$ rpki-client -vvf rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft File: 1yELbplCSp6CpNRQAnNvZIOqJ5o.mft (raw, json) Hash identifier: UN/6c7ePdrUL9OcqZMnrnYVGqPNQ+1h2/nsBmj5iqxQ= Subject key identifier: B4:4D:CC:CE:2F:84:BD:52:F1:94:9D:0B:6F:AC:91:13:DB:79:BC:D8 Authority key identifier: D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A Certificate issuer: /CN=A919A909/serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft Manifest number: A2 Signing time: Tue 15 Apr 2025 05:02:59 +0000 Manifest this update: Tue 15 Apr 2025 05:02:59 +0000 Manifest next update: Tue 22 Apr 2025 05:02:59 +0000 Files and hashes: 1: 1yELbplCSp6CpNRQAnNvZIOqJ5o.crl (hash: QOJcplL9ujaF8vKNfbxHQiKIOfahKqoL0fEKHbN53Aw=) 2: 2F5FEDD02E4811EFA2C93552C4F9AE02.roa (hash: /2rgCrByQXfEl3QFcxBS9yU2VX/WpSZOCuakY+zsero=) 3: 1D5C0B90475D11EFBD75C15EC4F9AE02.roa (hash: THvSuu89zBwF6bcGi2lQr5DOft4c27TPpxpcQHdJvh8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A909, serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A Validity Not Before: Apr 15 05:02:59 2025 GMT Not After : Apr 22 05:02:59 2025 GMT Subject: CN=67fde883-4ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:93:c7:3f:64:0c:06:f5:25:21:9d:91:88:c8: 80:02:35:ce:e6:83:62:ff:29:d6:f2:5f:66:70:8b: 5a:5c:f8:6f:77:5e:66:c9:68:07:16:e2:0e:20:af: a2:6b:b3:79:2d:a2:d0:0a:88:05:9d:63:58:56:7c: d1:3e:3d:f1:1f:92:6c:2f:f8:af:e4:bc:19:75:01: ba:1d:7b:06:8f:b8:d2:91:0b:e9:e6:cc:84:bf:ab: f4:00:12:44:ad:5f:6d:9f:51:e5:cb:4e:ce:ab:13: 59:21:b4:70:be:db:71:b1:62:d3:c9:ab:dc:4e:12: 0d:21:3f:b2:86:14:70:8d:50:00:59:99:ee:04:b5: 2c:e9:34:5f:f9:db:98:e3:29:95:14:56:44:c0:c3: 5d:87:ad:ce:ad:ac:10:d5:4d:bb:15:09:e6:02:3c: c7:01:e1:d3:6f:5e:bb:7e:06:b4:cf:14:41:d1:6f: 18:88:fe:f0:02:d8:0e:84:c8:d3:56:ae:a5:89:c1: e6:6c:c4:46:9d:9f:1e:ff:ee:ab:af:f4:8c:19:49: 9b:ae:db:30:4a:73:c1:54:4c:b0:a9:51:44:cb:7e: 6c:e0:ea:91:a1:0a:41:f2:0f:77:db:8b:b6:7f:88: 2b:24:f3:b2:15:72:49:0a:97:8d:1a:03:c6:ed:00: bc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:4D:CC:CE:2F:84:BD:52:F1:94:9D:0B:6F:AC:91:13:DB:79:BC:D8 X509v3 Authority Key Identifier: keyid:D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:64:99:5d:ab:bf:ad:3f:8a:4f:5a:42:20:f7:69:35:59:37: 95:ae:5a:09:b3:7b:b7:8b:00:b5:7d:43:96:9b:42:16:a5:dd: ed:24:b8:41:a6:64:21:ec:ad:d7:90:d1:e6:78:ce:53:8c:84: bf:f1:4a:a0:ae:bf:eb:87:14:dd:6c:ff:2b:32:62:d1:9d:c9: 45:c2:25:be:a9:c9:fd:2d:78:5d:81:94:26:83:45:9d:0b:90: b0:ef:b8:26:3c:ee:99:e2:5c:dd:60:74:2c:95:f0:44:eb:ef: 0d:ed:41:6e:e3:4c:cb:9d:86:9b:ed:36:24:1f:3c:5a:5c:63: 30:52:2e:ce:e4:5b:ea:d8:49:fc:7f:79:58:05:c1:74:89:cd: 7f:56:42:57:ab:54:37:84:e2:6f:39:7c:45:66:4c:e0:38:f8: 54:e3:a2:0b:17:8c:e7:c1:c5:ab:e2:72:f5:2d:2d:0d:17:56: 49:86:6d:d6:75:ca:f5:09:61:5e:f8:4a:82:f0:06:db:e5:e8: 2a:fe:15:2e:ba:f6:2a:f6:14:9e:9e:13:14:77:3e:09:90:d0: 1d:2e:e3:82:3b:91:97:f5:f7:02:74:f8:68:4b:bc:99:ea:bb: 85:88:86:a8:3c:07:48:0f:ff:bf:42:9f:c2:ba:c4:3d:1b:70: f8:0d:f8:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5MDkxMTAvBgNVBAUTKEQ3MjEwQjZFOTk0MjRBOUU4MkE0RDQ1MDAyNzM2RjY0 ODNBQTI3OUEwHhcNMjUwNDE1MDUwMjU5WhcNMjUwNDIyMDUwMjU5WjAYMRYwFAYD VQQDEw02N2ZkZTg4My00Y2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnpPHP2QMBvUlIZ2RiMiAAjXO5oNi/ynW8l9mcItaXPhvd15myWgHFuIOIK+i a7N5LaLQCogFnWNYVnzRPj3xH5JsL/iv5LwZdQG6HXsGj7jSkQvp5syEv6v0ABJE rV9tn1Hly07OqxNZIbRwvttxsWLTyavcThINIT+yhhRwjVAAWZnuBLUs6TRf+duY 4ymVFFZEwMNdh63OrawQ1U27FQnmAjzHAeHTb167fga0zxRB0W8YiP7wAtgOhMjT Vq6licHmbMRGnZ8e/+6rr/SMGUmbrtswSnPBVEywqVFEy35s4OqRoQpB8g9324u2 f4grJPOyFXJJCpeNGgPG7QC8fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRNzM4v hL1S8ZSdC2+skRPbebzYMB8GA1UdIwQYMBaAFNchC26ZQkqegqTUUAJzb2SDqiea MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTkwOS8xNjZFNzQ3QzJB MzMxMUVGQkU5QUE4NTlDNEY5QUUwMi8xeUVMYnBsQ1NwNkNwTlJRQW5OdlpJT3FK NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzF5RUxicGxDU3A2Q3BOUlFBbk52WklPcUo1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTkwOS8xNjZFNzQ3QzJBMzMxMUVGQkU5QUE4NTlDNEY5QUUwMi8xeUVMYnBsQ1Nw NkNwTlJRQW5OdlpJT3FKNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkZJldq7+tP4pPWkIg92k1WTeVrloJs3u3iwC1fUOWm0IWpd3tJLhB pmQh7K3XkNHmeM5TjIS/8Uqgrr/rhxTdbP8rMmLRnclFwiW+qcn9LXhdgZQmg0Wd C5Cw77gmPO6Z4lzdYHQslfBE6+8N7UFu40zLnYab7TYkHzxaXGMwUi7O5Fvq2En8 f3lYBcF0ic1/VkJXq1Q3hOJvOXxFZkzgOPhU46ILF4znwcWr4nL1LS0NF1ZJhm3W dcr1CWFe+EqC8Abb5egq/hUuuvYq9hSenhMUdz4JkNAdLuOCO5GX9fcCdPhoS7yZ 6ruFiIaoPAdID/+/Qp/CusQ9G3D4DfhA -----END CERTIFICATE-----Generated at Tue Apr 15 13:10:59 2025 by rpki-client