$ rpki-client -vvf rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft File: rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft (raw, json) Hash identifier: 4Xbq8svs7TZWE0+uPf6LSIWpi0v0tesUT5QoLto7KVU= Subject key identifier: B7:6E:3A:86:4C:4C:32:86:7C:65:7A:34:3C:23:B4:FE:F3:76:96:9D Authority key identifier: AC:97:89:F2:8A:F1:68:B2:6C:50:96:46:15:DF:06:D7:EC:72:02:E3 Certificate issuer: /CN=A91384DF/serialNumber=AC9789F28AF168B26C50964615DF06D7EC7202E3 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJeJ8orxaLJsUJZGFd8G1-xyAuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft Manifest number: BC Signing time: Fri 25 Apr 2025 04:56:10 +0000 Manifest this update: Fri 25 Apr 2025 04:56:10 +0000 Manifest next update: Fri 02 May 2025 04:56:10 +0000 Files and hashes: 1: rJeJ8orxaLJsUJZGFd8G1-xyAuM.crl (hash: 2JVzCtD8E4yZQd0VSDaQhs+F7kDOTdyd4wj7l8ATbEk=) 2: 69BCFB40037711EFBE813223C4F9AE02.roa (hash: PMFbGoDR6epjiOKU9mJpCjoNmw0cJb5L7rzhHF+eaLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.crl rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJeJ8orxaLJsUJZGFd8G1-xyAuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:56:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91384DF, serialNumber=AC9789F28AF168B26C50964615DF06D7EC7202E3 Validity Not Before: Apr 25 04:56:10 2025 GMT Not After : May 2 04:56:10 2025 GMT Subject: CN=680b15ea-5f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:79:18:34:78:71:f0:63:a9:e5:1c:0d:8d:f5: 30:d6:df:72:50:ae:91:1a:e1:44:b6:9f:fe:66:cb: 0d:92:dc:1a:98:1a:f9:2b:e7:d8:93:3c:6a:41:27: 16:1c:55:d1:6d:0b:a4:03:2f:4a:8e:35:2b:c9:fd: 2c:53:04:55:cc:c3:e1:80:2e:21:5b:0e:06:81:2f: 70:b2:87:80:91:cb:66:40:23:22:69:41:91:f1:3b: b8:ee:d9:96:18:a6:87:5d:fc:07:f7:40:6a:b2:7d: cb:1f:c4:c6:de:47:1d:57:10:53:ef:38:35:f1:4e: e7:d3:f0:e6:95:7b:1b:f3:7e:2b:83:eb:9f:21:34: 94:02:8d:91:fc:4d:94:a7:ca:86:cd:3b:bc:db:2c: d6:96:a8:a1:3c:18:4b:99:83:92:92:18:20:f0:ea: 9f:c5:fe:29:25:9b:56:0e:36:49:45:23:73:8a:9c: 8e:38:13:07:e0:08:77:d4:b3:38:e8:1b:3e:c6:b2: 94:f3:ce:6b:69:a6:9f:1a:56:3b:80:5c:de:41:a7: ee:af:59:14:12:a3:76:94:b0:cd:fc:7f:88:0c:6e: 5e:66:64:1e:02:87:cb:95:83:87:a8:02:bf:9d:f1: a0:bd:3f:f8:32:e7:14:2c:ff:0f:63:40:e5:87:88: 72:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:6E:3A:86:4C:4C:32:86:7C:65:7A:34:3C:23:B4:FE:F3:76:96:9D X509v3 Authority Key Identifier: