$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft File: aTn8BA2lwwt2bceU-cpML0Gsruo.mft (raw, json) Hash identifier: nacb+ghP/wZJuG88PNUfEeaykvRm+F74kFVnyOPxPzQ= Subject key identifier: 3A:4E:E0:5C:F0:83:A0:96:C8:F0:3E:11:15:E4:DA:51:F6:EF:45:5C Authority key identifier: 69:39:FC:04:0D:A5:C3:0B:76:6D:C7:94:F9:CA:4C:2F:41:AC:AE:EA Certificate issuer: /CN=A91A2A1F/serialNumber=6939FC040DA5C30B766DC794F9CA4C2F41ACAEEA Certificate serial: 0446 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft Manifest number: 042D Signing time: Fri 25 Apr 2025 00:10:49 +0000 Manifest this update: Fri 25 Apr 2025 00:10:48 +0000 Manifest next update: Fri 02 May 2025 00:10:48 +0000 Files and hashes: 1: aTn8BA2lwwt2bceU-cpML0Gsruo.crl (hash: soGiC3wbv4n1G7Qpa6wL2jY3co4VHOF+jLVUe/GvjkY=) 2: 17ABE41ACAF611EE894A2D50C4F9AE02.roa (hash: 7f1bmEuDQ5Sbosdy6FQn3ysHUO4D+FPE7x81aIvfa7s=) 3: 27E42824621B11ECB96F443FC4F9AE02.roa (hash: 0VIXrT5lkbzWq5yzVw+gOO/11yudXxUHr9urUbsKFX0=) 4: 63E8739003C111EEB2272068C4F9AE02.roa (hash: AjzVSaaH9fWXVN9n877r+FmZlcwm85Oz5kawF/sl3R0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.crl rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1094 (0x446) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2A1F, serialNumber=6939FC040DA5C30B766DC794F9CA4C2F41ACAEEA Validity Not Before: Apr 25 00:10:48 2025 GMT Not After : May 2 00:10:48 2025 GMT Subject: CN=680ad309-38ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:57:33:02:3d:31:07:07:c3:31:92:36:84:b8: ee:db:64:d8:07:2b:5a:cb:f0:ec:ed:e8:cc:d4:d5: 55:cb:1a:9a:33:67:f8:99:7d:94:de:06:f9:4d:1c: 51:9d:35:d3:91:78:09:e3:71:7e:15:00:d1:ea:f6: 53:8c:b4:bb:b7:b9:66:6d:15:57:49:5f:dd:b6:f8: 6a:06:00:66:2d:f7:3e:06:e7:69:31:f2:1e:87:77: f5:aa:d0:8f:39:c1:9e:b2:14:c5:b5:ae:ae:1f:7e: 4a:7c:25:57:66:7a:26:95:8a:09:6f:ce:46:f2:20: 70:82:2c:f6:aa:64:83:8d:d3:50:05:3b:a5:7f:0d: 2e:3c:db:35:3f:3c:46:78:fc:82:66:2a:9b:5c:eb: f7:fa:28:cf:fe:53:0e:30:cb:b0:67:6b:33:7e:29: 5f:c5:ea:87:7e:52:71:49:93:d2:57:74:51:8e:d8: 94:32:6f:d1:08:a7:ef:6d:61:a1:c4:6f:bc:6b:f1: 43:b8:ef:d7:cb:e6:f7:c4:9e:b6:23:0d:18:fe:1b: 14:b3:92:14:1e:72:02:4c:56:75:f2:5c:a6:4e:76: a7:6c:d1:45:dc:df:55:a1:c1:b6:ea:80:d0:ce:11: ce:12:ec:cd:7f:0d:73:93:e0:15:1f:db:82:2b:7d: 1b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:4E:E0:5C:F0:83:A0:96:C8:F0:3E:11:15:E4:DA:51:F6:EF:45:5C X509v3 Authority Key Identifier: keyid:69:39:FC:04:0D:A5:C3:0B:76:6D:C7:94:F9:CA:4C:2F:41:AC:AE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:31:0f:4f:2e:ea:54:c0:30:cd:81:f7:34:4c:1d:2c:8f:58: 23:41:5d:8d:a5:d5:81:65:f8:9c:3d:cd:4d:72:1d:4d:9f:0e: 56:aa:15:e3:ba:72:b4:04:84:f3:d1:f7:ed:18:05:ef:37:9c: 3f:b7:00:7d:e7:ed:e0:3a:04:b9:01:63:57:f7:d0:6c:ba:d3: b6:c8:49:c7:7b:66:05:a9:94:35:b4:28:90:f6:37:c1:6a:fc: 02:4d:0a:d0:55:94:45:0e:05:b9:02:e1:3c:6b:10:e3:0c:3f: fd:53:1b:4c:43:8c:55:a1:25:b4:21:74:22:e8:fe:60:fa:cf: e1:90:17:ea:a1:72:12:eb:0b:21:7a:c7:67:56:ca:2e:47:1e: b0:9d:28:3b:e3:24:e3:52:05:33:cf:4f:ab:3b:ce:dc:09:34: 0d:23:aa:42:01:50:fe:53:ba:e3:c1:1a:32:ed:6a:17:e3:31: 71:39:0f:92:ee:5d:cd:a9:2d:f8:d6:b8:ca:7e:d2:58:83:0e: 1f:9a:86:d9:c8:da:79:06:91:6e:d1:35:c6:73:e3:47:07:cc: 07:2d:bd:aa:94:b1:c9:d3:62:a6:5a:32:fc:f9:35:fa:57:46: 86:02:32:39:64:b2:54:f5:8e:b5:37:6c:13:a5:94:47:7f:aa: 2c:71:cb:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJBMUYxMTAvBgNVBAUTKDY5MzlGQzA0MERBNUMzMEI3NjZEQzc5NEY5Q0E0QzJG NDFBQ0FFRUEwHhcNMjUwNDI1MDAxMDQ4WhcNMjUwNTAyMDAxMDQ4WjAYMRYwFAYD VQQDEw02ODBhZDMwOS0zOGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlczAj0xBwfDMZI2hLju22TYBytay/Ds7ejM1NVVyxqaM2f4mX2U3gb5TRxR nTXTkXgJ43F+FQDR6vZTjLS7t7lmbRVXSV/dtvhqBgBmLfc+BudpMfIeh3f1qtCP OcGeshTFta6uH35KfCVXZnomlYoJb85G8iBwgiz2qmSDjdNQBTulfw0uPNs1PzxG ePyCZiqbXOv3+ijP/lMOMMuwZ2szfilfxeqHflJxSZPSV3RRjtiUMm/RCKfvbWGh xG+8a/FDuO/Xy+b3xJ62Iw0Y/hsUs5IUHnICTFZ18lymTnanbNFF3N9VocG26oDQ zhHOEuzNfw1zk+AVH9uCK30bAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDpO4Fzw g6CWyPA+ERXk2lH270VcMB8GA1UdIwQYMBaAFGk5/AQNpcMLdm3HlPnKTC9BrK7q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkExRi8xRUNGRkM0QzYy MTkxMUVDOTlBNTVGM0VDNEY5QUUwMi9hVG44QkEybHd3dDJiY2VVLWNwTUwwR3Ny dW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FUbjhCQTJsd3d0MmJjZVUtY3BNTDBHc3J1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkExRi8xRUNGRkM0QzYyMTkxMUVDOTlBNTVGM0VDNEY5QUUwMi9hVG44QkEybHd3 dDJiY2VVLWNwTUwwR3NydW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoMQ9PLupUwDDNgfc0TB0sj1gjQV2NpdWBZficPc1Nch1Nnw5WqhXj unK0BITz0fftGAXvN5w/twB95+3gOgS5AWNX99BsutO2yEnHe2YFqZQ1tCiQ9jfB avwCTQrQVZRFDgW5AuE8axDjDD/9UxtMQ4xVoSW0IXQi6P5g+s/hkBfqoXIS6wsh esdnVsouRx6wnSg74yTjUgUzz0+rO87cCTQNI6pCAVD+U7rjwRoy7WoX4zFxOQ+S 7l3NqS341rjKftJYgw4fmobZyNp5BpFu0TXGc+NHB8wHLb2qlLHJ02KmWjL8+TX6 V0aGAjI5ZLJU9Y61N2wTpZRHf6osccs6 -----END CERTIFICATE-----Generated at Sat Apr 26 20:24:25 2025 by rpki-client