$ rpki-client -vvf rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft File: _u6fNgpd0TKL4cgqF3B5iWh1nUg.mft (raw, json) Hash identifier: 9FuikkUFDp7asbBcbZefWm8A5danQ9D8uWoL//3Z7mk= Subject key identifier: BC:CF:DD:75:AD:C1:82:64:A1:B0:8E:B1:33:19:C6:45:13:2D:52:B2 Authority key identifier: FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48 Certificate issuer: /CN=A91390D6/serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48 Certificate serial: 038F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft Manifest number: 038B Signing time: Fri 25 Apr 2025 00:35:27 +0000 Manifest this update: Fri 25 Apr 2025 00:35:26 +0000 Manifest next update: Fri 02 May 2025 00:35:26 +0000 Files and hashes: 1: _u6fNgpd0TKL4cgqF3B5iWh1nUg.crl (hash: sA6Ssa3NBW8XIYE1PKV+3pgg4N7pN7PyKrhVCgny9Xk=) 2: 018377CA9AF111EC9717F22AC4F9AE02.roa (hash: Eke8Nptjc+wFFIze4nM4012uB/SRIMQBKPKAnolzw/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.crl rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 911 (0x38f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91390D6, serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48 Validity Not Before: Apr 25 00:35:26 2025 GMT Not After : May 2 00:35:26 2025 GMT Subject: CN=680ad8ce-50b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fe:b4:17:79:4a:9d:e3:71:e8:d1:5f:bb:64: 0c:64:47:f5:a3:50:13:48:13:db:f6:ce:35:ad:0e: a9:23:7b:7b:dc:57:a7:d5:44:e3:c9:a0:42:08:ed: 6a:53:c5:39:7e:e9:ea:75:7a:e1:26:73:59:fb:30: 7a:1d:3a:4c:95:1e:37:1f:f9:f1:15:19:7f:cb:b7: 33:87:9a:20:23:81:55:d7:d5:58:ed:65:a5:08:2c: 6a:51:c4:3e:07:9a:1e:ef:b2:da:1d:5e:5e:bc:39: db:57:71:fd:02:b7:3e:e7:7f:18:64:7e:13:b7:4b: a3:c5:1e:fd:d5:46:ca:e5:36:84:08:e2:83:04:a1: f5:b9:4f:91:02:d2:9f:a8:16:cb:32:65:b0:bb:84: b6:45:94:57:27:82:a4:de:b8:46:30:ef:14:bc:74: 9f:d7:a7:7b:fb:3c:c5:20:97:4c:77:58:4c:2e:8e: 3b:e8:ae:4d:a5:8f:54:39:7b:36:31:b8:0e:73:fb: 62:d7:76:2f:30:92:66:de:be:c1:16:96:02:e8:02: 1f:28:c1:d3:32:9d:d2:7d:a4:67:50:f0:f2:bd:4b: 9b:f1:f0:e7:01:32:21:a0:ad:ff:d1:10:3a:c3:98: e7:bd:6f:5b:a9:6e:ab:b0:77:70:1b:12:dc:93:9c: 18:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CF:DD:75:AD:C1:82:64:A1:B0:8E:B1:33:19:C6:45:13:2D:52:B2 X509v3 Authority Key Identifier: keyid:FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:0f:13:d5:fa:98:d4:6e:82:7f:39:cb:3f:80:73:0d:1d:76: e6:2e:8d:db:ae:ad:06:64:42:fe:20:3a:c6:48:3b:36:40:72: 87:52:6a:84:71:a3:25:81:f2:16:a5:0c:f5:0e:38:e5:d0:e8: e0:e5:9e:1b:1b:ae:60:0a:c2:ae:37:1f:a3:3b:ab:39:f5:fb: ef:c9:24:94:05:12:7c:84:c3:c1:ec:a1:41:39:7b:98:e7:ca: 09:d6:1b:55:44:74:fe:85:04:32:0d:67:6f:df:c6:97:b1:30: 29:35:46:00:b9:27:8d:f4:2f:b3:f7:dc:62:92:0b:b2:2e:97: 8f:33:07:cc:56:c0:2f:f3:0e:3b:34:1d:bf:81:70:21:38:6b: a0:a7:c5:5f:f7:97:6a:42:cd:13:a3:a9:b1:b0:b4:53:cc:82: a4:0c:f9:c5:51:09:46:73:21:fe:ec:3e:f9:3e:01:ec:80:8a: 48:76:56:bd:72:9d:9a:c8:3f:de:aa:17:c8:84:97:a9:1f:50: dc:88:42:c3:8b:38:f9:81:a3:48:9c:68:50:67:b5:7d:39:4c: ea:85:8d:f5:35:04:6d:30:d4:9d:0d:4a:12:34:ea:cd:16:0c: 93:9c:ed:f8:fa:f4:63:7d:0c:f8:8e:5f:24:5f:80:ce:09:04: f7:e2:b3:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkwRDYxMTAvBgNVBAUTKEZFRUU5RjM2MEE1REQxMzI4QkUxQzgyQTE3NzA3OTg5 Njg3NTlENDgwHhcNMjUwNDI1MDAzNTI2WhcNMjUwNTAyMDAzNTI2WjAYMRYwFAYD VQQDEw02ODBhZDhjZS01MGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5f60F3lKneNx6NFfu2QMZEf1o1ATSBPb9s41rQ6pI3t73Fen1UTjyaBCCO1q U8U5funqdXrhJnNZ+zB6HTpMlR43H/nxFRl/y7czh5ogI4FV19VY7WWlCCxqUcQ+ B5oe77LaHV5evDnbV3H9Arc+538YZH4Tt0ujxR791UbK5TaECOKDBKH1uU+RAtKf qBbLMmWwu4S2RZRXJ4Kk3rhGMO8UvHSf16d7+zzFIJdMd1hMLo476K5NpY9UOXs2 MbgOc/ti13YvMJJm3r7BFpYC6AIfKMHTMp3SfaRnUPDyvUub8fDnATIhoK3/0RA6 w5jnvW9bqW6rsHdwGxLck5wYrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzP3XWt wYJkobCOsTMZxkUTLVKyMB8GA1UdIwQYMBaAFP7unzYKXdEyi+HIKhdweYlodZ1I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTBENi9GOTY0QkMzMjlB RUQxMUVDQkY0MkU0MjdDNEY5QUUwMi9fdTZmTmdwZDBUS0w0Y2dxRjNCNWlXaDFu VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL191NmZOZ3BkMFRLTDRjZ3FGM0I1aVdoMW5VZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTBENi9GOTY0QkMzMjlBRUQxMUVDQkY0MkU0MjdDNEY5QUUwMi9fdTZmTmdwZDBU S0w0Y2dxRjNCNWlXaDFuVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZDxPV+pjUboJ/Ocs/gHMNHXbmLo3brq0GZEL+IDrGSDs2QHKHUmqE caMlgfIWpQz1Djjl0Ojg5Z4bG65gCsKuNx+jO6s59fvvySSUBRJ8hMPB7KFBOXuY 58oJ1htVRHT+hQQyDWdv38aXsTApNUYAuSeN9C+z99xikguyLpePMwfMVsAv8w47 NB2/gXAhOGugp8Vf95dqQs0To6mxsLRTzIKkDPnFUQlGcyH+7D75PgHsgIpIdla9 cp2ayD/eqhfIhJepH1DciELDizj5gaNInGhQZ7V9OUzqhY31NQRtMNSdDUoSNOrN FgyTnO34+vRjfQz4jl8kX4DOCQT34rNi -----END CERTIFICATE-----Generated at Sat Apr 26 12:38:40 2025 by rpki-client