$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft File: As_3eY8FPpyB_czteWLsu3bB0ho.mft (raw, json) Hash identifier: H6f4t1uIp26KofUQRSpu0KnmZgVTGmgbRRUMe1n3hLI= Subject key identifier: 76:B2:E7:86:65:C2:66:CA:6B:81:C3:71:09:22:2D:C5:74:E5:F6:37 Authority key identifier: 02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A Certificate issuer: /CN=A91A4690/serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft Manifest number: 85 Signing time: Fri 25 Apr 2025 05:33:11 +0000 Manifest this update: Fri 25 Apr 2025 05:33:11 +0000 Manifest next update: Fri 02 May 2025 05:33:11 +0000 Files and hashes: 1: As_3eY8FPpyB_czteWLsu3bB0ho.crl (hash: diWLAvS9Sr7C/lwkM0kmVcRnzoCkn6I+zgQhZhMMCz4=) 2: 7DAE5EB25AE011EFBA58F07FC4F9AE02.roa (hash: Wp/6wyEXkRXlx5jv/S/ukoLxXoe3Zkz5HAA1XVAZayI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4690, serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Validity Not Before: Apr 25 05:33:11 2025 GMT Not After : May 2 05:33:11 2025 GMT Subject: CN=680b1e97-d33f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d0:f3:28:c6:f7:a0:80:17:7b:1d:d6:33:94: 73:f8:b2:96:d5:22:b6:41:c8:89:97:51:55:d6:2d: ed:fe:98:b8:3c:f5:5c:66:dd:d3:5a:b8:1f:94:90: 38:01:de:22:8a:a3:fd:da:84:02:e6:08:e0:5e:48: 42:12:9f:68:81:f4:0c:fb:13:37:0b:6d:6d:4a:66: a9:e1:11:89:49:dd:db:2e:7f:98:85:87:59:f4:ab: 3d:2b:29:db:fa:0a:71:fc:ae:31:ec:1b:49:39:d2: 3c:a4:2e:bf:b2:ec:be:a3:6b:2d:f9:82:0d:ce:08: 1a:44:19:96:dd:d3:92:e6:22:0b:83:c7:4d:68:0f: 13:94:f6:a4:31:61:57:0d:39:74:06:b2:39:a3:3d: e3:14:1d:c1:ec:fe:ba:9b:3d:96:10:8a:22:58:8b: a6:f8:7e:bb:a1:74:e0:f8:9d:e4:33:e1:d2:d6:e6: f6:7f:2c:32:74:e0:d1:bc:ab:98:32:75:c3:fe:9f: c0:17:ef:b2:47:a2:ee:1e:13:c4:f1:ac:1f:b3:44: 54:5f:f5:09:00:7b:b2:59:3f:ac:53:d6:fb:3f:f4: 8b:73:10:e7:e6:68:25:47:bc:31:31:5e:46:7c:e0: be:3e:e2:7d:80:4f:14:93:00:f1:eb:4a:10:bc:35: a4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B2:E7:86:65:C2:66:CA:6B:81:C3:71:09:22:2D:C5:74:E5:F6:37 X509v3 Authority Key Identifier: keyid:02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:22:bd:c0:b7:51:32:5e:42:5d:11:d3:64:63:e5:2f:2e:b2: 8c:34:20:57:97:0e:38:65:93:14:1e:43:33:6a:fc:2e:9f:bf: 9c:7a:97:07:98:58:4f:bb:f9:80:70:c8:89:56:c5:74:ef:ca: b6:81:ea:91:68:23:c3:61:45:0a:68:63:17:b3:8e:2b:35:88: 56:f6:62:62:ce:07:51:a8:54:f3:cc:05:fc:c5:13:44:e0:6a: b0:ec:2c:cc:20:b2:e7:a0:d2:1b:2e:99:81:c0:6e:bd:08:71: d4:c7:b0:27:74:7d:82:0e:6e:17:44:0f:85:71:d3:1f:a9:77: 57:4e:ba:ab:a4:86:c7:30:e1:76:16:14:99:e8:30:e0:75:34: be:37:d0:c1:79:20:bf:e7:02:d5:df:d9:bc:18:74:62:b7:e8: df:d3:5e:f7:0d:a4:c0:86:5b:da:46:83:59:d2:e2:15:9a:08: c4:a2:37:4e:2e:49:c7:3c:b4:6f:cb:6e:0b:55:e4:98:f3:52: 67:d2:1a:3c:7d:ee:a2:45:99:a4:0e:83:bc:6e:c8:9e:21:88: b1:45:15:52:49:01:9b:aa:28:0d:95:78:d9:86:4b:6c:73:04: bc:11:51:cd:6c:93:a5:03:ce:78:48:ff:16:e5:a6:48:47:35: 88:2a:ef:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2OTAxMTAvBgNVBAUTKDAyQ0ZGNzc5OEYwNTNFOUM4MUZEQ0NFRDc5NjJFQ0JC NzZDMUQyMUEwHhcNMjUwNDI1MDUzMzExWhcNMjUwNTAyMDUzMzExWjAYMRYwFAYD VQQDEw02ODBiMWU5Ny1kMzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudDzKMb3oIAXex3WM5Rz+LKW1SK2QciJl1FV1i3t/pi4PPVcZt3TWrgflJA4 Ad4iiqP92oQC5gjgXkhCEp9ogfQM+xM3C21tSmap4RGJSd3bLn+YhYdZ9Ks9Kynb +gpx/K4x7BtJOdI8pC6/suy+o2st+YINzggaRBmW3dOS5iILg8dNaA8TlPakMWFX DTl0BrI5oz3jFB3B7P66mz2WEIoiWIum+H67oXTg+J3kM+HS1ub2fywydODRvKuY MnXD/p/AF++yR6LuHhPE8awfs0RUX/UJAHuyWT+sU9b7P/SLcxDn5mglR7wxMV5G fOC+PuJ9gE8UkwDx60oQvDWkLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHay54Zl wmbKa4HDcQkiLcV05fY3MB8GA1UdIwQYMBaAFALP93mPBT6cgf3M7Xli7Lt2wdIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDY5MC80MDlDOTcwQTVB RTAxMUVGODU4MjcwN0ZDNEY5QUUwMi9Bc18zZVk4RlBweUJfY3p0ZVdMc3UzYkIw aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FzXzNlWThGUHB5Ql9jenRlV0xzdTNiQjBoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDY5MC80MDlDOTcwQTVBRTAxMUVGODU4MjcwN0ZDNEY5QUUwMi9Bc18zZVk4RlBw eUJfY3p0ZVdMc3UzYkIwaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9Ir3At1EyXkJdEdNkY+UvLrKMNCBXlw44ZZMUHkMzavwun7+cepcH mFhPu/mAcMiJVsV078q2geqRaCPDYUUKaGMXs44rNYhW9mJizgdRqFTzzAX8xRNE 4Gqw7CzMILLnoNIbLpmBwG69CHHUx7AndH2CDm4XRA+FcdMfqXdXTrqrpIbHMOF2 FhSZ6DDgdTS+N9DBeSC/5wLV39m8GHRit+jf0173DaTAhlvaRoNZ0uIVmgjEojdO LknHPLRvy24LVeSY81Jn0ho8fe6iRZmkDoO8bsieIYixRRVSSQGbqigNlXjZhkts cwS8EVHNbJOlA854SP8W5aZIRzWIKu/+ -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:53 2025 by rpki-client