$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft File: pYh4bi_YjPqvU6qilsNkRg7m6m0.mft (raw, json) Hash identifier: W7iyoOHAiaV0C6AA40laFXKnJc/1xtUS1jt89ApaR8A= Subject key identifier: C4:8E:BA:91:26:BC:38:A1:C4:A4:7E:99:35:16:D9:4B:0B:63:D1:03 Authority key identifier: A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D Certificate issuer: /CN=A91C8485/serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft Manifest number: 40 Signing time: Thu 03 Apr 2025 06:45:31 +0000 Manifest this update: Thu 03 Apr 2025 06:45:31 +0000 Manifest next update: Thu 10 Apr 2025 06:45:31 +0000 Files and hashes: 1: pYh4bi_YjPqvU6qilsNkRg7m6m0.crl (hash: W8ns5epV3EnhRkC7gh0F6IOhKF+8opvs3K6rffqYVP8=) 2: 5B4A5E7EB7CF11EF860F535AC4F9AE02.roa (hash: P4e7hg24wbNE0iYWlZNKVYCuvbgx+YoBC75Ik3ogStQ=) 3: A59FFB3EB7D711EF9ED0C324C4F9AE02.roa (hash: ko6zibH/Gh8JhBqwZ3M7VGiDwD5udZ8uVAs4re/9Ths=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8485 Validity Not Before: Apr 3 06:45:31 2025 GMT Not After : Apr 10 06:45:31 2025 GMT Subject: CN=67ee2e8b-4c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:32:93:1f:50:ec:fb:c5:97:58:5d:ff:30:31: 08:9e:89:9d:9f:1e:9a:c2:29:51:2d:17:67:21:9b: 90:1b:a2:b0:a9:4d:14:3c:bf:dd:1a:87:4d:c0:5a: 3f:30:6f:26:92:33:0f:14:81:e1:05:f1:27:eb:6f: 2d:cd:94:f5:d6:3b:d8:1b:9f:24:b8:d8:b3:f2:2c: c0:1c:98:97:ee:4c:bf:38:c1:e1:d1:eb:f8:16:64: c8:15:c2:99:ec:2d:3e:1a:9d:f2:4f:dd:8c:d0:1a: 1a:d6:bb:3a:03:38:23:46:db:1b:ef:79:5d:01:a2: f2:fb:c5:98:08:ee:b2:35:f4:4a:f1:6d:2a:e0:2e: 6a:6b:ae:88:fe:8d:16:ce:9e:56:5e:3c:2a:6b:ed: fc:1c:d7:ca:d0:8a:4f:a4:ba:76:20:0c:72:54:b5: ff:2f:bc:43:aa:b9:46:bc:68:29:4e:94:fd:dd:16: 4b:c9:6e:ce:94:9d:2f:8f:8d:88:ba:36:c8:8d:05: 93:f1:ea:3f:b7:9f:60:dd:96:77:6a:20:ea:41:52: e2:6d:2a:0f:4c:b6:67:54:e4:4a:f0:d8:19:11:ff: c5:67:79:fd:0a:16:cb:60:36:55:9f:48:3b:b7:ec: 8b:ba:bd:d3:9b:0f:a9:8c:43:7e:b3:1b:b4:2d:6a: af:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:8E:BA:91:26:BC:38:A1:C4:A4:7E:99:35:16:D9:4B:0B:63:D1:03 X509v3 Authority Key Identifier: keyid:A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:d9:4a:05:b1:da:af:7e:d4:bf:34:7a:32:90:9a:6c:26:0d: f7:4d:33:99:aa:a7:c1:fa:26:52:10:27:5e:83:33:4a:ae:c7: 