$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft File: D6tO-YKPSvJnwW2K1HEKjuybu64.mft (raw, json) Hash identifier: YChSFQGOYASikHJzsLH2h2/uWgR5c0eqYh16V6qFphU= Subject key identifier: 9A:96:DD:62:5F:53:AE:17:E6:7F:0E:F7:6C:CC:B4:DC:F1:4E:32:4C Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE Certificate issuer: /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft Manifest number: 0159 Signing time: Sat 29 Mar 2025 03:31:04 +0000 Manifest this update: Sat 29 Mar 2025 03:31:04 +0000 Manifest next update: Sat 05 Apr 2025 03:31:04 +0000 Files and hashes: 1: D6tO-YKPSvJnwW2K1HEKjuybu64.crl (hash: ARCygaWUeKrcbOS1crpcad18Q/TrOvhBdUvnTJ3yPRo=) 2: A0DEDD52FDF811EEA4D57274C4F9AE02.roa (hash: vdvXxO6hOVkfy87PEKE+BccPO1owcMEO3zlcdidAXcY=) 3: A16366C6FDF811EEA4D57274C4F9AE02.roa (hash: XPJpmrYNcSNbm9TnuwsF2hc9Dluf13QgHRh9YOFG7n8=) 4: A1C0742EFDF811EEA4D57274C4F9AE02.roa (hash: JXeJqxRjv6XY1o3PZOsZQUdvlF7VbU2rS+ppRqunUIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBE9 Validity Not Before: Mar 29 03:31:04 2025 GMT Not After : Apr 5 03:31:04 2025 GMT Subject: CN=67e76978-fd0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4f:eb:1f:35:fc:63:dc:a5:6d:09:8b:68:c8: b5:61:4e:57:8d:0d:1a:07:d1:67:ba:4f:5e:f4:21: 7d:fd:49:30:0f:9a:aa:52:06:2e:c6:10:bf:c7:f8: 5e:df:7a:72:5d:26:31:0a:ba:f3:69:00:c3:6b:e9: 82:a4:16:3c:3e:00:c7:a7:e1:2d:26:43:e1:ff:7f: 3f:64:69:a9:5b:2f:6a:80:c6:d8:cc:15:ec:d3:cd: 55:82:5c:b9:87:fc:7b:0a:6f:e0:55:41:3a:d8:84: 15:08:47:03:6b:be:f5:31:17:42:31:d5:56:e5:81: 91:97:25:25:9a:82:ec:44:e5:8b:53:f9:96:2c:31: 46:5c:32:60:09:25:d3:ad:f2:00:b5:a4:1f:62:d3: 01:da:42:fc:13:e6:7c:49:57:e6:fe:4f:6f:12:fd: 42:e6:ae:9e:5c:d6:0c:a0:f1:88:80:94:45:3e:d9: 1d:74:f3:88:f6:a5:a5:6a:54:bf:ef:1f:3a:e6:4d: 28:98:e9:a3:7a:e7:bc:ae:7a:ee:ed:7a:fa:26:f9: 64:46:21:a4:71:5e:a9:77:78:45:49:06:91:03:d0: 8e:a2:0b:a1:f3:0f:bf:aa:70:82:94:89:1d:a1:6f: f5:41:fd:f2:5e:b5:5b:e8:bc:55:af:fe:8a:5d:e9: ab:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:96:DD:62:5F:53:AE:17:E6:7F:0E:F7:6C:CC:B4:DC:F1:4E:32:4C X509v3 Authority Key Identifier: keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:dc:a0:ee:4c:c6:28:ce:20:05:f6:69:aa:b7:53:68:d7:b8: f7:10:94:5b:fc:b1:52:22:ef:78:c1:66:d2:c7:6e:0d:cb:8c: 