$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft File: pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft (raw, json) Hash identifier: lHKSjF9ELKCZ2L+srZ5nIcBdlg0HNram/VT0QNyEd4g= Subject key identifier: C7:BA:84:68:0D:DE:A5:16:BD:B1:A6:76:A6:65:A7:32:00:59:FE:BD Authority key identifier: A4:8C:9B:D4:A5:DB:11:9E:15:43:32:41:36:E0:2E:EA:4B:CA:AF:38 Certificate issuer: /CN=A91A8475/serialNumber=A48C9BD4A5DB119E1543324136E02EEA4BCAAF38 Certificate serial: 01E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft Manifest number: 01DD Signing time: Sat 29 Mar 2025 02:22:44 +0000 Manifest this update: Sat 29 Mar 2025 02:22:43 +0000 Manifest next update: Sat 05 Apr 2025 02:22:43 +0000 Files and hashes: 1: pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl (hash: TvJwwq+WQAk2rEn9wrNFrOFAm2ogpwUI0uQyXm/AbtA=) 2: A4E607B6B1C511EDA095B220C4F9AE02.roa (hash: IaOYa65tPNoGSKOth9OBnqEo5IgGVd7ufuneStp8ah8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 484 (0x1e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8475 Validity Not Before: Mar 29 02:22:43 2025 GMT Not After : Apr 5 02:22:43 2025 GMT Subject: CN=67e75973-c72c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bd:69:4e:2f:79:6b:45:35:94:1f:d6:e9:e5: 9f:db:2f:7c:b2:1d:03:02:9c:b2:4a:15:8d:05:ae: 84:36:de:da:7c:45:fa:fa:1a:fc:73:f3:f3:44:34: 34:5f:ba:15:b4:65:ef:af:ec:24:56:0a:5a:42:5b: 39:9d:a6:87:cb:f5:b6:1f:56:39:52:6b:2e:0b:8e: 08:27:b0:cf:a8:83:b5:1e:46:9b:6f:7e:10:35:93: 8b:7b:de:46:85:dc:7a:50:57:ba:08:06:12:f7:f1: 96:4b:ec:13:a1:6e:ac:e0:74:0a:12:4f:e2:69:f9: 93:74:4d:2a:27:4e:d6:92:d2:38:1c:eb:c4:2b:d2: f6:5b:36:77:3b:bd:05:38:72:64:1f:93:a8:fd:58: 50:7c:a8:d7:14:83:a0:d0:ce:43:ab:29:ea:23:90: a7:3b:78:ce:36:d7:f1:58:55:b1:22:a2:1b:e1:1c: ef:51:b8:ee:ac:3f:99:2d:e6:cb:bf:48:89:ee:0e: 6b:8f:6c:03:48:f3:c3:a7:2e:a4:82:b6:8c:aa:17: eb:87:d9:13:b6:93:08:12:df:42:ed:1c:3c:9f:f9: 5d:e0:c9:6d:8c:ac:c1:b5:4a:54:4f:ba:9d:11:c5: d8:4c:2c:90:de:bf:f0:8a:02:a0:5c:c4:23:f0:e2: d4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:BA:84:68:0D:DE:A5:16:BD:B1:A6:76:A6:65:A7:32:00:59:FE:BD X509v3 Authority Key Identifier: keyid:A4:8C:9B:D4:A5:DB:11:9E:15:43:32:41:36:E0:2E:EA:4B:CA:AF:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:08:9e:ad:9b:7f:af:12:c2:e1:04:2c:7a:fd:a0:02:62:aa: 