$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft File: u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft (raw, json) Hash identifier: dA0/dxzcAKQDRQpp2dTqz0+V3XpI9j0A1CfqPlVDzk0= Subject key identifier: 47:B8:6F:41:82:6D:FF:0A:F5:ED:3B:69:2E:F9:37:76:8E:84:30:11 Authority key identifier: BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24 Certificate issuer: /CN=A91EDB37/serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924 Certificate serial: 067C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft Manifest number: 0670 Signing time: Thu 03 Apr 2025 03:51:25 +0000 Manifest this update: Thu 03 Apr 2025 03:51:24 +0000 Manifest next update: Thu 10 Apr 2025 03:51:24 +0000 Files and hashes: 1: u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl (hash: Lc6eeZnYp3WJdcVx9hW/TwCvygxT0G/DZAK75c3DMEI=) 2: DE7B831C37DA11EDBEF9D050C4F9AE02.roa (hash: +kKylmkca6+FAx4sOYGqHKzwXEhQ+5JcXHkL0UhejKI=) 3: E959541EB28511ED8893C51CC4F9AE02.roa (hash: UcfQbjt5pGDSOZCx5IzeUlVnX3YAZQw3ib/ytvODV4c=) 4: DDC1A87037DA11EDBEF9D050C4F9AE02.roa (hash: JPtWkJd9tKQ9YS8DsRPubKSCxL1JQ7cieCqKgCXkh+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1660 (0x67c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDB37 Validity Not Before: Apr 3 03:51:24 2025 GMT Not After : Apr 10 03:51:24 2025 GMT Subject: CN=67ee05bd-814d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b6:ad:c6:3a:60:10:da:6a:25:bb:10:c4:e2: 56:fe:e4:cb:64:93:09:5e:e4:2a:cd:46:b6:16:dc: fb:28:38:5a:f8:a6:f6:17:d9:e6:b8:97:d4:b4:e8: c7:ec:85:07:15:f3:8d:1d:99:4d:12:80:cb:9c:23: 30:24:52:5b:bc:1e:af:e2:d8:c0:80:2f:2c:a3:f4: 7d:da:1e:44:6f:da:aa:5d:00:2b:4a:c7:66:0c:3b: 8f:6c:9d:8f:06:de:a8:39:52:a5:1b:0b:e0:d2:dc: 1f:8a:7d:5b:a7:c5:f4:b3:23:3d:76:88:4e:ed:61: 38:34:04:39:97:0c:1a:05:b3:68:ce:ef:06:0f:37: 52:e7:9c:59:35:d3:2f:7f:71:17:91:fd:2e:a2:31: 3b:b2:5a:b1:08:db:dc:ba:1d:5e:36:25:53:c8:30: 56:6d:c6:12:41:ad:eb:fe:32:49:57:6b:fb:ec:2f: 3a:9f:bd:0e:5d:c1:0c:69:96:7c:fc:65:5b:9f:b6: 9b:ec:68:eb:8e:3b:43:6c:ff:10:0a:24:e0:c6:09: 81:65:a3:27:d8:dc:8d:cd:75:ae:93:f0:b5:b9:9f: 20:2e:7e:b6:bf:08:46:71:fe:50:ec:ac:62:c4:76: 50:3b:91:6a:5d:68:02:06:45:72:af:8d:f3:33:73: d2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B8:6F:41:82:6D:FF:0A:F5:ED:3B:69:2E:F9:37:76:8E:84:30:11 X509v3 Authority Key Identifier: keyid:BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:16:3a:7e:66:57:e6:a3:71:93:a3:86:95:eb:18:cf:c1:57: b7:0e:7f:92:74:01:d5:63:de:08:d5:41:50:55:a3:ac:a1:4b: 67:c1:d4:b4:c2:2d:2a:fa:05:b4:cb:50:2a:04:57:85:b8:84: 79:ac:be:2b:61:a7:a5:d7:2f:c3:2e:f0:df:da:14:9b:f4:68: 48:ce:f7:71:30:fc:47:7b:fe:33:6f:77:f9:d0:31:65:a5:16: 43:79:5e:0d:6b:11:d5:dc:b9:e3:ad:27:a0:66:59:3c:5e:d9: 3e:18:c7:6d:ea:cc:6d:66:2c:79:14:21:e6:80:6c:4a:5d:4c: 28:9f:1e:51:3a:82:2b:59:59:78:41:28:4e:86:15:01:b5:43: 3d:f9:3e:8a:b2:71:fd:e5:57:44:d7:a5:17:4d:9d:de:e7:1a: 37:87:cc:e0:3e:9e:75:84:d1:f0:14:36:4b:44:e9:a4:11:7b: 4a:f8:9c:50:5f:57:ec:36:5d:04:15:69:1c:21:b7:48:7e:51: 07:1f:96:e2:21:b6:44:27:cf:1c:de:67:fd:01:9f:7f:a3:39: b2:8a:7e:28:13:aa:d4:54:2f:20:39:c2:7a:f8:37:63:87:42: cb:c6:a9:d6:af:5d:9e:9f:dc:47:22:4e:ec:e8:e3:f6:9b:5a: 8c:32:96:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURCMzcxMTAvBgNVBAUTKEJCNTQ0MTc2RERFNjhFMzU4MUM1QzQzRjRGQzdDQzJD RjY4RDY5MjQwHhcNMjUwNDAzMDM1MTI0WhcNMjUwNDEwMDM1MTI0WjAYMRYwFAYD VQQDEw02N2VlMDViZC04MTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ratxjpgENpqJbsQxOJW/uTLZJMJXuQqzUa2Ftz7KDha+Kb2F9nmuJfUtOjH 7IUHFfONHZlNEoDLnCMwJFJbvB6v4tjAgC8so/R92h5Eb9qqXQArSsdmDDuPbJ2P Bt6oOVKlGwvg0twfin1bp8X0syM9dohO7WE4NAQ5lwwaBbNozu8GDzdS55xZNdMv f3EXkf0uojE7slqxCNvcuh1eNiVTyDBWbcYSQa3r/jJJV2v77C86n70OXcEMaZZ8 /GVbn7ab7GjrjjtDbP8QCiTgxgmBZaMn2NyNzXWuk/C1uZ8gLn62vwhGcf5Q7Kxi xHZQO5FqXWgCBkVyr43zM3PSLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEe4b0GC bf8K9e07aS75N3aOhDARMB8GA1UdIwQYMBaAFLtUQXbd5o41gcXEP0/HzCz2jWkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy81NzY0NzM3QTc4 QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi91MVJCZHQzbWpqV0J4Y1FfVDhmTUxQYU5h U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxUkJkdDNtampXQnhjUV9UOGZNTFBhTmFTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REIzNy81NzY0NzM3QTc4QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi91MVJCZHQzbWpq V0J4Y1FfVDhmTUxQYU5hU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASFjp+Zlfmo3GTo4aV6xjPwVe3Dn+SdAHVY94I1UFQVaOsoUtnwdS0 wi0q+gW0y1AqBFeFuIR5rL4rYael1y/DLvDf2hSb9GhIzvdxMPxHe/4zb3f50DFl pRZDeV4NaxHV3LnjrSegZlk8Xtk+GMdt6sxtZix5FCHmgGxKXUwonx5ROoIrWVl4 QShOhhUBtUM9+T6KsnH95VdE16UXTZ3e5xo3h8zgPp51hNHwFDZLROmkEXtK+JxQ X1fsNl0EFWkcIbdIflEHH5biIbZEJ88c3mf9AZ9/ozmyin4oE6rUVC8gOcJ6+Ddj h0LLxqnWr12en9xHIk7s6OP2m1qMMpZm -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:58 2025 by rpki-client