$ rpki-client -vvf rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft File: PurfFFrim0gkCj-6OvvZSajxU10.mft (raw, json) Hash identifier: CnMmTEf6a4yXNKpKyDFhOEUv/SN7VKz7yN8E5IXrjPc= Subject key identifier: 99:03:7B:21:FE:BB:8A:99:63:F2:FD:AC:AA:4F:65:17:6F:CD:FA:B2 Authority key identifier: 3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D Certificate issuer: /CN=A91F823E/serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D Certificate serial: 02ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft Manifest number: 02E9 Signing time: Thu 03 Apr 2025 01:19:46 +0000 Manifest this update: Thu 03 Apr 2025 01:19:46 +0000 Manifest next update: Thu 10 Apr 2025 01:19:46 +0000 Files and hashes: 1: PurfFFrim0gkCj-6OvvZSajxU10.crl (hash: 9fjzWK0nWAdwag9AjFCW0/JmPT7B7Rn99lkVR2KNZvQ=) 2: B3481ED4D5B611ECA61EEC28C4F9AE02.roa (hash: 7bYPkVMZrrnunuEV97KsBcLOn5jOLNiIR6VQXBJQwkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 749 (0x2ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F823E Validity Not Before: Apr 3 01:19:46 2025 GMT Not After : Apr 10 01:19:46 2025 GMT Subject: CN=67ede232-a77f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:b3:dc:4a:8c:40:d2:35:2b:18:99:0d:3b:10: 14:1d:92:88:1c:ff:fa:0a:16:f1:6c:b6:fc:77:17: ca:57:9b:a2:93:dd:07:6e:dc:72:ed:58:ec:df:65: 8c:1b:06:f7:25:61:0e:ba:37:67:85:1d:47:ca:11: ef:52:45:2e:01:89:35:36:cf:72:a8:04:66:d2:1c: 5e:31:16:10:fc:15:c2:1a:22:b1:3e:6e:0a:2c:06: 81:d0:b4:78:bb:03:a2:c9:c3:16:56:0d:3b:fa:cd: d5:15:19:98:22:d9:7d:01:18:af:15:01:7f:95:77: 1b:d6:f0:3c:39:94:f4:52:e7:eb:6b:c2:23:58:80: e0:1c:f4:7a:8a:9d:50:2f:8e:0e:37:59:90:67:c4: db:c3:9f:4c:6e:51:4b:3a:71:c7:fd:e2:4d:fc:c4: dc:7c:f4:27:2c:6a:de:91:f2:13:eb:ba:77:34:f8: 0f:95:18:8d:12:99:0e:ad:34:e3:53:74:98:7d:87: 8f:7d:f4:1f:e1:ca:5d:47:e8:11:18:39:aa:56:17: 71:9f:5f:64:1f:3c:b1:39:ea:77:f4:d2:04:06:08: b5:79:fe:c1:d5:de:61:94:b8:7f:51:05:65:0c:b3: 48:24:0d:d9:3e:a1:dd:80:74:0d:ec:e1:60:6a:8a: 8c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:03:7B:21:FE:BB:8A:99:63:F2:FD:AC:AA:4F:65:17:6F:CD:FA:B2 X509v3 Authority Key Identifier: keyid:3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:9b:08:3e:aa:8f:e8:d2:0c:9b:4a:bb:00:eb:4a:23:40:34: e0:c9:1d:92:1a:a6:6b:22:eb:e4:ae:69:49:f7:66:cc:89:b4: 