$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft File: kHuyYrVxYj40suIMYKcYwXOcw70.mft (raw, json) Hash identifier: EED+G1gKVc3OJgFIkPsqfXj9PpEVrU00vS1MUm37Ev4= Subject key identifier: 39:5C:CA:CB:4E:6C:95:FF:4A:25:41:D6:CD:99:FF:0A:5A:F9:FA:F7 Authority key identifier: 90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD Certificate issuer: /CN=A91A3A64/serialNumber=907BB262B571623E34B2E20C60A718C1739CC3BD Certificate serial: 0394 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft Manifest number: 038E Signing time: Fri 25 Apr 2025 00:35:13 +0000 Manifest this update: Fri 25 Apr 2025 00:35:13 +0000 Manifest next update: Fri 02 May 2025 00:35:13 +0000 Files and hashes: 1: kHuyYrVxYj40suIMYKcYwXOcw70.crl (hash: ZS9Zg+fGGIxjEOGplWjwmmLRcti9IJUmPQnAIyei0Ic=) 2: 5B92665E9ADD11ECA5401423C4F9AE02.roa (hash: ys9QvzSFj3FhbpKZdlZ1B6mYP128OL/SXk3uErxC5zo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.crl rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:35:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 916 (0x394) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3A64, serialNumber=907BB262B571623E34B2E20C60A718C1739CC3BD Validity Not Before: Apr 25 00:35:13 2025 GMT Not After : May 2 00:35:13 2025 GMT Subject: CN=680ad8c1-5aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:84:c9:4e:4a:bb:db:8f:2a:c3:4a:6e:34:59: 98:f0:ab:24:4e:06:2e:24:96:4d:ef:84:c2:6e:1f: 7c:31:a4:79:01:ca:1b:d1:cd:ab:d6:00:38:2e:66: a1:12:22:32:93:27:6e:9b:ac:dc:c9:7f:5d:66:49: 54:62:44:b9:57:40:56:2d:9a:fe:a1:2a:62:c2:51: b6:bd:2b:f1:b6:dd:1f:33:be:20:6c:6f:5d:1b:64: d5:7b:91:aa:a9:42:b3:4c:4f:9c:d3:31:f8:e4:2e: 05:d4:61:4d:44:cd:9f:85:9a:7f:10:7b:61:c1:14: fd:d2:9c:68:67:9d:09:58:83:a6:3e:93:5e:0f:0a: a4:bf:55:84:05:4e:f6:50:f5:a7:6f:0e:e6:c9:6c: bf:66:e6:d4:42:97:cf:55:a1:cd:70:15:f7:87:60: cb:48:19:22:68:7a:13:5d:7c:e6:23:e6:a6:df:7c: db:7e:c9:6b:0f:8a:39:f6:1c:1f:f0:4f:25:2a:4b: 47:fa:a1:68:c2:c8:e0:51:fa:8b:f3:80:6f:c3:a8: 29:b4:29:96:b1:75:a8:57:d8:a4:79:ad:77:28:36: 5a:cd:62:29:ff:3d:15:60:8f:e0:0a:e3:3b:4e:62: 76:d3:a0:04:d4:98:9b:21:92:e7:d1:1f:f6:22:ae: 4d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5C:CA:CB:4E:6C:95:FF:4A:25:41:D6:CD:99:FF:0A:5A:F9:FA:F7 X509v3 Authority Key Identifier: keyid:90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:ae:76:00:48:bd:d1:5f:9f:3b:35:e5:61:bd:e8:33:69:a1: 