$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft File: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft (raw, json) Hash identifier: uW/RK1RYefd8AqFwdv5uMOA1PMDPhXG422Nuu5WNEC4= Subject key identifier: 60:B4:1D:FC:A2:49:80:5D:08:AE:B5:87:0E:2C:26:41:76:D2:96:F0 Authority key identifier: 32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 Certificate issuer: /CN=A91CBF47/serialNumber=326371E399824F8004ED96756819760881B7CD96 Certificate serial: 3475 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft Manifest number: 3471 Signing time: Fri 04 Apr 2025 14:32:32 +0000 Manifest this update: Fri 04 Apr 2025 14:32:31 +0000 Manifest next update: Fri 11 Apr 2025 14:32:31 +0000 Files and hashes: 1: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl (hash: TBlfAkFG11a5F3or0hh6cnv/p9rwOshiHbcH0mq+Dj8=) 2: 608C129E33E011ED979ED20EC4F9AE02.roa (hash: ZrPgwoRLGJ2fTtJOsuC6YjXCZss5mwGvBq/beIOJfYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13429 (0x3475) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBF47 Validity Not Before: Apr 4 14:32:31 2025 GMT Not After : Apr 11 14:32:31 2025 GMT Subject: CN=67efed7f-965d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:89:b5:0d:e6:66:71:89:38:ca:05:88:8b:36: 64:25:aa:53:ef:88:b1:f4:3f:e7:39:b8:b2:41:56: 7b:10:b8:12:28:14:f7:59:22:96:7a:47:5b:c3:ec: e0:eb:04:c9:10:6e:b0:b1:a7:81:16:a7:67:2d:e1: 89:3c:b4:ed:46:3c:64:39:56:37:44:ae:3e:fb:df: 31:eb:4b:e3:e6:81:6f:c1:a9:47:8e:f3:b6:9d:af: b1:79:63:27:cb:b9:b5:ee:e4:d5:d3:dc:8c:55:36: 3b:67:a4:49:24:fd:4f:18:06:3a:77:2d:8e:78:24: 0f:75:35:83:df:69:3e:ec:cd:7a:09:2d:4f:27:af: 1f:63:aa:e1:0a:ce:c7:7f:61:99:fe:72:46:b1:a5: 72:13:ed:44:6a:b6:56:5c:60:3b:eb:9e:33:98:dc: 7f:4e:3b:89:80:b0:1b:d4:20:01:82:12:c7:4b:63: 78:58:85:35:a3:93:f2:c5:e8:f2:3c:fd:85:4a:62: 57:7c:46:b5:2f:3f:93:2e:b9:b0:10:c2:de:65:e6: 53:44:a7:c4:9a:b3:af:45:62:e9:c7:a5:81:33:0c: 41:61:98:be:0e:a5:88:97:3f:1c:83:24:c9:a2:96: 7c:ea:8d:40:4b:5e:8c:5f:1b:55:8d:cd:4b:0f:76: cf:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B4:1D:FC:A2:49:80:5D:08:AE:B5:87:0E:2C:26:41:76:D2:96:F0 X509v3 Authority Key Identifier: keyid:32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:bc:b1:e8:91:4c:10:44:0a:7e:20:06:18:2b:c4:97:8e:62: 54:dc:38:ac:fc:b0:86:2c:a4:e7:8a:37:7d:48:8d:22:87:7a: 42:b9:24:12:cd:7a:b7:6f:3e:51:ee:34:0a:7b:3f:6f:10:77: 3c:49:4c:5e:9f:f2:dc:18:80:0c:1b:fe:7f:a1:82:5e:58:47: f9:f8:02:d6:9b:9b:4d:81:14:bb:5c:2f:ac:6f:ca:ba:c4:6b: b1:41:6b:b8:57:ff:09:31:cb:d4:79:f5:4f:3f:92:72:d1:9b: 3d:68:18:40:40:3f:fc:23:43:47:6e:a0:a6:fb:7b:14:20:4f: 20:60:0a:fe:49:05:ca:60:a5:fa:67:db:04:e8:f5:ee:3c:72: 6a:79:1d:12:19:70:d1:2c:b0:06:a4:9b:e6:6e:e2:c5:83:8b: 35:90:3f:f3:71:8e:04:c6:e6:3d:83:3d:d3:a7:52:18:c4:1a: 7e:4b:17:48:29:41:74:db:fd:30:6f:f6:9b:96:22:a1:88:d4: e4:33:db:e0:48:4a:83:0c:26:07:5d:82:d7:60:be:ac:9b:3a: 83:b5:a5:0c:1f:e8:fb:e7:f5:d3:4c:96:12:44:25:1a:cb:9b: 2f:64:17:cf:9f:8c:b1:39:5e:da:8e:4c:9e:fa:30:45:ab:ac: b4:1a:b4:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JGNDcxMTAvBgNVBAUTKDMyNjM3MUUzOTk4MjRGODAwNEVEOTY3NTY4MTk3NjA4 ODFCN0NEOTYwHhcNMjUwNDA0MTQzMjMxWhcNMjUwNDExMTQzMjMxWjAYMRYwFAYD VQQDEw02N2VmZWQ3Zi05NjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA04m1DeZmcYk4ygWIizZkJapT74ix9D/nObiyQVZ7ELgSKBT3WSKWekdbw+zg 6wTJEG6wsaeBFqdnLeGJPLTtRjxkOVY3RK4++98x60vj5oFvwalHjvO2na+xeWMn y7m17uTV09yMVTY7Z6RJJP1PGAY6dy2OeCQPdTWD32k+7M16CS1PJ68fY6rhCs7H f2GZ/nJGsaVyE+1EarZWXGA7654zmNx/TjuJgLAb1CABghLHS2N4WIU1o5Pyxejy PP2FSmJXfEa1Lz+TLrmwEMLeZeZTRKfEmrOvRWLpx6WBMwxBYZi+DqWIlz8cgyTJ opZ86o1AS16MXxtVjc1LD3bP/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGC0Hfyi SYBdCK61hw4sJkF20pbwMB8GA1UdIwQYMBaAFDJjceOZgk+ABO2WdWgZdgiBt82W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkY0Ny8zNzBDQTJDMDFE OEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0QUU3WloxYUJsMkNJRzN6 WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tTng0NW1DVDRBRTdaWjFhQmwyQ0lHM3paWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkY0Ny8zNzBDQTJDMDFEOEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0 QUU3WloxYUJsMkNJRzN6WlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMvLHokUwQRAp+IAYYK8SXjmJU3Dis/LCGLKTnijd9SI0ih3pCuSQS zXq3bz5R7jQKez9vEHc8SUxen/LcGIAMG/5/oYJeWEf5+ALWm5tNgRS7XC+sb8q6 xGuxQWu4V/8JMcvUefVPP5Jy0Zs9aBhAQD/8I0NHbqCm+3sUIE8gYAr+SQXKYKX6 Z9sE6PXuPHJqeR0SGXDRLLAGpJvmbuLFg4s1kD/zcY4ExuY9gz3Tp1IYxBp+SxdI KUF02/0wb/abliKhiNTkM9vgSEqDDCYHXYLXYL6smzqDtaUMH+j75/XTTJYSRCUa y5svZBfPn4yxOV7ajkye+jBFq6y0GrTn -----END CERTIFICATE-----Generated at Fri Apr 4 22:27:05 2025 by rpki-client