$ rpki-client -vvf rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft File: 66pMRPJIk3FKHVs2Ci17LYYFsWM.mft (raw, json) Hash identifier: zJX9D6zKFPd/B1gBI5QYI6tcGoAHTvxC8s3z6nsbMUU= Subject key identifier: 15:08:A3:3D:21:56:74:F0:35:74:85:DA:64:6F:9B:1A:4C:F5:62:77 Authority key identifier: EB:AA:4C:44:F2:48:93:71:4A:1D:5B:36:0A:2D:7B:2D:86:05:B1:63 Certificate issuer: /CN=A91504D6/serialNumber=EBAA4C44F24893714A1D5B360A2D7B2D8605B163 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft Manifest number: 98 Signing time: Wed 09 Apr 2025 05:11:10 +0000 Manifest this update: Wed 09 Apr 2025 05:11:10 +0000 Manifest next update: Wed 16 Apr 2025 05:11:10 +0000 Files and hashes: 1: 66pMRPJIk3FKHVs2Ci17LYYFsWM.crl (hash: KO6AzfUbtR9xwEoKbS8xYWeVk21le7SV4NFwOyaH9o8=) 2: BE82B5AE31C911EFA31A8D3AC4F9AE02.roa (hash: 6SVIugHlnaJdlkKtpec/q8AF54HgJPVuchm8bN57MAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.crl rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 05:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91504D6 Validity Not Before: Apr 9 05:11:10 2025 GMT Not After : Apr 16 05:11:10 2025 GMT Subject: CN=67f6016e-a1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bd:d0:9c:34:71:34:a7:9d:11:19:ed:3d:59: be:41:13:08:17:a9:81:22:cd:e3:71:87:e8:27:4b: 86:77:4d:1e:04:b7:3f:36:91:2d:b3:69:9b:54:1e: 53:d8:78:32:6e:37:95:60:38:33:e2:a8:3c:91:b9: b8:84:86:56:25:78:dd:3b:15:dd:7e:15:f2:9d:39: 32:cb:e5:20:21:80:dc:8c:46:04:a5:84:be:a4:e1: 51:4a:bf:d6:a7:95:10:13:51:8f:19:65:43:30:bc: f5:39:c7:74:94:df:f7:ca:47:23:d7:bd:d9:56:b5: 4f:8a:22:c5:fe:fa:fd:55:d1:4e:ee:04:4d:5b:6d: 60:61:47:bb:64:d8:f3:d7:a4:30:a6:b6:24:0e:9d: 68:72:6d:40:8b:ac:25:7c:1a:35:aa:42:6f:df:85: 0d:a8:92:57:d7:98:91:f6:9c:14:1a:b9:bd:25:90: 32:88:b1:04:53:5e:b0:90:7f:b2:eb:e6:d0:d1:51: a2:62:14:3d:27:3c:ed:90:09:8f:af:5d:b9:7c:92: e7:71:22:52:ca:2a:ab:98:d9:a3:b2:33:8f:8e:b4: 60:9e:05:f9:c2:db:70:65:b8:a6:fc:7d:8c:92:7e: 74:b1:c7:68:64:6f:94:75:0b:99:c1:a6:a5:52:58: 0c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:08:A3:3D:21:56:74:F0:35:74:85:DA:64:6F:9B:1A:4C:F5:62:77 X509v3 Authority Key Identifier: keyid:EB:AA:4C:44:F2:48:93:71:4A:1D:5B:36:0A:2D:7B:2D:86:05:B1:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:c0:91:bf:c1:1c:17:1b:02:c8:56:f1:c6:ab:cf:83:64:27: 