$ rpki-client -vvf rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft File: u6vT8W4QD9nJXUdIhOTanLb6do0.mft (raw, json) Hash identifier: daFpCK++qSppSrWjWdCbwZgf+jIXys7cxgv68gjlOME= Subject key identifier: 09:44:FC:31:5B:82:6C:90:3A:AD:AC:66:FC:58:2F:69:64:50:DB:28 Authority key identifier: BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D Certificate issuer: /CN=A91886E3/serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft Manifest number: 01BD Signing time: Thu 03 Apr 2025 02:21:57 +0000 Manifest this update: Thu 03 Apr 2025 02:21:56 +0000 Manifest next update: Thu 10 Apr 2025 02:21:56 +0000 Files and hashes: 1: u6vT8W4QD9nJXUdIhOTanLb6do0.crl (hash: 9r5wPoMESwh+sDCapiOHl1JWbG0a81ap+/xICLYFhdg=) 2: 60820A4271AC11EDAA89DE61C4F9AE02.roa (hash: d6lR5DCUUt64f3jfT2Upe1NvnvCxTNK9tDR0OuYVOnY=) 3: 61141C1671AC11EDAA89DE61C4F9AE02.roa (hash: Wx96a0pCwu7Is08OfwVpC7A3eb6MBe8Us9jhb4i3wps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886E3 Validity Not Before: Apr 3 02:21:56 2025 GMT Not After : Apr 10 02:21:56 2025 GMT Subject: CN=67edf0c4-b2db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2c:29:fb:5c:cc:2d:67:d7:d2:7f:4a:c0:63: 29:af:20:04:03:24:17:d6:af:65:41:0b:22:1f:8f: 32:b9:a8:4b:a9:e6:85:fe:75:f7:83:6c:1b:5d:53: ee:5a:c7:6d:06:4c:35:21:b0:39:2c:b2:ae:e6:51: 03:8d:11:5c:bc:6a:49:84:3c:e3:6a:dc:36:3b:3a: 25:8a:cd:59:f1:2d:f8:43:50:79:75:61:4f:ca:1b: e0:80:19:08:77:d9:15:bc:9b:cf:cc:29:9e:5a:0f: 01:e8:4f:08:4d:7c:e6:d1:2c:43:d4:a4:4f:61:9e: c2:e2:d3:01:3d:93:fa:85:19:08:21:e3:ee:12:11: 17:ec:87:51:b3:7e:1b:f4:01:4b:bb:ff:e4:2c:34: 68:5a:5a:62:d6:89:d2:3e:ee:dd:d7:35:83:0e:61: ab:2f:19:a5:56:c2:84:05:a7:ad:05:34:7f:89:f2: aa:c1:ac:a7:13:37:6b:88:c1:c0:4a:3e:61:41:ba: cc:05:c1:f3:ec:10:83:b3:8f:4a:9a:d0:36:b6:3c: e6:1b:46:30:06:e6:fc:06:74:5b:ca:7c:3f:97:63: cc:d1:e8:12:8a:d5:30:00:4d:d0:42:34:42:f7:cc: dd:99:2f:fb:f4:ec:77:2a:6b:00:5c:53:a6:02:5e: d2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:44:FC:31:5B:82:6C:90:3A:AD:AC:66:FC:58:2F:69:64:50:DB:28 X509v3 Authority Key Identifier: keyid:BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:81:77:81:71:51:d6:7a:c7:b0:45:05:25:42:f6:b7:bf:e9: ea:f1:0d:e2:ca:f9:a0:01:9f:fa:d6:e7:f2:79:bb:5a:e3:c3: 