$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft File: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft (raw, json) Hash identifier: ACMnCC1IgqdaSD/G00Of+hGvAbHOd9b+5c75q8MDLFY= Subject key identifier: AE:6C:7A:6A:81:AE:0F:7E:81:C6:03:C7:7B:86:94:EB:FC:A3:39:DC Authority key identifier: CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A Certificate issuer: /CN=A91E0CF5/serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft Manifest number: 83 Signing time: Thu 03 Apr 2025 05:51:02 +0000 Manifest this update: Thu 03 Apr 2025 05:51:01 +0000 Manifest next update: Thu 10 Apr 2025 05:51:01 +0000 Files and hashes: 1: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl (hash: 2dUrXVzSS5jgVUi5apaKyPp71U+VOY+z1EwXEWRyAA0=) 2: C155660E492B11EF8EF0D04FC4F9AE02.roa (hash: OVQ/CMJ4XqARrGXYEMgXeRxRPf3/PHnhFuc4e8fTgpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CF5 Validity Not Before: Apr 3 05:51:01 2025 GMT Not After : Apr 10 05:51:01 2025 GMT Subject: CN=67ee21c6-961e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:1e:b3:3b:ab:eb:ed:9f:5c:ac:22:c5:ca:8d: 95:f2:3b:09:96:99:db:d0:57:34:3e:77:9e:b2:dc: 15:0e:9e:68:0d:cd:56:db:b6:3e:41:58:39:43:0f: e2:57:0a:65:4b:c3:ae:40:5a:c2:2a:61:fe:23:37: 52:63:45:92:4a:a9:a5:5c:68:54:34:4f:ff:e7:a6: 18:5d:ff:0d:42:d0:b8:b9:d0:02:35:ae:5d:31:81: fa:30:4c:e1:05:4a:0e:1d:2c:2e:c7:9c:84:35:6d: 28:05:d0:b0:f0:e3:4a:f7:74:01:cf:a1:ee:b3:5a: a1:88:34:6f:9c:de:5f:c6:33:07:95:2e:6b:c9:0d: bd:42:18:31:18:3f:3b:8d:a2:ac:95:be:3c:3d:1c: ec:9f:b1:f7:94:d1:13:e0:ae:f0:50:6e:11:b8:ee: bf:bd:a5:ad:b8:f3:20:cf:ed:7d:a9:34:31:3c:c6: 09:05:72:aa:41:fd:89:a9:fd:02:d2:50:0d:fd:47: 1b:e1:d6:d9:e4:42:1f:96:b7:ba:3e:1c:97:d0:44: 6e:65:95:89:61:34:76:a8:15:ad:fa:65:30:2f:52: fa:28:64:30:a5:1f:2a:d7:fb:fa:d7:4a:ea:cc:51: 52:82:8f:ec:49:82:80:82:e1:05:15:12:79:ff:b4: 02:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:6C:7A:6A:81:AE:0F:7E:81:C6:03:C7:7B:86:94:EB:FC:A3:39:DC X509v3 Authority Key Identifier: keyid:CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:d7:2f:24:4e:28:e5:a1:09:5b:4c:b0:09:b1:fb:b0:da:52: c9:ad:31:91:d3:1b:79:8f:38:fe:00:36:41:30:b0:f4:45:bd: d7:3e:cf:ef:a1:f6:54:c1:c3:73:51:f0:56:a3:94:f2:6e:5b: ad:ba:c0:67:96:1c:15:e6:7d:b1:d5:cf:b4:fc:2c:9f:5f:d2: b4:82:24:12:65:45:a8:17:0e:43:09:4c:5e:a0:d2:39:9e:6a: 9a:4f:e4:6f:72:7d:dc:4a:3d:0b:f7:e6:d3:31:4c:8e:d7:22: 61:ed:1f:e3:21:81:b7:7a:9d:85:d2:cd:09:50:d9:33:69:73: 3a:eb:40:85:e3:31:91:bf:71:07:ad:35:e5:66:ea:a4:99:1b: e4:ec:c1:31:40:f2:ef:19:cc:ad:54:2d:d2:ca:1e:8a:94:21: b6:20:86:af:f3:47:6a:55:67:b8:dc:02:1e:69:a9:5f:0e:9e: 2d:a0:5a:e2:d9:39:f6:f4:f3:81:52:50:55:6e:ac:7a:66:5b: 01:28:d2:76:f4:12:39:ea:71:f2:9f:ca:03:20:6e:bf:2a:16: 79:a3:1d:c0:b4:e0:94:15:50:ed:7d:ce:77:3c:bb:a7:f9:ed: 24:ea:ab:6c:e9:81:e1:5a:27:a7:ed:11:80:f9:0f:ab:8c:d0: d8:5a:55:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDRjUxMTAvBgNVBAUTKENCQkJCQjI0QjIyQjQzNUQxQ0E0OTNBOUQ2M0RDQTc3 OUJFMDc5NkEwHhcNMjUwNDAzMDU1MTAxWhcNMjUwNDEwMDU1MTAxWjAYMRYwFAYD VQQDEw02N2VlMjFjNi05NjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7B6zO6vr7Z9crCLFyo2V8jsJlpnb0Fc0PneestwVDp5oDc1W27Y+QVg5Qw/i VwplS8OuQFrCKmH+IzdSY0WSSqmlXGhUNE//56YYXf8NQtC4udACNa5dMYH6MEzh BUoOHSwux5yENW0oBdCw8ONK93QBz6Hus1qhiDRvnN5fxjMHlS5ryQ29QhgxGD87 jaKslb48PRzsn7H3lNET4K7wUG4RuO6/vaWtuPMgz+19qTQxPMYJBXKqQf2Jqf0C 0lAN/Ucb4dbZ5EIflre6PhyX0ERuZZWJYTR2qBWt+mUwL1L6KGQwpR8q1/v610rq zFFSgo/sSYKAguEFFRJ5/7QC/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK5semqB rg9+gcYDx3uGlOv8ozncMB8GA1UdIwQYMBaAFMu7uySyK0NdHKSTqdY9yneb4Hlq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENGNS81MzhDMTk2MDQ5 MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi95N3U3SkxJclExMGNwSk9wMWozS2Q1dmdl V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3dTdKTElyUTEwY3BKT3AxajNLZDV2Z2VXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENGNS81MzhDMTk2MDQ5MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi95N3U3SkxJclEx MGNwSk9wMWozS2Q1dmdlV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq1y8kTijloQlbTLAJsfuw2lLJrTGR0xt5jzj+ADZBMLD0Rb3XPs/v ofZUwcNzUfBWo5TyblutusBnlhwV5n2x1c+0/CyfX9K0giQSZUWoFw5DCUxeoNI5 nmqaT+Rvcn3cSj0L9+bTMUyO1yJh7R/jIYG3ep2F0s0JUNkzaXM660CF4zGRv3EH rTXlZuqkmRvk7MExQPLvGcytVC3Syh6KlCG2IIav80dqVWe43AIeaalfDp4toFri 2Tn29POBUlBVbqx6ZlsBKNJ29BI56nHyn8oDIG6/KhZ5ox3AtOCUFVDtfc53PLun +e0k6qts6YHhWien7RGA+Q+rjNDYWlVm -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:31 2025 by rpki-client