34:a2:c4:35:73:56:5f:89:44:06:24:d7:58:d8:46:99:c1:12: ce:be:36:a9:5f:0b:6d:c6:b9:01:08:94:43:df:01:2b:ac:38: dd:30:6b:fd:c1:e0:71:1f:9a:29:70:09:c2:96:85:1d:c5:bb: 83:fd:8b:31:34:b4:ee:b9:43:ac:77:5f:28:f5:53:41:fc:3a: c7:16:62:2e:47:2b:97:c9:6a:fa:b3:64:0d:2b:0b:49:7e:02: 08:f7:2a:8d:8c:cc:9d:4f:59:16:0c:58:04:6a:cc:0b:b0:b6: 29:de:4c:f4:06:05:1a:84:b6:5e:b1:b5:3a:fb:5d:f6:0a:51: 83:1b:9a:ba:87:54:d2:e1:25:95:83:e7:30:61:0c:17:ed:91: 98:c9:07:c1:ab:99:a4:32:ec:bf:eb:2b:0d:1d:9c:ce:32:54: ad:f2:f0:69:fd:d5:3f:bc:14:97:a4:0b:d9:56:e4:d4:d6:21: 9f:a8:c5:d3:4d:73:d5:fd:54:75:30:5a:7f:6f:64:7f:16:ff: c7:f5:32:71:0b:c4:f2:70:52:b2:ea:a2:4e:0b:15:61:17:43: 47:83:1c:46:be:01:04:52:9d:bb:da:e5:7e:77:5b:8d:cf:c7: c5:89:d9:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA0RDYxMTAvBgNVBAUTKEVCQUE0QzQ0RjI0ODkzNzE0QTFENUIzNjBBMkQ3QjJE ODYwNUIxNjMwHhcNMjUwNDA5MDUxMTEwWhcNMjUwNDE2MDUxMTEwWjAYMRYwFAYD VQQDEw02N2Y2MDE2ZS1hMWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA473QnDRxNKedERntPVm+QRMIF6mBIs3jcYfoJ0uGd00eBLc/NpEts2mbVB5T 2HgybjeVYDgz4qg8kbm4hIZWJXjdOxXdfhXynTkyy+UgIYDcjEYEpYS+pOFRSr/W p5UQE1GPGWVDMLz1Ocd0lN/3ykcj173ZVrVPiiLF/vr9VdFO7gRNW21gYUe7ZNjz 16QwprYkDp1ocm1Ai6wlfBo1qkJv34UNqJJX15iR9pwUGrm9JZAyiLEEU16wkH+y 6+bQ0VGiYhQ9JzztkAmPr125fJLncSJSyiqrmNmjsjOPjrRgngX5wttwZbim/H2M kn50scdoZG+UdQuZwaalUlgMXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUIoz0h VnTwNXSF2mRvmxpM9WJ3MB8GA1UdIwQYMBaAFOuqTETySJNxSh1bNgotey2GBbFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDRENi9BRDBDQUMxRTMx QTkxMUVGQjZGQjFENjBDNEY5QUUwMi82NnBNUlBKSWszRktIVnMyQ2kxN0xZWUZz V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzY2cE1SUEpJazNGS0hWczJDaTE3TFlZRnNXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDRENi9BRDBDQUMxRTMxQTkxMUVGQjZGQjFENjBDNEY5QUUwMi82NnBNUlBKSWsz RktIVnMyQ2kxN0xZWUZzV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwwJG/wRwXGwLIVvHGq8+DZCc0osQ1c1ZfiUQGJNdY2EaZwRLOvjap XwttxrkBCJRD3wErrDjdMGv9weBxH5opcAnCloUdxbuD/YsxNLTuuUOsd18o9VNB /DrHFmIuRyuXyWr6s2QNKwtJfgII9yqNjMydT1kWDFgEaswLsLYp3kz0BgUahLZe sbU6+132ClGDG5q6h1TS4SWVg+cwYQwX7ZGYyQfBq5mkMuy/6ysNHZzOMlSt8vBp /dU/vBSXpAvZVuTU1iGfqMXTTXPV/VR1MFp/b2R/Fv/H9TJxC8TycFKy6qJOCxVh F0NHgxxGvgEEUp272uV+d1uNz8fFidnS -----END CERTIFICATE-----Generated at Thu Apr 10 23:57:46 2025 by rpki-client