$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft File: j11eWHmnUVjyz_syrdlEcfl0GD8.mft (raw, json) Hash identifier: VPyq2kR2BBMtAm1BZ5ZRQG9NEIshhPzqYAOzzr80voE= Subject key identifier: 9E:B6:3E:DB:BB:3E:1A:83:11:E6:A4:BF:D4:07:69:13:27:24:20:2F Authority key identifier: 8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F Certificate issuer: /CN=A91ABEAC/serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F Certificate serial: 028D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft Manifest number: 0289 Signing time: Wed 09 Apr 2025 01:15:34 +0000 Manifest this update: Wed 09 Apr 2025 01:15:33 +0000 Manifest next update: Wed 16 Apr 2025 01:15:33 +0000 Files and hashes: 1: j11eWHmnUVjyz_syrdlEcfl0GD8.crl (hash: LGyXJfdWp7fB5+wIvZlNUobwwd3yy5k+9qLd1vtuUXM=) 2: 7F64C44645A511ED93E3C45BC4F9AE02.roa (hash: Bg1GhaBWG9ZnbioiTw4VxZi4hDCzIRIbJ2r9iNJxCVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 01:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 653 (0x28d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABEAC Validity Not Before: Apr 9 01:15:33 2025 GMT Not After : Apr 16 01:15:33 2025 GMT Subject: CN=67f5ca35-2888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fb:0f:5c:32:27:bf:7b:27:1a:ee:bf:75:b4: 86:88:c8:63:0c:99:7a:2c:38:1b:05:bf:ed:a4:5c: ee:2d:1f:d7:0b:66:81:af:a1:51:4c:cb:4f:0d:e6: 4f:cc:5f:76:e1:b8:56:4f:76:98:3f:c1:4e:03:49: 77:d6:ab:d5:6f:4a:96:c2:c8:58:51:cf:e2:0c:a3: 6d:de:89:f7:bc:6e:1e:75:86:2c:87:14:fc:12:93: f9:af:03:a8:a0:ec:bc:88:9e:fe:3b:1d:d3:0b:80: 03:ec:0c:f2:80:5c:8b:e0:bb:3f:10:dd:ae:d6:38: a3:5f:a5:cd:7e:14:45:b7:1c:4b:1c:c0:19:fc:18: c7:a3:6b:c3:67:6a:fe:25:5a:46:d2:0e:02:8a:14: f1:64:5d:d4:12:c6:d9:09:a9:13:05:c7:af:32:4e: 24:ff:30:c0:a5:53:0c:2e:9c:18:26:39:43:78:2a: 5c:2a:e8:7c:99:d9:76:cc:60:61:5e:d7:b6:ef:e5: c6:f8:88:5e:cb:51:b9:93:e0:34:19:f8:ba:96:4e: 4e:1e:20:11:37:57:3a:d4:47:a8:9b:04:3f:ff:c0: cf:db:a1:e1:f7:dc:ef:7a:43:d3:95:2d:fe:2a:e8: 23:b6:af:54:c0:4d:48:22:56:19:38:f2:b9:2b:78: 44:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B6:3E:DB:BB:3E:1A:83:11:E6:A4:BF:D4:07:69:13:27:24:20:2F X509v3 Authority Key Identifier: keyid:8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:5b:b5:84:a0:5d:04:27:a2:c7:67:d8:b7:ad:9e:a8:5b:cf: 