$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft File: 0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft (raw, json) Hash identifier: 9OOGhgkypnhHR3MAsm21RfAx3D/03ayijlW7Ixh9OuY= Subject key identifier: 4C:8F:0C:4B:70:02:CE:06:48:5C:DB:27:94:36:D8:1B:A3:53:1A:11 Authority key identifier: D2:6E:22:30:62:18:DA:96:C3:02:FB:EA:AC:94:37:27:5B:1E:C6:ED Certificate issuer: /CN=A91DC24F/serialNumber=D26E22306218DA96C302FBEAAC9437275B1EC6ED Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft Manifest number: 0119 Signing time: Sat 29 Mar 2025 04:16:25 +0000 Manifest this update: Sat 29 Mar 2025 04:16:24 +0000 Manifest next update: Sat 05 Apr 2025 04:16:24 +0000 Files and hashes: 1: 0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl (hash: a/F7Sr0qx926izQ95bmJifdYkmSEraUFFXBEBi2eX8E=) 2: E4A5F20468D011EE8509F75CC4F9AE02.roa (hash: JQKbNYMf/zVARnkpO4HdrpLHL11BuAmo0S1Bwvh58kQ=) 3: E50B556868D011EE8509F75CC4F9AE02.roa (hash: 15Ef3WoCrFkSaZWsvVqBxZqSnhk/RC+N8roeKpk66Po=) 4: E42B360468D011EE8509F75CC4F9AE02.roa (hash: 3NF/WOhgj9HD4AOf9A4AyqHhiWaUzMkr0bQxzyCSlus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC24F Validity Not Before: Mar 29 04:16:24 2025 GMT Not After : Apr 5 04:16:24 2025 GMT Subject: CN=67e77418-7e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0e:97:32:eb:7e:67:11:26:4f:b0:54:cf:a3: d0:3f:4a:88:77:88:21:f5:03:5c:71:b1:38:1a:8c: 3a:e2:b5:5b:a0:39:5f:b2:2c:b2:f3:68:85:cd:e8: e7:a9:85:4c:97:a9:ee:86:1e:81:2a:42:fb:34:4e: fb:05:c4:81:27:91:f3:3f:8f:79:ab:48:10:f5:c5: ac:20:cc:3b:ea:1c:49:23:d2:19:a8:92:9a:68:d3: 61:95:b9:2a:22:5b:aa:2d:8c:2c:3e:a2:cd:8b:09: 66:f5:ec:10:0c:5d:ac:01:27:ca:1a:78:89:fa:ac: fa:c8:25:85:bf:ae:c2:02:c5:36:9b:20:a9:f0:6d: cd:70:50:15:66:a8:f8:27:8f:62:99:e1:48:f4:65: 3f:7a:ad:20:09:f7:e1:ee:b9:ba:4f:a5:a0:53:af: 25:49:97:e6:da:b2:7e:e0:d6:26:0f:7a:7b:e8:ac: e8:de:bc:99:8e:ab:3d:32:c0:01:40:61:a5:c9:ca: 65:1e:59:69:5d:9e:d2:2d:d2:12:de:29:46:a6:1f: 2b:7c:a6:f4:4a:99:4a:01:b6:49:ca:81:45:24:0e: 38:d1:64:a0:5b:1d:43:02:dc:f3:66:a2:9b:a1:ca: c4:9c:30:d1:cd:05:60:29:92:fb:14:a1:bb:da:02: 82:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8F:0C:4B:70:02:CE:06:48:5C:DB:27:94:36:D8:1B:A3:53:1A:11 X509v3 Authority Key Identifier: keyid:D2:6E:22:30:62:18:DA:96:C3:02:FB:EA:AC:94:37:27:5B:1E:C6:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:dc:76:91:ef:90:f3:c9:21:18:78:1c:bc:7e:b4:90:cb:ce: 