$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft File: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft (raw, json) Hash identifier: i+3jqrfLy4nAHW1OxoVatLGmON11dIhsozEn45QUzGs= Subject key identifier: 6F:2A:AE:C4:ED:AE:AB:D8:10:DF:E1:A5:48:C0:91:EF:AE:44:5B:C8 Authority key identifier: 75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94 Certificate issuer: /CN=A91C72E6/serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94 Certificate serial: 0166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft Manifest number: 0162 Signing time: Sat 05 Apr 2025 03:22:21 +0000 Manifest this update: Sat 05 Apr 2025 03:22:20 +0000 Manifest next update: Sat 12 Apr 2025 03:22:20 +0000 Files and hashes: 1: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl (hash: wgdV+OjWeFm2egGwbfTPtvegl3IOZvkxoFJ330qg7tE=) 2: 2340D07AF2F111ED91F08A4FC4F9AE02.roa (hash: RN4BzBKzm6DEJmTceToRMZocfmFw/tmq9npppNN/f6I=) 3: 23EE2B76F2F111ED91F08A4FC4F9AE02.roa (hash: R4MOqPNazPvSSKVGkQoTvV/niZowhUllvkAn/iWShNw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 358 (0x166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72E6 Validity Not Before: Apr 5 03:22:20 2025 GMT Not After : Apr 12 03:22:20 2025 GMT Subject: CN=67f0a1ec-f106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2a:3f:d1:0a:94:65:61:ca:2c:26:b8:08:8f: 50:3c:23:b4:87:aa:d4:12:40:83:6a:9d:63:9b:38: d3:7c:78:86:00:bc:03:9c:fe:e5:3f:51:e5:df:bf: 2c:ff:37:aa:f9:3c:9e:f0:64:c8:56:e5:1a:43:74: 94:a6:4e:8f:1d:6f:d2:a2:94:4d:57:d1:17:2b:b9: 44:4d:b1:16:a0:33:82:fe:ab:a6:51:30:54:39:4f: c3:eb:a0:3e:cc:71:94:1f:86:1f:15:fc:91:74:c6: ca:5f:95:25:a7:5c:96:aa:0a:6e:78:5d:af:c6:80: 84:9a:bd:17:92:3f:bf:8b:ba:24:9f:55:0e:e5:06: c4:7a:b0:c2:21:2b:eb:bd:0e:1c:8a:f9:81:d0:fa: c5:15:cc:d5:1b:f3:c0:36:39:ee:71:63:d3:ef:50: 53:e7:c0:39:1c:5e:72:6d:1d:fb:2b:56:b6:99:24: f6:d7:cc:09:e4:a2:a4:7b:29:41:5b:32:fb:1b:65: 50:95:1a:07:19:57:64:62:f5:09:32:88:c9:19:d1: 7f:a1:b0:68:f4:7e:21:7c:ac:c1:8b:ed:a1:ca:86: e0:86:a2:66:b1:f5:a9:5b:df:da:79:33:f1:64:de: e3:c2:9d:4c:84:81:a8:1f:d7:42:8f:a4:9a:dc:7b: 18:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:2A:AE:C4:ED:AE:AB:D8:10:DF:E1:A5:48:C0:91:EF:AE:44:5B:C8 X509v3 Authority Key Identifier: keyid:75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:1d:ff:e5:d6:43:ce:9d:ce:19:a6:73:73:59:6c:09:8a:60: 44:40:f7:03:13:63:ff:00:85:80:b6:e6:73:67:58:c6:cd:f5: 5d:82:ab:5a:a0:18:c1:82:af:04:cd:f7:11:5a:88:87:38:5a: 0d:b9:dd:15:4e:5d:db:91:0d:e0:b0:db:ef:45:b6:0e:09:19: ec:f9:65:92:68:b1:f5:01:85:14:43:f5:63:ad:84:11:64:33: 58:0c:f0:bc:f1:84:2b:22:ef:1c:9c:1e:03:7c:4e:9f:cf:2e: 28:12:df:67:41:8a:9e:b6:db:fc:88:08:1a:58:14:9f:35:c9: 1a:4e:26:4a:08:6d:0f:cf:43:20:24:b3:62:87:64:c8:b0:e4: 1e:3c:94:23:48:db:f2:64:7e:2f:01:7d:47:6a:cd:7f:85:47: 03:20:36:de:93:c3:17:78:e6:e1:74:39:2b:05:11:e9:09:96: ad:aa:9c:ae:85:49:80:97:58:9f:1a:db:4f:a8:91:08:d8:4f: 49:0c:d9:14:5d:a3:5f:23:2b:69:a5:37:29:cd:e9:3c:89:0b: 1d:c4:2f:8b:d9:e2:1e:74:a5:1b:a3:4a:79:82:6c:d9:0a:e9: 72:1c:ba:25:55:49:58:c9:0a:b5:9f:b1:70:89:d3:67:20:d6: f5:9c:3b:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyRTYxMTAvBgNVBAUTKDc1MjUzM0IxODUyRjdEMkFDNkU3MERDREVCRkQ1NDdE REM0MzhGOTQwHhcNMjUwNDA1MDMyMjIwWhcNMjUwNDEyMDMyMjIwWjAYMRYwFAYD VQQDEw02N2YwYTFlYy1mMTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSo/0QqUZWHKLCa4CI9QPCO0h6rUEkCDap1jmzjTfHiGALwDnP7lP1Hl378s /zeq+Tye8GTIVuUaQ3SUpk6PHW/SopRNV9EXK7lETbEWoDOC/qumUTBUOU/D66A+ zHGUH4YfFfyRdMbKX5Ulp1yWqgpueF2vxoCEmr0Xkj+/i7okn1UO5QbEerDCISvr vQ4civmB0PrFFczVG/PANjnucWPT71BT58A5HF5ybR37K1a2mST218wJ5KKkeylB WzL7G2VQlRoHGVdkYvUJMojJGdF/obBo9H4hfKzBi+2hyobghqJmsfWpW9/aeTPx ZN7jwp1MhIGoH9dCj6Sa3HsY3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8qrsTt rqvYEN/hpUjAke+uRFvIMB8GA1UdIwQYMBaAFHUlM7GFL30qxucNzev9VH3cQ4+U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJFNi9FNkU2RkIzMkYy RUExMUVEOTA5OTAwNEFDNEY5QUUwMi9kU1V6c1lVdmZTckc1dzNONl8xVWZkeERq NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RTVXpzWVV2ZlNyRzV3M042XzFVZmR4RGo1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzJFNi9FNkU2RkIzMkYyRUExMUVEOTA5OTAwNEFDNEY5QUUwMi9kU1V6c1lVdmZT ckc1dzNONl8xVWZkeERqNVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChHf/l1kPOnc4ZpnNzWWwJimBEQPcDE2P/AIWAtuZzZ1jGzfVdgqta oBjBgq8EzfcRWoiHOFoNud0VTl3bkQ3gsNvvRbYOCRns+WWSaLH1AYUUQ/VjrYQR ZDNYDPC88YQrIu8cnB4DfE6fzy4oEt9nQYqettv8iAgaWBSfNckaTiZKCG0Pz0Mg JLNih2TIsOQePJQjSNvyZH4vAX1Has1/hUcDIDbek8MXeObhdDkrBRHpCZatqpyu hUmAl1ifGttPqJEI2E9JDNkUXaNfIytppTcpzek8iQsdxC+L2eIedKUbo0p5gmzZ CulyHLolVUlYyQq1n7FwidNnINb1nDsW -----END CERTIFICATE-----Generated at Sat Apr 5 22:34:49 2025 by rpki-client