s/9YAs44IShkpiMwrtFi15AKN3/0w+erPGX5YIfvEaez6Eye3tx hUR56ArYV20GPiau2SIggANqKf+SGkaFoMlbnIg5b7M2rxUoEeRiJELdT3I3dSOg M1lrgCjhV5qFg8V7Q5H8n5VbSHCtk7VvW6Qg56Y3L3qxZCUUIdn18NFg17pNrtqP MU3ELjL9iBMXN2mP/ROL8aOpGNGGjlTLr2z8dm6v3Anb0uWk1iI7pkQoy1ctQ1lL PmkLtWYRuEun/c1gCSf0kbXmmEIsvmTlfkryRGxa+veMUOvJz+5Ycl6IGPwo2NQR VWH8g4ykqGNUYS/PO9cXFFqnnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD25YZWg ivtKU2io7QrWhmyoy4MlMB8GA1UdIwQYMBaAFPdnUFFbt2LRgAxa5sbC2yT+lS0C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODNFQS9EODJDNjFFODFD NDUxMUU0OTRBNzZGMUJDNEY5QUUwMi85MmRRVVZ1M1l0R0FERnJteHNMYkpQNlZM UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkyZFFVVnUzWXRHQURGcm14c0xiSlA2VkxRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODNFQS9EODJDNjFFODFDNDUxMUU0OTRBNzZGMUJDNEY5QUUwMi85MmRRVVZ1M1l0 R0FERnJteHNMYkpQNlZMUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjnS8HfH+l4p6KoVcsS1dGhp7YJcp4+hUb1WH+tgjxIyH98vv4Yf1l xoShg3MiJ8Npi6bVlEsqffsXdzx35pSWhJ2qfEuYr2Wn64gOFoGNacPAAif+Y4SQ p3V5HlOoOTNotWoEfj31qiDO8QWwNz8RCheRm/OBKVegVXn7Wdj/adsEc12/suaq wSDrbrWk4mz0hYiRSnBaCiaet00qC9eQS5YGj8VYcbepD42cgrnjJcE+Rgg+zTkC ceACQCAT1qZWvyEElNRUTTP1nsvK0KtLJ6mGS67rnF3XYtQfau7UK9phRFPl13Xp a2a9gkxyoAqopSnWFCajV8aejP1mHFs6 -----END CERTIFICATE-----Generated at Wed May 14 04:49:00 2025 by rpki-client