$ rpki-client -vvf rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft File: c-uK0qOl84q_4a4oB08oMcJzG6k.mft (raw, json) Hash identifier: YC2kWKhprYH1H/DDJwX6ZmwzaaVjWvtQru594H1NA/M= Subject key identifier: E7:67:30:95:7C:81:ED:1E:A4:2F:E6:9D:7C:AD:D9:A1:30:02:58:68 Authority key identifier: 73:EB:8A:D2:A3:A5:F3:8A:BF:E1:AE:28:07:4F:28:31:C2:73:1B:A9 Certificate issuer: /CN=A91E42AA/serialNumber=73EB8AD2A3A5F38ABFE1AE28074F2831C2731BA9 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft Manifest number: 67 Signing time: Sat 29 Mar 2025 06:17:11 +0000 Manifest this update: Sat 29 Mar 2025 06:17:11 +0000 Manifest next update: Sat 05 Apr 2025 06:17:11 +0000 Files and hashes: 1: c-uK0qOl84q_4a4oB08oMcJzG6k.crl (hash: GGJuTqeY5wGRu+cxRB99ngNxIT05xBckCxw/x29xK7A=) 2: 8B7BD7CC700211EF9FEC365AC4F9AE02.roa (hash: MYqPgxBGfIGKCkX+SQW42+81sVWr8a9Nd2V6LH33Vw8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.crl rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E42AA Validity Not Before: Mar 29 06:17:11 2025 GMT Not After : Apr 5 06:17:11 2025 GMT Subject: CN=67e79067-5c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e4:c5:ee:1e:65:4e:8d:64:23:ce:52:b0:ed: 61:33:7d:33:4c:4a:d8:db:08:76:84:1e:0d:f0:20: 41:5e:a4:ee:ea:22:35:6f:fb:a7:e6:3a:34:5b:bb: 17:46:87:17:68:14:88:1a:84:66:ca:ac:13:32:4e: 83:43:a9:f5:52:98:d9:05:ce:7c:f3:b9:85:ae:da: bc:8d:68:e6:22:2a:d9:12:9f:e4:79:67:93:c0:4c: 97:eb:32:93:15:ee:07:a9:af:50:68:47:82:bd:f2: 7f:71:58:b1:ee:cf:61:28:81:09:37:a5:7d:ed:f4: 71:61:cd:d7:ae:af:93:a9:a5:91:9c:41:d5:04:b0: 25:6b:1b:4e:00:42:41:b9:6f:10:38:de:b9:31:6e: c3:0f:d3:38:fa:7d:3c:90:59:14:5a:73:bd:d7:3a: 26:93:dd:2c:d6:c6:96:23:26:2d:39:57:00:f9:69: f2:b2:6c:0d:97:e7:3b:53:d9:cf:24:da:cc:96:5c: b9:d8:cb:42:ae:4c:e9:4d:94:b6:ea:4b:52:42:46: f2:7e:bc:ec:ae:eb:1d:7b:b3:0c:29:b4:85:cd:51: 6e:3c:08:78:5e:e0:ed:b1:16:65:7b:35:a7:3c:e7: f3:4b:f3:6e:8c:26:28:76:86:c1:d7:05:3e:54:d3: 52:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:67:30:95:7C:81:ED:1E:A4:2F:E6:9D:7C:AD:D9:A1:30:02:58:68 X509v3 Authority Key Identifier: keyid:73:EB:8A:D2:A3:A5:F3:8A:BF:E1:AE:28:07:4F:28:31:C2:73:1B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:44:2b:32:22:7c:d7:7d:9d:e4:59:eb:29:68:b4:04:d4:c1: 6c:42:aa:3a:0e:e4:c4:fd:35:e6:1d:22:b1:c9:7d:1e:ce:46: