$ rpki-client -vvf rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft File: 1yELbplCSp6CpNRQAnNvZIOqJ5o.mft (raw, json) Hash identifier: rS5o126V8KOyz8YrC9NRVuRAEBjhwtLcZE3Amkrwu/s= Subject key identifier: 47:70:73:58:35:05:48:18:54:D0:9F:E4:54:C8:56:09:45:D7:AD:50 Authority key identifier: D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A Certificate issuer: /CN=A919A909/serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft Manifest number: 91 Signing time: Thu 13 Mar 2025 04:32:18 +0000 Manifest this update: Thu 13 Mar 2025 04:32:18 +0000 Manifest next update: Thu 20 Mar 2025 04:32:18 +0000 Files and hashes: 1: 1yELbplCSp6CpNRQAnNvZIOqJ5o.crl (hash: jmKxa6D0xXM/gZK9kyQ9gihEcsKjc/sw92S9UBS1U90=) 2: 2F5FEDD02E4811EFA2C93552C4F9AE02.roa (hash: /2rgCrByQXfEl3QFcxBS9yU2VX/WpSZOCuakY+zsero=) 3: 1D5C0B90475D11EFBD75C15EC4F9AE02.roa (hash: THvSuu89zBwF6bcGi2lQr5DOft4c27TPpxpcQHdJvh8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 04:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A909 Validity Not Before: Mar 13 04:32:18 2025 GMT Not After : Mar 20 04:32:18 2025 GMT Subject: CN=67d25fd2-5f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b9:22:b2:00:6f:59:ca:d2:89:31:34:35:a0: ab:18:96:81:55:ea:16:46:6e:b5:54:c5:70:38:b2: af:88:a8:e4:ca:c2:3a:06:fe:8e:45:97:6c:2e:89: 1e:f7:f9:1c:da:25:17:96:16:6c:3e:42:3e:c0:3a: 04:ea:c1:3b:55:03:4d:ea:13:82:fc:36:92:e7:9b: e4:a9:58:21:ed:08:9d:f2:cf:71:91:6c:a1:b3:2b: c9:81:e7:b5:9a:ce:11:49:4c:fa:d3:34:1c:a9:bf: 53:b9:fc:08:e5:63:f5:dc:6e:bd:cc:2f:fc:ab:72: 95:95:6f:b9:30:3a:d3:f4:b1:4e:5d:77:f5:b5:fa: 0b:5b:ea:e4:b7:af:11:d0:8c:00:d4:32:bc:24:a5: f2:f1:5d:1f:3f:ab:c3:bc:56:9f:6b:5c:af:9a:3c: 07:6b:e0:3f:fd:41:c9:31:ad:08:80:79:be:31:fe: d4:97:2a:ab:2e:f8:af:5c:ee:d9:f9:8d:9c:cf:92: f4:62:ef:01:5e:1d:c9:0e:a5:b9:38:fa:82:f8:0b: 08:5f:6d:60:1a:a0:95:a3:07:08:91:ff:9f:35:75: 37:c0:59:83:32:d4:28:07:c0:40:aa:40:0d:2f:51: 8f:a6:c8:8c:33:61:4f:ef:26:ee:9c:91:19:ec:50: e8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:70:73:58:35:05:48:18:54:D0:9F:E4:54:C8:56:09:45:D7:AD:50 X509v3 Authority Key Identifier: keyid:D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:79:9c:40:1b:d1:41:9c:07:b1:f6:ac:64:6a:1a:07:2f:13: b6:67:80:11:45:94:27:73:8e:6c:39:19:88:b3:3d:09:73:6a: 