$ rpki-client -vvf rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft File: j3AW2iLylktW9Cz0bZ8SOvNoMas.mft (raw, json) Hash identifier: I/7Yb/9xuPZzvep3vTiKY0F27sjKEu1H3CFhuxRoT+o= Subject key identifier: 26:BF:64:0A:3A:20:D4:39:3C:63:31:19:AD:B9:7F:CA:41:08:B7:85 Authority key identifier: 8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB Certificate issuer: /CN=A91884A1/serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft Manifest number: 015A Signing time: Sat 19 Apr 2025 03:20:23 +0000 Manifest this update: Sat 19 Apr 2025 03:20:22 +0000 Manifest next update: Sat 26 Apr 2025 03:20:22 +0000 Files and hashes: 1: j3AW2iLylktW9Cz0bZ8SOvNoMas.crl (hash: 0hfGqFRsZ2pbHosQsxrQJGVS1uwg5WNIevkmui8RZ8E=) 2: 87695D32591811EE973B1058C4F9AE02.roa (hash: dzvekpBIKEZcV3J3iTc2a3q9pWoOoEEAik7qmwT7yrE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 03:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91884A1, serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB Validity Not Before: Apr 19 03:20:22 2025 GMT Not After : Apr 26 03:20:22 2025 GMT Subject: CN=68031676-e0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:28:d3:e6:75:4d:65:3e:97:d9:7e:02:b6:de: e7:2f:34:3b:e2:e6:1f:aa:4b:69:b9:7c:10:24:33: bf:c9:2c:05:2c:71:05:4d:30:ef:79:16:89:ac:01: ef:b3:3d:c1:55:32:55:5c:be:09:4e:5b:43:4d:b6: ce:96:4e:73:d2:70:46:f9:70:fc:db:f7:c7:90:6c: 9c:3f:72:45:36:c1:00:e3:67:6f:1e:60:92:9b:e1: 1a:83:31:b9:e8:98:fb:ab:cc:1d:79:d6:f2:5b:56: 20:8e:2d:d4:00:52:26:08:cd:3f:5a:cd:b7:b0:5a: bf:b2:f0:0d:3b:76:58:d5:01:bc:97:b4:4d:99:b1: 7b:83:4e:9b:db:86:e6:ff:ec:75:49:39:98:50:f1: a0:e0:1c:2b:e6:a0:cd:99:6c:09:2e:85:0f:00:e7: 6b:0a:98:fe:36:5c:84:86:55:19:bd:13:7f:0b:2f: eb:31:28:01:ae:9f:8b:ce:22:ea:90:99:12:03:61: 6c:1f:f3:40:c9:2f:e9:66:02:21:1a:79:2e:13:41: bc:61:f1:e8:0a:82:00:f4:0f:f6:73:36:c0:22:d9: f4:16:90:7f:b6:12:9c:37:67:c9:d4:ec:4d:1c:a6: 93:66:3a:27:8d:69:de:7f:53:85:27:e5:51:33:15: fc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:BF:64:0A:3A:20:D4:39:3C:63:31:19:AD:B9:7F:CA:41:08:B7:85 X509v3 Authority Key Identifier: keyid:8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:4f:19:bf:50:55:6a:71:50:ec:f5:5a:1e:b5:49:85:93:48: fc:f0:34:ac:b3:55:ea:21:e9:97:30:0c:57:5e:b2:be:7a:71: d8:67:f0:2c:60:fc:99:df:8e:e2:4f:68:b7:41:5c:b2:08:9b: c4:13:c6:75:2a:5d:a0:1f:e8:79:e4:0b:a7:db:79:d0:a7:2e: 33:79:d9:9b:69:e9:8c:e3:9e:80:a0:97:e7:8b:11:7e:4e:5c: 5a:50:e7:c0:02:c0:df:bf:88:0a:0d:ae:3e:68:39:46:bf:71: af:7a:71:4b:7d:9e:21:9c:87:50:0d:7e:c0:24:91:95:6b:e8: 6e:2c:69:60:d4:1f:47:c8:0e:b2:3f:b3:35:73:a1:27:d5:5c: 0b:be:d9:b3:f4:d9:39:52:05:d1:5a:82:bc:90:64:9c:50:00: f8:4a:9e:e8:cc:4d:a0:37:c1:6b:c6:50:8c:31:cf:7b:83:d8: 7b:e9:e1:a7:f7:ac:55:63:11:2a:f2:48:33:6a:9a:1e:c1:79: 85:6c:f5:cc:eb:ef:13:d0:cc:b1:53:ee:82:a7:17:32:44:a8: fc:fe:31:33:c0:35:49:e5:13:2d:58:c9:a7:28:93:94:5c:d1: ed:40:32:cd:24:f3:0b:1a:c7:ed:fd:94:da:d5:2b:83:4c:39: 4b:1c:73:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg0QTExMTAvBgNVBAUTKDhGNzAxNkRBMjJGMjk2NEI1NkY0MkNGNDZEOUYxMjNB RjM2ODMxQUIwHhcNMjUwNDE5MDMyMDIyWhcNMjUwNDI2MDMyMDIyWjAYMRYwFAYD VQQDEw02ODAzMTY3Ni1lMGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8SjT5nVNZT6X2X4Ctt7nLzQ74uYfqktpuXwQJDO/ySwFLHEFTTDveRaJrAHv sz3BVTJVXL4JTltDTbbOlk5z0nBG+XD82/fHkGycP3JFNsEA42dvHmCSm+EagzG5 6Jj7q8wdedbyW1Ygji3UAFImCM0/Ws23sFq/svANO3ZY1QG8l7RNmbF7g06b24bm /+x1STmYUPGg4Bwr5qDNmWwJLoUPAOdrCpj+NlyEhlUZvRN/Cy/rMSgBrp+LziLq kJkSA2FsH/NAyS/pZgIhGnkuE0G8YfHoCoIA9A/2czbAItn0FpB/thKcN2fJ1OxN HKaTZjonjWnef1OFJ+VRMxX8YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCa/ZAo6 INQ5PGMxGa25f8pBCLeFMB8GA1UdIwQYMBaAFI9wFtoi8pZLVvQs9G2fEjrzaDGr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODRBMS9EN0RCMUM2MDE0 OUUxMUVFQUJEQzc1MzJDNEY5QUUwMi9qM0FXMmlMeWxrdFc5Q3owYlo4U092Tm9N YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ozQVcyaUx5bGt0VzlDejBiWjhTT3ZOb01hcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODRBMS9EN0RCMUM2MDE0OUUxMUVFQUJEQzc1MzJDNEY5QUUwMi9qM0FXMmlMeWxr dFc5Q3owYlo4U092Tm9NYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkTxm/UFVqcVDs9VoetUmFk0j88DSss1XqIemXMAxXXrK+enHYZ/As YPyZ347iT2i3QVyyCJvEE8Z1Kl2gH+h55Aun23nQpy4zedmbaemM456AoJfnixF+ TlxaUOfAAsDfv4gKDa4+aDlGv3GvenFLfZ4hnIdQDX7AJJGVa+huLGlg1B9HyA6y P7M1c6En1VwLvtmz9Nk5UgXRWoK8kGScUAD4Sp7ozE2gN8FrxlCMMc97g9h76eGn 96xVYxEq8kgzapoewXmFbPXM6+8T0MyxU+6CpxcyRKj8/jEzwDVJ5RMtWMmnKJOU XNHtQDLNJPMLGsft/ZTa1SuDTDlLHHOR -----END CERTIFICATE-----Generated at Sun Apr 20 14:03:35 2025 by rpki-client