95:d2:50:1a:c7:7e:92:15:17:93:92:49:67:79:82:ea:3d:6c: e1:d6:06:cd:4b:ae:fd:c3:ae:a4:7e:fa:7c:fb:9b:2c:5c:e7: 7b:ab:dd:af:cd:76:ac:23:c4:e6:8c:45:ad:37:a1:be:b1:68: 9b:fa:dd:30:6a:b7:8a:3f:29:ef:8a:40:36:b3:27:5a:03:22: d2:88:42:d6:ec:7c:86:cf:94:0f:bc:2d:ab:ba:ca:29:5d:ee: b5:1b:4b:d3:54:e3:f5:dc:c8:25:5e:73:92:54:c8:58:0d:4e: a5:3c:b0:e6:20:65:c0:91:6c:ff:c9:48:1e:68:95:82:f5:6e: e3:61:7f:b1:86:85:4e:4b:fa:59:95:a8:79:dc:ca:ce:1a:fe: 0b:13:aa:db:9c:e1:7d:20:ba:1c:04:43:7d:c5:99:33:e6:e6: 93:da:28:0a:32:d5:cd:33:48:75:b9:de:ed:f8:e7:f5:ad:eb: 3d:6b:6c:03:d0:aa:fd:54:af:57:69:b9:21:e5:12:37:43:f7: 22:31:2c:d2:66:33:fe:f8:4c:55:a1:51:73:ca:79:b0:0b:81: 1c:a3:cc:89:6c:48:92:89:db:89:d5:78:93:07:f8:7f:9d:57: 0b:be:b9:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJFQUMxMTAvBgNVBAUTKDhGNUQ1RTU4NzlBNzUxNThGMkNGRkIzMkFERDk0NDcx Rjk3NDE4M0YwHhcNMjUwNDA5MDExNTMzWhcNMjUwNDE2MDExNTMzWjAYMRYwFAYD VQQDEw02N2Y1Y2EzNS0yODg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAofsPXDInv3snGu6/dbSGiMhjDJl6LDgbBb/tpFzuLR/XC2aBr6FRTMtPDeZP zF924bhWT3aYP8FOA0l31qvVb0qWwshYUc/iDKNt3on3vG4edYYshxT8EpP5rwOo oOy8iJ7+Ox3TC4AD7AzygFyL4Ls/EN2u1jijX6XNfhRFtxxLHMAZ/BjHo2vDZ2r+ JVpG0g4CihTxZF3UEsbZCakTBcevMk4k/zDApVMMLpwYJjlDeCpcKuh8mdl2zGBh Xte27+XG+Ihey1G5k+A0Gfi6lk5OHiARN1c61EeomwQ//8DP26Hh99zvekPTlS3+ Kugjtq9UwE1IIlYZOPK5K3hE6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ62Ptu7 PhqDEeakv9QHaRMnJCAvMB8GA1UdIwQYMBaAFI9dXlh5p1FY8s/7Mq3ZRHH5dBg/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkVBQy8xQ0QxNDZCMEZE MTExMUVDQUQ4QjUyMjhDNEY5QUUwMi9qMTFlV0htblVWanl6X3N5cmRsRWNmbDBH RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxMWVXSG1uVVZqeXpfc3lyZGxFY2ZsMEdEOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkVBQy8xQ0QxNDZCMEZEMTExMUVDQUQ4QjUyMjhDNEY5QUUwMi9qMTFlV0htblVW anl6X3N5cmRsRWNmbDBHRDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARW7WEoF0EJ6LHZ9i3rZ6oW8+V0lAax36SFReTkklneYLqPWzh1gbN S679w66kfvp8+5ssXOd7q92vzXasI8TmjEWtN6G+sWib+t0wareKPynvikA2syda AyLSiELW7HyGz5QPvC2rusopXe61G0vTVOP13MglXnOSVMhYDU6lPLDmIGXAkWz/ yUgeaJWC9W7jYX+xhoVOS/pZlah53MrOGv4LE6rbnOF9ILocBEN9xZkz5uaT2igK MtXNM0h1ud7t+Of1res9a2wD0Kr9VK9Xabkh5RI3Q/ciMSzSZjP++ExVoVFzynmw C4Eco8yJbEiSiduJ1XiTB/h/nVcLvrnV -----END CERTIFICATE-----Generated at Thu Apr 10 20:25:03 2025 by rpki-client