$ rpki-client -vvf rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft File: _ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft (raw, json) Hash identifier: xbOODLa5y5Mk2hYca9CE6MVM05+jr1QSDdt+XVL4+WQ= Subject key identifier: 65:10:AD:B4:7E:7F:DC:B4:D5:37:4B:05:59:EF:93:DB:51:4B:11:D1 Authority key identifier: FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6 Certificate issuer: /CN=A91820AF/serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6 Certificate serial: 0654 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft Manifest number: 064D Signing time: Fri 04 Apr 2025 22:37:45 +0000 Manifest this update: Fri 04 Apr 2025 22:37:45 +0000 Manifest next update: Fri 11 Apr 2025 22:37:45 +0000 Files and hashes: 1: _ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl (hash: PgbA8jOEP59MkEF20DIrIQFbBUJJkJBo8tWSsvp7Idk=) 2: D4DE5FF8A01F11EC87D72549C4F9AE02.roa (hash: 87anj6ScVkwh+H5EUFqHglOTYr+0YgLiGreNRecvlKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1620 (0x654) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91820AF Validity Not Before: Apr 4 22:37:45 2025 GMT Not After : Apr 11 22:37:45 2025 GMT Subject: CN=67f05f39-5479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:17:3e:6d:da:83:6e:22:3f:55:75:1f:7b:ef: 1d:b8:82:04:74:19:84:c9:10:41:3b:99:54:7b:cf: 42:69:77:e2:46:18:83:0f:9d:9e:61:65:de:37:15: 97:b5:ea:9e:1b:56:2d:a4:f0:73:d4:23:d9:74:fa: 9c:61:b9:45:fd:a4:66:20:e5:ff:bd:3a:b1:04:3e: e9:e3:aa:fe:7b:f1:c5:c9:bf:d3:9a:24:b8:49:40: 07:e5:98:8a:65:31:a9:c4:8e:89:53:25:1d:e4:9b: d2:e6:82:1c:86:bd:4f:be:25:6d:57:d4:42:89:90: cf:ca:0a:4c:87:27:55:f8:be:6e:09:b2:80:cb:fd: e4:74:f7:d8:74:a2:3e:f8:60:ba:12:0c:0f:20:e7: a3:f8:8c:34:43:78:54:7c:2e:e0:50:ed:03:11:32: 11:9c:4d:7a:07:fa:90:c9:44:91:bd:c6:0d:d7:e9: 57:60:c1:ec:2e:c4:e6:d4:a8:b7:aa:f8:44:e1:70: a7:af:5f:18:fb:47:f7:ef:3f:96:a8:11:98:e8:9a: df:61:73:1c:62:92:fc:88:c7:ca:49:09:b9:a9:43: a7:08:41:ae:4e:31:e4:28:8b:76:0b:0e:e4:87:7e: c0:c7:25:69:17:09:39:cf:70:6a:34:1c:f0:7b:35: e6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:10:AD:B4:7E:7F:DC:B4:D5:37:4B:05:59:EF:93:DB:51:4B:11:D1 X509v3 Authority Key Identifier: keyid:FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:17:9b:b9:3f:f0:1c:c1:26:b0:81:60:d9:b6:ce:1e:bd:48: ac:c5:8b:fb:ec:42:db:b5:ae:8b:6d:0b:c7:9f:3b:07:7e:9c: c1:f9:57:88:97:53:bb:90:08:ae:43:be:5d:ef:c8:2f:12:5d: 2f:c3:20:46:2f:5f:4e:e1:c7:2b:73:73:46:63:a8:d1:40:89: 3c:41:99:90:56:95:a6:95:e9:f5:87:40:c9:33:db:ec:dd:a4: 9a:fb:c4:22:01:14:09:cc:e2:5d:63:22:37:95:8e:94:76:1a: 29:40:02:d6:32:4e:cd:a8:5f:00:d8:2b:be:94:71:61:89:82: 6a:9e:68:c7:e5:ae:6c:51:d7:82:3d:66:94:6e:bc:31:6a:3b: 5f:14:96:65:1b:69:09:b1:da:e4:19:c6:2b:c5:cb:56:09:63: 4c:5a:f9:72:59:9c:8d:9a:6d:fb:13:d6:f4:5d:47:eb:4a:62: 96:08:06:61:a5:da:42:62:a2:65:38:6a:8d:cb:08:2b:e4:62: a8:1b:51:25:45:8c:d0:b5:3c:02:0f:64:48:54:40:b7:c3:46: 2b:a1:04:31:d6:25:91:f4:ef:f7:b0:d9:b7:d1:ef:69:78:39: cc:f2:69:51:6e:2b:17:cb:a2:f8:45:c4:f8:f0:aa:c7:cc:9e: 48:b6:84:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIwQUYxMTAvBgNVBAUTKEZFMkE0OTM5OEU2NTAwNkIwNkU5REZFQzI3MERFMkU5 NzZGOEFBRjYwHhcNMjUwNDA0MjIzNzQ1WhcNMjUwNDExMjIzNzQ1WjAYMRYwFAYD VQQDEw02N2YwNWYzOS01NDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1hc+bdqDbiI/VXUfe+8duIIEdBmEyRBBO5lUe89CaXfiRhiDD52eYWXeNxWX teqeG1YtpPBz1CPZdPqcYblF/aRmIOX/vTqxBD7p46r+e/HFyb/TmiS4SUAH5ZiK ZTGpxI6JUyUd5JvS5oIchr1PviVtV9RCiZDPygpMhydV+L5uCbKAy/3kdPfYdKI+ +GC6EgwPIOej+Iw0Q3hUfC7gUO0DETIRnE16B/qQyUSRvcYN1+lXYMHsLsTm1Ki3 qvhE4XCnr18Y+0f37z+WqBGY6JrfYXMcYpL8iMfKSQm5qUOnCEGuTjHkKIt2Cw7k h37AxyVpFwk5z3BqNBzwezXmVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUQrbR+ f9y01TdLBVnvk9tRSxHRMB8GA1UdIwQYMBaAFP4qSTmOZQBrBunf7CcN4ul2+Kr2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjBBRi8wRUYzREZBNDgw N0ExMUVCQkQwRThENThDNEY5QUUwMi9faXBKT1k1bEFHc0c2ZF9zSnczaTZYYjRx dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19pcEpPWTVsQUdzRzZkX3NKdzNpNlhiNHF2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjBBRi8wRUYzREZBNDgwN0ExMUVCQkQwRThENThDNEY5QUUwMi9faXBKT1k1bEFH c0c2ZF9zSnczaTZYYjRxdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWF5u5P/AcwSawgWDZts4evUisxYv77ELbta6LbQvHnzsHfpzB+VeI l1O7kAiuQ75d78gvEl0vwyBGL19O4ccrc3NGY6jRQIk8QZmQVpWmlen1h0DJM9vs 3aSa+8QiARQJzOJdYyI3lY6UdhopQALWMk7NqF8A2Cu+lHFhiYJqnmjH5a5sUdeC PWaUbrwxajtfFJZlG2kJsdrkGcYrxctWCWNMWvlyWZyNmm37E9b0XUfrSmKWCAZh pdpCYqJlOGqNywgr5GKoG1ElRYzQtTwCD2RIVEC3w0YroQQx1iWR9O/3sNm30e9p eDnM8mlRbisXy6L4RcT48KrHzJ5ItoQ6 -----END CERTIFICATE-----Generated at Sun Apr 6 01:18:37 2025 by rpki-client