$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft File: h_lY2vSYZZqe7g_xRCJrFxBIneA.mft (raw, json) Hash identifier: ZJVeLyx9P3oqiwWpLyEd0RwkEG0hX2UjGNoufCNUf8I= Subject key identifier: C5:B6:58:09:43:3E:F5:F3:A2:C8:E7:DF:CA:BB:13:06:2A:FB:C4:4C Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 Certificate issuer: /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Certificate serial: 037B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft Manifest number: 036D Signing time: Sat 05 Apr 2025 01:06:44 +0000 Manifest this update: Sat 05 Apr 2025 01:06:44 +0000 Manifest next update: Sat 12 Apr 2025 01:06:44 +0000 Files and hashes: 1: h_lY2vSYZZqe7g_xRCJrFxBIneA.crl (hash: bYZSJOjAOgGp69XJ2RU0Rstiaa+mveTOiI0xdk1Gr/Y=) 2: 8DB35F6A766511EF8820F844C4F9AE02.roa (hash: DUjlMecJ3MCBuCiDf6r0BnVvRVnuDf5vmODbFKyvDAA=) 3: 8C5D4FF4766511EF8820F844C4F9AE02.roa (hash: a/GUffZHyYeIWzCyqNA7Fc/IgTrpVgmYYpvH+uBkGnA=) 4: FFF8A36A34E311EE877E760DC4F9AE02.roa (hash: Td4Qw51TSr10UgTmfhROy8qSBPdrA5ySYZaY11oYN0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 891 (0x37b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91354AE Validity Not Before: Apr 5 01:06:44 2025 GMT Not After : Apr 12 01:06:44 2025 GMT Subject: CN=67f08224-545a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ff:a1:73:15:58:97:aa:87:0b:15:c6:d5:97: 27:cb:4e:e8:e1:9b:04:97:1d:7a:61:83:d2:b9:87: 0a:37:f3:2b:a8:51:96:32:1f:09:96:bc:54:91:90: 79:3a:59:2c:87:1b:cf:63:e6:3c:20:f2:f1:f8:5d: 5f:db:82:98:bb:15:b8:d8:36:5b:bd:9f:e6:d1:ea: 26:4b:40:56:54:90:94:ab:b0:eb:f7:ab:ff:39:74: 95:f7:4c:02:33:17:b7:f9:1a:db:3b:20:8d:1e:a1: a4:10:25:06:d3:1f:f0:36:2c:93:ab:0a:48:8e:28: fa:1c:6d:09:7d:1b:ba:eb:ca:9f:2d:c6:c6:d3:4a: d5:40:0f:29:a0:0b:d2:81:9d:8e:54:fd:01:9d:a5: d8:fd:d1:1d:de:33:5d:00:02:11:4b:5e:66:da:29: 90:92:4c:44:7a:94:b8:dc:5a:e4:06:39:a7:09:a7: f4:f7:d2:da:3b:ba:77:83:ce:00:f6:88:05:55:2b: ee:39:58:02:4c:62:14:d4:c3:cd:c5:75:b1:3f:3f: 80:a4:12:98:6a:50:e7:91:20:4f:34:c6:4c:42:4d: cf:84:6c:36:c6:53:da:48:f0:81:e7:5e:6d:32:8f: eb:9f:0d:6e:4f:dd:48:a6:d2:57:89:28:fa:f9:55: 5a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B6:58:09:43:3E:F5:F3:A2:C8:E7:DF:CA:BB:13:06:2A:FB:C4:4C X509v3 Authority Key Identifier: keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:50:6d:d8:1f:87:ad:4c:31:c7:ba:3e:ec:d3:20:ee:a2:d1: