$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft File: C-AoY1W14laYjORU35P8D8p_YEA.mft (raw, json) Hash identifier: Dlvf6ZYfxlFbtvur+1yjSRjXZHeuMBb/1k3fbiapYX8= Subject key identifier: 8F:AF:9D:D9:AA:30:21:AC:48:6B:27:FE:93:66:04:46:F0:D0:6B:77 Authority key identifier: 0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40 Certificate issuer: /CN=A91A1D43/serialNumber=0BE0286355B5E256988CE454DF93FC0FCA7F6040 Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft Manifest number: 0169 Signing time: Thu 03 Apr 2025 03:11:19 +0000 Manifest this update: Thu 03 Apr 2025 03:11:18 +0000 Manifest next update: Thu 10 Apr 2025 03:11:18 +0000 Files and hashes: 1: C-AoY1W14laYjORU35P8D8p_YEA.crl (hash: S+6/0Xozen/oDhNYXa5N6yCSOFkNsYfmMoTeSsq0Qag=) 2: 8BCB2CFAEA3911EDB91E190BC4F9AE02.roa (hash: Gn3bl+JlcAfK7NlSkgTYoj+Bsl8m7KISn3HM2ix+w34=) 3: 8B1BDC14EA3911EDB91E190BC4F9AE02.roa (hash: +iPaNHR0I7CGA19//oU6de8PSF7FBlMHBTXC8ZhTdUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.crl rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1D43 Validity Not Before: Apr 3 03:11:18 2025 GMT Not After : Apr 10 03:11:18 2025 GMT Subject: CN=67edfc57-74a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:85:46:43:58:8b:b2:32:9a:e0:1a:94:1a:d2: 6a:34:0a:8d:ec:2a:ed:0c:4d:8f:43:a1:a9:53:b8: 06:e5:9f:47:13:c0:0f:c8:15:d9:55:45:0d:00:a9: 24:d5:14:32:7a:6f:a9:72:e4:18:1b:7f:50:3f:5f: e6:e2:82:e8:85:e8:59:5e:3a:57:f4:15:28:c9:8b: 1f:c1:09:e8:dc:77:c1:81:2a:4f:ea:ef:d5:6a:c2: 93:21:b1:dd:5c:bf:ba:1a:6d:3a:45:ef:72:2c:11: 5a:ce:19:fc:61:74:4f:12:2d:32:f8:93:69:43:f1: 8f:bd:64:ae:5e:f8:d2:e3:7c:72:a5:cb:89:f6:46: 1f:0d:26:93:84:b3:41:40:c3:70:e6:fd:1f:b3:55: 49:b3:f6:cf:75:2e:ec:33:b9:f8:9c:2f:a2:7a:39: 7f:f4:e4:16:c0:81:84:e6:ee:4d:22:e7:ef:69:2d: d6:57:f6:29:ab:c7:41:54:e2:4d:21:02:41:fa:4f: d2:35:19:f1:b0:dd:87:a2:ac:3c:35:83:13:8d:6a: 91:97:39:f7:93:8e:47:60:82:f4:02:b7:61:7e:17: 2e:87:a4:55:4c:84:8c:eb:e1:eb:85:0d:37:7b:a8: 91:62:10:2c:5c:6e:2f:dd:f8:bd:bf:ae:a6:10:5b: 7d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AF:9D:D9:AA:30:21:AC:48:6B:27:FE:93:66:04:46:F0:D0:6B:77 X509v3 Authority Key Identifier: keyid:0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:45:df:38:fa:17:a9:99:e6:52:4b:e6:a4:2b:e8:0f:81:a7: