$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft File: PTiRpGy8urR0eN6kDSkI9nzOOyo.mft (raw, json) Hash identifier: ZUQ6+t4CRgnVg6QjQ/r7gU1YjczC96qdsP3jYfwoNL8= Subject key identifier: D7:05:80:8B:CF:E4:47:41:C6:1A:CE:EB:D8:31:F6:41:1A:26:4D:9E Authority key identifier: 3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A Certificate issuer: /CN=A91AAEC2/serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A Certificate serial: 086F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft Manifest number: 0867 Signing time: Thu 24 Apr 2025 20:33:46 +0000 Manifest this update: Thu 24 Apr 2025 20:33:46 +0000 Manifest next update: Thu 01 May 2025 20:33:46 +0000 Files and hashes: 1: PTiRpGy8urR0eN6kDSkI9nzOOyo.crl (hash: oXPMDK/Yl10VSLo3BSGTwNNNov8G9wVAKirYgn0vWWg=) 2: DFEA30745C3011EEB250DE0EC4F9AE02.roa (hash: tsMkLvjKn0Jno43pXfv561BkhcMo5hMdRzf+ZccASKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2159 (0x86f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEC2, serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A Validity Not Before: Apr 24 20:33:46 2025 GMT Not After : May 1 20:33:46 2025 GMT Subject: CN=680aa02a-2485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:06:06:b2:3d:bc:57:f9:4a:10:4c:1d:3e:9b: 07:40:17:10:77:36:ce:17:b3:68:bf:a4:c8:c8:58: 7a:eb:3a:0f:8b:41:a3:67:c5:48:f7:b3:05:74:98: 00:31:3d:5f:c9:06:27:29:52:87:60:76:11:a7:ff: ce:cb:95:b3:27:c1:3d:1e:18:c1:6d:85:89:06:7a: 1b:68:59:91:8d:91:f1:fd:4e:3c:98:4a:62:9d:ca: c4:3b:ce:0b:9e:46:85:c7:a5:11:f2:f8:4f:e3:12: fa:82:01:14:1b:21:98:e3:3c:45:51:6a:a3:a8:a2: b9:c9:53:45:73:c8:7c:72:cb:5a:c3:df:5f:d0:8b: 16:a6:72:c8:8d:cb:e1:84:5a:2e:25:9c:ae:55:9c: 0e:64:28:a7:76:44:8b:2e:83:47:0e:5c:49:e5:05: 63:2c:71:af:52:4d:00:5b:e0:5d:ac:fc:b9:d8:eb: e8:88:cc:bc:f6:30:eb:d4:0a:fe:4e:46:23:d1:f9: 9f:4e:3e:8d:ac:6e:98:0b:5c:62:7f:d2:67:67:25: 74:3b:14:67:01:ad:ea:b5:61:ba:46:0d:6c:3b:dd: 31:6a:46:29:62:e9:03:d0:3a:85:db:5e:0d:35:fc: 65:42:31:db:53:11:6d:bf:7f:a2:d1:6c:e3:7f:01: 8c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:05:80:8B:CF:E4:47:41:C6:1A:CE:EB:D8:31:F6:41:1A:26:4D:9E X509v3 Authority Key Identifier: keyid:3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:67:3a:65:d1:87:d1:0e:08:2e:92:04:83:d9:d3:3c:44:77: 45:1a:7a:30:4b:d1:29:dc:69:95:39:c8:9e:42:61:83:12:33: b9:a2:52:d4:f9:2f:ca:2f:66:54:a2:0f:96:6a:cc:d8:4f:8c: ea:f2:2e:7e:e0:7c:52:c4:de:a4:74:29:d9:9e:e1:88:44:4c: ee:5d:5c:a0:42:f0:d2:60:2c:4c:7d:39:a8:95:80:4f:a1:25: f3:f2:3b:64:38:bd:89:74:37:2e:f2:9f:f9:c2:8f:3d:d1:d5: 42:57:72:30:6e:20:f7:38:a0:73:12:62:3c:36:0c:9e:dd:3e: da:47:12:05:4b:53:7f:2c:4a:52:e2:21:e5:74:4f:2f:ab:e2: 39:f7:b3:27:86:be:9d:3e:a4:f3:a5:6c:03:12:b2:db:22:db: e1:00:b9:50:94:6d:6c:2e:e8:b1:bd:dc:17:a7:c5:fc:2b:1f: e4:e8:4a:56:80:c8:ed:3e:6d:e7:e7:0f:4c:60:9f:bc:c7:18: 44:c8:2c:28:cb:15:5d:6c:ea:ba:53:b1:72:2b:39:65:6b:33: 0c:d3:a8:d9:72:4a:84:24:af:10:9f:ac:bb:cc:f0:6c:1c:84: 71:77:c6:d8:49:e3:c8:84:3c:0c:96:24:ca:e3:99:2b:f5:cd: f1:fc:b8:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQzIxMTAvBgNVBAUTKDNEMzg5MUE0NkNCQ0JBQjQ3NDc4REVBNDBEMjkwOEY2 N0NDRTNCMkEwHhcNMjUwNDI0MjAzMzQ2WhcNMjUwNTAxMjAzMzQ2WjAYMRYwFAYD VQQDEw02ODBhYTAyYS0yNDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoQYGsj28V/lKEEwdPpsHQBcQdzbOF7Nov6TIyFh66zoPi0GjZ8VI97MFdJgA MT1fyQYnKVKHYHYRp//Oy5WzJ8E9HhjBbYWJBnobaFmRjZHx/U48mEpincrEO84L nkaFx6UR8vhP4xL6ggEUGyGY4zxFUWqjqKK5yVNFc8h8cstaw99f0IsWpnLIjcvh hFouJZyuVZwOZCindkSLLoNHDlxJ5QVjLHGvUk0AW+BdrPy52OvoiMy89jDr1Ar+ TkYj0fmfTj6NrG6YC1xif9JnZyV0OxRnAa3qtWG6Rg1sO90xakYpYukD0DqF214N NfxlQjHbUxFtv3+i0WzjfwGM1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcFgIvP 5EdBxhrO69gx9kEaJk2eMB8GA1UdIwQYMBaAFD04kaRsvLq0dHjepA0pCPZ8zjsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVDMi8yRERERDI2Q0My QzAxMUVBOTNENTg1N0ZDNEY5QUUwMi9QVGlScEd5OHVyUjBlTjZrRFNrSTluek9P eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BUaVJwR3k4dXJSMGVONmtEU2tJOW56T095by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUVDMi8yRERERDI2Q0MyQzAxMUVBOTNENTg1N0ZDNEY5QUUwMi9QVGlScEd5OHVy UjBlTjZrRFNrSTluek9PeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHZzpl0YfRDggukgSD2dM8RHdFGnowS9Ep3GmVOcieQmGDEjO5olLU +S/KL2ZUog+WaszYT4zq8i5+4HxSxN6kdCnZnuGIREzuXVygQvDSYCxMfTmolYBP oSXz8jtkOL2JdDcu8p/5wo890dVCV3IwbiD3OKBzEmI8Ngye3T7aRxIFS1N/LEpS 4iHldE8vq+I597Mnhr6dPqTzpWwDErLbItvhALlQlG1sLuixvdwXp8X8Kx/k6EpW gMjtPm3n5w9MYJ+8xxhEyCwoyxVdbOq6U7FyKzllazMM06jZckqEJK8Qn6y7zPBs HIRxd8bYSePIhDwMliTK45kr9c3x/Ljw -----END CERTIFICATE-----Generated at Sat Apr 26 04:27:10 2025 by rpki-client