$ rpki-client -vvf rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft File: 66pMRPJIk3FKHVs2Ci17LYYFsWM.mft (raw, json) Hash identifier: NFjcQgZh22YenoLsNkU3HSjWUCeL/NWza3+/wJaqfsQ= Subject key identifier: 91:5E:13:4D:67:39:14:99:9F:46:D2:5E:AE:A5:23:4E:9A:06:FC:7A Authority key identifier: EB:AA:4C:44:F2:48:93:71:4A:1D:5B:36:0A:2D:7B:2D:86:05:B1:63 Certificate issuer: /CN=A91504D6/serialNumber=EBAA4C44F24893714A1D5B360A2D7B2D8605B163 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft Manifest number: A0 Signing time: Fri 25 Apr 2025 05:14:18 +0000 Manifest this update: Fri 25 Apr 2025 05:14:17 +0000 Manifest next update: Fri 02 May 2025 05:14:17 +0000 Files and hashes: 1: 66pMRPJIk3FKHVs2Ci17LYYFsWM.crl (hash: 0uklboxFo2IvI9n3DNlWdYLa4/wHPkNmoQeVj7J95pw=) 2: BE82B5AE31C911EFA31A8D3AC4F9AE02.roa (hash: 6SVIugHlnaJdlkKtpec/q8AF54HgJPVuchm8bN57MAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.crl rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91504D6, serialNumber=EBAA4C44F24893714A1D5B360A2D7B2D8605B163 Validity Not Before: Apr 25 05:14:17 2025 GMT Not After : May 2 05:14:17 2025 GMT Subject: CN=680b1a29-a011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:10:04:be:68:5d:c6:d4:ec:93:71:09:8e:1b: 57:f3:cb:dd:96:e3:7a:f2:32:09:1e:32:d3:3e:a2: a4:6e:84:c6:92:b3:7a:bd:59:00:b0:b2:9d:ba:cd: b4:aa:9d:d5:51:dd:fa:05:ed:73:a7:13:97:7f:77: 13:52:54:88:d0:ae:f9:a2:fe:f7:8b:13:b7:bb:9f: 46:13:b2:cc:10:43:0d:5a:db:41:c6:20:b8:57:7b: ec:d0:07:4b:5e:bc:92:d8:b7:c1:37:28:b4:d2:11: 2a:3a:d1:5f:e5:9e:ab:e5:8e:98:a7:7e:fd:21:3f: cc:80:90:96:f4:32:25:97:ec:0a:0b:9f:35:8f:ce: 13:67:4f:69:96:1b:d7:8f:17:44:a9:27:78:f6:07: e4:c3:bd:f9:a9:30:95:e0:a2:d6:a0:05:f4:40:8f: 61:48:3d:08:d0:87:31:7f:50:df:c9:d3:a5:aa:6b: ce:5f:94:2b:ff:66:72:2d:a3:35:7e:95:0a:f5:9b: 3f:ea:d2:3c:87:8a:58:d6:54:5f:92:5b:b4:3e:e5: 06:4e:49:eb:59:09:1b:cd:b8:75:d4:d0:d4:f1:4d: ba:ff:ef:f1:86:59:f9:e3:b0:66:e8:25:f9:1a:50: 5d:9f:cd:92:c9:b6:fe:71:23:8d:13:56:43:26:06: db:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:5E:13:4D:67:39:14:99:9F:46:D2:5E:AE:A5:23:4E:9A:06:FC:7A X509v3 Authority Key Identifier: keyid:EB:AA:4C:44:F2:48:93:71:4A:1D:5B:36:0A:2D:7B:2D:86:05:B1:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:df:8f:54:90:57:a6:a6:ec:c3:5a:9b:56:7c:e5:61:c6:20: bd:f3:f4:18:44:43:b8:05:24:25:af:2c:bc:3b:72:22:b7:75: b0:04:4c:af:a5:3c:1b:40:8d:fc:80:02:3d:4b:02:ca:75:f6: 71:5f:bb:47:54:58:5b:7d:f4:87:b9:b9:38:77:f1:67:b5:17: a2:fc:14:b2:8b:bb:ec:92:c3:4f:ea:ad:95:61:39:c3:45:0c: fb:d6:7c:d8:1d:de:a4:8b:bf:c8:93:36:08:3f:bf:57:08:4c: 9d:56:3a:39:9f:ed:b7:31:d3:b4:27:65:45:c3:32:e0:fd:27: 7b:aa:07:dc:55:f6:5d:5a:0f:c4:01:96:a8:20:85:40:0f:f3: 2f:77:97:01:39:41:8e:33:f5:f8:6f:ce:0b:61:cf:f3:03:c2: d2:67:03:92:ea:d3:29:cd:67:41:39:3b:ce:09:cd:28:e8:18: e1:5d:00:01:e9:57:55:5c:94:d0:c1:1d:90:c3:ea:ef:0f:a4: 1f:b6:27:f1:c6:7c:9d:43:16:41:61:6c:a2:98:18:d4:f7:56: 8a:da:f9:a4:c5:db:5f:0b:b0:72:ad:86:6b:18:91:3a:91:fe: d4:44:71:1e:76:b6:7d:78:d4:d3:e7:e3:c0:9c:a6:ca:be:27: a2:41:3d:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA0RDYxMTAvBgNVBAUTKEVCQUE0QzQ0RjI0ODkzNzE0QTFENUIzNjBBMkQ3QjJE ODYwNUIxNjMwHhcNMjUwNDI1MDUxNDE3WhcNMjUwNTAyMDUxNDE3WjAYMRYwFAYD VQQDEw02ODBiMWEyOS1hMDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3RAEvmhdxtTsk3EJjhtX88vdluN68jIJHjLTPqKkboTGkrN6vVkAsLKdus20 qp3VUd36Be1zpxOXf3cTUlSI0K75ov73ixO3u59GE7LMEEMNWttBxiC4V3vs0AdL XryS2LfBNyi00hEqOtFf5Z6r5Y6Yp379IT/MgJCW9DIll+wKC581j84TZ09plhvX jxdEqSd49gfkw735qTCV4KLWoAX0QI9hSD0I0Icxf1DfydOlqmvOX5Qr/2ZyLaM1 fpUK9Zs/6tI8h4pY1lRfklu0PuUGTknrWQkbzbh11NDU8U26/+/xhln547Bm6CX5 GlBdn82Sybb+cSONE1ZDJgbbdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFeE01n ORSZn0bSXq6lI06aBvx6MB8GA1UdIwQYMBaAFOuqTETySJNxSh1bNgotey2GBbFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDRENi9BRDBDQUMxRTMx QTkxMUVGQjZGQjFENjBDNEY5QUUwMi82NnBNUlBKSWszRktIVnMyQ2kxN0xZWUZz V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzY2cE1SUEpJazNGS0hWczJDaTE3TFlZRnNXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDRENi9BRDBDQUMxRTMxQTkxMUVGQjZGQjFENjBDNEY5QUUwMi82NnBNUlBKSWsz RktIVnMyQ2kxN0xZWUZzV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN349UkFempuzDWptWfOVhxiC98/QYREO4BSQlryy8O3Iit3WwBEyv pTwbQI38gAI9SwLKdfZxX7tHVFhbffSHubk4d/FntRei/BSyi7vsksNP6q2VYTnD RQz71nzYHd6ki7/IkzYIP79XCEydVjo5n+23MdO0J2VFwzLg/Sd7qgfcVfZdWg/E AZaoIIVAD/Mvd5cBOUGOM/X4b84LYc/zA8LSZwOS6tMpzWdBOTvOCc0o6BjhXQAB 6VdVXJTQwR2Qw+rvD6QftifxxnydQxZBYWyimBjU91aK2vmkxdtfC7ByrYZrGJE6 kf7URHEedrZ9eNTT5+PAnKbKvieiQT0P -----END CERTIFICATE-----Generated at Sat Apr 26 14:08:23 2025 by rpki-client