keyid:AC:97:89:F2:8A:F1:68:B2:6C:50:96:46:15:DF:06:D7:EC:72:02:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJeJ8orxaLJsUJZGFd8G1-xyAuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:28:6f:ab:37:08:3b:53:0f:2c:b5:39:b8:ef:11:4c:21:41: 16:7d:33:4f:84:66:fd:a2:5c:3f:45:e1:71:fa:a7:0b:47:03: 32:22:65:b9:0d:9a:ea:23:cf:6c:79:7e:bd:fd:17:f4:1a:66: 32:59:b9:53:8a:19:0d:a7:c0:bc:e9:90:be:c3:d2:27:23:20: 8c:86:7c:fb:61:4d:43:8f:67:81:67:26:49:83:ae:66:06:98: 20:05:f6:38:51:99:34:9f:35:68:60:2d:10:4e:7d:68:0e:2e: df:b9:ca:ae:a5:ac:97:4e:64:97:df:ab:61:3e:e0:2d:aa:29: 4b:12:e9:14:2f:90:0c:d9:2f:c2:c8:c1:14:91:8b:13:1f:ab: 32:0a:ea:79:cb:84:21:85:af:9c:50:f8:8e:75:d0:5a:59:6a: 74:89:a1:cd:1a:1a:a6:38:49:8b:5c:b0:03:62:3f:bc:66:06: 2e:fb:f9:9a:75:af:5b:6e:e1:73:79:66:1e:29:69:77:9c:ed: d6:fe:9c:5c:de:40:66:9d:35:80:52:2c:42:50:5b:9f:a0:cc: 28:45:38:34:cf:62:c5:2b:cc:42:67:70:5d:d0:6c:53:50:a6: 8e:49:0d:02:10:ee:e8:7c:86:24:c8:09:43:46:0d:4a:8a:b6: 2d:1c:92:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0REYxMTAvBgNVBAUTKEFDOTc4OUYyOEFGMTY4QjI2QzUwOTY0NjE1REYwNkQ3 RUM3MjAyRTMwHhcNMjUwNDI1MDQ1NjEwWhcNMjUwNTAyMDQ1NjEwWjAYMRYwFAYD VQQDEw02ODBiMTVlYS01ZjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunkYNHhx8GOp5RwNjfUw1t9yUK6RGuFEtp/+ZssNktwamBr5K+fYkzxqQScW HFXRbQukAy9KjjUryf0sUwRVzMPhgC4hWw4GgS9wsoeAkctmQCMiaUGR8Tu47tmW GKaHXfwH90Bqsn3LH8TG3kcdVxBT7zg18U7n0/DmlXsb834rg+ufITSUAo2R/E2U p8qGzTu82yzWlqihPBhLmYOSkhgg8Oqfxf4pJZtWDjZJRSNzipyOOBMH4Ah31LM4 6Bs+xrKU885raaafGlY7gFzeQafur1kUEqN2lLDN/H+IDG5eZmQeAofLlYOHqAK/ nfGgvT/4MucULP8PY0Dlh4hyQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLduOoZM TDKGfGV6NDwjtP7zdpadMB8GA1UdIwQYMBaAFKyXifKK8WiybFCWRhXfBtfscgLj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODRERi9BRTE2NEI2MjAz NzYxMUVGQUNBN0Y5MjFDNEY5QUUwMi9ySmVKOG9yeGFMSnNVSlpHRmQ4RzEteHlB dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JKZUo4b3J4YUxKc1VKWkdGZDhHMS14eUF1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODRERi9BRTE2NEI2MjAzNzYxMUVGQUNBN0Y5MjFDNEY5QUUwMi9ySmVKOG9yeGFM SnNVSlpHRmQ4RzEteHlBdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZKG+rNwg7Uw8stTm47xFMIUEWfTNPhGb9olw/ReFx+qcLRwMyImW5 DZrqI89seX69/Rf0GmYyWblTihkNp8C86ZC+w9InIyCMhnz7YU1Dj2eBZyZJg65m BpggBfY4UZk0nzVoYC0QTn1oDi7fucqupayXTmSX36thPuAtqilLEukUL5AM2S/C yMEUkYsTH6syCup5y4Qhha+cUPiOddBaWWp0iaHNGhqmOEmLXLADYj+8ZgYu+/ma da9bbuFzeWYeKWl3nO3W/pxc3kBmnTWAUixCUFufoMwoRTg0z2LFK8xCZ3Bd0GxT UKaOSQ0CEO7ofIYkyAlDRg1KirYtHJLu -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:58 2025 by rpki-client