$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft File: MMWCtnmSUrqsOzgaukzDN6v5feM.mft (raw, json) Hash identifier: zvBx7PetBf+XDtdeb5DzL9WkYcBHU6hQZkSIcdkUXW0= Subject key identifier: 17:8D:FD:95:01:DF:0A:C9:0D:7B:7E:A9:32:63:2A:17:85:BA:23:0F Authority key identifier: 30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3 Certificate issuer: /CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3 Certificate serial: 0364 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft Manifest number: 0357 Signing time: Thu 03 Apr 2025 01:03:26 +0000 Manifest this update: Thu 03 Apr 2025 01:03:26 +0000 Manifest next update: Thu 10 Apr 2025 01:03:26 +0000 Files and hashes: 1: MMWCtnmSUrqsOzgaukzDN6v5feM.crl (hash: HZBFJ99dcJJ5F3RBxSnBGYOkCAnuXP8pQw1FISC8X40=) 2: 4FEED19CACA111EFBA21832EC4F9AE02.roa (hash: iZBr6WHmAOTLK0yOUzTixsp8SULKAXf3D3JtpGC1eBw=) 3: DD7E5CF29C3F11EFAB09C331C4F9AE02.roa (hash: 3MlVoyZinyCwKTl1//T9IkdR0ms/O99hruez1af7KEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 868 (0x364) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7771 Validity Not Before: Apr 3 01:03:26 2025 GMT Not After : Apr 10 01:03:26 2025 GMT Subject: CN=67edde5e-761b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3a:46:93:33:8b:3e:58:7f:7f:01:fe:8f:c5: 18:67:94:a5:16:a5:c6:b7:f5:e7:c5:0c:2d:3c:b2: 9f:76:e4:9f:9b:95:4e:a6:7f:38:90:e6:13:c0:f1: d7:fd:6d:e7:ca:47:09:46:77:b1:3a:ec:86:35:93: 26:cf:f3:28:ab:ac:11:9c:ea:1d:5a:9d:1a:10:eb: 4b:3b:8e:c6:03:ac:0d:67:0f:02:c0:24:08:49:c9: d5:bf:bf:d6:c3:32:08:3b:b1:d9:e6:85:b3:47:72: 39:c5:22:81:11:b1:7e:92:bc:c9:9b:75:44:e8:7e: b0:0b:f9:e1:e0:c2:97:9b:9f:95:56:f6:45:c2:5b: 06:c9:3e:5e:e4:52:c1:73:c3:4a:0a:57:f2:87:3f: 33:2b:32:a9:1d:22:28:f4:96:93:29:f2:4c:e0:69: 65:dd:ce:cd:cc:b0:59:56:25:a9:3c:80:f7:b5:96: c9:34:68:c6:4e:b7:d0:52:91:1f:81:2d:f8:67:c5: c8:77:9f:eb:09:a8:5a:59:92:65:7f:84:f3:99:04: 61:4d:0e:a8:c0:97:ca:82:bb:1b:24:32:8b:b9:eb: 8a:1d:cd:ea:19:0e:6c:ee:a4:0a:f1:74:b9:7e:71: ba:b7:96:a2:0a:83:41:c9:61:dc:b4:41:7a:c8:33: 83:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8D:FD:95:01:DF:0A:C9:0D:7B:7E:A9:32:63:2A:17:85:BA:23:0F X509v3 Authority Key Identifier: keyid:30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ae:7a:04:c0:e2:e7:57:6d:91:40:0f:9f:5d:bf:a2:6c:31: