$ rpki-client -vvf rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft File: 67oUOyhmNxjNjH2j9jEAmpgE7l8.mft (raw, json) Hash identifier: bN4uawrxkNoY/GG4YFWsrA1FruZG5ICEH0JK+p3uioY= Subject key identifier: 7E:B1:6E:D5:4F:F0:29:25:71:E3:E3:91:6B:FF:A6:22:32:44:B8:38 Authority key identifier: EB:BA:14:3B:28:66:37:18:CD:8C:7D:A3:F6:31:00:9A:98:04:EE:5F Certificate issuer: /CN=A919676F/serialNumber=EBBA143B28663718CD8C7DA3F631009A9804EE5F Certificate serial: 0188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67oUOyhmNxjNjH2j9jEAmpgE7l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft Manifest number: 0184 Signing time: Fri 25 Apr 2025 02:48:05 +0000 Manifest this update: Fri 25 Apr 2025 02:48:04 +0000 Manifest next update: Fri 02 May 2025 02:48:04 +0000 Files and hashes: 1: 67oUOyhmNxjNjH2j9jEAmpgE7l8.crl (hash: V/u04SgVE9klimhBJxM51MYrY8uBWlE+vtEt5Apyf4I=) 2: D277F83CD3A411ED8C51160FC4F9AE02.roa (hash: xeDK9WlWOxddaeQUzhh0jJMfgRYN6KWkgPqKssZPync=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.crl rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67oUOyhmNxjNjH2j9jEAmpgE7l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:48:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919676F, serialNumber=EBBA143B28663718CD8C7DA3F631009A9804EE5F Validity Not Before: Apr 25 02:48:04 2025 GMT Not After : May 2 02:48:04 2025 GMT Subject: CN=680af7e4-faeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:96:d1:35:d4:25:5f:94:98:d4:b7:d7:ce:d6: e9:14:92:1a:5f:52:e4:0b:db:60:f6:ee:16:7d:3a: 21:9a:df:ac:ee:25:8f:fe:6e:d4:7f:79:78:c4:38: d6:8b:4f:b4:e5:e0:c7:4d:41:d3:22:87:97:de:34: 10:e3:cf:19:3d:85:04:ef:ad:b5:70:f8:1c:e6:bc: 43:b8:f4:fc:6b:40:44:86:1c:a9:00:ba:2c:df:dd: c6:cf:c9:5b:c2:ea:b9:b2:d9:a3:a5:91:90:e5:1c: 42:4b:99:8f:f4:73:e9:cc:1f:20:48:48:26:4d:80: 58:39:a6:35:9d:a8:94:db:29:9e:c8:ad:14:b4:56: 59:79:2a:11:a1:7a:e3:7c:76:b5:9c:b6:9c:c1:d4: b2:a4:66:67:51:73:84:74:de:cd:a8:7d:e5:22:b3: bc:c1:2d:06:bb:c4:ae:58:70:e0:cb:e0:1e:d3:70: c1:fe:52:c3:97:51:1c:98:99:c7:c8:7b:08:0f:ee: 5a:48:a6:07:af:fc:63:95:3a:57:79:4d:90:66:94: b8:04:cc:90:b2:3d:6b:3a:88:41:0d:21:80:62:51: f3:e2:46:11:0d:81:76:3d:3e:ea:9f:e5:20:cf:46: 89:8f:e9:24:19:ac:10:ab:7b:4c:a2:7e:a3:c0:c2: 88:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B1:6E:D5:4F:F0:29:25:71:E3:E3:91:6B:FF:A6:22:32:44:B8:38 X509v3 Authority Key Identifier: keyid:EB:BA:14:3B:28:66:37:18:CD:8C:7D:A3:F6:31:00:9A:98:04:EE:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67oUOyhmNxjNjH2j9jEAmpgE7l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:2d:f0:57:43:be:c7:5f:86:b4:f5:ed:76:ab:53:c3:e9:e2: 74:cb:b7:40:38:7b:92:07:b4:10:df:e6:8c:d7:c4:3d:1d:80: 3a:2e:47:ca:77:88:ea:9b:a8:22:dd:9f:2d:b8:e0:ad:84:f2: 5d:09:d1:f8:d9:f2:29:5d:bc:a7:28:0b:cd:67:ae:76:15:1d: 95:10:6d:5e:8f:5a:ea:25:4e:49:e8:b4:7c:8b:c8:02:cf:77: 5c:46:cd:1f:a3:be:b5:70:41:a7:92:fd:02:39:67:b5:3f:b1: 59:a4:8b:5b:ab:f8:11:d3:68:17:e2:bf:27:f6:d9:e5:48:7f: 31:3f:7b:65:35:b2:3b:22:ff:79:17:e4:b1:fd:6f:9c:6b:0f: bb:0e:3e:7f:2e:6d:6e:50:2b:72:92:15:a9:df:71:89:a7:27: f2:6a:19:93:33:67:bd:a0:64:0e:09:7a:f3:74:14:0b:0a:af: 68:33:67:2c:c1:10:80:af:99:65:3c:13:64:e0:6b:66:91:2f: c8:c8:5a:0d:49:54:3e:9c:2e:c9:99:fe:ce:04:f2:64:23:f3: 39:e8:df:2a:d5:e4:62:a1:22:a9:21:12:8b:84:2b:3f:92:40: 3c:29:b8:99:16:50:eb:9e:1b:b3:6d:9e:06:6e:fc:68:07:38: e7:c9:69:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY3NkYxMTAvBgNVBAUTKEVCQkExNDNCMjg2NjM3MThDRDhDN0RBM0Y2MzEwMDlB OTgwNEVFNUYwHhcNMjUwNDI1MDI0ODA0WhcNMjUwNTAyMDI0ODA0WjAYMRYwFAYD VQQDEw02ODBhZjdlNC1mYWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJbRNdQlX5SY1LfXztbpFJIaX1LkC9tg9u4WfTohmt+s7iWP/m7Uf3l4xDjW i0+05eDHTUHTIoeX3jQQ488ZPYUE7621cPgc5rxDuPT8a0BEhhypALos393Gz8lb wuq5stmjpZGQ5RxCS5mP9HPpzB8gSEgmTYBYOaY1naiU2ymeyK0UtFZZeSoRoXrj fHa1nLacwdSypGZnUXOEdN7NqH3lIrO8wS0Gu8SuWHDgy+Ae03DB/lLDl1EcmJnH yHsID+5aSKYHr/xjlTpXeU2QZpS4BMyQsj1rOohBDSGAYlHz4kYRDYF2PT7qn+Ug z0aJj+kkGawQq3tMon6jwMKIXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6xbtVP 8CklcePjkWv/piIyRLg4MB8GA1UdIwQYMBaAFOu6FDsoZjcYzYx9o/YxAJqYBO5f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Njc2Ri9GRTQ5RkFDMkQz QTAxMUVEODE0QzRDMThDNEY5QUUwMi82N29VT3lobU54ak5qSDJqOWpFQW1wZ0U3 bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3b1VPeWhtTnhqTmpIMmo5akVBbXBnRTdsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Njc2Ri9GRTQ5RkFDMkQzQTAxMUVEODE0QzRDMThDNEY5QUUwMi82N29VT3lobU54 ak5qSDJqOWpFQW1wZ0U3bDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdLfBXQ77HX4a09e12q1PD6eJ0y7dAOHuSB7QQ3+aM18Q9HYA6LkfK d4jqm6gi3Z8tuOCthPJdCdH42fIpXbynKAvNZ652FR2VEG1ej1rqJU5J6LR8i8gC z3dcRs0fo761cEGnkv0COWe1P7FZpItbq/gR02gX4r8n9tnlSH8xP3tlNbI7Iv95 F+Sx/W+caw+7Dj5/Lm1uUCtykhWp33GJpyfyahmTM2e9oGQOCXrzdBQLCq9oM2cs wRCAr5llPBNk4GtmkS/IyFoNSVQ+nC7Jmf7OBPJkI/M56N8q1eRioSKpIRKLhCs/ kkA8KbiZFlDrnhuzbZ4GbvxoBzjnyWl9 -----END CERTIFICATE-----Generated at Sat Apr 26 05:22:19 2025 by rpki-client