$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft File: c72yoCvL7DyQAPZfcFyW6AgOlzA.mft (raw, json) Hash identifier: qvsILvKFm9Na3/qO/goa4ZFbrFpfOxvXDUzFLL4mltw= Subject key identifier: 1F:3F:AE:61:12:AD:ED:DC:69:58:3A:C6:EF:17:D0:82:81:83:37:F8 Authority key identifier: 73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30 Certificate issuer: /CN=A91F34BF/serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft Manifest number: 0117 Signing time: Sat 31 May 2025 04:34:08 +0000 Manifest this update: Sat 31 May 2025 04:34:08 +0000 Manifest next update: Sat 07 Jun 2025 04:34:08 +0000 Files and hashes: 1: c72yoCvL7DyQAPZfcFyW6AgOlzA.crl (hash: 4nigWfilSpv/4TtnPTp69Lg2ff8dX7FWZNEfcjX1rNk=) 2: D4F8CEB8FE4211EF958ABE3BC4F9AE02.roa (hash: e+itOOHa2GS7haggfAySbnRHvgH3I9TscI3l9ZgslXk=) 3: 13310E94FCD011EF8F21DE62C4F9AE02.roa (hash: pCYjff74rDvqaSSHh6b2YJXJxIU8kNQvxw7uQ6aFFQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F34BF, serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730 Validity Not Before: May 31 04:34:08 2025 GMT Not After : Jun 7 04:34:08 2025 GMT Subject: CN=683a86c0-f68c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:7a:6c:56:97:b7:39:23:14:10:76:11:8a:f2: 6b:c4:85:15:bc:a5:a5:5a:19:e7:97:51:0a:86:20: 05:57:24:37:84:3b:20:30:25:3a:a2:06:23:9c:6b: a4:50:56:ae:5a:94:6a:64:3e:e7:08:89:69:59:d3: ad:3b:14:32:79:8a:ce:76:00:fc:e9:3e:be:04:38: 2a:1b:f5:8a:f1:ad:54:7f:dc:60:ed:63:68:7b:dc: aa:57:dc:2c:44:8e:02:5b:a8:29:ca:87:2f:c3:3b: b9:c7:ac:24:5b:24:52:a0:60:61:09:db:f3:18:83: d7:b5:5b:ee:09:47:33:e9:e4:f4:03:be:85:52:91: d2:de:fb:a2:17:5a:40:95:05:d6:42:c9:2d:39:59: 14:83:8d:f3:a8:ca:d8:af:27:d8:69:a6:50:c9:ba: 70:25:cd:c6:bd:02:bb:3a:36:9a:21:49:cd:e4:77: 56:48:20:93:6b:c3:ed:4c:10:bd:0b:9a:c4:c4:e3: 21:e7:1b:52:32:e5:14:15:84:a8:14:f1:ea:fc:99: 33:84:88:14:bd:37:29:ae:5d:2a:40:f5:58:4a:02: 24:5a:d0:7b:ef:05:c1:59:d9:b8:8b:d1:37:b4:9d: 8b:e9:77:f6:d8:ae:ab:ce:c9:82:ff:45:24:f2:26: 57:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3F:AE:61:12:AD:ED:DC:69:58:3A:C6:EF:17:D0:82:81:83:37:F8 X509v3 Authority Key Identifier: keyid:73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:60:20:26:50:7b:3b:32:cf:b4:1c:e7:0a:ba:5e:f5:ed:29: f0:75:95:14:cc:f7:ac:46:4b:70:52:e3:cd:4d:1e:d5:80:83: eb:ac:c4:bc:af:34:82:5b:ea:e9:b9:a4:68:ec:43:6e:62:f6: ee:93:b6:fa:7e:e0:13:80:3b:06:61:4f:72:93:d3:f4:72:88: bf:eb:a3:58:62:89:2a:96:30:10:80:03:e2:d4:33:03:44:0c: 0c:9f:a5:e7:e8:26:f0:74:03:93:f9:f9:11:46:8b:3e:83:1b: 03:d1:0a:63:ee:4e:e8:c3:1b:f4:0b:35:37:53:10:0b:18:9b: f2:56:fc:08:1f:d5:f7:cb:e9:4e:af:e0:be:f2:40:05:c4:1d: 3b:d6:57:19:16:4f:be:97:eb:d6:89:57:c0:ad:4c:2e:2c:2c: 96:f9:23:d9:90:f8:20:9f:c9:3e:ce:6f:9f:5e:be:81:ba:3d: a8:67:c9:4c:03:63:9a:eb:93:3d:db:62:91:38:af:d6:08:d4: 35:1d:41:79:7b:b0:cb:14:ff:81:fd:c9:9b:63:a4:2f:f9:8c: 6a:8d:8e:73:1c:d3:17:05:7c:8b:95:f8:12:3b:77:0d:10:4c: d5:19:14:67:ac:c6:dc:4a:8c:50:54:8c:09:a9:33:30:ae:be: 29:32:5a:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM0QkYxMTAvBgNVBAUTKDczQkRCMkEwMkJDQkVDM0M5MDAwRjY1RjcwNUM5NkU4 MDgwRTk3MzAwHhcNMjUwNTMxMDQzNDA4WhcNMjUwNjA3MDQzNDA4WjAYMRYwFAYD VQQDEw02ODNhODZjMC1mNjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA93psVpe3OSMUEHYRivJrxIUVvKWlWhnnl1EKhiAFVyQ3hDsgMCU6ogYjnGuk UFauWpRqZD7nCIlpWdOtOxQyeYrOdgD86T6+BDgqG/WK8a1Uf9xg7WNoe9yqV9ws RI4CW6gpyocvwzu5x6wkWyRSoGBhCdvzGIPXtVvuCUcz6eT0A76FUpHS3vuiF1pA lQXWQsktOVkUg43zqMrYryfYaaZQybpwJc3GvQK7OjaaIUnN5HdWSCCTa8PtTBC9 C5rExOMh5xtSMuUUFYSoFPHq/JkzhIgUvTcprl0qQPVYSgIkWtB77wXBWdm4i9E3 tJ2L6Xf22K6rzsmC/0Uk8iZXWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8/rmES re3caVg6xu8X0IKBgzf4MB8GA1UdIwQYMBaAFHO9sqAry+w8kAD2X3BclugIDpcw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRCRi80RjAzM0Q4NDlD RjUxMUVFOUU0QzMzMUZDNEY5QUUwMi9jNzJ5b0N2TDdEeVFBUFpmY0Z5VzZBZ09s ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3MnlvQ3ZMN0R5UUFQWmZjRnlXNkFnT2x6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzRCRi80RjAzM0Q4NDlDRjUxMUVFOUU0QzMzMUZDNEY5QUUwMi9jNzJ5b0N2TDdE eVFBUFpmY0Z5VzZBZ09sekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsYCAmUHs7Ms+0HOcKul717SnwdZUUzPesRktwUuPNTR7VgIPrrMS8 rzSCW+rpuaRo7ENuYvbuk7b6fuATgDsGYU9yk9P0coi/66NYYokqljAQgAPi1DMD RAwMn6Xn6CbwdAOT+fkRRos+gxsD0Qpj7k7owxv0CzU3UxALGJvyVvwIH9X3y+lO r+C+8kAFxB071lcZFk++l+vWiVfArUwuLCyW+SPZkPggn8k+zm+fXr6Buj2oZ8lM A2Oa65M922KROK/WCNQ1HUF5e7DLFP+B/cmbY6Qv+YxqjY5zHNMXBXyLlfgSO3cN EEzVGRRnrMbcSoxQVIwJqTMwrr4pMlr2 -----END CERTIFICATE-----Generated at Sat May 31 14:43:10 2025 by rpki-client