$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft File: h_lY2vSYZZqe7g_xRCJrFxBIneA.mft (raw, json) Hash identifier: rErqh2wdyYboX+kfGW6dLgcC53SkJu4lBJ4n1wyLNig= Subject key identifier: 3F:6A:A5:6F:1C:4B:A1:95:D2:79:ED:2E:B2:5B:90:DE:29:5A:AD:38 Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 Certificate issuer: /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Certificate serial: 0385 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft Manifest number: 0377 Signing time: Fri 25 Apr 2025 00:41:57 +0000 Manifest this update: Fri 25 Apr 2025 00:41:56 +0000 Manifest next update: Fri 02 May 2025 00:41:56 +0000 Files and hashes: 1: h_lY2vSYZZqe7g_xRCJrFxBIneA.crl (hash: twsMogfwSLPz68XSfsTQ0zhgcX+rwFly0alwM1IGDAU=) 2: 8DB35F6A766511EF8820F844C4F9AE02.roa (hash: DUjlMecJ3MCBuCiDf6r0BnVvRVnuDf5vmODbFKyvDAA=) 3: 8C5D4FF4766511EF8820F844C4F9AE02.roa (hash: a/GUffZHyYeIWzCyqNA7Fc/IgTrpVgmYYpvH+uBkGnA=) 4: FFF8A36A34E311EE877E760DC4F9AE02.roa (hash: Td4Qw51TSr10UgTmfhROy8qSBPdrA5ySYZaY11oYN0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:41:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 901 (0x385) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91354AE, serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Validity Not Before: Apr 25 00:41:56 2025 GMT Not After : May 2 00:41:56 2025 GMT Subject: CN=680ada54-bd68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e6:2e:61:bd:e3:e4:21:24:3a:c8:7c:55:85: f9:ff:f4:95:e7:5e:6b:d6:e5:f1:b8:55:a8:87:59: 45:34:49:8c:23:30:88:f1:8a:01:4e:62:a5:61:f8: 69:22:bc:f4:34:6c:82:94:68:b5:47:0c:4f:e7:a1: b6:64:03:c2:94:41:89:93:1a:63:53:2d:05:89:dc: 31:38:89:75:d8:1a:44:1f:98:55:20:3c:46:4a:f6: 87:db:35:d9:46:85:41:c5:fd:b7:25:58:c4:33:1b: 1f:ad:05:3d:35:b6:29:ad:8d:dd:a9:75:51:d1:39: 9c:56:b5:3b:32:fa:aa:b6:9a:60:83:0b:ff:d5:f2: c9:89:58:9f:d2:8c:e5:6d:22:d7:c6:bb:b8:9f:bd: 6a:4a:0a:8a:e5:31:e1:1d:5f:ec:78:d9:2c:ed:a6: d6:94:72:11:b7:d1:a4:4d:80:b2:3b:6a:17:f0:13: 0e:63:bb:42:4c:c5:fb:93:41:73:b3:30:82:19:62: 7a:a1:6b:3d:fc:1c:14:13:7d:cd:58:55:eb:47:9a: 1c:f9:7e:76:be:66:94:ef:74:2c:e3:c4:11:c9:67: 7c:29:61:0e:25:a1:83:39:9d:15:38:96:56:8f:16: 14:65:62:12:07:a7:9d:0c:ce:f6:d2:e0:ef:84:83: 89:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6A:A5:6F:1C:4B:A1:95:D2:79:ED:2E:B2:5B:90:DE:29:5A:AD:38 X509v3 Authority Key Identifier: keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:ca:32:a3:3f:2d:93:5d:51:66:f3:78:9d:50:05:e8:71:b2: 65:46:ed:9a:f5:76:98:52:fd:93:5b:38:40:6e:17:88:1b:54: bb:2c:b9:3c:a5:e6:19:be:26:3d:54:c6:9a:c8:c2:f2:7e:db: d5:32:88:f2:6a:7d:81:e5:5f:01:62:6a:77:a2:87:40:97:49: fe:34:c3:65:1e:aa:17:2d:a6:ae:1c:1f:7c:14:c1:75:57:af: 4d:9b:21:cf:82:d7:18:6f:64:c1:3c:02:a9:dd:99:c0:ae:87: 0f:53:3a:5e:42:a8:6d:a2:9f:6c:73:55:fa:a3:5d:a9:a4:d3: 82:3c:f8:a0:fc:e5:f7:91:a8:f9:78:92:a2:75:92:8b:7c:74: 9d:7a:86:77:39:bc:c4:f5:ef:e1:7b:8d:ed:7f:3a:36:26:7b: 6c:50:ec:3d:34:53:11:5d:7f:d8:21:d5:d5:f6:4b:b0:33:bf: 48:95:b3:70:df:2b:dd:b9:57:54:48:15:d6:68:35:ea:17:a0: a6:a7:d2:94:be:e7:0f:f8:0d:55:f9:31:57:d6:7e:69:96:a1: 20:fb:34:4a:ae:0a:d1:6d:e5:a8:f9:2d:42:e7:ac:c0:0a:88: 61:6e:f5:1a:86:ad:63:bb:53:92:c2:02:48:ec:e7:c1:79:af: e6:56:29:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU0QUUxMTAvBgNVBAUTKDg3Rjk1OERBRjQ5ODY1OUE5RUVFMEZGMTQ0MjI2QjE3 MTA0ODlERTAwHhcNMjUwNDI1MDA0MTU2WhcNMjUwNTAyMDA0MTU2WjAYMRYwFAYD VQQDEw02ODBhZGE1NC1iZDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7OYuYb3j5CEkOsh8VYX5//SV515r1uXxuFWoh1lFNEmMIzCI8YoBTmKlYfhp Irz0NGyClGi1RwxP56G2ZAPClEGJkxpjUy0FidwxOIl12BpEH5hVIDxGSvaH2zXZ RoVBxf23JVjEMxsfrQU9NbYprY3dqXVR0TmcVrU7Mvqqtppggwv/1fLJiVif0ozl bSLXxru4n71qSgqK5THhHV/seNks7abWlHIRt9GkTYCyO2oX8BMOY7tCTMX7k0Fz szCCGWJ6oWs9/BwUE33NWFXrR5oc+X52vmaU73Qs48QRyWd8KWEOJaGDOZ0VOJZW jxYUZWISB6edDM720uDvhIOJDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD9qpW8c S6GV0nntLrJbkN4pWq04MB8GA1UdIwQYMBaAFIf5WNr0mGWanu4P8UQiaxcQSJ3g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTRBRS82QzlGMkRGQUE1 MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpacWU3Z194UkNKckZ4Qklu ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfbFkydlNZWlpxZTdnX3hSQ0pyRnhCSW5lQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTRBRS82QzlGMkRGQUE1MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpa cWU3Z194UkNKckZ4QkluZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCyjKjPy2TXVFm83idUAXocbJlRu2a9XaYUv2TWzhAbheIG1S7LLk8 peYZviY9VMaayMLyftvVMojyan2B5V8BYmp3oodAl0n+NMNlHqoXLaauHB98FMF1 V69NmyHPgtcYb2TBPAKp3ZnArocPUzpeQqhtop9sc1X6o12ppNOCPPig/OX3kaj5 eJKidZKLfHSdeoZ3ObzE9e/he43tfzo2JntsUOw9NFMRXX/YIdXV9kuwM79IlbNw 3yvduVdUSBXWaDXqF6Cmp9KUvucP+A1V+TFX1n5plqEg+zRKrgrRbeWo+S1C56zA CohhbvUahq1ju1OSwgJI7OfBea/mVin/ -----END CERTIFICATE-----Generated at Sat Apr 26 13:01:22 2025 by rpki-client