1a:e4:76:e4:27:de:ef:39:af:96:38:e1:48:79:65:21:e7:d6: 58:8b:3d:59:03:90:7a:e4:7d:ea:48:da:dd:1b:5a:82:bc:ff: 19:cf:91:59:ee:26:43:f9:78:01:28:9e:89:d3:e2:55:4c:47: 4b:3a:63:d3:d9:6f:af:b2:ee:59:fb:1d:6d:63:8d:f6:fe:b2: 50:f1:48:8d:24:86:7c:80:49:2c:1a:f7:dc:3a:f1:3d:ae:b2: 52:3a:e4:8f:34:e8:5d:b1:9d:3b:a5:cb:42:8a:01:f1:50:4a: 12:c0:d7:7f:ce:28:93:6e:2a:7a:42:7e:6d:a5:e2:ae:ad:35: 1f:65:67:d8:92:27:aa:71:07:b7:05:12:36:ce:11:0e:76:75: 96:93:92:c7:dc:ce:a3:0c:5f:9e:ae:9a:ac:26:d4:08:ee:c4: 31:5d:d5:b5:e5:0a:4a:8c:0e:e8:9d:6b:d2:46:0f:91:5f:1c: 95:1e:8d:e6:04:3a:b0:7f:b7:5d:dd:83:91:42:1c:f2:99:08: 7c:82:b6:1f:83:45:99:09:38:45:86:a3:30:29:16:11:f6:ad: 6c:a9:81:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2RTMxMTAvBgNVBAUTKEJCQUJEM0YxNkUxMDBGRDlDOTVENDc0ODg0RTREQTlD QjZGQTc2OEQwHhcNMjUwNDAzMDIyMTU2WhcNMjUwNDEwMDIyMTU2WjAYMRYwFAYD VQQDEw02N2VkZjBjNC1iMmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAziwp+1zMLWfX0n9KwGMpryAEAyQX1q9lQQsiH48yuahLqeaF/nX3g2wbXVPu WsdtBkw1IbA5LLKu5lEDjRFcvGpJhDzjatw2Ozolis1Z8S34Q1B5dWFPyhvggBkI d9kVvJvPzCmeWg8B6E8ITXzm0SxD1KRPYZ7C4tMBPZP6hRkIIePuEhEX7IdRs34b 9AFLu//kLDRoWlpi1onSPu7d1zWDDmGrLxmlVsKEBaetBTR/ifKqwaynEzdriMHA Sj5hQbrMBcHz7BCDs49KmtA2tjzmG0YwBub8BnRbynw/l2PM0egSitUwAE3QQjRC 98zdmS/79Ox3KmsAXFOmAl7SfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlE/DFb gmyQOq2sZvxYL2lkUNsoMB8GA1UdIwQYMBaAFLur0/FuEA/ZyV1HSITk2py2+naN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZFMy8xMjQ3Qjg2MDY2 OTIxMUVEODJCRTcxMzNDNEY5QUUwMi91NnZUOFc0UUQ5bkpYVWRJaE9UYW5MYjZk bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U2dlQ4VzRRRDluSlhVZEloT1RhbkxiNmRvMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZFMy8xMjQ3Qjg2MDY2OTIxMUVEODJCRTcxMzNDNEY5QUUwMi91NnZUOFc0UUQ5 bkpYVWRJaE9UYW5MYjZkbzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAegXeBcVHWesewRQUlQva3v+nq8Q3iyvmgAZ/61ufyebta48Ma5Hbk J97vOa+WOOFIeWUh59ZYiz1ZA5B65H3qSNrdG1qCvP8Zz5FZ7iZD+XgBKJ6J0+JV TEdLOmPT2W+vsu5Z+x1tY432/rJQ8UiNJIZ8gEksGvfcOvE9rrJSOuSPNOhdsZ07 pctCigHxUEoSwNd/ziiTbip6Qn5tpeKurTUfZWfYkieqcQe3BRI2zhEOdnWWk5LH 3M6jDF+erpqsJtQI7sQxXdW15QpKjA7onWvSRg+RXxyVHo3mBDqwf7dd3YORQhzy mQh8grYfg0WZCThFhqMwKRYR9q1sqYFi -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:05 2025 by rpki-client