$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft File: 30fOzFfqiK65ajhlVgufImC6mQ4.mft (raw, json) Hash identifier: kNC5b/EkVYRurzugECkr1/fEkd4kK9vTMxpRKIb1v3E= Subject key identifier: 15:0B:E5:E5:AD:AF:C8:26:04:9E:64:40:0F:60:68:B1:3E:30:7A:65 Authority key identifier: DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E Certificate issuer: /CN=A91DBA5B/serialNumber=DF47CECC57EA88AEB96A3865560B9F2260BA990E Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft Manifest number: 67 Signing time: Sat 29 Mar 2025 06:17:40 +0000 Manifest this update: Sat 29 Mar 2025 06:17:39 +0000 Manifest next update: Sat 05 Apr 2025 06:17:39 +0000 Files and hashes: 1: 30fOzFfqiK65ajhlVgufImC6mQ4.crl (hash: 50Qp4wtzf/ph9zH58NMQ5yMv1FZ9azv5Df9ck6PMKkM=) 2: 02389B7670E811EFA8DBE571C4F9AE02.roa (hash: AxDsA8rt+K98y/uEnY4JUiHZ0XXqFDNJTlI0IgqxxqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBA5B Validity Not Before: Mar 29 06:17:39 2025 GMT Not After : Apr 5 06:17:39 2025 GMT Subject: CN=67e79083-a3e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:17:c8:7c:e9:41:50:ea:23:bc:68:ad:2b:c7: 7c:ea:26:00:41:f4:61:8e:f6:a2:68:02:e4:36:f1: ee:71:1f:27:e2:96:2a:6e:1e:b3:b8:e2:2f:b3:1c: 6c:58:bf:9a:26:5d:d7:24:1f:70:65:b9:d8:82:30: c1:d9:71:3b:b8:d9:a8:16:1a:15:88:2b:86:2f:18: 7c:f6:4d:79:c0:9f:83:7f:8b:77:bb:5f:c1:2d:3e: c4:99:ba:12:f0:1a:18:56:25:eb:12:f4:58:e2:de: cf:79:05:eb:95:eb:59:1c:9d:3f:0f:f6:d1:d0:67: a6:11:92:38:3e:4b:3b:41:52:49:a3:f1:35:8a:58: 25:48:0c:e9:31:cf:79:66:22:51:6e:e8:71:b5:7a: 26:ee:6d:3e:b2:9d:bd:27:a3:63:bf:9d:fc:b7:71: 23:35:10:3c:1b:e1:30:06:a5:45:07:1c:ce:cd:16: 76:b8:92:82:1a:c2:4c:7a:d1:f8:c6:88:c7:57:41: f5:6a:48:a1:9d:b1:c9:85:38:8c:21:e6:00:2e:ce: 3c:72:69:1d:71:2c:0a:cd:61:2c:e2:9e:d4:6c:d9: 75:e6:f6:4f:0a:54:a3:03:17:f5:a5:f9:12:d0:eb: 1a:53:6d:61:5f:8f:94:49:ff:61:61:50:ad:c9:d4: 74:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:0B:E5:E5:AD:AF:C8:26:04:9E:64:40:0F:60:68:B1:3E:30:7A:65 X509v3 Authority Key Identifier: keyid:DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:f9:82:a8:6f:f3:79:3e:06:70:ba:47:2d:8c:7f:f7:44:d8: 3a:e9:71:97:a4:2f:bc:f1:1c:f3:76:c8:99:18:93:5b:b4:d4: b0:95:67:d2:b4:0d:f9:0c:1d:a3:61:2a:4e:5b:54:b8:05:4a: ad:10:fe:ef:00:c3:23:b3:05:d0:83:4f:ec:0b:97:f7:60:67: f8:6e:00:46:22:7f:51:60:67:c1:10:2c:f8:dc:58:15:1d:30: 28:c8:f6:83:34:8e:87:8e:72:91:35:61:86:56:7e:11:f3:ff: 02:55:13:77:2f:2e:e5:fc:df:34:33:44:20:c9:ff:23:ee:c6: 52:1a:78:c2:a0:f7:90:7e:55:e6:5e:22:32:c7:94:2a:23:34: 8f:f2:19:9d:48:7c:14:db:37:bd:48:48:35:ae:5d:8a:95:64: 99:6e:ee:3a:6f:05:e6:20:10:cc:c8:47:64:ca:50:d8:e5:04: fc:20:bd:72:32:58:a3:3b:12:a5:2d:31:6a:98:03:4d:e3:54: 0f:7a:0a:7d:36:4f:b0:0a:7b:94:eb:b3:06:6d:11:e7:dd:17: 1d:0d:61:71:8d:ce:53:78:eb:71:bd:a0:e6:34:e0:6c:31:85: 3d:c4:35:2e:4e:0b:05:3d:84:70:68:dd:4c:86:80:49:8d:15: ed:98:6d:e5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QkE1QjExMC8GA1UEBRMoREY0N0NFQ0M1N0VBODhBRUI5NkEzODY1NTYwQjlGMjI2 MEJBOTkwRTAeFw0yNTAzMjkwNjE3MzlaFw0yNTA0MDUwNjE3MzlaMBgxFjAUBgNV BAMTDTY3ZTc5MDgzLWEzZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7F8h86UFQ6iO8aK0rx3zqJgBB9GGO9qJoAuQ28e5xHyfilipuHrO44i+zHGxY v5omXdckH3BludiCMMHZcTu42agWGhWIK4YvGHz2TXnAn4N/i3e7X8EtPsSZuhLw GhhWJesS9Fji3s95BeuV61kcnT8P9tHQZ6YRkjg+SztBUkmj8TWKWCVIDOkxz3lm IlFu6HG1eibubT6ynb0no2O/nfy3cSM1EDwb4TAGpUUHHM7NFna4koIawkx60fjG iMdXQfVqSKGdscmFOIwh5gAuzjxyaR1xLArNYSzintRs2XXm9k8KVKMDF/Wl+RLQ 6xpTbWFfj5RJ/2FhUK3J1HT7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFQvl5a2v yCYEnmRAD2BosT4wemUwHwYDVR0jBBgwFoAU30fOzFfqiK65ajhlVgufImC6mQ4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCQTVCLzU4MDA0QUFBNzBF NzExRUZCNDQ0QUY3MEM0RjlBRTAyLzMwZk96RmZxaUs2NWFqaGxWZ3VmSW1DNm1R NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMzBmT3pGZnFpSzY1YWpobFZndWZJbUM2bVE0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC QTVCLzU4MDA0QUFBNzBFNzExRUZCNDQ0QUY3MEM0RjlBRTAyLzMwZk96RmZxaUs2 NWFqaGxWZ3VmSW1DNm1RNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKj5gqhv83k+BnC6Ry2Mf/dE2DrpcZekL7zxHPN2yJkYk1u01LCVZ9K0 DfkMHaNhKk5bVLgFSq0Q/u8AwyOzBdCDT+wLl/dgZ/huAEYif1FgZ8EQLPjcWBUd MCjI9oM0joeOcpE1YYZWfhHz/wJVE3cvLuX83zQzRCDJ/yPuxlIaeMKg95B+VeZe IjLHlCojNI/yGZ1IfBTbN71ISDWuXYqVZJlu7jpvBeYgEMzIR2TKUNjlBPwgvXIy WKM7EqUtMWqYA03jVA96Cn02T7AKe5TrswZtEefdFx0NYXGNzlN463G9oOY04Gwx hT3ENS5OCwU9hHBo3UyGgEmNFe2YbeU= -----END CERTIFICATE-----Generated at Fri Apr 4 21:55:29 2025 by rpki-client