$ rpki-client -vvf rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft File: 83VHbzI13D1SUXHivpIRY45JCEc.mft (raw, json) Hash identifier: szhZi5a5gf+MbZmMqJalSWyEbV+qwupaWWhwJa/SOOQ= Subject key identifier: C2:51:BC:7F:00:96:8E:E8:D9:5F:F8:B1:35:4D:6C:D8:AC:86:B8:4F Authority key identifier: F3:75:47:6F:32:35:DC:3D:52:51:71:E2:BE:92:11:63:8E:49:08:47 Certificate issuer: /CN=A91627F9/serialNumber=F375476F3235DC3D525171E2BE9211638E490847 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft Manifest number: 2D Signing time: Fri 25 Apr 2025 06:45:13 +0000 Manifest this update: Fri 25 Apr 2025 06:45:12 +0000 Manifest next update: Fri 02 May 2025 06:45:12 +0000 Files and hashes: 1: 83VHbzI13D1SUXHivpIRY45JCEc.crl (hash: RPZ257JFHReTE10uNQjRhgABLbJvFnU7mww1tGBdgNo=) 2: BA8DB662085911F082EDFD31C4F9AE02.roa (hash: rPwsbk1iK8m/wIOTQ5ToBttJBfvQLb/F94KXTbHXYq0=) 3: 99E2D388E9C411EFAFABDD0BC4F9AE02.roa (hash: J1402rtf9QBVmnV/qIlsF0PgfqX7oUx84mIB0uPW1NA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.crl rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:45:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91627F9, serialNumber=F375476F3235DC3D525171E2BE9211638E490847 Validity Not Before: Apr 25 06:45:12 2025 GMT Not After : May 2 06:45:12 2025 GMT Subject: CN=680b2f78-76f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5c:3f:82:c7:f8:c1:82:dd:28:43:77:bd:50: 67:58:77:19:32:f5:a8:3b:8a:9f:6f:ae:d3:44:1e: ca:e0:a5:e8:0f:3c:3c:93:a8:15:45:ff:5d:2f:5e: 17:cc:00:59:30:05:14:b6:46:e6:df:6c:59:48:59: 6f:1f:1c:92:a7:7e:e6:66:ee:3f:02:c8:be:68:df: 2f:e8:73:b5:ea:7f:d7:d4:cf:86:53:a5:ab:3e:ac: 53:14:b9:39:6f:53:52:32:fb:83:8f:0a:ac:50:06: f3:b1:43:41:5e:45:65:b8:78:31:40:0f:c9:6c:11: 21:e0:bf:e8:60:71:db:e8:cc:b2:4a:7c:a8:f4:aa: 81:b3:8d:2e:af:53:f3:c7:a6:3a:02:64:e4:b4:15: 83:89:ac:eb:34:82:01:22:2e:15:63:e8:06:d9:6d: 58:8b:8a:49:b1:e0:8c:d2:bb:9a:43:43:99:7a:dc: 96:8b:2d:7e:33:04:6d:06:ee:fb:7e:bd:03:37:33: 56:c2:b4:72:71:77:78:e6:ab:5f:f1:e1:86:2c:96: 55:a4:1e:9d:0a:47:bf:2a:ca:a7:a0:e4:6f:86:9c: 13:58:26:f6:83:00:26:49:96:32:e7:06:5f:cf:b2: b4:40:1e:6e:c4:18:60:46:a3:a3:a3:bc:f6:c6:11: c1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:51:BC:7F:00:96:8E:E8:D9:5F:F8:B1:35:4D:6C:D8:AC:86:B8:4F X509v3 Authority Key Identifier: keyid:F3:75:47:6F:32:35:DC:3D:52:51:71:E2:BE:92:11:63:8E:49:08:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:d6:12:88:84:b3:fd:ee:52:3f:cf:b9:24:25:a1:f2:33:46: a3:0b:49:e5:2e:ed:24:94:56:ad:c8:b4:e9:96:c3:93:fa:83: f3:bd:a5:20:cb:f8:e3:c1:e1:1e:1c:dc:5b:fb:f0:72:93:ed: 22:9b:eb:86:da:b1:df:78:56:c4:71:96:33:1d:34:3f:54:8e: 61:ca:ab:b5:9e:24:fa:5c:92:e7:aa:88:4a:bb:bb:2f:44:62: b5:8c:dd:53:ea:00:0c:e9:af:36:00:c8:d2:68:3c:65:6a:b3: e7:10:3a:98:9d:e3:3d:cd:bc:cf:a6:66:ba:88:2d:c1:5b:38: 45:14:7e:ca:d7:86:4c:ea:4a:7c:00:f2:b9:c4:98:ce:1f:d3: 6a:22:e4:63:a4:b9:be:53:af:cb:de:e9:97:f8:e1:87:d9:16: b8:0b:dd:93:cf:05:9e:a1:d7:76:01:69:fa:64:a3:79:c3:86: a6:b6:6c:46:00:9a:ad:48:26:f6:9f:9a:79:eb:f6:f1:bd:43: b1:e6:85:ff:e4:09:a5:6c:b4:63:7c:da:5e:75:23:58:93:69: e6:a6:d2:ca:a3:b8:75:45:7a:42:ef:3b:94:b4:52:ed:23:ca: a1:3f:a8:67:d2:6c:91:03:ac:46:16:eb:34:b0:f4:3b:5d:11: d5:52:5b:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MjdGOTExMC8GA1UEBRMoRjM3NTQ3NkYzMjM1REMzRDUyNTE3MUUyQkU5MjExNjM4 RTQ5MDg0NzAeFw0yNTA0MjUwNjQ1MTJaFw0yNTA1MDIwNjQ1MTJaMBgxFjAUBgNV BAMTDTY4MGIyZjc4LTc2ZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPXD+Cx/jBgt0oQ3e9UGdYdxky9ag7ip9vrtNEHsrgpegPPDyTqBVF/10vXhfM AFkwBRS2RubfbFlIWW8fHJKnfuZm7j8CyL5o3y/oc7Xqf9fUz4ZTpas+rFMUuTlv U1Iy+4OPCqxQBvOxQ0FeRWW4eDFAD8lsESHgv+hgcdvozLJKfKj0qoGzjS6vU/PH pjoCZOS0FYOJrOs0ggEiLhVj6AbZbViLikmx4IzSu5pDQ5l63JaLLX4zBG0G7vt+ vQM3M1bCtHJxd3jmq1/x4YYsllWkHp0KR78qyqeg5G+GnBNYJvaDACZJljLnBl/P srRAHm7EGGBGo6OjvPbGEcE7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwlG8fwCW jujZX/ixNU1s2KyGuE8wHwYDVR0jBBgwFoAU83VHbzI13D1SUXHivpIRY45JCEcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYyN0Y5LzI4OERGMTRBRTlD NDExRUY5OTIwOTMwQUM0RjlBRTAyLzgzVkhiekkxM0QxU1VYSGl2cElSWTQ1SkNF Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvODNWSGJ6STEzRDFTVVhIaXZwSVJZNDVKQ0VjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYy N0Y5LzI4OERGMTRBRTlDNDExRUY5OTIwOTMwQUM0RjlBRTAyLzgzVkhiekkxM0Qx U1VYSGl2cElSWTQ1SkNFYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIjWEoiEs/3uUj/PuSQlofIzRqMLSeUu7SSUVq3ItOmWw5P6g/O9pSDL +OPB4R4c3Fv78HKT7SKb64basd94VsRxljMdND9UjmHKq7WeJPpckueqiEq7uy9E YrWM3VPqAAzprzYAyNJoPGVqs+cQOpid4z3NvM+mZrqILcFbOEUUfsrXhkzqSnwA 8rnEmM4f02oi5GOkub5Tr8ve6Zf44YfZFrgL3ZPPBZ6h13YBafpko3nDhqa2bEYA mq1IJvafmnnr9vG9Q7Hmhf/kCaVstGN82l51I1iTaeam0sqjuHVFekLvO5S0Uu0j yqE/qGfSbJEDrEYW6zSw9DtdEdVSW7A= -----END CERTIFICATE-----Generated at Sat Apr 26 05:21:40 2025 by rpki-client