$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft File: pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft (raw, json) Hash identifier: NSkWxfiLMmWBvgRlNJag3jYZ6vz0y5KGeGyGvtwHkNc= Subject key identifier: C2:B5:3C:E0:13:B6:CE:20:83:97:FC:8C:31:D5:9D:BB:B2:60:DD:2E Authority key identifier: A4:8C:9B:D4:A5:DB:11:9E:15:43:32:41:36:E0:2E:EA:4B:CA:AF:38 Certificate issuer: /CN=A91A8475/serialNumber=A48C9BD4A5DB119E1543324136E02EEA4BCAAF38 Certificate serial: 01F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft Manifest number: 01EF Signing time: Sat 03 May 2025 02:08:20 +0000 Manifest this update: Sat 03 May 2025 02:08:20 +0000 Manifest next update: Sat 10 May 2025 02:08:20 +0000 Files and hashes: 1: pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl (hash: FRNkegnNP2sK/PgHrzDgjP0Uw2pMDA3/nSQPhNU+Dq0=) 2: A4E607B6B1C511EDA095B220C4F9AE02.roa (hash: IaOYa65tPNoGSKOth9OBnqEo5IgGVd7ufuneStp8ah8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 02:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 502 (0x1f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8475, serialNumber=A48C9BD4A5DB119E1543324136E02EEA4BCAAF38 Validity Not Before: May 3 02:08:20 2025 GMT Not After : May 10 02:08:20 2025 GMT Subject: CN=68157a94-ec0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d4:ff:0d:1d:36:07:51:6b:9a:48:2f:36:f9: 36:c9:bb:2c:d3:a0:ca:d6:a9:b4:70:2d:e8:ed:2c: 81:6c:e0:b1:84:28:94:f4:1d:88:5d:c5:5f:a8:ce: 34:91:f9:ff:72:27:c3:5c:e0:9c:cd:8c:ca:ab:02: 82:c1:43:bb:25:92:d4:82:69:d9:7b:00:29:b8:0e: 39:4a:3f:0d:39:c5:03:47:ff:89:99:88:96:fe:68: 1b:16:b7:fb:d3:51:15:85:bd:1f:13:93:44:f7:a6: 22:d7:14:be:62:8c:c2:16:c8:87:7f:00:73:74:20: ae:f9:57:52:c2:8c:9a:b6:ab:36:49:07:5a:86:b1: 74:1a:ad:44:d5:65:ec:4c:be:19:5f:0c:8d:d3:25: 3b:0e:d4:f0:a2:8a:a4:e0:0d:41:3a:2a:ea:1f:77: eb:8b:18:0d:b5:1d:34:0d:0a:9c:a1:65:ae:1b:26: 69:85:da:27:bd:35:29:73:9b:02:29:af:14:77:72: 06:54:ba:cd:0c:37:57:9d:5d:fd:37:01:aa:4d:0f: 55:ef:f1:a2:d3:76:e2:f0:af:ee:73:84:63:f4:bf: a0:0d:71:65:e1:77:38:2c:14:f4:47:d0:5f:75:30: 32:bb:2e:bc:58:0f:c4:af:de:6b:58:1b:a0:27:50: 15:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B5:3C:E0:13:B6:CE:20:83:97:FC:8C:31:D5:9D:BB:B2:60:DD:2E X509v3 Authority Key Identifier: keyid:A4:8C:9B:D4:A5:DB:11:9E:15:43:32:41:36:E0:2E:EA:4B:CA:AF:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8475/6B6582F23EF011EDA1F3051AC4F9AE02/pIyb1KXbEZ4VQzJBNuAu6kvKrzg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:dd:10:f0:f1:b7:e1:31:1b:62:91:53:88:cb:80:e7:35:cb: 