$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft File: RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft (raw, json) Hash identifier: fIDbbGeoa9fTPqUM2PY/QTKss4HH6I/UE7xeT40SyAI= Subject key identifier: 23:AF:5F:FE:FC:51:6E:CA:29:4B:FA:6A:12:68:D8:B8:A2:FC:71:03 Authority key identifier: 46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0 Certificate issuer: /CN=A91DF31D/serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft Manifest number: 0127 Signing time: Sun 11 May 2025 03:38:40 +0000 Manifest this update: Sun 11 May 2025 03:38:40 +0000 Manifest next update: Sun 18 May 2025 03:38:40 +0000 Files and hashes: 1: RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl (hash: 1BG6VIne6wuC47BS+UueGkxKXfzbCrADHDYUNFFDcp0=) 2: FA272BC67EBE11EEABD00B4DC4F9AE02.roa (hash: xhKR4yggkkDIE2Jc3UBJzAhUDN7Y6iIUFjJh/ZjCHKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF31D, serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0 Validity Not Before: May 11 03:38:40 2025 GMT Not After : May 18 03:38:40 2025 GMT Subject: CN=68201bc0-811d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:81:ca:be:ac:4e:0b:e4:d8:2e:ae:9a:00:af: 03:4a:d3:ea:26:73:6c:06:1c:f2:1b:0b:11:e2:24: 2a:d3:46:3b:18:89:24:26:2d:43:9e:2a:5f:f9:db: 73:06:e0:b3:d0:c4:d4:0a:78:13:e0:97:96:f9:9c: 9d:ea:25:cc:8b:ab:b4:97:7f:44:7c:4d:1c:33:9f: 11:ff:46:8f:d9:3e:dc:54:ad:12:33:45:38:bc:ca: e6:cc:72:38:cf:bf:b6:37:9c:68:55:5b:26:eb:93: b6:e1:2f:31:27:3b:08:af:2c:b2:54:02:c2:f7:70: 5e:89:2a:41:43:6d:c7:66:48:6a:6b:5d:a6:97:9d: 33:b1:ba:58:6a:2d:9e:51:a4:61:66:ea:21:77:b5: b5:83:6f:e6:06:af:be:61:9f:4e:ba:d2:ab:81:d3: 82:57:35:92:cb:3c:6a:de:41:61:25:72:82:b5:e0: ad:79:f9:7a:4c:18:e4:16:c2:2e:25:c8:27:81:01: b9:7b:27:b1:58:0a:6b:a1:5d:97:d1:7f:0f:a1:9d: 79:f4:78:cd:25:f5:b6:c7:2f:f0:f1:f3:5a:f4:a4: f1:d4:00:f6:76:74:df:5c:dc:e9:58:d1:9c:42:12: 55:7b:4f:77:ba:38:b3:c8:7a:e9:77:71:02:52:d7: e3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:AF:5F:FE:FC:51:6E:CA:29:4B:FA:6A:12:68:D8:B8:A2:FC:71:03 X509v3 Authority Key Identifier: keyid:46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:b7:f9:0c:76:33:35:ec:4b:43:24:33:1e:8a:7f:a5:e2:51: 63:5b:a3:45:62:37:57:b6:58:8f:05:31:bd:83:66:e6:75:aa: cc:e0:79:c8:e9:0a:82:bc:2d:99:d8:e6:e6:a0:ff:9d:b4:af: 6b:9f:20:62:80:e1:99:77:65:6b:d4:ab:f2:54:24:dc:03:fa: 3d:22:7d:6d:70:b7:a5:fc:bd:d6:99:e5:a7:4f:33:ea:a8:cc: 51:d8:80:4d:57:62:c3:55:35:5c:eb:37:e8:f0:68:0c:b6:86: 8d:93:c8:92:d7:85:81:21:a7:8f:b7:16:c4:57:65:83:45:f2: 46:81:0f:c9:46:be:66:c5:4c:76:b4:20:60:54:f0:7c:7f:bb: 40:e6:1e:55:2b:2d:aa:0d:24:8a:a2:d9:76:c8:12:59:0c:d8: ba:ce:89:aa:68:26:5e:29:e1:45:bf:f2:90:cc:80:80:46:0d: a1:8d:ad:17:50:18:e4:23:33:44:1a:b0:1c:81:cf:68:26:b3: 2a:48:a7:62:34:ba:fc:b5:38:7f:d1:d1:0e:e4:28:b9:73:8c: 9b:68:8b:41:9c:88:6e:72:27:37:45:df:66:d9:b5:2f:78:96: 9d:5f:9c:39:76:dd:4c:25:38:4e:12:36:8f:40:c5:49:48:f5: 3b:da:ab:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYzMUQxMTAvBgNVBAUTKDQ2MDBDMThENjJDNkY3MjRENUM5NTUwNkY0MUI4Qzk1 RkMzOTBEQzAwHhcNMjUwNTExMDMzODQwWhcNMjUwNTE4MDMzODQwWjAYMRYwFAYD VQQDEw02ODIwMWJjMC04MTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4HKvqxOC+TYLq6aAK8DStPqJnNsBhzyGwsR4iQq00Y7GIkkJi1Dnipf+dtz BuCz0MTUCngT4JeW+Zyd6iXMi6u0l39EfE0cM58R/0aP2T7cVK0SM0U4vMrmzHI4 z7+2N5xoVVsm65O24S8xJzsIryyyVALC93BeiSpBQ23HZkhqa12ml50zsbpYai2e UaRhZuohd7W1g2/mBq++YZ9OutKrgdOCVzWSyzxq3kFhJXKCteCtefl6TBjkFsIu JcgngQG5eyexWAproV2X0X8PoZ159HjNJfW2xy/w8fNa9KTx1AD2dnTfXNzpWNGc QhJVe093ujizyHrpd3ECUtfjtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOvX/78 UW7KKUv6ahJo2Lii/HEDMB8GA1UdIwQYMBaAFEYAwY1ixvck1clVBvQbjJX8OQ3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjMxRC8wNTVBQjU0NDdE RjcxMUVFODdCN0Q0MzBDNEY5QUUwMi9SZ0RCaldMRzl5VFZ5VlVHOUJ1TWxmdzVE Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JnREJqV0xHOXlUVnlWVUc5QnVNbGZ3NURjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjMxRC8wNTVBQjU0NDdERjcxMUVFODdCN0Q0MzBDNEY5QUUwMi9SZ0RCaldMRzl5 VFZ5VlVHOUJ1TWxmdzVEY0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByt/kMdjM17EtDJDMein+l4lFjW6NFYjdXtliPBTG9g2bmdarM4HnI 6QqCvC2Z2ObmoP+dtK9rnyBigOGZd2Vr1KvyVCTcA/o9In1tcLel/L3WmeWnTzPq qMxR2IBNV2LDVTVc6zfo8GgMtoaNk8iS14WBIaePtxbEV2WDRfJGgQ/JRr5mxUx2 tCBgVPB8f7tA5h5VKy2qDSSKotl2yBJZDNi6zomqaCZeKeFFv/KQzICARg2hja0X UBjkIzNEGrAcgc9oJrMqSKdiNLr8tTh/0dEO5Ci5c4ybaItBnIhucic3Rd9m2bUv eJadX5w5dt1MJThOEjaPQMVJSPU72qtZ -----END CERTIFICATE-----Generated at Sun May 11 13:14:12 2025 by rpki-client