46:10:6a:43:c2:6b:61:08:14:6c:d7:49:76:93:70:7b:99:f8: cf:ec:44:63:28:c8:2e:a3:b6:9f:f4:7a:0a:1e:bb:c0:fa:b5: 47:21:62:32:64:b0:8d:2c:69:4f:56:db:df:11:90:ce:75:72: 73:f1:78:b8:78:4f:18:de:44:f7:a9:c1:2a:ba:71:53:a0:c8: 39:aa:a5:3a:51:5c:d1:ca:b9:14:48:2e:a0:f7:a2:b4:4f:80: 44:9c:8f:0c:26:52:4c:8e:f5:0f:9e:1e:0b:a0:c6:24:88:98: 07:13:f1:1e:16:9c:1b:98:fc:b2:f7:e3:ee:09:ce:ff:bf:fc: 1d:4c:45:14:32:0b:93:5a:2a:e1:ad:e7:30:68:a3:e8:9c:f9: 0f:84:7a:63:b5:1e:0a:fd:b2:4d:87:53:11:2f:d8:cc:90:f5: 97:59:e5:b4:40:49:ef:d7:0d:f3:b6:ff:46:f2:dc:fd:75:f1: 67:eb:2c:59:a8:0b:13:cf:41:4f:c9:61:ac:d9:1a:0c:af:ce: 12:b1:aa:be:db:fc:91:d0:f8:e9:33:05:aa:c1:de:fb:5b:e3: b2:e2:dd:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5MDkxMTAvBgNVBAUTKEQ3MjEwQjZFOTk0MjRBOUU4MkE0RDQ1MDAyNzM2RjY0 ODNBQTI3OUEwHhcNMjUwMzEzMDQzMjE4WhcNMjUwMzIwMDQzMjE4WjAYMRYwFAYD VQQDEw02N2QyNWZkMi01ZjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbkisgBvWcrSiTE0NaCrGJaBVeoWRm61VMVwOLKviKjkysI6Bv6ORZdsLoke 9/kc2iUXlhZsPkI+wDoE6sE7VQNN6hOC/DaS55vkqVgh7Qid8s9xkWyhsyvJgee1 ms4RSUz60zQcqb9TufwI5WP13G69zC/8q3KVlW+5MDrT9LFOXXf1tfoLW+rkt68R 0IwA1DK8JKXy8V0fP6vDvFafa1yvmjwHa+A//UHJMa0IgHm+Mf7UlyqrLvivXO7Z +Y2cz5L0Yu8BXh3JDqW5OPqC+AsIX21gGqCVowcIkf+fNXU3wFmDMtQoB8BAqkAN L1GPpsiMM2FP7ybunJEZ7FDoPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdwc1g1 BUgYVNCf5FTIVglF161QMB8GA1UdIwQYMBaAFNchC26ZQkqegqTUUAJzb2SDqiea MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTkwOS8xNjZFNzQ3QzJB MzMxMUVGQkU5QUE4NTlDNEY5QUUwMi8xeUVMYnBsQ1NwNkNwTlJRQW5OdlpJT3FK NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzF5RUxicGxDU3A2Q3BOUlFBbk52WklPcUo1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTkwOS8xNjZFNzQ3QzJBMzMxMUVGQkU5QUE4NTlDNEY5QUUwMi8xeUVMYnBsQ1Nw NkNwTlJRQW5OdlpJT3FKNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAieZxAG9FBnAex9qxkahoHLxO2Z4ARRZQnc45sORmIsz0Jc2pGEGpD wmthCBRs10l2k3B7mfjP7ERjKMguo7af9HoKHrvA+rVHIWIyZLCNLGlPVtvfEZDO dXJz8Xi4eE8Y3kT3qcEqunFToMg5qqU6UVzRyrkUSC6g96K0T4BEnI8MJlJMjvUP nh4LoMYkiJgHE/EeFpwbmPyy9+PuCc7/v/wdTEUUMguTWirhrecwaKPonPkPhHpj tR4K/bJNh1MRL9jMkPWXWeW0QEnv1w3ztv9G8tz9dfFn6yxZqAsTz0FPyWGs2RoM r84Ssaq+2/yR0PjpMwWqwd77W+Oy4t3A -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:47 2025 by rpki-client