51:66:59:34:6b:ad:a5:35:08:bb:ec:67:20:ab:26:09:26:e2: 7e:3f:4f:4f:b8:77:fe:c5:91:4b:fb:07:da:54:37:9d:9f:da: af:0d:b9:41:16:ce:75:1b:9d:c8:fc:e8:e4:79:92:05:fd:ba: d6:e8:84:c4:47:e9:61:0f:11:e0:58:d9:99:86:43:01:f7:73: 06:7d:ae:66:c8:0a:3f:0b:02:e2:34:0c:d2:bc:90:96:4a:78: e3:ac:ec:2a:7b:5f:b3:ac:b4:be:af:e6:5b:fc:b3:05:94:ca: d4:f5:a5:c4:31:42:9d:42:76:b8:da:4c:c4:c1:e9:dd:2b:eb: 4b:59:cd:30:72:ed:0d:49:c9:40:1c:ee:11:05:5b:ac:09:de: 62:d1:0e:3b:fc:20:da:41:d6:4e:49:78:4d:42:ee:d4:98:af: 01:85:d5:0f:10:78:d8:c5:80:63:71:71:fe:e8:34:63:86:0d: 8e:20:c2:91:4f:75:ce:7d:1a:f6:2b:17:54:a2:5e:3a:2a:41: 38:d8:28:53:93:da:78:1e:53:2d:f4:12:4c:00:7b:e7:82:51: 0a:92:c4:ea:8d:8d:d1:46:07:ae:76:8b:5e:a9:30:f4:30:d0: 09:d3:e9:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg0NzUxMTAvBgNVBAUTKEE0OEM5QkQ0QTVEQjExOUUxNTQzMzI0MTM2RTAyRUVB NEJDQUFGMzgwHhcNMjUwNTAzMDIwODIwWhcNMjUwNTEwMDIwODIwWjAYMRYwFAYD VQQDEw02ODE1N2E5NC1lYzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9T/DR02B1FrmkgvNvk2ybss06DK1qm0cC3o7SyBbOCxhCiU9B2IXcVfqM40 kfn/cifDXOCczYzKqwKCwUO7JZLUgmnZewApuA45Sj8NOcUDR/+JmYiW/mgbFrf7 01EVhb0fE5NE96Yi1xS+YozCFsiHfwBzdCCu+VdSwoyatqs2SQdahrF0Gq1E1WXs TL4ZXwyN0yU7DtTwooqk4A1BOirqH3frixgNtR00DQqcoWWuGyZphdonvTUpc5sC Ka8Ud3IGVLrNDDdXnV39NwGqTQ9V7/Gi03bi8K/uc4Rj9L+gDXFl4Xc4LBT0R9Bf dTAyuy68WA/Er95rWBugJ1AVLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMK1POAT ts4gg5f8jDHVnbuyYN0uMB8GA1UdIwQYMBaAFKSMm9Sl2xGeFUMyQTbgLupLyq84 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODQ3NS82QjY1ODJGMjNF RjAxMUVEQTFGMzA1MUFDNEY5QUUwMi9wSXliMUtYYkVaNFZRekpCTnVBdTZrdkty emcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BJeWIxS1hiRVo0VlF6SkJOdUF1Nmt2S3J6Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODQ3NS82QjY1ODJGMjNFRjAxMUVEQTFGMzA1MUFDNEY5QUUwMi9wSXliMUtYYkVa NFZRekpCTnVBdTZrdktyemcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA03RDw8bfhMRtikVOIy4DnNctRZlk0a62lNQi77GcgqyYJJuJ+P09P uHf+xZFL+wfaVDedn9qvDblBFs51G53I/OjkeZIF/brW6ITER+lhDxHgWNmZhkMB 93MGfa5myAo/CwLiNAzSvJCWSnjjrOwqe1+zrLS+r+Zb/LMFlMrU9aXEMUKdQna4 2kzEwendK+tLWc0wcu0NSclAHO4RBVusCd5i0Q47/CDaQdZOSXhNQu7UmK8BhdUP EHjYxYBjcXH+6DRjhg2OIMKRT3XOfRr2KxdUol46KkE42ChTk9p4HlMt9BJMAHvn glEKksTqjY3RRgeudoteqTD0MNAJ0+kO -----END CERTIFICATE-----Generated at Mon May 5 02:09:57 2025 by rpki-client