$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft File: cOo3wZMr00-ztIWaNIMaEOYR0PY.mft (raw, json) Hash identifier: 4O4z7Lgpte/AnpGTJ3tYVEMK2ys3Mp6YP8GBhInsHCA= Subject key identifier: 9D:C8:FB:B6:08:53:67:E2:E1:80:A8:66:9F:C6:88:FA:AA:C7:96:25 Authority key identifier: 70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 Certificate issuer: /CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft Manifest number: 010F Signing time: Thu 03 Apr 2025 04:09:50 +0000 Manifest this update: Thu 03 Apr 2025 04:09:49 +0000 Manifest next update: Thu 10 Apr 2025 04:09:49 +0000 Files and hashes: 1: cOo3wZMr00-ztIWaNIMaEOYR0PY.crl (hash: w3Vc2kYMi5BqwQB1Wg+Xz44jgR0eWaG8qwF87nHDfp4=) 2: BC630BAE84FC11EE9887345FC4F9AE02.roa (hash: E3DVtUK4PKLNRTNWPdaED3S506iNVROikAhxbftKIaQ=) 3: 7C58D40872CD11EE81C60650C4F9AE02.roa (hash: hhVy8VlS8PQRYDzu0z2SFqVi4xOaWLt/VFPzg2LCqTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:09:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA1BF Validity Not Before: Apr 3 04:09:49 2025 GMT Not After : Apr 10 04:09:49 2025 GMT Subject: CN=67ee0a0d-0455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:52:bb:12:6a:60:38:9a:a9:85:a3:c6:be:25: 6b:6d:4c:df:a3:84:9f:61:3e:16:4a:b6:93:b8:c5: db:0a:a5:76:ea:27:6d:e3:d1:ab:ed:6a:4b:48:e6: 66:a5:d4:8b:0d:d0:e0:65:fe:d5:4f:e8:8a:c3:8e: a7:04:77:1a:57:e7:0b:5e:14:01:cd:2c:1f:19:b3: 55:3c:ba:b6:68:e2:f9:8e:3c:eb:fd:85:8f:98:36: 1d:06:01:0a:81:38:bb:c5:ce:db:df:44:7a:e3:5e: b2:b6:54:c6:43:4c:84:43:8d:5d:89:f0:a4:7e:8d: d2:f3:b7:60:f6:04:11:c1:b5:51:fb:45:66:9a:5b: 65:68:e6:45:5f:d8:4a:7f:1d:64:7d:80:29:9f:67: f5:a0:8e:c2:c5:df:ee:9a:29:ed:53:b4:1c:e3:11: 42:0a:04:ca:b8:a6:90:b6:df:4d:fb:fa:e0:34:f6: 6d:3d:7f:e0:c8:ab:6e:cc:ad:4a:16:5f:fe:01:6b: ce:a5:07:04:91:6a:e5:e7:7a:78:e1:9f:9f:b3:65: 0c:7a:89:1c:33:4a:86:bf:86:6f:72:a4:d3:ba:4a: c7:20:fb:b0:56:ab:38:6e:74:e9:9e:04:5d:a4:ba: e4:4e:f2:8f:29:38:f0:44:47:28:05:0d:57:4b:ce: c1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C8:FB:B6:08:53:67:E2:E1:80:A8:66:9F:C6:88:FA:AA:C7:96:25 X509v3 Authority Key Identifier: keyid:70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:1a:c7:7a:94:f4:86:c9:ee:74:73:7f:61:68:35:71:ea:ea: bb:0a:1a:7e:9d:da:09:e3:9c:4a:9a:0b:2c:cc:58:21:3b:b1: 58:f5:d2:16:3c:08:aa:0e:28:61:19:ad:cc:f3:74:5c:34:a1: 3b:98:bc:8c:1e:b1:d1:91:b3:67:46:16:8f:9a:3c:8c:5d:55: 3a:95:db:e6:a9:2a:09:e3:58:45:33:ce:a8:e9:9d:5f:b5:d2: 4c:14:36:d6:cf:2b:c4:7c:75:f8:db:57:41:b8:ed:fa:57:7c: 46:b1:d6:9c:71:09:8e:87:be:3c:ca:b0:79:ca:ac:20:40:03: 31:f4:b3:8f:48:18:fb:b9:01:37:b6:32:88:6e:c0:f0:29:3a: 53:0d:0f:6c:27:04:f6:bd:d3:22:1a:7a:e6:5b:1d:b3:bd:92: 68:09:48:14:1b:a1:94:dc:a4:9f:4b:b2:fd:6d:cd:fa:d9:23: 63:9d:26:68:21:68:42:0a:f5:a9:a5:b0:3b:88:cd:31:2d:e5: c2:d5:09:d1:89:5f:62:18:9e:ce:67:9d:14:90:02:e0:1f:1c: 56:28:00:53:ec:80:aa:a7:44:2f:a3:33:80:38:d4:b3:8f:87: f0:07:3c:55:ff:25:09:19:1a:39:8f:7d:a8:63:2e:c4:d7:90: 81:81:aa:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExQkYxMTAvBgNVBAUTKDcwRUEzN0MxOTMyQkQzNEZCM0I0ODU5QTM0ODMxQTEw RTYxMUQwRjYwHhcNMjUwNDAzMDQwOTQ5WhcNMjUwNDEwMDQwOTQ5WjAYMRYwFAYD VQQDEw02N2VlMGEwZC0wNDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9lK7EmpgOJqphaPGviVrbUzfo4SfYT4WSraTuMXbCqV26idt49Gr7WpLSOZm pdSLDdDgZf7VT+iKw46nBHcaV+cLXhQBzSwfGbNVPLq2aOL5jjzr/YWPmDYdBgEK gTi7xc7b30R6416ytlTGQ0yEQ41difCkfo3S87dg9gQRwbVR+0VmmltlaOZFX9hK fx1kfYApn2f1oI7Cxd/umintU7Qc4xFCCgTKuKaQtt9N+/rgNPZtPX/gyKtuzK1K Fl/+AWvOpQcEkWrl53p44Z+fs2UMeokcM0qGv4ZvcqTTukrHIPuwVqs4bnTpngRd pLrkTvKPKTjwREcoBQ1XS87BIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3I+7YI U2fi4YCoZp/GiPqqx5YlMB8GA1UdIwQYMBaAFHDqN8GTK9NPs7SFmjSDGhDmEdD2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTFCRi84NEUxMEE0Mjcy Q0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAwLXp0SVdhTklNYUVPWVIw UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NPbzN3Wk1yMDAtenRJV2FOSU1hRU9ZUjBQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTFCRi84NEUxMEE0MjcyQ0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAw LXp0SVdhTklNYUVPWVIwUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzGsd6lPSGye50c39haDVx6uq7Chp+ndoJ45xKmgsszFghO7FY9dIW PAiqDihhGa3M83RcNKE7mLyMHrHRkbNnRhaPmjyMXVU6ldvmqSoJ41hFM86o6Z1f tdJMFDbWzyvEfHX421dBuO36V3xGsdaccQmOh748yrB5yqwgQAMx9LOPSBj7uQE3 tjKIbsDwKTpTDQ9sJwT2vdMiGnrmWx2zvZJoCUgUG6GU3KSfS7L9bc362SNjnSZo IWhCCvWppbA7iM0xLeXC1QnRiV9iGJ7OZ50UkALgHxxWKABT7ICqp0QvozOAONSz j4fwBzxV/yUJGRo5j32oYy7E15CBgaoJ -----END CERTIFICATE-----Generated at Fri Apr 4 22:30:02 2025 by rpki-client