75:f9:20:8e:31:bb:78:be:00:1e:33:f1:8c:f6:93:b2:67:79: 44:a0:b0:cc:5d:74:a4:6f:66:0e:0e:63:4d:ff:d3:5b:bb:c8: c7:50:5d:47:4d:bc:f9:ea:ca:81:16:23:69:d0:26:1b:c6:1f: e7:e1:41:c6:3b:82:68:af:18:97:5c:5f:ea:91:6d:49:52:be: c5:2c:10:f9:52:94:07:07:71:ba:d1:f0:ee:45:4a:80:cb:ec: 16:89:44:9a:e5:7f:b0:cf:cd:7a:d6:fa:b2:19:86:90:ee:96: d2:e4:a1:16:aa:c9:34:21:47:77:7d:86:1d:3e:0b:75:1d:a4: e3:5a:1a:a4:9a:71:23:d3:04:c4:f0:3d:b3:68:a7:14:8a:af: aa:4b:ed:ac:1a:f6:3f:89:4f:78:16:df:a5:c8:17:a8:7a:fd: 33:4f:d2:2d:fb:4c:ab:b4:b3:bf:c4:9b:e6:03:6f:92:2b:6e: 5f:2e:02:56:c0:9a:e1:6f:58:3a:dc:a6:bf:96:9f:db:45:b1: 36:0d:d1:d1:6d:25:32:1e:67:f3:a1:8d:0c:62:84:af:4d:ad: 54:61:ca:48:d3:d6:0d:ae:b9:0b:ce:2a:c8:e9:31:0b:70:7e: 6d:7b:67:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMyNEYxMTAvBgNVBAUTKEQyNkUyMjMwNjIxOERBOTZDMzAyRkJFQUFDOTQzNzI3 NUIxRUM2RUQwHhcNMjUwMzI5MDQxNjI0WhcNMjUwNDA1MDQxNjI0WjAYMRYwFAYD VQQDEw02N2U3NzQxOC03ZTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtA6XMut+ZxEmT7BUz6PQP0qId4gh9QNccbE4Gow64rVboDlfsiyy82iFzejn qYVMl6nuhh6BKkL7NE77BcSBJ5HzP495q0gQ9cWsIMw76hxJI9IZqJKaaNNhlbkq IluqLYwsPqLNiwlm9ewQDF2sASfKGniJ+qz6yCWFv67CAsU2myCp8G3NcFAVZqj4 J49imeFI9GU/eq0gCffh7rm6T6WgU68lSZfm2rJ+4NYmD3p76Kzo3ryZjqs9MsAB QGGlycplHllpXZ7SLdIS3ilGph8rfKb0SplKAbZJyoFFJA440WSgWx1DAtzzZqKb ocrEnDDRzQVgKZL7FKG72gKC+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEyPDEtw As4GSFzbJ5Q22BujUxoRMB8GA1UdIwQYMBaAFNJuIjBiGNqWwwL76qyUNydbHsbt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzI0Ri8zQzEzMDU3NjY3 MTAxMUVFOUVDOUExMjdDNEY5QUUwMi8wbTRpTUdJWTJwYkRBdnZxckpRM0oxc2V4 dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBtNGlNR0lZMnBiREF2dnFySlEzSjFzZXh1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzI0Ri8zQzEzMDU3NjY3MTAxMUVFOUVDOUExMjdDNEY5QUUwMi8wbTRpTUdJWTJw YkRBdnZxckpRM0oxc2V4dTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN3HaR75DzySEYeBy8frSQy851+SCOMbt4vgAeM/GM9pOyZ3lEoLDM XXSkb2YODmNN/9Nbu8jHUF1HTbz56sqBFiNp0CYbxh/n4UHGO4JorxiXXF/qkW1J Ur7FLBD5UpQHB3G60fDuRUqAy+wWiUSa5X+wz8161vqyGYaQ7pbS5KEWqsk0IUd3 fYYdPgt1HaTjWhqkmnEj0wTE8D2zaKcUiq+qS+2sGvY/iU94Ft+lyBeoev0zT9It +0yrtLO/xJvmA2+SK25fLgJWwJrhb1g63Ka/lp/bRbE2DdHRbSUyHmfzoY0MYoSv Ta1UYcpI09YNrrkLzirI6TELcH5te2cm -----END CERTIFICATE-----Generated at Fri Apr 4 22:32:03 2025 by rpki-client