$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft File: o_JydS7F2eEp5N_KCAuI05t5SUQ.mft (raw, json) Hash identifier: t9dBjTCQB/PsmXk3G7AOGyDYbg3CkJYblDXGXSPiFNw= Subject key identifier: 34:37:22:DF:A9:78:FF:1E:81:A5:F4:88:EC:22:36:D9:EA:F1:CD:FF Authority key identifier: A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 Certificate issuer: /CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Certificate serial: 039F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft Manifest number: 0394 Signing time: Thu 03 Apr 2025 00:49:32 +0000 Manifest this update: Thu 03 Apr 2025 00:49:32 +0000 Manifest next update: Thu 10 Apr 2025 00:49:32 +0000 Files and hashes: 1: o_JydS7F2eEp5N_KCAuI05t5SUQ.crl (hash: 1HD3fA/xs5jz+t23OfWPSIvuK+eLULENQvf8PPxvZ9A=) 2: 60523BEA0CA411ED96936D79C4F9AE02.roa (hash: 53okBBihrVod9gd5c53/fKO2EZYSA4Bon9/JWGkN+Rg=) 3: 39574A98960D11ECAAC81D60C4F9AE02.roa (hash: 2N56kFgApjf7qIYT6IwxnOYom7Jlq6/P84ID+wKdJxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:49:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 927 (0x39f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E Validity Not Before: Apr 3 00:49:32 2025 GMT Not After : Apr 10 00:49:32 2025 GMT Subject: CN=67eddb1c-25c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fd:cd:d6:d8:3c:d1:a6:a8:d5:a5:7e:c1:63: 7a:c2:02:ac:20:0e:4c:24:d2:84:7d:ae:e3:0a:14: 45:04:8d:6c:c1:8c:58:e5:f3:45:d0:1e:58:04:64: c4:b3:f4:9e:e1:d6:0f:ca:3b:16:b3:ab:60:1d:60: 44:89:e1:87:82:fd:17:65:b9:41:4a:1e:6d:75:9b: 7a:27:2d:0d:71:4a:3f:66:c1:64:46:63:f6:ce:50: f7:20:a3:8a:bb:52:4f:e0:ff:3d:2b:4e:dc:35:5a: 4b:67:4f:ae:e4:8d:a2:a2:dd:53:d7:2d:27:ce:e8: 9a:95:0c:84:fc:ec:f7:dc:de:90:b8:30:e6:75:b9: ec:d2:0e:9c:84:55:1c:2e:6c:25:62:30:0e:87:b6: 63:2b:08:4b:5f:64:ec:d4:36:f9:18:7a:b8:b0:ab: b2:1d:26:4c:60:85:ae:14:8e:ff:e2:60:22:05:95: 7f:97:da:b5:64:ea:06:d5:f9:de:28:3a:11:b4:52: 2f:97:fc:30:1b:37:aa:88:9c:69:24:c0:19:5d:32: c2:f2:ee:da:0f:45:0c:8b:45:ce:86:db:9f:69:cf: d6:33:19:c1:bd:e7:11:f4:1b:28:68:be:e7:bc:ab: cc:b9:04:35:9b:15:e4:ed:f4:fc:88:6c:4e:e8:38: dc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:37:22:DF:A9:78:FF:1E:81:A5:F4:88:EC:22:36:D9:EA:F1:CD:FF X509v3 Authority Key Identifier: keyid:A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:0a:ab:a8:16:54:6c:c5:85:3d:4b:a5:92:74:80:27:83:19: 12:a5:d1:fd:2f:1c:84:c9:dc:fd:64:4d:7b:15:a5:b6:c6:c6: 91:3d:7a:9c:81:b3:2b:b0:f9:dc:8c:9b:b4:dd:f7:37:58:95: c6:63:85:ee:2e:77:1c:0d:a7:c1:89:5a:d3:ed:8b:93:79:c7: 56:3b:0f:dd:53:b8:e4:b6:5d:fa:f5:e6:f7:02:12:3b:79:18: 31:62:02:94:2f:57:ca:84:c3:c2:52:b7:d4:22:1f:5c:d3:77: 94:46:20:28:a9:b0:1d:f4:33:48:d5:0e:e5:84:98:c6:54:d2: f9:5f:35:d2:4f:2e:cd:66:c2:7b:b5:b5:2e:eb:ca:2b:f0:51: 7b:2c:98:34:b2:68:ff:b7:d8:46:a7:32:5f:57:d8:8c:ce:7c: 71:cb:d4:e8:68:19:e8:da:a1:bf:33:24:0b:04:aa:70:71:fb: b3:2e:88:35:7d:62:7b:7f:60:42:e5:9b:aa:20:f0:47:10:fd: 3c:c6:5f:3b:eb:81:d1:95:79:48:7c:dc:39:bb:46:3a:a7:ea: fe:aa:15:c6:b7:3d:2e:4e:d7:1b:4a:77:cc:68:75:9f:1d:fb: 20:87:b0:a5:89:c6:92:9c:a7:a1:fb:e3:c0:e7:d3:b7:58:83: 70:94:1c:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKEEzRjI3Mjc1MkVDNUQ5RTEyOUU0REZDQTA4MEI4OEQz OUI3OTQ5NDQwHhcNMjUwNDAzMDA0OTMyWhcNMjUwNDEwMDA0OTMyWjAYMRYwFAYD VQQDEw02N2VkZGIxYy0yNWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApf3N1tg80aao1aV+wWN6wgKsIA5MJNKEfa7jChRFBI1swYxY5fNF0B5YBGTE s/Se4dYPyjsWs6tgHWBEieGHgv0XZblBSh5tdZt6Jy0NcUo/ZsFkRmP2zlD3IKOK u1JP4P89K07cNVpLZ0+u5I2iot1T1y0nzuialQyE/Oz33N6QuDDmdbns0g6chFUc LmwlYjAOh7ZjKwhLX2Ts1Db5GHq4sKuyHSZMYIWuFI7/4mAiBZV/l9q1ZOoG1fne KDoRtFIvl/wwGzeqiJxpJMAZXTLC8u7aD0UMi0XOhtufac/WMxnBvecR9BsoaL7n vKvMuQQ1mxXk7fT8iGxO6DjcywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQ3It+p eP8egaX0iOwiNtnq8c3/MB8GA1UdIwQYMBaAFKPycnUuxdnhKeTfyggLiNObeUlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS81OTA5NDk5MDk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJlRXA1Tl9LQ0F1STA1dDVT VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29fSnlkUzdGMmVFcDVOX0tDQXVJMDV0NVNVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS81OTA5NDk5MDk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJl RXA1Tl9LQ0F1STA1dDVTVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjCquoFlRsxYU9S6WSdIAngxkSpdH9LxyEydz9ZE17FaW2xsaRPXqc gbMrsPncjJu03fc3WJXGY4XuLnccDafBiVrT7YuTecdWOw/dU7jktl369eb3AhI7 eRgxYgKUL1fKhMPCUrfUIh9c03eURiAoqbAd9DNI1Q7lhJjGVNL5XzXSTy7NZsJ7 tbUu68or8FF7LJg0smj/t9hGpzJfV9iMznxxy9ToaBno2qG/MyQLBKpwcfuzLog1 fWJ7f2BC5ZuqIPBHEP08xl8764HRlXlIfNw5u0Y6p+r+qhXGtz0uTtcbSnfMaHWf Hfsgh7ClicaSnKeh++PA59O3WINwlBwo -----END CERTIFICATE-----Generated at Fri Apr 4 22:06:36 2025 by rpki-client