5b:91:27:4a:b3:97:4c:f7:07:04:ab:64:bd:af:f5:8a:80:6f: cc:cc:6a:20:85:60:06:f7:98:3c:07:53:54:9a:0f:dc:87:c1: 48:54:73:39:b6:6a:03:9b:ff:67:4e:4b:38:85:f2:81:f6:a9: 89:68:ea:eb:5e:e9:33:06:8b:8f:e5:a8:4a:45:8b:a7:70:b3: 2e:42:a3:9b:7d:24:47:27:c9:ef:ad:03:7d:67:61:c9:31:1a: e6:88:74:68:c4:a0:7e:eb:be:ac:13:57:0b:65:ff:a2:6e:eb: 75:c9:09:78:8c:00:19:11:b6:2c:f2:06:23:0b:35:c6:35:6f: 69:dd:be:87:28:82:7c:9c:59:c4:6c:0e:cf:82:53:2e:1a:4d: ab:12:81:2a:3b:29:f9:56:39:86:a1:d0:10:9f:79:d8:0e:9b: 69:be:2b:ac:16:e6:0c:eb:08:d1:02:25:db:3b:26:fb:65:75: a6:9a:35:eb:57:20:ad:49:3c:c6:50:b4:fc:3c:97:bb:73:fb: 1f:97:ee:43:7b:eb:86:68:8d:d5:fe:7a:f5:f3:6f:a3:64:60: e8:fd:c3:a3:65:46:1c:f7:16:6f:0f:ae:f2:c1:92:20:5c:57: 32:a8:65:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg0NzUxMTAvBgNVBAUTKEE0OEM5QkQ0QTVEQjExOUUxNTQzMzI0MTM2RTAyRUVB NEJDQUFGMzgwHhcNMjUwMzI5MDIyMjQzWhcNMjUwNDA1MDIyMjQzWjAYMRYwFAYD VQQDEw02N2U3NTk3My1jNzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArb1pTi95a0U1lB/W6eWf2y98sh0DApyyShWNBa6ENt7afEX6+hr8c/PzRDQ0 X7oVtGXvr+wkVgpaQls5naaHy/W2H1Y5UmsuC44IJ7DPqIO1Hkabb34QNZOLe95G hdx6UFe6CAYS9/GWS+wToW6s4HQKEk/iafmTdE0qJ07WktI4HOvEK9L2WzZ3O70F OHJkH5Oo/VhQfKjXFIOg0M5DqynqI5CnO3jONtfxWFWxIqIb4RzvUbjurD+ZLebL v0iJ7g5rj2wDSPPDpy6kgraMqhfrh9kTtpMIEt9C7Rw8n/ld4MltjKzBtUpUT7qd EcXYTCyQ3r/wigKgXMQj8OLUiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMe6hGgN 3qUWvbGmdqZlpzIAWf69MB8GA1UdIwQYMBaAFKSMm9Sl2xGeFUMyQTbgLupLyq84 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQ3NS82QjY1ODJGMjNF RjAxMUVEQTFGMzA1MUFDNEY5QUUwMi9wSXliMUtYYkVaNFZRekpCTnVBdTZrdkty emcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BJeWIxS1hiRVo0VlF6SkJOdUF1Nmt2S3J6Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODQ3NS82QjY1ODJGMjNFRjAxMUVEQTFGMzA1MUFDNEY5QUUwMi9wSXliMUtYYkVa NFZRekpCTnVBdTZrdktyemcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6CJ6tm3+vEsLhBCx6/aACYqpbkSdKs5dM9wcEq2S9r/WKgG/MzGog hWAG95g8B1NUmg/ch8FIVHM5tmoDm/9nTks4hfKB9qmJaOrrXukzBouP5ahKRYun cLMuQqObfSRHJ8nvrQN9Z2HJMRrmiHRoxKB+676sE1cLZf+ibut1yQl4jAAZEbYs 8gYjCzXGNW9p3b6HKIJ8nFnEbA7PglMuGk2rEoEqOyn5VjmGodAQn3nYDptpvius FuYM6wjRAiXbOyb7ZXWmmjXrVyCtSTzGULT8PJe7c/sfl+5De+uGaI3V/nr182+j ZGDo/cOjZUYc9xZvD67ywZIgXFcyqGUS -----END CERTIFICATE-----Generated at Fri Apr 4 22:37:01 2025 by rpki-client