86:16:b7:1f:58:3a:b3:58:ed:b2:49:df:85:9d:5b:df:45:30: 49:8b:6f:e6:03:47:54:40:be:cd:a6:8a:c7:63:dd:c0:7d:11: a1:02:94:ea:f1:8d:48:40:4d:ba:e4:e6:ae:9d:c7:4d:d1:3f: 3d:3d:d7:b9:49:e2:1d:33:ee:d9:90:1c:95:f0:ce:e5:5d:8d: 68:1f:d6:f3:f3:39:c2:bd:d6:66:76:f8:65:05:3a:8a:2f:c9: 30:7c:1a:25:8b:16:aa:4a:78:f1:c5:50:7a:b8:6b:d3:58:5c: ee:25:83:20:62:4b:1a:c6:7a:7d:7d:52:45:f0:f1:14:a8:4b: 6e:a1:6c:c1:34:45:e4:4f:48:b9:ac:a4:6e:e0:1a:29:75:d6: c6:ac:f9:5a:85:ec:06:66:f8:90:20:9a:25:94:8b:2d:b1:76: 31:a3:f3:65:1a:18:61:5f:57:8c:95:56:a0:44:98:7b:bb:d4: 4e:5e:55:89:e7:31:4e:36:98:9d:38:e5:24:91:7c:ec:56:ba: 12:a2:3b:a2:f7:83:fa:78:04:e0:d2:a3:03:0c:91:42:cc:6a: 81:eb:ef:aa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD ODQ4NTExMC8GA1UEBRMoQTU4ODc4NkUyRkQ4OENGQUFGNTNBQUEyOTZDMzY0NDYw RUU2RUE2RDAeFw0yNTA0MDMwNjQ1MzFaFw0yNTA0MTAwNjQ1MzFaMBgxFjAUBgNV BAMTDTY3ZWUyZThiLTRjMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPMpMfUOz7xZdYXf8wMQieiZ2fHprCKVEtF2chm5AborCpTRQ8v90ah03AWj8w byaSMw8UgeEF8Sfrby3NlPXWO9gbnyS42LPyLMAcmJfuTL84weHR6/gWZMgVwpns LT4anfJP3YzQGhrWuzoDOCNG2xvveV0BovL7xZgI7rI19ErxbSrgLmprroj+jRbO nlZePCpr7fwc18rQik+kunYgDHJUtf8vvEOquUa8aClOlP3dFkvJbs6UnS+PjYi6 NsiNBZPx6j+3n2DdlndqIOpBUuJtKg9MtmdU5Erw2BkR/8Vnef0KFstgNlWfSDu3 7Iu6vdObD6mMQ36zG7Qtaq8vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxI66kSa8 OKHEpH6ZNRbZSwtj0QMwHwYDVR0jBBgwFoAUpYh4bi/YjPqvU6qilsNkRg7m6m0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4NDg1LzJEQkNFRjQ2QjQx MjExRUZCOEU2RTc3M0M0RjlBRTAyL3BZaDRiaV9ZalBxdlU2cWlsc05rUmc3bTZt MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcFloNGJpX1lqUHF2VTZxaWxzTmtSZzdtNm0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4 NDg1LzJEQkNFRjQ2QjQxMjExRUZCOEU2RTc3M0M0RjlBRTAyL3BZaDRiaV9ZalBx dlU2cWlsc05rUmc3bTZtMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE3ZSgWx2q9+1L80ejKQmmwmDfdNM5mqp8H6JlIQJ16DM0qux4YWtx9Y OrNY7bJJ34WdW99FMEmLb+YDR1RAvs2misdj3cB9EaEClOrxjUhATbrk5q6dx03R Pz0917lJ4h0z7tmQHJXwzuVdjWgf1vPzOcK91mZ2+GUFOoovyTB8GiWLFqpKePHF UHq4a9NYXO4lgyBiSxrGen19UkXw8RSoS26hbME0ReRPSLmspG7gGil11sas+VqF 7AZm+JAgmiWUiy2xdjGj82UaGGFfV4yVVqBEmHu71E5eVYnnMU42mJ045SSRfOxW uhKiO6L3g/p4BODSowMMkULMaoHr76o= -----END CERTIFICATE-----Generated at Fri Apr 4 22:24:51 2025 by rpki-client