$ rpki-client -vvf rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft File: 72cCp9CuyDTe-49BaLL-j01YQ-g.mft (raw, json) Hash identifier: YmeJ3j3BbR8qmuGqgwcoV9Sffv5Ev8GH1TYKVIEClZY= Subject key identifier: EC:36:A2:1B:21:48:92:16:21:2D:CC:68:84:AA:4A:5A:D3:26:39:F7 Authority key identifier: EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8 Certificate issuer: /CN=A91A352E/serialNumber=EF6702A7D0AEC834DEFB8F4168B2FE8F4D5843E8 Certificate serial: 0166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft Manifest number: 0160 Signing time: Fri 25 Apr 2025 03:09:47 +0000 Manifest this update: Fri 25 Apr 2025 03:09:47 +0000 Manifest next update: Fri 02 May 2025 03:09:47 +0000 Files and hashes: 1: 72cCp9CuyDTe-49BaLL-j01YQ-g.crl (hash: RVQEwjaX9k3u9nJuOb2bLZMFgafiNJp2sn9ZGy68Qf0=) 2: 3E734F70B9A311EE85D60B49C4F9AE02.roa (hash: rwWLgX0j1gAae5w6bqH0qLh9uyb80tM8QLuYgGiI8EU=) 3: C3835BF6B9A311EEB293524AC4F9AE02.roa (hash: d9ZhGU94CxjAU4bAS3pBSunhF0F9voc5kw0tZ3gpDNw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.crl rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 358 (0x166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A352E, serialNumber=EF6702A7D0AEC834DEFB8F4168B2FE8F4D5843E8 Validity Not Before: Apr 25 03:09:47 2025 GMT Not After : May 2 03:09:47 2025 GMT Subject: CN=680afcfb-14f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:39:dd:8f:c0:1d:a2:e2:ee:df:76:cf:d9:53: a5:ee:e7:f2:6c:4e:1c:9a:7f:33:d5:e9:a6:b7:81: 9f:a0:2c:15:df:5a:00:0a:47:44:21:9d:b6:9e:00: 24:b8:0c:4e:9a:c8:4b:12:b8:f2:7c:88:69:67:0e: 34:ea:2f:5f:a5:b4:5e:27:f6:67:46:f3:50:24:14: 82:13:bc:bb:35:a3:cd:02:8e:06:a2:50:d3:01:dc: e4:fe:ea:38:a4:8a:68:e9:91:b3:43:a3:92:d7:33: d9:fa:1b:45:52:3b:c1:1d:f6:e2:28:dc:38:4e:dc: 1f:b1:5d:aa:dd:6d:f8:d2:da:6d:3e:f3:1c:8d:3f: 0c:8e:5f:46:88:62:46:eb:a0:1b:cc:3b:60:25:41: 00:18:b6:78:29:2e:ea:48:e8:9c:ad:88:d4:0a:98: 9c:7a:aa:8e:07:2f:84:e2:91:1e:e8:6e:95:16:ff: 6f:5f:3a:9d:87:95:ce:40:7b:e2:c7:4c:46:f7:16: 7c:b0:37:87:ed:0b:e7:46:e4:f2:b1:e0:1a:91:c8: ee:61:d3:8f:a1:f2:d3:90:67:11:93:f0:db:84:0f: 9e:27:04:89:be:cd:e3:bb:35:36:a2:61:aa:cd:55: 99:47:98:62:6e:b9:ef:32:14:c9:10:94:ec:09:6f: 08:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:36:A2:1B:21:48:92:16:21:2D:CC:68:84:AA:4A:5A:D3:26:39:F7 X509v3 Authority Key Identifier: keyid:EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b4:38:e2:05:c5:7a:fa:53:02:e3:cb:09:4c:b3:d3:e3:f5: 1b:20:d1:98:3f:06:fa:09:1f:b0:0a:65:0c:76:72:a8:11:2d: a6:ab:05:f3:a8:c3:6e:96:a8:b5:3f:1f:37:cf:5b:a1:4f:c2: 33:08:c7:43:7e:30:43:68:1d:35:5f:02:84:f8:e0:9c:72:24: 59:79:e0:17:35:67:73:b3:f1:23:84:ad:2c:95:ea:91:53:f2: 0c:ce:49:d6:ac:81:4e:91:75:83:7c:66:bb:af:4b:d8:44:51: 1f:dd:f2:ff:0e:e4:1a:ce:52:9f:c8:43:26:78:f8:57:69:ba: 58:a9:b0:b0:61:b2:36:07:f4:c7:15:2e:76:86:30:68:fb:d8: 0b:29:87:c5:9d:1c:35:3a:d0:35:b5:28:75:c7:87:79:f2:5f: 12:09:a1:13:a3:87:82:64:e2:dd:1e:a3:33:1c:ca:fd:ce:98: a0:9d:fd:c9:9c:28:d2:f5:44:51:c7:36:53:65:34:92:54:f9: d1:3c:03:3b:b8:87:a0:78:95:54:97:09:2e:f5:87:b8:9b:23: 47:85:93:f1:09:fb:04:1a:4e:41:64:d9:53:53:ec:0f:f3:8b: 11:1a:24:5f:8e:23:50:d9:f0:7e:e2:aa:1f:be:71:a1:c2:4e: bc:52:4b:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM1MkUxMTAvBgNVBAUTKEVGNjcwMkE3RDBBRUM4MzRERUZCOEY0MTY4QjJGRThG NEQ1ODQzRTgwHhcNMjUwNDI1MDMwOTQ3WhcNMjUwNTAyMDMwOTQ3WjAYMRYwFAYD VQQDEw02ODBhZmNmYi0xNGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzndj8AdouLu33bP2VOl7ufybE4cmn8z1emmt4GfoCwV31oACkdEIZ22ngAk uAxOmshLErjyfIhpZw406i9fpbReJ/ZnRvNQJBSCE7y7NaPNAo4GolDTAdzk/uo4 pIpo6ZGzQ6OS1zPZ+htFUjvBHfbiKNw4TtwfsV2q3W340tptPvMcjT8Mjl9GiGJG 66AbzDtgJUEAGLZ4KS7qSOicrYjUCpiceqqOBy+E4pEe6G6VFv9vXzqdh5XOQHvi x0xG9xZ8sDeH7QvnRuTyseAakcjuYdOPofLTkGcRk/DbhA+eJwSJvs3juzU2omGq zVWZR5hibrnvMhTJEJTsCW8IWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOw2ohsh SJIWIS3MaISqSlrTJjn3MB8GA1UdIwQYMBaAFO9nAqfQrsg03vuPQWiy/o9NWEPo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzUyRS9EQzMzNTk3QzBC NjAxMUVFQjMyMjA0MUFDNEY5QUUwMi83MmNDcDlDdXlEVGUtNDlCYUxMLWowMVlR LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyY0NwOUN1eURUZS00OUJhTEwtajAxWVEtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzUyRS9EQzMzNTk3QzBCNjAxMUVFQjMyMjA0MUFDNEY5QUUwMi83MmNDcDlDdXlE VGUtNDlCYUxMLWowMVlRLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/tDjiBcV6+lMC48sJTLPT4/UbINGYPwb6CR+wCmUMdnKoES2mqwXz qMNulqi1Px83z1uhT8IzCMdDfjBDaB01XwKE+OCcciRZeeAXNWdzs/EjhK0sleqR U/IMzknWrIFOkXWDfGa7r0vYRFEf3fL/DuQazlKfyEMmePhXabpYqbCwYbI2B/TH FS52hjBo+9gLKYfFnRw1OtA1tSh1x4d58l8SCaETo4eCZOLdHqMzHMr9zpignf3J nCjS9URRxzZTZTSSVPnRPAM7uIegeJVUlwku9Ye4myNHhZPxCfsEGk5BZNlTU+wP 84sRGiRfjiNQ2fB+4qofvnGhwk68Ukty -----END CERTIFICATE-----Generated at Sat Apr 26 13:41:21 2025 by rpki-client