$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft File: mraG48KZqn5EVUk0lbRrpadECZ0.mft (raw, json) Hash identifier: Sjn8ZwRuDtpu1kxb+80C31RXkYn3Ui6WMXmJ+kJMFvs= Subject key identifier: C8:B2:0A:E5:5F:5E:84:08:73:77:DE:D1:7E:93:2D:86:C9:DF:FB:7C Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D Certificate issuer: /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft Manifest number: 011C Signing time: Mon 07 Apr 2025 03:44:13 +0000 Manifest this update: Mon 07 Apr 2025 03:44:13 +0000 Manifest next update: Mon 14 Apr 2025 03:44:13 +0000 Files and hashes: 1: mraG48KZqn5EVUk0lbRrpadECZ0.crl (hash: Nh5EQUuHW49OHh7h3rjc3fPtTDBc9Qxv59FgfmWXnog=) 2: D633730A5AD711EF8665FF81C4F9AE02.roa (hash: qDjDjx/58q+LWkw/PFVn1wwvsxzD4HwajEOfZNh5ZU0=) 3: D6A69CF45AD711EF8665FF81C4F9AE02.roa (hash: bQFYc9TGCv39aWTUTfzRcDtHtMAg4CgWesOizIV+Kko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 03:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6D8B Validity Not Before: Apr 7 03:44:13 2025 GMT Not After : Apr 14 03:44:13 2025 GMT Subject: CN=67f34a0d-1b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e1:86:df:f6:96:98:71:18:c2:5c:a2:54:48: cb:99:bd:b1:d0:bf:cb:4a:1d:0f:0d:49:96:3b:93: 28:89:58:0c:db:c1:87:83:7c:86:35:40:53:14:85: 72:71:52:87:7d:ca:08:49:d3:7e:ec:6e:e4:54:98: b4:31:ad:f9:7b:6a:34:b9:98:de:18:dc:29:95:75: de:da:0c:5d:47:0c:4a:89:ff:8c:5b:45:86:69:0d: 8f:da:b6:64:8d:72:41:5c:77:e7:88:3d:e9:50:db: 16:10:3d:e2:16:d2:3e:ce:67:3c:88:11:f4:75:92: f8:86:6e:8e:fb:f5:11:36:d2:7d:0f:43:45:95:30: cd:c4:1a:bf:03:51:dc:6f:1f:88:36:1d:2d:8d:a8: 00:81:b2:df:c9:f3:4b:c5:87:62:68:f5:80:95:51: 9e:b8:51:13:f1:c2:27:42:9a:9f:19:45:63:38:f2: 64:5f:de:0c:68:2a:42:a2:1e:8c:c7:a5:de:72:06: 75:9c:6d:5e:73:12:23:64:7a:82:25:5b:a8:4b:8f: cf:8b:b1:10:2a:31:17:21:92:1b:60:60:8a:db:12: 4e:53:bb:40:11:cf:70:d9:34:a8:f1:ad:e3:69:e4: 99:30:f0:b9:e0:df:7b:57:6c:43:b5:70:97:e6:80: 4e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B2:0A:E5:5F:5E:84:08:73:77:DE:D1:7E:93:2D:86:C9:DF:FB:7C X509v3 Authority Key Identifier: keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:7d:b4:c4:ef:02:20:36:30:84:4f:26:c3:3e:54:e2:60:2c: f0:07:d9:a4:f8:fb:71:59:7c:d8:aa:a2:e7:30:e4:13:30:7b: 4d:aa:ce:6b:11:71:34:dc:24:a6:9f:bb:20:47:2f:77:2a:6d: 9c:0f:e6:f1:32:b7:32:6b:56:a8:45:97:af:10:a6:bb:bd:b0: 28:d7:27:d7:fd:91:fb:d5:78:d5:87:b6:05:9e:bc:ca:d2:5e: 04:ab:ee:8d:37:6c:e7:0c:45:61:07:11:8a:ab:e0:c3:f7:9c: 7a:d6:36:6d:fe:f1:95:2c:80:4f:00:e0:eb:01:3f:f3:00:d7: a1:9d:de:53:00:23:da:93:c6:f0:9a:d4:61:e2:ae:23:04:c1: 13:a9:95:fb:37:6f:90:a8:b9:07:05:8f:b2:34:63:bd:34:41: 59:f9:d6:a5:2c:bc:5a:d3:6c:6f:25:91:84:4b:e5:ab:58:f8: 65:53:28:24:12:80:62:0b:76:14:c3:6d:c6:49:11:33:64:83: 83:1c:e6:1d:b2:67:47:40:a8:28:12:a6:aa:2e:92:a7:c7:13: d6:36:a7:ff:94:a8:5e:72:f3:4b:47:08:3b:90:f5:6d:00:ab: ad:e2:c2:23:26:3b:c7:ba:1c:c4:db:d1:ca:65:a6:cb:63:f2: 62:05:47:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZEOEIxMTAvBgNVBAUTKDlBQjY4NkUzQzI5OUFBN0U0NDU1NDkzNDk1QjQ2QkE1 QTc0NDA5OUQwHhcNMjUwNDA3MDM0NDEzWhcNMjUwNDE0MDM0NDEzWjAYMRYwFAYD VQQDEw02N2YzNGEwZC0xYjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8OGG3/aWmHEYwlyiVEjLmb2x0L/LSh0PDUmWO5MoiVgM28GHg3yGNUBTFIVy cVKHfcoISdN+7G7kVJi0Ma35e2o0uZjeGNwplXXe2gxdRwxKif+MW0WGaQ2P2rZk jXJBXHfniD3pUNsWED3iFtI+zmc8iBH0dZL4hm6O+/URNtJ9D0NFlTDNxBq/A1Hc bx+INh0tjagAgbLfyfNLxYdiaPWAlVGeuFET8cInQpqfGUVjOPJkX94MaCpCoh6M x6XecgZ1nG1ecxIjZHqCJVuoS4/Pi7EQKjEXIZIbYGCK2xJOU7tAEc9w2TSo8a3j aeSZMPC54N97V2xDtXCX5oBO8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMiyCuVf XoQIc3fe0X6TLYbJ3/t8MB8GA1UdIwQYMBaAFJq2huPCmap+RFVJNJW0a6WnRAmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkQ4Qi9CMkYyMzVCMjY3 MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFuNUVWVWswbGJScnBhZEVD WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21yYUc0OEtacW41RVZVazBsYlJycGFkRUNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkQ4Qi9CMkYyMzVCMjY3MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFu NUVWVWswbGJScnBhZEVDWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByfbTE7wIgNjCETybDPlTiYCzwB9mk+PtxWXzYqqLnMOQTMHtNqs5r EXE03CSmn7sgRy93Km2cD+bxMrcya1aoRZevEKa7vbAo1yfX/ZH71XjVh7YFnrzK 0l4Eq+6NN2znDEVhBxGKq+DD95x61jZt/vGVLIBPAODrAT/zANehnd5TACPak8bw mtRh4q4jBMETqZX7N2+QqLkHBY+yNGO9NEFZ+dalLLxa02xvJZGES+WrWPhlUygk EoBiC3YUw23GSREzZIODHOYdsmdHQKgoEqaqLpKnxxPWNqf/lKhecvNLRwg7kPVt AKut4sIjJjvHuhzE29HKZabLY/JiBUfO -----END CERTIFICATE-----Generated at Tue Apr 8 15:03:28 2025 by rpki-client