54:53:dc:cf:0a:e1:c4:1a:cd:45:6d:00:80:6a:64:85:cb:8a: 5e:91:bc:4e:3f:fb:c3:90:b6:e1:e0:c2:a7:a2:b0:2e:61:b2: b8:39:3e:03:fa:1f:6b:95:8b:03:36:e0:b5:fe:29:6c:51:67: cf:fa:6a:f5:60:6c:df:44:08:af:9b:fa:a8:7b:27:f4:44:86: f8:fb:0e:8f:16:89:30:1a:e8:6d:e6:fb:d8:ad:a6:74:e0:6e: 49:c1:e4:91:e8:be:c1:95:0a:2c:83:c2:01:e8:b8:f5:15:2d: d6:22:f7:77:34:5a:a5:f6:ea:cb:81:eb:00:04:24:6f:14:62: 1f:de:7a:93:e2:38:12:33:e2:99:3f:af:2a:4e:fe:9c:bf:55: 95:1e:64:99:7c:ab:6d:a2:99:16:00:1d:b6:fb:f5:f8:8f:c2: fe:f9:5c:33:0c:12:27:f5:83:60:d5:a1:5b:a5:8f:83:73:70: cc:5e:02:1b:8b:37:df:4f:6f:31:1f:0b:40:82:a1:f3:9e:a1: 6f:7f:aa:b1:92:48:9e:ae:1f:f4:c2:57:2b:ff:c6:45:c2:79: 0c:ca:b7:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgyM0UxMTAvBgNVBAUTKDNFRUFERjE0NUFFMjlCNDgyNDBBM0ZCQTNBRkJEOTQ5 QThGMTUzNUQwHhcNMjUwNDAzMDExOTQ2WhcNMjUwNDEwMDExOTQ2WjAYMRYwFAYD VQQDEw02N2VkZTIzMi1hNzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8bPcSoxA0jUrGJkNOxAUHZKIHP/6ChbxbLb8dxfKV5uik90Hbtxy7Vjs32WM Gwb3JWEOujdnhR1HyhHvUkUuAYk1Ns9yqARm0hxeMRYQ/BXCGiKxPm4KLAaB0LR4 uwOiycMWVg07+s3VFRmYItl9ARivFQF/lXcb1vA8OZT0Uufra8IjWIDgHPR6ip1Q L44ON1mQZ8Tbw59MblFLOnHH/eJN/MTcfPQnLGrekfIT67p3NPgPlRiNEpkOrTTj U3SYfYePffQf4cpdR+gRGDmqVhdxn19kHzyxOep39NIEBgi1ef7B1d5hlLh/UQVl DLNIJA3ZPqHdgHQN7OFgaoqMPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkDeyH+ u4qZY/L9rKpPZRdvzfqyMB8GA1UdIwQYMBaAFD7q3xRa4ptIJAo/ujr72Umo8VNd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODIzRS83RDY5QTgzQ0Q1 QjExMUVDOTM1MUU2MjBDNEY5QUUwMi9QdXJmRkZyaW0wZ2tDai02T3Z2WlNhanhV MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1cmZGRnJpbTBna0NqLTZPdnZaU2FqeFUxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODIzRS83RDY5QTgzQ0Q1QjExMUVDOTM1MUU2MjBDNEY5QUUwMi9QdXJmRkZyaW0w Z2tDai02T3Z2WlNhanhVMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATmwg+qo/o0gybSrsA60ojQDTgyR2SGqZrIuvkrmlJ92bMibRUU9zP CuHEGs1FbQCAamSFy4pekbxOP/vDkLbh4MKnorAuYbK4OT4D+h9rlYsDNuC1/ils UWfP+mr1YGzfRAivm/qoeyf0RIb4+w6PFokwGuht5vvYraZ04G5JweSR6L7BlQos g8IB6Lj1FS3WIvd3NFql9urLgesABCRvFGIf3nqT4jgSM+KZP68qTv6cv1WVHmSZ fKttopkWAB22+/X4j8L++VwzDBIn9YNg1aFbpY+Dc3DMXgIbizffT28xHwtAgqHz nqFvf6qxkkierh/0wlcr/8ZFwnkMyrel -----END CERTIFICATE-----Generated at Fri Apr 4 22:32:10 2025 by rpki-client