$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft File: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft (raw, json) Hash identifier: 3t0X8XtW6tkgN2Cw1+QhPAFNRzMST508MimZCTMGE2U= Subject key identifier: 80:5D:6F:EE:36:1B:1A:59:68:AA:87:55:45:3A:20:7A:29:6B:4E:A7 Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft Manifest number: 01C0 Signing time: Fri 25 Apr 2025 02:17:17 +0000 Manifest this update: Fri 25 Apr 2025 02:17:16 +0000 Manifest next update: Fri 02 May 2025 02:17:16 +0000 Files and hashes: 1: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl (hash: xpnADdkEQ9mLNVaoOUfmfRTn73yi2S4i3diBeQ+o3Kc=) 2: C3E640EE917811ED904ACF83C4F9AE02.roa (hash: U1JZUMbZcbonZCdC7TOrqHH67lPPcra0baMZ+HxHTq0=) 3: E260EBC4914011EDABD5F778C4F9AE02.roa (hash: ieGx5NwyYQJ4P+cWYrdmLdfua1T4xQkG1QlYm44YGuI=) 4: E1D3A69C914011EDABD5F778C4F9AE02.roa (hash: l7RVqMwsQP+9xoPqxUjrdLeHKAHmKPEPtw0sLICnu70=) 5: 7606086E914611ED8DE00A16C4F9AE02.roa (hash: hpbgzGpeyu8RgvOZ/gDqbosdneW/3yUsLvzIbPJJbgI=) 6: E07C4E34914011EDABD5F778C4F9AE02.roa (hash: yq9F1kGLoVyjrkyUECiqJ2bBsjfNg/O48zntGXKXjfA=) 7: E137AAE4914011EDABD5F778C4F9AE02.roa (hash: 7GFXCtaT3I6JbgFcVp9k1/EsFIeLns+26mNrxLbyEic=) 8: C3481400917811ED904ACF83C4F9AE02.roa (hash: AsDGm3VcGz1RYmwwFN/U13xvQEyWavpIqYrnGKd5AJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Validity Not Before: Apr 25 02:17:16 2025 GMT Not After : May 2 02:17:16 2025 GMT Subject: CN=680af0ad-6019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:03:44:b0:ae:f4:fe:0f:51:da:54:53:48:51: 2d:80:79:23:fd:ae:cb:97:82:ee:04:ae:93:7d:0f: 0f:0e:63:20:3a:48:cf:5d:25:dd:ad:e0:6b:49:89: 58:ff:60:82:55:9f:c9:7e:50:a8:da:3b:f9:ab:7b: b3:a3:fc:2a:1f:5e:ac:1a:02:44:89:c1:50:59:d5: d6:e0:75:31:55:83:79:57:f9:b8:7f:8e:cd:df:2f: 02:ab:d2:f5:fd:b7:fc:eb:f9:af:ef:85:47:f0:5d: 31:e7:6e:01:6c:db:d9:00:63:c3:94:c9:a4:2c:20: fc:4c:65:1a:f4:c7:6b:f4:8e:27:e0:a3:12:7b:95: e4:63:ce:d9:3c:fb:ab:d8:57:04:30:98:b9:33:ac: a7:85:6f:38:6a:8d:a8:86:72:7c:6e:5f:77:b2:f6: eb:80:15:42:9b:37:06:e7:6e:ad:eb:35:cd:79:32: 78:c5:55:c8:b9:af:42:eb:98:ba:53:05:90:43:ee: b7:b7:90:2a:3c:3c:72:02:5e:69:8d:97:e2:5d:f6: e3:65:72:33:88:4a:85:12:71:2f:d9:a5:91:e6:bd: 18:db:8c:17:9e:ea:90:34:f8:7c:0e:e3:40:99:28: 4a:c4:b5:ea:06:fd:df:da:58:0e:4f:16:8f:4c:92: 6b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5D:6F:EE:36:1B:1A:59:68:AA:87:55:45:3A:20:7A:29:6B:4E:A7 X509v3 Authority Key Identifier: keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:2a:0e:d9:3c:29:8c:32:07:bc:69:ad:ea:80:bb:d7:45:bb: 1f:89:06:44:34:ae:10:b5:37:8b:61:51:f3:06:e0:34:e7:18: 5a:26:d2:1c:90:e6:0e:a2:f6:cd:ee:75:26:19:3a:5d:fd:74: 36:1d:a7:d9:b7:b4:84:ce:47:ea:ec:93:89:08:ac:76:22:d7: 0f:e4:83:3d:61:9b:a5:b4:bf:d1:43:06:04:92:76:16:4d:79: 75:b2:63:5f:0c:38:fd:dc:3e:4f:46:94:46:e3:b5:94:74:70: 4d:0a:21:3e:9d:0f:96:bb:a8:f3:f8:9a:29:c9:a7:4b:1a:48: 39:6a:3f:71:fd:a6:60:c5:e8:b2:74:77:14:12:17:ff:94:9f: 1a:35:c4:b0:af:8c:0e:46:1b:e4:9f:b6:e5:a3:11:9c:f5:3d: 6d:40:09:97:b0:08:49:39:d1:11:65:3b:3e:f4:68:6a:84:98: ff:14:8d:38:69:4d:a8:5b:25:f8:65:e7:2a:a2:48:13:52:22: fd:84:0e:61:98:eb:90:b3:54:fe:a7:9f:9b:94:c1:b4:c7:90: 40:f5:ea:85:df:44:b2:53:cd:91:2d:27:af:f5:36:69:00:94: 94:8e:17:3c:33:99:1c:0f:67:c7:1a:c5:6d:4e:a6:16:95:29: 38:a2:d8:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU5QjYxMTAvBgNVBAUTKDJFOENCQjhDMjYwMEM2QTA5OEM5NThCOTY0QzMyRENC MThCODAzNUMwHhcNMjUwNDI1MDIxNzE2WhcNMjUwNTAyMDIxNzE2WjAYMRYwFAYD VQQDEw02ODBhZjBhZC02MDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ANEsK70/g9R2lRTSFEtgHkj/a7Ll4LuBK6TfQ8PDmMgOkjPXSXdreBrSYlY /2CCVZ/JflCo2jv5q3uzo/wqH16sGgJEicFQWdXW4HUxVYN5V/m4f47N3y8Cq9L1 /bf86/mv74VH8F0x524BbNvZAGPDlMmkLCD8TGUa9Mdr9I4n4KMSe5XkY87ZPPur 2FcEMJi5M6ynhW84ao2ohnJ8bl93svbrgBVCmzcG526t6zXNeTJ4xVXIua9C65i6 UwWQQ+63t5AqPDxyAl5pjZfiXfbjZXIziEqFEnEv2aWR5r0Y24wXnuqQNPh8DuNA mShKxLXqBv3f2lgOTxaPTJJrpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIBdb+42 GxpZaKqHVUU6IHopa06nMB8GA1UdIwQYMBaAFC6Mu4wmAMagmMlYuWTDLcsYuANc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTlCNi83OTE4Q0IwQzdG RjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhxQ1l5Vmk1Wk1NdHl4aTRB MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xveTdqQ1lBeHFDWXlWaTVaTU10eXhpNEExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTlCNi83OTE4Q0IwQzdGRjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhx Q1l5Vmk1Wk1NdHl4aTRBMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzKg7ZPCmMMge8aa3qgLvXRbsfiQZENK4QtTeLYVHzBuA05xhaJtIc kOYOovbN7nUmGTpd/XQ2HafZt7SEzkfq7JOJCKx2ItcP5IM9YZultL/RQwYEknYW TXl1smNfDDj93D5PRpRG47WUdHBNCiE+nQ+Wu6jz+JopyadLGkg5aj9x/aZgxeiy dHcUEhf/lJ8aNcSwr4wORhvkn7bloxGc9T1tQAmXsAhJOdERZTs+9GhqhJj/FI04 aU2oWyX4ZecqokgTUiL9hA5hmOuQs1T+p5+blMG0x5BA9eqF30SyU82RLSev9TZp AJSUjhc8M5kcD2fHGsVtTqYWlSk4otig -----END CERTIFICATE-----Generated at Sat Apr 26 13:41:42 2025 by rpki-client