39:df:8e:81:0b:71:bb:cd:14:88:26:87:1a:36:01:b6:3e:83: 4f:5a:28:f5:8c:57:6f:78:a5:7e:20:5c:0d:99:30:13:dd:0c: 85:f0:43:4e:2d:b4:9b:6d:33:d1:8d:7f:7e:9c:71:c9:c2:2f: ce:fd:72:3a:2b:f6:27:29:35:f6:cc:83:60:a5:d2:c0:ce:0f: 0d:3a:bc:7c:61:d8:77:fd:32:c3:cc:d4:f9:c5:54:04:6d:06: 78:b4:c2:af:da:7c:a3:79:a4:aa:95:3b:2a:26:54:a4:c8:ce: 20:4d:31:c5:ce:70:d9:7a:a7:a2:ad:7f:ff:07:f1:57:37:67: e1:46:72:76:ec:fe:05:91:a3:c9:46:6d:25:6d:86:ab:b8:55: d9:d5:37:da:ce:72:75:7a:6d:89:50:3d:3b:fc:3a:40:31:07: aa:d6:d8:03:8a:cd:88:b5:91:43:86:74:f9:d7:0e:42:ce:dc: a2:1d:cc:f1:f8:bd:3b:99:3d:5b:f5:32:26:bd:66:3c:ef:bc: c8:28:9a:98:18:38:c1:66:22:e4:a0:f7:91:8d:86:66:72:22: a1:bb:5b:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCRTkxMTAvBgNVBAUTKDBGQUI0RUY5ODI4RjRBRjI2N0MxNkQ4QUQ0NzEwQThF RUM5QkJCQUUwHhcNMjUwMzI5MDMzMTA0WhcNMjUwNDA1MDMzMTA0WjAYMRYwFAYD VQQDEw02N2U3Njk3OC1mZDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtE/rHzX8Y9ylbQmLaMi1YU5XjQ0aB9Fnuk9e9CF9/UkwD5qqUgYuxhC/x/he 33pyXSYxCrrzaQDDa+mCpBY8PgDHp+EtJkPh/38/ZGmpWy9qgMbYzBXs081Vgly5 h/x7Cm/gVUE62IQVCEcDa771MRdCMdVW5YGRlyUlmoLsROWLU/mWLDFGXDJgCSXT rfIAtaQfYtMB2kL8E+Z8SVfm/k9vEv1C5q6eXNYMoPGIgJRFPtkddPOI9qWlalS/ 7x865k0omOmjeue8rnru7Xr6JvlkRiGkcV6pd3hFSQaRA9COoguh8w+/qnCClIkd oW/1Qf3yXrVb6LxVr/6KXemrxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqW3WJf U64X5n8O92zMtNzxTjJMMB8GA1UdIwQYMBaAFA+rTvmCj0ryZ8FtitRxCo7sm7uu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJFOS85NEM5Qjg3ODAw NUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2Sm53VzJLMUhFS2p1eWJ1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q2dE8tWUtQU3ZKbndXMksxSEVLanV5YnU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUJFOS85NEM5Qjg3ODAwNUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2 Sm53VzJLMUhFS2p1eWJ1NjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd3KDuTMYoziAF9mmqt1No17j3EJRb/LFSIu94wWbSx24Ny4w5346B C3G7zRSIJocaNgG2PoNPWij1jFdveKV+IFwNmTAT3QyF8ENOLbSbbTPRjX9+nHHJ wi/O/XI6K/YnKTX2zINgpdLAzg8NOrx8Ydh3/TLDzNT5xVQEbQZ4tMKv2nyjeaSq lTsqJlSkyM4gTTHFznDZeqeirX//B/FXN2fhRnJ27P4FkaPJRm0lbYaruFXZ1Tfa znJ1em2JUD07/DpAMQeq1tgDis2ItZFDhnT51w5CztyiHczx+L07mT1b9TImvWY8 77zIKJqYGDjBZiLkoPeRjYZmciKhu1tg -----END CERTIFICATE-----Generated at Sat Apr 5 00:00:31 2025 by rpki-client