26:85:5c:17:8b:fa:14:c5:30:1b:e3:8b:3d:eb:b7:72:4c:bc: bb:05:fe:18:01:f0:93:d8:75:79:d6:b0:90:e4:ea:e3:93:e3: a3:4c:e1:25:46:32:ec:82:4b:d1:41:be:09:2a:c6:96:a6:f3: 3d:04:0c:45:a2:56:7d:ae:44:08:f5:25:95:6f:46:a8:eb:49: 92:2b:b6:6c:0d:99:16:fc:f5:37:2b:fa:cb:b1:57:a1:0b:db: ab:94:9b:07:5b:a8:c2:b0:3b:21:fc:47:b1:59:2a:a7:03:97: e2:58:32:42:66:f7:1b:55:d0:24:8e:08:c8:16:68:34:71:1d: 4d:4d:1f:6a:6e:b6:9d:6a:26:29:f7:f1:1c:d3:4d:23:25:10: 0b:ce:20:31:44:95:37:c3:bc:10:f0:1c:70:48:f3:ac:f8:e5: 55:fb:73:42:04:67:5c:bf:67:06:56:ab:03:4f:a8:ab:60:78: cb:08:3a:cd:24:f1:ad:d5:6c:02:dd:16:b7:c4:d5:9c:b3:82: 4c:cb:c9:f8:68:61:7e:d8:d3:72:37:f6:60:db:2b:1b:7a:be: 98:d2:c4:b0:09:d8:95:72:a4:20:f9:48:d3:cc:03:73:d2:b1: ea:34:77:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNBNjQxMTAvBgNVBAUTKDkwN0JCMjYyQjU3MTYyM0UzNEIyRTIwQzYwQTcxOEMx NzM5Q0MzQkQwHhcNMjUwNDI1MDAzNTEzWhcNMjUwNTAyMDAzNTEzWjAYMRYwFAYD VQQDEw02ODBhZDhjMS01YWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ITJTkq7248qw0puNFmY8KskTgYuJJZN74TCbh98MaR5Acob0c2r1gA4Lmah EiIykydum6zcyX9dZklUYkS5V0BWLZr+oSpiwlG2vSvxtt0fM74gbG9dG2TVe5Gq qUKzTE+c0zH45C4F1GFNRM2fhZp/EHthwRT90pxoZ50JWIOmPpNeDwqkv1WEBU72 UPWnbw7myWy/ZubUQpfPVaHNcBX3h2DLSBkiaHoTXXzmI+am33zbfslrD4o59hwf 8E8lKktH+qFowsjgUfqL84Bvw6gptCmWsXWoV9ikea13KDZazWIp/z0VYI/gCuM7 TmJ206AE1JibIZLn0R/2Iq5NqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlcystO bJX/SiVB1s2Z/wpa+fr3MB8GA1UdIwQYMBaAFJB7smK1cWI+NLLiDGCnGMFznMO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0E2NC8zNThDNjdCRTlB REExMUVDODU3MTMzNzhDNEY5QUUwMi9rSHV5WXJWeFlqNDBzdUlNWUtjWXdYT2N3 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tIdXlZclZ4WWo0MHN1SU1ZS2NZd1hPY3c3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0E2NC8zNThDNjdCRTlBREExMUVDODU3MTMzNzhDNEY5QUUwMi9rSHV5WXJWeFlq NDBzdUlNWUtjWXdYT2N3NzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUrnYASL3RX587NeVhvegzaaEmhVwXi/oUxTAb44s967dyTLy7Bf4Y AfCT2HV51rCQ5Orjk+OjTOElRjLsgkvRQb4JKsaWpvM9BAxFolZ9rkQI9SWVb0ao 60mSK7ZsDZkW/PU3K/rLsVehC9urlJsHW6jCsDsh/EexWSqnA5fiWDJCZvcbVdAk jgjIFmg0cR1NTR9qbradaiYp9/Ec000jJRALziAxRJU3w7wQ8BxwSPOs+OVV+3NC BGdcv2cGVqsDT6irYHjLCDrNJPGt1WwC3Ra3xNWcs4JMy8n4aGF+2NNyN/Zg2ysb er6Y0sSwCdiVcqQg+UjTzANz0rHqNHe7 -----END CERTIFICATE-----Generated at Sat Apr 26 04:38:39 2025 by rpki-client