c8:07:ee:67:d0:96:40:17:a4:61:2a:1c:f7:85:4a:4d:d6:36: 30:77:fb:2a:d6:60:aa:88:d4:8c:69:48:95:84:a7:f4:49:3a: be:49:c2:e5:02:39:97:36:ea:c8:71:4c:a6:cb:3d:b0:b9:90: 27:48:12:33:30:26:cc:d7:f6:04:ae:44:8e:fd:ef:31:d2:5d: 61:44:a9:73:75:1f:9d:88:b7:82:c6:93:03:ac:f4:93:8a:0c: 1a:bd:61:eb:ca:1a:69:27:da:47:9d:6d:6b:14:06:c8:9a:c3: 34:ad:df:99:0b:77:09:ad:72:ab:5c:ae:c5:57:24:5b:3a:30: 3e:19:e3:91:30:66:f8:df:c3:7d:90:a7:b0:6c:c2:d8:64:ce: 78:9a:45:3c:e0:51:d6:f0:73:81:64:2c:e2:5a:a1:87:3c:1e: c1:99:c8:df:30:5b:fd:42:63:07:6a:ac:c3:2f:09:2c:e0:65: 6e:8f:ea:3b:56:b7:2c:ea:14:a3:03:df:ec:a0:39:53:ba:44: a4:d1:02:72:ce:2a:fb:97:d7:aa:cb:2c:a4:10:fe:12:86:72: 25:eb:56:ac:55:e8:86:ec:fc:7a:67:59:ca:0f:85:31:e7:f7: f6:63:1b:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFENDMxMTAvBgNVBAUTKDBCRTAyODYzNTVCNUUyNTY5ODhDRTQ1NERGOTNGQzBG Q0E3RjYwNDAwHhcNMjUwNDAzMDMxMTE4WhcNMjUwNDEwMDMxMTE4WjAYMRYwFAYD VQQDEw02N2VkZmM1Ny03NGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4VGQ1iLsjKa4BqUGtJqNAqN7CrtDE2PQ6GpU7gG5Z9HE8APyBXZVUUNAKkk 1RQyem+pcuQYG39QP1/m4oLohehZXjpX9BUoyYsfwQno3HfBgSpP6u/VasKTIbHd XL+6Gm06Re9yLBFazhn8YXRPEi0y+JNpQ/GPvWSuXvjS43xypcuJ9kYfDSaThLNB QMNw5v0fs1VJs/bPdS7sM7n4nC+iejl/9OQWwIGE5u5NIufvaS3WV/Ypq8dBVOJN IQJB+k/SNRnxsN2Hoqw8NYMTjWqRlzn3k45HYIL0Ardhfhcuh6RVTISM6+HrhQ03 e6iRYhAsXG4v3fi9v66mEFt9jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+vndmq MCGsSGsn/pNmBEbw0Gt3MB8GA1UdIwQYMBaAFAvgKGNVteJWmIzkVN+T/A/Kf2BA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUQ0My84OTI5REZERUVB MjgxMUVEQjdERDAxMThDNEY5QUUwMi9DLUFvWTFXMTRsYVlqT1JVMzVQOEQ4cF9Z RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MtQW9ZMVcxNGxhWWpPUlUzNVA4RDhwX1lFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUQ0My84OTI5REZERUVBMjgxMUVEQjdERDAxMThDNEY5QUUwMi9DLUFvWTFXMTRs YVlqT1JVMzVQOEQ4cF9ZRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyRd84+hepmeZSS+akK+gPgafIB+5n0JZAF6RhKhz3hUpN1jYwd/sq 1mCqiNSMaUiVhKf0STq+ScLlAjmXNurIcUymyz2wuZAnSBIzMCbM1/YErkSO/e8x 0l1hRKlzdR+diLeCxpMDrPSTigwavWHryhppJ9pHnW1rFAbImsM0rd+ZC3cJrXKr XK7FVyRbOjA+GeORMGb438N9kKewbMLYZM54mkU84FHW8HOBZCziWqGHPB7Bmcjf MFv9QmMHaqzDLwks4GVuj+o7Vrcs6hSjA9/soDlTukSk0QJyzir7l9eqyyykEP4S hnIl61asVeiG7Px6Z1nKD4Ux5/f2YxtV -----END CERTIFICATE-----Generated at Fri Apr 4 18:00:42 2025 by rpki-client