$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft File: byPyfwkL70UxgCBy4drPIQ2dQjw.mft (raw, json) Hash identifier: FJlCGs3jh6Gmgh8RsAUx1wKtT1D9xJj5bMoOXBgqV0E= Subject key identifier: 37:E3:9D:84:C2:DF:9A:52:A9:78:77:0C:A0:23:24:EF:02:BC:FF:C5 Authority key identifier: 6F:23:F2:7F:09:0B:EF:45:31:80:20:72:E1:DA:CF:21:0D:9D:42:3C Certificate issuer: /CN=A91AEB80/serialNumber=6F23F27F090BEF4531802072E1DACF210D9D423C Certificate serial: 0413 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byPyfwkL70UxgCBy4drPIQ2dQjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft Manifest number: 03F3 Signing time: Sat 31 May 2025 00:42:56 +0000 Manifest this update: Sat 31 May 2025 00:42:55 +0000 Manifest next update: Sat 07 Jun 2025 00:42:55 +0000 Files and hashes: 1: byPyfwkL70UxgCBy4drPIQ2dQjw.crl (hash: /JvMBwHTcGe7oJ0fhIM91ZkdIvhvFhGyj8fIgWlbefc=) 2: 6759C60223C311ED9CF26A56C4F9AE02.roa (hash: hfhgYw3LQAm38USWum4YWAZ6gIly4M1LyEp15dh2XTA=) 3: EE8E0F3AA26711ECAFB48B53C4F9AE02.roa (hash: 3MDrKz+RefMI5j73wYkUuNy3Oa/4hoC/hS0v0G3eEHg=) 4: 6637CBD423C311ED9CF26A56C4F9AE02.roa (hash: DfRsMdJEDtch+C5Yk6n2+rHqExZkbfMsESmjI6z6r5c=) 5: EDE820B6A26711ECAFB48B53C4F9AE02.roa (hash: GJiUmX3/HTWKDyD6ZSjgX6IZE0JTW/U81xlvCFIWxoU=) 6: 6D7FBCBE129111ED81E82D3DC4F9AE02.roa (hash: D3Mr1RF7NLA+SlRnm9qkHlBkKJAhwvA5FpODqeYJRmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.crl rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byPyfwkL70UxgCBy4drPIQ2dQjw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:42:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1043 (0x413) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEB80, serialNumber=6F23F27F090BEF4531802072E1DACF210D9D423C Validity Not Before: May 31 00:42:55 2025 GMT Not After : Jun 7 00:42:55 2025 GMT Subject: CN=683a5090-4e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:22:6e:54:d5:c4:e8:09:2b:a4:35:34:39:2b: 3f:ec:92:8e:4c:28:5d:60:a2:60:8a:cd:ac:b5:75: 23:6d:a9:3c:d0:43:13:fe:f3:36:bd:18:05:fe:b0: 7e:e8:62:b7:ca:b0:e9:be:75:9c:5f:3d:2f:78:23: b8:87:dd:61:8b:98:c2:35:31:5f:34:e7:2a:9c:4a: de:c4:a7:bc:3d:fc:f2:77:f4:25:36:27:6f:5a:bf: bd:fd:5e:46:fa:de:1b:4f:a0:30:6f:ad:a8:bc:8c: 50:e4:bb:d9:fd:c0:d1:82:7e:b5:c7:c6:27:da:bd: ae:41:65:03:5f:3a:4f:68:9f:a9:c2:6c:00:31:c5: fd:07:52:86:56:f0:b1:9f:da:68:21:0b:1a:22:44: b8:80:87:9c:89:e6:f2:ad:58:ca:4d:1b:20:ea:b0: bb:67:cc:c4:bd:21:cd:7c:11:8c:c2:28:d0:40:e6: 72:b8:3c:47:e2:0e:ad:20:cf:bb:55:5d:9b:98:82: 90:da:25:99:3b:08:54:4e:81:eb:61:52:35:ec:08: 29:a3:f7:e7:39:40:cc:a1:14:27:0b:10:2c:29:48: a5:62:30:27:9d:48:55:53:3d:82:9e:55:79:41:1c: 13:14:ad:6e:24:52:94:0a:b1:04:e5:8c:ad:3d:29: 02:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E3:9D:84:C2:DF:9A:52:A9:78:77:0C:A0:23:24:EF:02:BC:FF:C5 X509v3 Authority Key Identifier: keyid:6F:23:F2:7F:09:0B:EF:45:31:80:20:72:E1:DA:CF:21:0D:9D:42:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byPyfwkL70UxgCBy4drPIQ2dQjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:4a:7f:9d:a9:7d:85:ec:c0:2f:78:b2:01:03:42:4c:6d:f6: ac:64:a8:20:5f:73:8e:25:4f:48:72:fe:66:ba:75:19:b4:2f: f0:19:3e:9f:3a:8f:24:50:fa:3c:2f:b9:73:cb:cc:f9:71:3e: aa:54:a6:34:58:82:0d:07:66:73:cf:b0:7b:09:fc:12:d6:b4: a3:10:6c:53:c4:72:b4:d9:aa:ad:b2:76:67:93:99:b9:d1:53: 6e:68:b7:16:3e:9f:e1:11:a3:01:74:0d:d2:b2:24:18:d0:0a: f9:af:18:47:2e:a8:24:a3:a5:9a:7d:54:04:74:ca:e8:47:cb: 4c:46:41:3b:d4:52:e1:2c:40:da:f7:fa:d9:31:90:93:9c:b7: 68:b2:b4:f0:4e:72:48:5d:03:bc:80:c1:2c:a4:3b:92:7c:f4: 9a:5b:c2:09:35:1d:65:b8:ae:a4:d4:69:1e:8f:f9:16:79:01: d2:6b:27:8b:c7:a4:b5:d8:48:0e:4a:1a:18:4e:5c:1e:06:ed: 4e:88:ef:a7:60:22:be:a0:e4:3d:6d:c0:94:d9:a9:f1:d9:f4: 14:37:be:46:f0:8d:e3:cd:27:c9:4e:f3:4a:fb:8c:60:13:9d: 49:81:0d:0a:13:b5:f3:2d:4b:c2:7a:17:bc:56:f2:75:37:aa: e1:00:be:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVCODAxMTAvBgNVBAUTKDZGMjNGMjdGMDkwQkVGNDUzMTgwMjA3MkUxREFDRjIx MEQ5RDQyM0MwHhcNMjUwNTMxMDA0MjU1WhcNMjUwNjA3MDA0MjU1WjAYMRYwFAYD VQQDEw02ODNhNTA5MC00ZTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCJuVNXE6AkrpDU0OSs/7JKOTChdYKJgis2stXUjbak80EMT/vM2vRgF/rB+ 6GK3yrDpvnWcXz0veCO4h91hi5jCNTFfNOcqnErexKe8Pfzyd/QlNidvWr+9/V5G +t4bT6Awb62ovIxQ5LvZ/cDRgn61x8Yn2r2uQWUDXzpPaJ+pwmwAMcX9B1KGVvCx n9poIQsaIkS4gIeciebyrVjKTRsg6rC7Z8zEvSHNfBGMwijQQOZyuDxH4g6tIM+7 VV2bmIKQ2iWZOwhUToHrYVI17Agpo/fnOUDMoRQnCxAsKUilYjAnnUhVUz2CnlV5 QRwTFK1uJFKUCrEE5YytPSkCWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfjnYTC 35pSqXh3DKAjJO8CvP/FMB8GA1UdIwQYMBaAFG8j8n8JC+9FMYAgcuHazyENnUI8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUI4MC83NzYyRkM1QTdF NkMxMUVDODczRDY3ODNDNEY5QUUwMi9ieVB5ZndrTDcwVXhnQ0J5NGRyUElRMmRR ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J5UHlmd2tMNzBVeGdDQnk0ZHJQSVEyZFFqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUI4MC83NzYyRkM1QTdFNkMxMUVDODczRDY3ODNDNEY5QUUwMi9ieVB5ZndrTDcw VXhnQ0J5NGRyUElRMmRRancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAESn+dqX2F7MAveLIBA0JMbfasZKggX3OOJU9Icv5munUZtC/wGT6f Oo8kUPo8L7lzy8z5cT6qVKY0WIINB2Zzz7B7CfwS1rSjEGxTxHK02aqtsnZnk5m5 0VNuaLcWPp/hEaMBdA3SsiQY0Ar5rxhHLqgko6WafVQEdMroR8tMRkE71FLhLEDa 9/rZMZCTnLdosrTwTnJIXQO8gMEspDuSfPSaW8IJNR1luK6k1Gkej/kWeQHSayeL x6S12EgOShoYTlweBu1OiO+nYCK+oOQ9bcCU2anx2fQUN75G8I3jzSfJTvNK+4xg E51JgQ0KE7XzLUvCehe8VvJ1N6rhAL4e -----END CERTIFICATE-----Generated at Sat May 31 16:33:05 2025 by rpki-client