$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft File: MhTiYKePfRZ36DATfBBlcwAxz2Y.mft (raw, json) Hash identifier: DpfDRIe0pdukgdlB5b62Q89zh2fQEEn8xgVoO/FD6+o= Subject key identifier: 84:BC:E6:C9:35:DF:73:60:0D:2F:E4:25:E1:FD:32:90:6D:04:7E:3B Authority key identifier: 32:14:E2:60:A7:8F:7D:16:77:E8:30:13:7C:10:65:73:00:31:CF:66 Certificate issuer: /CN=A91F8981/serialNumber=3214E260A78F7D1677E830137C1065730031CF66 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhTiYKePfRZ36DATfBBlcwAxz2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft Manifest number: 6F Signing time: Wed 09 Apr 2025 05:42:03 +0000 Manifest this update: Wed 09 Apr 2025 05:42:03 +0000 Manifest next update: Wed 16 Apr 2025 05:42:03 +0000 Files and hashes: 1: MhTiYKePfRZ36DATfBBlcwAxz2Y.crl (hash: PhNDuVOmsgfbKbjTR1CFVt09whanwcvUdmY3L/TuiTk=) 2: D80D96066C7F11EF92105459C4F9AE02.roa (hash: 7pF3uHzaE+Wewnte+bG2KwxN3eFFLWjZ6eq6MYtYcWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.crl rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhTiYKePfRZ36DATfBBlcwAxz2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 05:42:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8981 Validity Not Before: Apr 9 05:42:03 2025 GMT Not After : Apr 16 05:42:03 2025 GMT Subject: CN=67f608ab-922d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:88:3a:60:24:3c:97:9a:02:0d:fd:87:61:62: 2e:30:04:bb:e2:da:4b:f1:3f:b3:47:49:44:3b:9f: f2:61:d3:88:b0:29:b6:b6:6c:bb:5f:da:41:18:da: 37:08:0a:c3:f8:1b:62:27:a5:ad:6e:9a:f1:57:b3: 44:d6:f9:b8:3c:25:6e:c1:20:6b:a6:40:ee:7a:c7: 17:21:8e:26:c3:b4:b9:68:05:0f:e8:c4:d8:9d:cd: 79:31:d8:27:c1:95:9a:4b:a7:b0:18:1a:11:5d:7c: 3e:28:ef:ee:f0:90:5c:ad:e3:ce:01:e6:18:34:4b: a2:56:25:3a:fd:6b:31:9d:bc:fb:3d:15:bc:d1:d9: 2f:c6:d6:2a:db:c2:c5:60:20:ac:7e:ad:df:5d:73: a9:3e:d3:d4:37:3a:14:e1:d6:06:e2:f4:3f:f7:71: 3c:8b:50:e6:c1:4b:fd:a0:d9:59:78:be:10:5a:3b: 19:a5:36:bf:f7:e5:78:78:41:db:6c:72:60:24:44: f8:00:0d:20:c8:cb:19:58:71:db:8a:72:34:60:96: f5:ae:a4:3f:1c:0b:0d:61:fb:c0:47:43:c7:17:5e: 28:01:7d:92:88:9f:72:f5:e2:2c:c0:21:a7:fa:ee: 8c:52:44:87:f6:0b:dd:e3:e0:bb:4d:df:20:04:ea: 38:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BC:E6:C9:35:DF:73:60:0D:2F:E4:25:E1:FD:32:90:6D:04:7E:3B X509v3 Authority Key Identifier: keyid:32:14:E2:60:A7:8F:7D:16:77:E8:30:13:7C:10:65:73:00:31:CF:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhTiYKePfRZ36DATfBBlcwAxz2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8981/272B4C706C7F11EF914D7D57C4F9AE02/MhTiYKePfRZ36DATfBBlcwAxz2Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:92:db:e2:60:ae:9f:73:0c:96:f8:bc:e1:56:e4:2d:6d:3b: eb:58:cf:de:2f:54:bc:b7:86:67:05:23:63:c6:df:17:ed:8b: 9d:b9:2d:bc:7d:c1:54:65:b1:93:9c:96:2e:48:96:76:2a:b6: 60:b3:fa:79:5d:65:01:33:db:90:2a:93:fc:21:10:9b:d9:f3: 49:56:6a:bb:41:cb:90:9e:fa:e9:78:8a:cc:f7:52:1a:77:31: 76:c1:19:50:56:df:02:01:cc:6e:e3:b9:d6:01:ff:a2:30:ac: ca:ad:13:a5:c9:fa:f8:60:01:3e:31:eb:38:38:62:35:9b:a0: ad:13:d6:5d:44:f9:f0:8f:ec:38:2b:5e:e1:c5:b9:a7:84:ea: d4:c8:9f:f4:93:5d:2d:f9:b2:b4:39:4e:01:1f:ff:a0:8b:e0: d2:00:81:78:5a:ec:60:72:60:94:3d:cc:8d:dd:a7:a4:3f:a0: 0b:cc:f7:b4:42:d1:9e:3d:ec:c4:d2:2e:5c:ea:71:a7:13:ac: ef:e8:d9:ad:34:75:6e:08:aa:61:15:cc:de:1e:8f:9f:8b:d2: 35:cd:8c:e3:93:9b:e7:9c:07:d1:c9:c8:2c:db:31:31:19:4a: cd:72:4d:da:1b:ee:9b:51:92:f2:9c:7b:f9:a3:96:f8:44:6c: fd:78:38:95 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODk4MTExMC8GA1UEBRMoMzIxNEUyNjBBNzhGN0QxNjc3RTgzMDEzN0MxMDY1NzMw MDMxQ0Y2NjAeFw0yNTA0MDkwNTQyMDNaFw0yNTA0MTYwNTQyMDNaMBgxFjAUBgNV BAMTDTY3ZjYwOGFiLTkyMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgiDpgJDyXmgIN/YdhYi4wBLvi2kvxP7NHSUQ7n/Jh04iwKba2bLtf2kEY2jcI CsP4G2Inpa1umvFXs0TW+bg8JW7BIGumQO56xxchjibDtLloBQ/oxNidzXkx2CfB lZpLp7AYGhFdfD4o7+7wkFyt484B5hg0S6JWJTr9azGdvPs9FbzR2S/G1irbwsVg IKx+rd9dc6k+09Q3OhTh1gbi9D/3cTyLUObBS/2g2Vl4vhBaOxmlNr/35Xh4Qdts cmAkRPgADSDIyxlYcduKcjRglvWupD8cCw1h+8BHQ8cXXigBfZKIn3L14izAIaf6 7oxSRIf2C93j4LtN3yAE6jjXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhLzmyTXf c2ANL+Ql4f0ykG0EfjswHwYDVR0jBBgwFoAUMhTiYKePfRZ36DATfBBlcwAxz2Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4OTgxLzI3MkI0QzcwNkM3 RjExRUY5MTREN0Q1N0M0RjlBRTAyL01oVGlZS2VQZlJaMzZEQVRmQkJsY3dBeHoy WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWhUaVlLZVBmUlozNkRBVGZCQmxjd0F4ejJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 OTgxLzI3MkI0QzcwNkM3RjExRUY5MTREN0Q1N0M0RjlBRTAyL01oVGlZS2VQZlJa MzZEQVRmQkJsY3dBeHoyWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJqS2+Jgrp9zDJb4vOFW5C1tO+tYz94vVLy3hmcFI2PG3xfti525Lbx9 wVRlsZOcli5IlnYqtmCz+nldZQEz25Aqk/whEJvZ80lWartBy5Ce+ul4isz3Uhp3 MXbBGVBW3wIBzG7judYB/6IwrMqtE6XJ+vhgAT4x6zg4YjWboK0T1l1E+fCP7Dgr XuHFuaeE6tTIn/STXS35srQ5TgEf/6CL4NIAgXha7GByYJQ9zI3dp6Q/oAvM97RC 0Z497MTSLlzqcacTrO/o2a00dW4IqmEVzN4ej5+L0jXNjOOTm+ecB9HJyCzbMTEZ Ss1yTdob7ptRkvKce/mjlvhEbP14OJU= -----END CERTIFICATE-----Generated at Thu Apr 10 14:24:05 2025 by rpki-client