$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft File: De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json) Hash identifier: c1LOmPYzcKYi0SDKhxdwVRqGNPJMUmkeIxd+M/ObydU= Subject key identifier: A7:0E:A1:81:0B:77:87:73:23:82:A4:04:83:0B:95:4A:E6:3D:E2:69 Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Certificate serial: 130F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft Manifest number: 12F9 Signing time: Wed 12 Mar 2025 17:00:33 +0000 Manifest this update: Wed 12 Mar 2025 17:00:32 +0000 Manifest next update: Wed 19 Mar 2025 17:00:32 +0000 Files and hashes: 1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: MrQm5IiYB4pM+2fYrOkhqZdWtUXCTxaH0BzE/gw84ak=) 2: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: 4U+E+SOSNCeOPAvIwzXbeqTBl70zy1co24nPCsNKCHs=) 3: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: vee2Trog0A8Sa455ioxH/3gGtre4yzjbz6bH8ySXmH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 17:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4879 (0x130f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8 Validity Not Before: Mar 12 17:00:32 2025 GMT Not After : Mar 19 17:00:32 2025 GMT Subject: CN=67d1bdb1-8b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7c:05:18:f1:1e:3a:00:ff:4a:5d:8f:db:f5: b7:04:74:10:eb:ba:66:0d:4c:39:82:01:73:eb:fe: c1:55:29:ba:e3:e6:f9:fd:21:30:b2:06:a9:31:71: 79:c6:55:1d:8c:99:4f:f6:35:f1:36:d1:f8:b3:f6: 56:76:b1:eb:75:cd:5b:1a:0b:64:87:43:1a:f0:ba: 87:19:f4:10:9f:f8:33:a6:d6:ea:4e:19:39:bd:eb: 41:b7:da:cf:ed:13:cb:c6:fa:ee:37:30:54:30:4b: 2a:3b:63:f7:09:3a:40:a1:a4:74:5f:8a:60:c3:12: 70:df:52:75:26:be:9f:ed:5f:51:30:15:83:31:ce: 75:67:fa:1d:8d:a8:2a:20:04:38:56:e2:67:96:36: 38:cc:78:26:eb:9d:cc:67:ba:bb:5b:cc:7e:ea:1b: 14:c5:fb:b2:28:c3:5e:67:c3:83:98:d3:e5:44:5b: d7:48:db:ba:b4:ec:1f:22:7d:e0:a6:fc:87:4e:e6: e8:f0:59:ea:56:8d:a6:f0:8c:6f:79:85:b7:dc:73: 80:53:67:2b:33:60:4a:db:d5:58:1c:cf:08:d2:93: f6:63:95:9b:15:6b:34:a6:67:e1:95:bd:60:b3:a2: ab:74:fb:2d:29:5a:81:e4:9b:98:c5:94:94:1c:42: 72:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:0E:A1:81:0B:77:87:73:23:82:A4:04:83:0B:95:4A:E6:3D:E2:69 X509v3 Authority Key Identifier: keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:80:fc:ff:cc:96:80:56:1c:38:5a:c5:58:2c:c6:3c:98:c1: 1a:42:9d:e9:82:40:a4:7a:aa:c8:bf:98:3a:1d:6d:bf:8e:71: d4:3f:cb:cf:6b:4a:4e:1e:aa:03:fe:20:c5:11:a5:66:92:9c: ad:cb:15:e6:15:2c:41:f6:ad:40:bf:e6:ae:05:b3:90:67:03: 98:07:75:0b:cd:5a:f6:20:d7:13:7a:45:bc:b4:0e:b8:ac:76: d8:fc:9c:68:67:a9:05:e1:38:4a:f9:63:8f:2c:bc:24:ee:a0: fe:71:24:6d:ef:e4:6e:aa:a3:cf:f2:dd:6f:9e:29:a3:65:e9: 74:c0:12:e2:e0:d9:a8:15:d5:47:dc:35:fa:31:0e:2f:97:76: 73:ab:ec:87:46:ca:6e:72:db:0d:95:56:72:2f:fb:bd:fd:5b: 93:43:3b:a5:59:09:1e:b5:84:0c:8e:34:eb:bf:41:e3:4b:df: dd:53:f0:23:b0:a3:91:f9:6e:20:79:6b:59:28:1b:84:01:24: e1:37:33:c5:a4:4f:b4:f8:65:b0:ac:42:55:d0:f6:87:69:db: 3f:7d:61:99:7e:d3:35:b6:4e:78:00:e0:e0:e8:0c:96:50:25: 22:64:89:d9:2e:75:e1:fd:7a:01:c6:87:d0:ae:2e:63:00:3b: 30:76:6c:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDBERUVFRDEzNjIxNDNDMzYyRjI0Rjk3QzY3QzhFNEVD RTJDN0E1NjEwHhcNMjUwMzEyMTcwMDMyWhcNMjUwMzE5MTcwMDMyWjAYMRYwFAYD VQQDEw02N2QxYmRiMS04YjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4XwFGPEeOgD/Sl2P2/W3BHQQ67pmDUw5ggFz6/7BVSm64+b5/SEwsgapMXF5 xlUdjJlP9jXxNtH4s/ZWdrHrdc1bGgtkh0Ma8LqHGfQQn/gzptbqThk5vetBt9rP 7RPLxvruNzBUMEsqO2P3CTpAoaR0X4pgwxJw31J1Jr6f7V9RMBWDMc51Z/odjagq IAQ4VuJnljY4zHgm653MZ7q7W8x+6hsUxfuyKMNeZ8ODmNPlRFvXSNu6tOwfIn3g pvyHTubo8FnqVo2m8IxveYW33HOAU2crM2BK29VYHM8I0pP2Y5WbFWs0pmfhlb1g s6KrdPstKVqB5JuYxZSUHEJy6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcOoYEL d4dzI4KkBIMLlUrmPeJpMB8GA1UdIwQYMBaAFA3u7RNiFDw2LyT5fGfI5Ozix6Vh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9ERjQ3MDkwMkFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBEWXZKUGw4WjhqazdPTEhw V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RlN3RFMklVUERZdkpQbDhaOGprN09MSHBXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUZBOC9ERjQ3MDkwMkFGRDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBE WXZKUGw4WjhqazdPTEhwV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAgPz/zJaAVhw4WsVYLMY8mMEaQp3pgkCkeqrIv5g6HW2/jnHUP8vP a0pOHqoD/iDFEaVmkpytyxXmFSxB9q1Av+auBbOQZwOYB3ULzVr2INcTekW8tA64 rHbY/JxoZ6kF4ThK+WOPLLwk7qD+cSRt7+RuqqPP8t1vnimjZel0wBLi4NmoFdVH 3DX6MQ4vl3Zzq+yHRspuctsNlVZyL/u9/VuTQzulWQketYQMjjTrv0HjS9/dU/Aj sKOR+W4geWtZKBuEASThNzPFpE+0+GWwrEJV0PaHads/fWGZftM1tk54AODg6AyW UCUiZInZLnXh/XoBxofQri5jADswdmwl -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:52 2025 by rpki-client