a0:e4:4f:3c:37:b8:26:5b:52:d2:54:fe:b5:14:26:5f:b0:35: 6d:27:31:a3:47:f1:18:95:70:41:30:d0:27:36:09:10:90:94: 6b:2c:14:15:39:ab:7d:62:16:56:24:c5:d4:0f:e2:30:41:d0: fd:09:35:bb:8a:31:e8:86:93:c2:38:98:3a:02:3e:a8:0b:2b: d2:2e:38:8c:10:04:24:3e:77:3e:aa:eb:5d:71:52:18:78:ce: c6:97:5b:ec:d0:05:df:19:76:30:4d:7a:7f:50:80:a7:05:08: ae:ca:27:a0:d8:b5:e5:87:72:b3:74:e6:3c:29:d4:bb:be:0f: 6b:5c:2d:7a:ff:a4:41:63:8f:e6:71:c3:cb:af:50:ec:bd:ef: fa:e8:38:a2:2f:23:4f:56:81:d3:d7:54:2e:e4:c7:67:96:e3: 2d:91:ac:b5:69:8d:3d:06:a2:c4:ae:e6:0b:d6:0f:9e:7c:0a: 87:9f:d4:5a:8e:1d:b8:32:59:89:bb:63:75:66:0a:31:94:b0: 0c:8c:19:aa:87:ab:65:1d:a1:cd:a0:d4:4d:d0:c2:b5:4a:0d: 85:2e:42:0f:5e:6b:9e:59:92:9e:20:fc:25:8e:19:64:ba:d7: 4d:ac:10:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc3NzExMTAvBgNVBAUTKDMwQzU4MkI2Nzk5MjUyQkFBQzNCMzgxQUJBNENDMzM3 QUJGOTdERTMwHhcNMjUwNDAzMDEwMzI2WhcNMjUwNDEwMDEwMzI2WjAYMRYwFAYD VQQDEw02N2VkZGU1ZS03NjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TpGkzOLPlh/fwH+j8UYZ5SlFqXGt/XnxQwtPLKfduSfm5VOpn84kOYTwPHX /W3nykcJRnexOuyGNZMmz/Moq6wRnOodWp0aEOtLO47GA6wNZw8CwCQIScnVv7/W wzIIO7HZ5oWzR3I5xSKBEbF+krzJm3VE6H6wC/nh4MKXm5+VVvZFwlsGyT5e5FLB c8NKClfyhz8zKzKpHSIo9JaTKfJM4Gll3c7NzLBZViWpPID3tZbJNGjGTrfQUpEf gS34Z8XId5/rCahaWZJlf4TzmQRhTQ6owJfKgrsbJDKLueuKHc3qGQ5s7qQK8XS5 fnG6t5aiCoNByWHctEF6yDODRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBeN/ZUB 3wrJDXt+qTJjKheFuiMPMB8GA1UdIwQYMBaAFDDFgrZ5klK6rDs4GrpMwzer+X3j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzc3MS81NUYyRjBGRUIx N0QxMUVDQjk3MzYyNDFDNEY5QUUwMi9NTVdDdG5tU1VycXNPemdhdWt6RE42djVm ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01NV0N0bm1TVXJxc096Z2F1a3pETjZ2NWZlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Nzc3MS81NUYyRjBGRUIxN0QxMUVDQjk3MzYyNDFDNEY5QUUwMi9NTVdDdG5tU1Vy cXNPemdhdWt6RE42djVmZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfrnoEwOLnV22RQA+fXb+ibDGg5E88N7gmW1LSVP61FCZfsDVtJzGj R/EYlXBBMNAnNgkQkJRrLBQVOat9YhZWJMXUD+IwQdD9CTW7ijHohpPCOJg6Aj6o CyvSLjiMEAQkPnc+qutdcVIYeM7Gl1vs0AXfGXYwTXp/UICnBQiuyieg2LXlh3Kz dOY8KdS7vg9rXC16/6RBY4/mccPLr1Dsve/66DiiLyNPVoHT11Qu5MdnluMtkay1 aY09BqLEruYL1g+efAqHn9Rajh24MlmJu2N1ZgoxlLAMjBmqh6tlHaHNoNRN0MK1 Sg2FLkIPXmueWZKeIPwljhlkutdNrBB0 -----END CERTIFICATE-----Generated at Fri Apr 4 22:24:43 2025 by rpki-client