b5:e2:d3:b0:bd:2e:99:41:14:05:17:80:c5:20:d1:22:14:79: d8:dc:e1:20:c8:81:59:59:92:b3:86:35:b9:61:13:78:e8:a5: 64:34:f8:1a:1d:1b:44:94:b6:12:19:80:9e:e3:6d:22:86:1d: fd:d1:f0:86:f7:87:c1:b4:87:18:41:03:7b:11:b3:73:9b:60: 59:f2:c6:69:dd:11:26:9a:49:96:4b:f6:88:98:ec:a7:f5:43: 76:ff:25:a8:06:16:5d:35:a9:ba:94:a1:d8:27:e0:23:e9:06: 5e:42:5e:f1:c8:cc:94:c3:2b:ac:db:8a:05:07:51:e2:27:34: dd:a9:4b:7f:c7:b5:cd:66:e6:93:23:82:0e:99:87:c4:39:c9: f3:34:4a:52:2c:b2:30:e1:9d:c9:17:e1:5d:34:e3:19:db:a4: 88:e0:86:7d:6d:37:e6:48:59:86:f6:6a:81:d2:a3:27:8a:9c: be:1a:b1:78:9a:51:9c:e3:a1:67:9b:60:e0:b6:1a:e8:5e:76: ce:3c:84:3c:c0:62:49:ec:81:e0:45:be:46:9f:29:58:76:86: 5f:3a:58:c7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NDJBQTExMC8GA1UEBRMoNzNFQjhBRDJBM0E1RjM4QUJGRTFBRTI4MDc0RjI4MzFD MjczMUJBOTAeFw0yNTAzMjkwNjE3MTFaFw0yNTA0MDUwNjE3MTFaMBgxFjAUBgNV BAMTDTY3ZTc5MDY3LTVjMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDN5MXuHmVOjWQjzlKw7WEzfTNMStjbCHaEHg3wIEFepO7qIjVv+6fmOjRbuxdG hxdoFIgahGbKrBMyToNDqfVSmNkFznzzuYWu2ryNaOYiKtkSn+R5Z5PATJfrMpMV 7gepr1BoR4K98n9xWLHuz2EogQk3pX3t9HFhzdeur5OppZGcQdUEsCVrG04AQkG5 bxA43rkxbsMP0zj6fTyQWRRac73XOiaT3SzWxpYjJi05VwD5afKybA2X5ztT2c8k 2syWXLnYy0KuTOlNlLbqS1JCRvJ+vOyu6x17swwptIXNUW48CHhe4O2xFmV7Nac8 5/NL826MJih2hsHXBT5U01K/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU52cwlXyB 7R6kL+adfK3ZoTACWGgwHwYDVR0jBBgwFoAUc+uK0qOl84q/4a4oB08oMcJzG6kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0MkFBL0U0MDdCMzMwNzAw MTExRUZCQkU4QTE1OEM0RjlBRTAyL2MtdUswcU9sODRxXzRhNG9CMDhvTWNKekc2 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYy11SzBxT2w4NHFfNGE0b0IwOG9NY0p6RzZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 MkFBL0U0MDdCMzMwNzAwMTExRUZCQkU4QTE1OEM0RjlBRTAyL2MtdUswcU9sODRx XzRhNG9CMDhvTWNKekc2ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALNEKzIifNd9neRZ6ylotATUwWxCqjoO5MT9NeYdIrHJfR7ORrXi07C9 LplBFAUXgMUg0SIUedjc4SDIgVlZkrOGNblhE3jopWQ0+BodG0SUthIZgJ7jbSKG Hf3R8Ib3h8G0hxhBA3sRs3ObYFnyxmndESaaSZZL9oiY7Kf1Q3b/JagGFl01qbqU odgn4CPpBl5CXvHIzJTDK6zbigUHUeInNN2pS3/Htc1m5pMjgg6Zh8Q5yfM0SlIs sjDhnckX4V004xnbpIjghn1tN+ZIWYb2aoHSoyeKnL4asXiaUZzjoWebYOC2Guhe ds48hDzAYknsgeBFvkafKVh2hl86WMc= -----END CERTIFICATE-----Generated at Fri Apr 4 22:15:01 2025 by rpki-client