$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft File: AkIpyBrDU1oh1g4twyqbiL1q2B8.mft (raw, json) Hash identifier: Jm8op6SKNjBTzqoMh+QeIdR78T6TkKaz9y1rTAL+rdc= Subject key identifier: 56:FF:CE:87:EA:E3:AD:36:47:E3:14:AB:66:F8:28:74:A7:C6:C5:B2 Authority key identifier: 02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F Certificate issuer: /CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft Manifest number: 01BC Signing time: Sat 29 Mar 2025 02:44:44 +0000 Manifest this update: Sat 29 Mar 2025 02:44:44 +0000 Manifest next update: Sat 05 Apr 2025 02:44:44 +0000 Files and hashes: 1: AkIpyBrDU1oh1g4twyqbiL1q2B8.crl (hash: 0dgQwgHf2YvxbhrDUjB5jWQZpb05oMgLnsnqrGk5MuU=) 2: 0FBB769A5DDB11EEAEEA437DC4F9AE02.roa (hash: uKjzis/CrgsSg2LUM/lsbZTCdaGZHhh4O1b0+pc2P3M=) 3: B9D00D3C195A11EE83248835C4F9AE02.roa (hash: wCL8taH4LIUOWXKWcvReDaNZ3+NnYlOsUT+x4rsuWPo=) 4: DE56B490143611EEAB1A5D73C4F9AE02.roa (hash: 3IVp9MXxKURZzAWVcJ2+aQ10UWSD+/QnsDWHqJYEcQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:44:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0848 Validity Not Before: Mar 29 02:44:44 2025 GMT Not After : Apr 5 02:44:44 2025 GMT Subject: CN=67e75e9c-1c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:72:4b:7e:ad:a2:0d:73:45:57:8e:58:7b:23: 89:d5:77:b0:ce:ee:31:7f:b3:35:2b:03:27:11:c4: a3:a0:8a:28:36:9e:33:5f:63:1c:ff:a7:99:a9:5f: f8:49:a3:f9:66:bd:0e:39:9f:5d:c2:f5:62:6d:39: 3b:5b:97:33:67:7a:a4:83:45:d7:83:71:ea:ea:97: 53:de:38:8c:8a:bc:d7:98:12:a2:55:b1:0f:00:ee: a9:d1:d5:f0:bf:77:b7:b2:89:0d:a6:90:b0:ec:4a: 23:cb:2c:a5:50:e3:74:e2:d1:1a:2f:f2:12:df:42: 12:f6:71:0e:c7:18:a9:8f:09:67:d0:03:b9:78:b8: d9:c2:4f:30:0e:e0:d9:4c:b0:ff:28:12:8b:0e:b8: 57:ee:8d:ec:8e:cb:75:28:54:a1:86:cc:23:0c:f0: 95:d4:10:02:72:4a:57:8f:08:53:da:97:80:e4:92: 81:3a:9c:0c:91:fc:73:df:56:2e:1d:f7:53:ac:90: ac:7f:fc:b0:69:a9:59:cf:2b:39:7a:5b:b5:f4:d5: 21:38:fd:a8:72:eb:2f:da:8e:9b:23:93:f6:97:55: 30:f0:a0:4c:09:6e:18:d4:58:92:92:b3:15:2a:2d: c3:62:e1:1f:88:0a:e7:98:db:e6:88:d0:f6:97:c9: 16:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:FF:CE:87:EA:E3:AD:36:47:E3:14:AB:66:F8:28:74:A7:C6:C5:B2 X509v3 Authority Key Identifier: keyid:02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:6e:ee:b6:53:d9:57:85:fd:c1:b0:5b:c8:75:77:d6:fb:7a: 