d6:c3:cd:bf:36:b3:49:a0:83:a7:80:b0:26:4e:b0:20:90:a9: 0c:20:b7:d6:0d:e8:ea:c9:68:6f:fb:10:fd:20:b0:ae:05:ca: f5:01:d8:0f:f5:82:2e:4e:09:23:db:59:df:13:bd:de:6f:24: 5e:a9:fb:46:05:23:12:1a:25:16:55:1b:0b:6d:b2:62:33:7f: d6:81:79:c0:d3:72:1e:27:b1:42:f7:d9:90:d7:8f:9e:06:7e: 0a:50:a1:40:23:55:2f:da:56:72:81:fb:0f:af:35:89:1a:67: dc:81:17:3b:04:2e:f7:68:81:4e:df:ab:6c:19:cd:fa:bc:28: 39:a4:21:49:f5:94:43:74:21:e5:77:aa:40:e8:f2:6f:f3:3b: 52:a4:98:d0:34:40:73:b4:19:43:4d:31:34:70:cf:3c:90:91: ae:d0:99:b1:0a:43:ce:a8:81:1b:38:6a:93:d3:42:39:40:d3: a0:4b:9e:cd:57:12:c8:e4:9c:58:59:bd:24:f4:57:29:89:37: 37:61:f6:a1:ba:6d:41:f0:47:86:5b:8e:d5:bd:86:08:cc:0d: f6:a5:7a:05:58:d4:61:41:29:17:8d:5e:4e:61:b9:ff:07:c5: 96:39:87:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU0QUUxMTAvBgNVBAUTKDg3Rjk1OERBRjQ5ODY1OUE5RUVFMEZGMTQ0MjI2QjE3 MTA0ODlERTAwHhcNMjUwNDA1MDEwNjQ0WhcNMjUwNDEyMDEwNjQ0WjAYMRYwFAYD VQQDEw02N2YwODIyNC01NDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvv+hcxVYl6qHCxXG1Zcny07o4ZsElx16YYPSuYcKN/MrqFGWMh8JlrxUkZB5 OlkshxvPY+Y8IPLx+F1f24KYuxW42DZbvZ/m0eomS0BWVJCUq7Dr96v/OXSV90wC Mxe3+RrbOyCNHqGkECUG0x/wNiyTqwpIjij6HG0JfRu668qfLcbG00rVQA8poAvS gZ2OVP0BnaXY/dEd3jNdAAIRS15m2imQkkxEepS43FrkBjmnCaf099LaO7p3g84A 9ogFVSvuOVgCTGIU1MPNxXWxPz+ApBKYalDnkSBPNMZMQk3PhGw2xlPaSPCB515t Mo/rnw1uT91IptJXiSj6+VVa/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMW2WAlD PvXzosjn38q7EwYq+8RMMB8GA1UdIwQYMBaAFIf5WNr0mGWanu4P8UQiaxcQSJ3g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTRBRS82QzlGMkRGQUE1 MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpacWU3Z194UkNKckZ4Qklu ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfbFkydlNZWlpxZTdnX3hSQ0pyRnhCSW5lQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTRBRS82QzlGMkRGQUE1MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpa cWU3Z194UkNKckZ4QkluZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrUG3YH4etTDHHuj7s0yDuotHWw82/NrNJoIOngLAmTrAgkKkMILfW DejqyWhv+xD9ILCuBcr1AdgP9YIuTgkj21nfE73ebyReqftGBSMSGiUWVRsLbbJi M3/WgXnA03IeJ7FC99mQ14+eBn4KUKFAI1Uv2lZygfsPrzWJGmfcgRc7BC73aIFO 36tsGc36vCg5pCFJ9ZRDdCHld6pA6PJv8ztSpJjQNEBztBlDTTE0cM88kJGu0Jmx CkPOqIEbOGqT00I5QNOgS57NVxLI5JxYWb0k9FcpiTc3Yfahum1B8EeGW47VvYYI zA32pXoFWNRhQSkXjV5OYbn/B8WWOYd7 -----END CERTIFICATE-----Generated at Mon Apr 7 00:06:52 2025 by rpki-client