$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft File: mWY2odRf01oWXBULxfYjk0u7tnk.mft (raw, json) Hash identifier: ZNa0HThQYYr0wlf0WoJPoMuAdBa6vFIgQoP+zyurhuE= Subject key identifier: AE:E7:36:2C:4F:8A:9E:DD:BB:7A:80:98:D7:A8:0A:35:6E:C0:5B:2A Authority key identifier: 99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79 Certificate issuer: /CN=A91F9BB7/serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679 Certificate serial: 0183 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft Manifest number: 0181 Signing time: Sat 29 Mar 2025 03:09:40 +0000 Manifest this update: Sat 29 Mar 2025 03:09:39 +0000 Manifest next update: Sat 05 Apr 2025 03:09:39 +0000 Files and hashes: 1: mWY2odRf01oWXBULxfYjk0u7tnk.crl (hash: V27d94nzZCnDlWLrZtFhNbk+xt1yT5cwYGeNPDpErBY=) 2: A1EB38DEF23D11EDAF983380C4F9AE02.roa (hash: qbMXYGmGBXCQU/LDnYPVYWq6qwCJyfwTqXecOU2YUsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9BB7 Validity Not Before: Mar 29 03:09:39 2025 GMT Not After : Apr 5 03:09:39 2025 GMT Subject: CN=67e76473-0481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4c:ab:75:1a:1e:4f:3d:b0:d7:b9:a7:f1:bf: ab:f3:99:6b:53:da:79:d1:4b:c9:09:c2:07:34:4d: 39:f7:0d:e7:01:ca:46:27:47:a4:46:a9:b3:3c:00: 67:e7:b2:68:cc:44:49:c3:7b:f2:12:9e:03:fd:ce: 8d:ce:b3:5c:71:7e:75:08:28:89:b5:04:2b:f2:e4: c2:36:ac:db:88:a3:77:69:45:df:5b:a1:84:6e:cb: a2:fd:62:79:38:94:49:f8:5b:ab:52:64:28:96:e2: b9:ee:4f:3f:6f:44:4a:bb:a0:ff:54:57:1a:de:5f: 12:06:99:24:89:c3:14:83:4f:95:8a:bf:b3:14:b1: 5b:46:72:47:f6:8d:c2:8e:bc:17:a7:52:c3:7f:1d: a1:7e:d2:f2:a4:20:e8:be:c4:0b:52:0a:c2:f8:64: 8b:28:70:96:1d:fe:09:71:a0:b4:da:de:ab:e0:3a: 75:72:bc:06:27:d1:1f:b6:4f:26:8f:d6:ff:4b:7c: d8:04:96:2b:e6:0e:37:11:97:aa:57:7b:b2:41:9b: 11:db:12:d9:b8:51:3f:4f:29:b0:ba:e0:40:ef:b1: 54:e2:a1:8c:ed:bf:2b:f3:2f:9d:0f:07:6c:14:62: 3d:48:94:b7:a6:63:a0:13:a9:fd:99:7c:b2:51:69: 9e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E7:36:2C:4F:8A:9E:DD:BB:7A:80:98:D7:A8:0A:35:6E:C0:5B:2A X509v3 Authority Key Identifier: keyid:99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:4f:94:2d:ab:3f:61:d8:e7:7a:04:eb:60:e7:30:0f:83:02: c0:45:f1:4b:14:14:ae:d5:53:f3:64:38:f9:5d:e4:cb:2b:d7: ee:73:a7:21:ac:f9:66:c4:d9:d0:d8:ed:b2:2c:b9:0c:10:cf: b5:9c:6e:fa:e6:c6:46:9e:29:03:e8:e0:02:de:fc:a6:ba:21: d8:90:48:06:2b:ae:d0:b0:80:5d:d0:0c:ba:e5:1f:ea:d6:c0: 99:f3:84:43:d6:93:61:74:97:40:7f:ce:d2:97:18:ee:ad:ad: cc:cd:d3:64:a3:52:b7:cc:c8:4b:36:90:aa:78:3c:94:e9:0f: d9:ae:75:dd:b8:d4:91:08:17:f0:03:f9:79:9b:58:3b:bb:75: ad:bc:b8:fa:c1:56:63:a8:12:d6:49:b2:2e:9c:fd:54:2b:59: 84:19:76:74:21:3e:b9:82:86:51:32:b5:b3:8a:40:ec:b2:f4: a7:a9:15:ab:2c:36:38:ed:68:14:3d:6c:fb:f9:41:51:c7:80: 3e:1d:77:df:9d:01:e8:73:6d:ee:14:60:ed:7f:75:45:78:8b: aa:94:fd:e4:2d:3a:58:be:2b:ac:57:fd:c0:a1:f1:58:88:a3: 2b:37:48:47:78:f2:15:72:90:31:17:39:65:73:2b:f5:b4:43: 15:06:29:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlCQjcxMTAvBgNVBAUTKDk5NjYzNkExRDQ1RkQzNUExNjVDMTUwQkM1RjYyMzkz NEJCQkI2NzkwHhcNMjUwMzI5MDMwOTM5WhcNMjUwNDA1MDMwOTM5WjAYMRYwFAYD VQQDEw02N2U3NjQ3My0wNDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUyrdRoeTz2w17mn8b+r85lrU9p50UvJCcIHNE059w3nAcpGJ0ekRqmzPABn 57JozERJw3vyEp4D/c6NzrNccX51CCiJtQQr8uTCNqzbiKN3aUXfW6GEbsui/WJ5 OJRJ+FurUmQoluK57k8/b0RKu6D/VFca3l8SBpkkicMUg0+Vir+zFLFbRnJH9o3C jrwXp1LDfx2hftLypCDovsQLUgrC+GSLKHCWHf4JcaC02t6r4Dp1crwGJ9Eftk8m j9b/S3zYBJYr5g43EZeqV3uyQZsR2xLZuFE/TymwuuBA77FU4qGM7b8r8y+dDwds FGI9SJS3pmOgE6n9mXyyUWmeZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7nNixP ip7du3qAmNeoCjVuwFsqMB8GA1UdIwQYMBaAFJlmNqHUX9NaFlwVC8X2I5NLu7Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUJCNy84NzM3Rjc2RUJF ODcxMUVEOEUwQUFCNzhDNEY5QUUwMi9tV1kyb2RSZjAxb1dYQlVMeGZZamswdTd0 bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21XWTJvZFJmMDFvV1hCVUx4ZllqazB1N3Ruay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUJCNy84NzM3Rjc2RUJFODcxMUVEOEUwQUFCNzhDNEY5QUUwMi9tV1kyb2RSZjAx b1dYQlVMeGZZamswdTd0bmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFT5Qtqz9h2Od6BOtg5zAPgwLARfFLFBSu1VPzZDj5XeTLK9fuc6ch rPlmxNnQ2O2yLLkMEM+1nG765sZGnikD6OAC3vymuiHYkEgGK67QsIBd0Ay65R/q 1sCZ84RD1pNhdJdAf87Slxjura3MzdNko1K3zMhLNpCqeDyU6Q/ZrnXduNSRCBfw A/l5m1g7u3WtvLj6wVZjqBLWSbIunP1UK1mEGXZ0IT65goZRMrWzikDssvSnqRWr LDY47WgUPWz7+UFRx4A+HXffnQHoc23uFGDtf3VFeIuqlP3kLTpYviusV/3AofFY iKMrN0hHePIVcpAxFzllcyv1tEMVBilQ -----END CERTIFICATE-----Generated at Fri Apr 4 22:40:11 2025 by rpki-client