9a:8d:38:5e:21:82:55:10:5c:90:da:23:0c:31:6e:01:a2:80: 6d:95:91:f6:3f:10:e2:55:c4:dd:d5:a6:82:ca:30:7f:e9:85: d3:c9:5c:da:43:a7:ed:8c:10:3d:1d:5f:1f:b2:4c:94:4a:6c: 42:d9:b2:2d:10:71:d3:ce:70:73:16:be:d7:86:4c:f1:53:1b: 4a:51:85:94:95:e9:86:12:a2:11:87:70:cc:12:1e:53:a0:f5: 03:0c:58:75:aa:f7:22:e4:a5:d0:18:4b:d1:2e:81:68:d7:04: 15:f7:63:ad:30:64:36:4b:a3:d6:52:37:10:9d:3f:a3:f7:af: f7:af:d7:28:de:c8:e8:d8:3a:31:11:98:6a:f2:39:71:36:b6: 33:a1:3c:11:53:c7:5f:18:f8:f1:af:47:e3:a1:bc:71:f7:ef: 80:ff:86:1c:d3:ad:06:a1:4b:1d:b9:12:8a:fc:77:c2:bb:1f: 68:4f:e6:70:a2:bb:c4:b9:6d:35:53:e4:a4:48:c3:3f:a6:e9: eb:c0:86:0a:38:77:78:1b:a6:64:7c:78:f7:e1:c3:ac:94:d9: 9d:7b:de:9e:fd:22:ac:8b:43:4b:d0:de:b3:e0:ed:7a:5c:90: 20:69:fc:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4NDgxMTAvBgNVBAUTKDAyNDIyOUM4MUFDMzUzNUEyMUQ2MEUyREMzMkE5Qjg4 QkQ2QUQ4MUYwHhcNMjUwMzI5MDI0NDQ0WhcNMjUwNDA1MDI0NDQ0WjAYMRYwFAYD VQQDEw02N2U3NWU5Yy0xYzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9HJLfq2iDXNFV45YeyOJ1Xewzu4xf7M1KwMnEcSjoIooNp4zX2Mc/6eZqV/4 SaP5Zr0OOZ9dwvVibTk7W5czZ3qkg0XXg3Hq6pdT3jiMirzXmBKiVbEPAO6p0dXw v3e3sokNppCw7EojyyylUON04tEaL/IS30IS9nEOxxipjwln0AO5eLjZwk8wDuDZ TLD/KBKLDrhX7o3sjst1KFShhswjDPCV1BACckpXjwhT2peA5JKBOpwMkfxz31Yu HfdTrJCsf/ywaalZzys5elu19NUhOP2ocusv2o6bI5P2l1Uw8KBMCW4Y1FiSkrMV Ki3DYuEfiArnmNvmiND2l8kWqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFb/zofq 4602R+MUq2b4KHSnxsWyMB8GA1UdIwQYMBaAFAJCKcgaw1NaIdYOLcMqm4i9atgf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDg0OC82NEQ4QjFERTc3 RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUxb2gxZzR0d3lxYmlMMXEy QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FrSXB5QnJEVTFvaDFnNHR3eXFiaUwxcTJCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDg0OC82NEQ4QjFERTc3RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUx b2gxZzR0d3lxYmlMMXEyQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8bu62U9lXhf3BsFvIdXfW+3qajTheIYJVEFyQ2iMMMW4BooBtlZH2 PxDiVcTd1aaCyjB/6YXTyVzaQ6ftjBA9HV8fskyUSmxC2bItEHHTznBzFr7Xhkzx UxtKUYWUlemGEqIRh3DMEh5ToPUDDFh1qvci5KXQGEvRLoFo1wQV92OtMGQ2S6PW UjcQnT+j96/3r9co3sjo2DoxEZhq8jlxNrYzoTwRU8dfGPjxr0fjobxx9++A/4Yc 060GoUsduRKK/HfCux9oT+ZworvEuW01U+SkSMM/punrwIYKOHd4G6ZkfHj34cOs lNmde96e/SKsi0NL0N6z4O16XJAgafzJ -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:57 2025 by rpki-client