$ rpki-client -vvf rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft File: MmYwanA43JsBUyfHJVZAXzn85gs.mft (raw, json) Hash identifier: 76Ot0AUEmur/9HhRtW/oRDAJACvfMgQPuBC8FJha05M= Subject key identifier: 7E:A8:6D:13:10:20:70:BF:AE:F5:61:12:4C:5A:33:FB:D5:FB:E7:9C Authority key identifier: 32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B Certificate issuer: /CN=A91F644E/serialNumber=3266306A7038DC9B015327C72556405F39FCE60B Certificate serial: 1A4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft Manifest number: 1A42 Signing time: Sun 06 Apr 2025 16:17:46 +0000 Manifest this update: Sun 06 Apr 2025 16:17:46 +0000 Manifest next update: Sun 13 Apr 2025 16:17:46 +0000 Files and hashes: 1: MmYwanA43JsBUyfHJVZAXzn85gs.crl (hash: mJ9HPlO8kSBx1qqcj4bmFpswtclz0pgKMniVOrn1oTM=) 2: 312DC5B8405E11E7A28FCE45C4F9AE02.roa (hash: arkqSY1NH0JOG5y+n5PhHtwp0RcGV49oD/BwEA9o5TM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 16:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6732 (0x1a4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F644E Validity Not Before: Apr 6 16:17:46 2025 GMT Not After : Apr 13 16:17:46 2025 GMT Subject: CN=67f2a92a-5476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e8:7f:3d:07:8a:a0:cd:b7:34:22:85:cc:11: 6a:6c:49:fb:df:c9:e4:9c:b4:8e:b9:33:2c:26:34: 87:f1:d0:59:a9:0a:c2:18:fc:e6:6d:eb:e9:ec:56: e7:72:54:dd:e2:fd:34:e3:e4:ea:82:be:74:e3:d4: 4f:46:df:a9:4c:ce:8c:77:48:38:62:54:43:bd:32: 55:1a:22:21:83:a7:09:b8:aa:73:27:c6:c6:07:92: 06:de:3d:f7:c0:94:77:2a:be:a3:1e:7c:00:fe:b7: 5f:e0:32:66:9f:1e:ae:4e:28:bf:f3:da:7b:99:7d: 20:b0:06:1f:12:e8:af:d1:25:c3:59:ce:21:af:f2: 0d:62:e7:b8:dc:fc:bd:80:d4:f8:dc:22:ab:ea:68: cd:24:b5:4b:c0:09:2f:07:6c:63:1d:51:dd:3f:77: cf:10:8b:10:77:75:ff:29:c2:8f:9a:3e:29:2d:1c: bb:c0:80:10:3f:52:20:99:f6:fd:77:61:56:d7:82: 9d:fe:62:16:0d:d8:16:6e:56:e2:46:e0:af:13:5c: 3a:35:c8:fd:ba:08:d8:09:f2:c8:90:37:1a:ff:0d: 30:53:9b:82:e7:6c:f8:3e:ff:5f:65:bf:97:64:41: ec:24:40:f4:02:03:86:84:3f:7f:00:b2:dc:52:fe: 58:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A8:6D:13:10:20:70:BF:AE:F5:61:12:4C:5A:33:FB:D5:FB:E7:9C X509v3 Authority Key Identifier: keyid:32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:44:f5:cc:0b:62:24:ff:0b:6f:e1:94:f4:24:fa:0d:85:1b: cb:c4:eb:2a:87:dd:6e:30:b1:25:b5:b6:78:4f:70:f9:ad:b5: 99:2b:64:a9:89:06:60:c1:77:98:40:ed:52:80:d9:95:31:d2: 4c:b7:02:b2:b5:0b:f7:71:5c:51:54:29:94:e5:01:b2:32:ac: 45:5e:30:f3:f1:4d:a6:13:8d:32:eb:92:b9:2a:70:4b:99:e8: 53:bf:ad:df:74:df:7e:0c:1d:a0:75:d6:b5:9d:8b:47:97:c8: 04:ea:df:3b:6f:c2:ad:74:b6:54:e8:93:c3:99:e0:e9:53:4d: 8a:dc:65:43:e2:ee:2c:87:c2:c9:ae:6d:60:bf:af:32:1f:82: 36:f4:b5:37:65:3b:88:84:ca:48:f1:ac:06:43:f9:0c:4b:8b: e3:9b:30:0f:57:39:6e:51:82:69:27:db:11:d9:5a:48:00:44: b4:cb:8f:f0:c7:f8:b3:10:d0:79:4d:fe:42:e8:00:17:bf:cd: 11:d4:26:89:99:4a:a3:a2:65:a3:cb:b4:86:be:23:ed:a7:9c: 39:e2:d8:61:d7:a8:a2:dc:6b:fc:bb:76:93:77:de:23:ac:7f: 6b:0c:a6:9f:90:0e:c8:62:bd:d6:b0:50:4d:db:f3:26:d7:5c: 36:6f:51:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY0NEUxMTAvBgNVBAUTKDMyNjYzMDZBNzAzOERDOUIwMTUzMjdDNzI1NTY0MDVG MzlGQ0U2MEIwHhcNMjUwNDA2MTYxNzQ2WhcNMjUwNDEzMTYxNzQ2WjAYMRYwFAYD VQQDEw02N2YyYTkyYS01NDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+h/PQeKoM23NCKFzBFqbEn738nknLSOuTMsJjSH8dBZqQrCGPzmbevp7Fbn clTd4v004+Tqgr5049RPRt+pTM6Md0g4YlRDvTJVGiIhg6cJuKpzJ8bGB5IG3j33 wJR3Kr6jHnwA/rdf4DJmnx6uTii/89p7mX0gsAYfEuiv0SXDWc4hr/INYue43Py9 gNT43CKr6mjNJLVLwAkvB2xjHVHdP3fPEIsQd3X/KcKPmj4pLRy7wIAQP1Igmfb9 d2FW14Kd/mIWDdgWblbiRuCvE1w6Ncj9ugjYCfLIkDca/w0wU5uC52z4Pv9fZb+X ZEHsJED0AgOGhD9/ALLcUv5YqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6obRMQ IHC/rvVhEkxaM/vV++ecMB8GA1UdIwQYMBaAFDJmMGpwONybAVMnxyVWQF85/OYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjQ0RS9FNDNCNkU0QTQw NUQxMUU3QjAxQkExNDVDNEY5QUUwMi9NbVl3YW5BNDNKc0JVeWZISlZaQVh6bjg1 Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tWXdhbkE0M0pzQlV5ZkhKVlpBWHpuODVncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjQ0RS9FNDNCNkU0QTQwNUQxMUU3QjAxQkExNDVDNEY5QUUwMi9NbVl3YW5BNDNK c0JVeWZISlZaQVh6bjg1Z3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByRPXMC2Ik/wtv4ZT0JPoNhRvLxOsqh91uMLEltbZ4T3D5rbWZK2Sp iQZgwXeYQO1SgNmVMdJMtwKytQv3cVxRVCmU5QGyMqxFXjDz8U2mE40y65K5KnBL mehTv63fdN9+DB2gdda1nYtHl8gE6t87b8KtdLZU6JPDmeDpU02K3GVD4u4sh8LJ rm1gv68yH4I29LU3ZTuIhMpI8awGQ/kMS4vjmzAPVzluUYJpJ9sR2VpIAES0y4/w x/izENB5Tf5C6AAXv80R1CaJmUqjomWjy7SGviPtp5w54thh16ii3Gv8u3aTd94j rH9rDKafkA7IYr3WsFBN2/Mm11w2b1Eh -----END CERTIFICATE-----Generated at Mon Apr 7 06:28:08 2025 by rpki-client