$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft File: 0yZ6-fuWkInDwSr-v9D96b2GdYE.mft (raw, json) Hash identifier: tof1RvxtMXHebhWjDTDnadpprFncIhReLyNC0vu9lF4= Subject key identifier: 6A:2B:34:83:A6:56:7C:40:6F:05:5E:82:C2:3A:A7:38:F1:56:7E:AA Authority key identifier: D3:26:7A:F9:FB:96:90:89:C3:C1:2A:FE:BF:D0:FD:E9:BD:86:75:81 Certificate issuer: /CN=A91ACF30/serialNumber=D3267AF9FB969089C3C12AFEBFD0FDE9BD867581 Certificate serial: 07E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft Manifest number: 07D3 Signing time: Thu 24 Apr 2025 20:55:13 +0000 Manifest this update: Thu 24 Apr 2025 20:55:12 +0000 Manifest next update: Thu 01 May 2025 20:55:12 +0000 Files and hashes: 1: 0yZ6-fuWkInDwSr-v9D96b2GdYE.crl (hash: WYHLBK9OdlYSxXV+zHRGp+ctMCbS1WucFdA8NslquRM=) 2: 4EEEF95AEA4311EE86C1DD73C4F9AE02.roa (hash: gRPrkPot7cS4Md/lWHKHiYe/Z/9NwksWhg6tBROLm8I=) 3: 40965650EA4311EEA09F786BC4F9AE02.roa (hash: UOhw1kq9d+cXhpmk5TWMuSERdIf0YRt+xgjoXpvoadw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.crl rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2023 (0x7e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACF30, serialNumber=D3267AF9FB969089C3C12AFEBFD0FDE9BD867581 Validity Not Before: Apr 24 20:55:12 2025 GMT Not After : May 1 20:55:12 2025 GMT Subject: CN=680aa531-75f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:51:bb:8d:38:9a:80:0f:05:b5:24:89:38:a3: ab:7a:6e:23:fe:b7:5c:f3:7d:7e:30:0f:26:6b:7d: 8e:11:e4:8d:0f:8f:a0:14:cc:3b:4d:d2:72:66:6c: 2a:21:6d:ba:b1:dd:20:64:03:bb:99:62:21:c2:87: c4:eb:75:57:45:1e:95:0c:06:6b:a0:ea:b2:e0:cd: 55:d6:cd:4c:ab:08:10:ed:03:f4:d7:e2:bf:db:ca: 4b:81:b5:14:0b:76:5d:d5:61:2a:f1:65:df:45:93: 6b:1b:3c:25:9f:fb:e5:de:69:39:19:e7:a2:98:a5: 29:2b:6d:a3:2b:3b:d5:08:7f:2b:96:b3:94:3e:9f: 4b:00:2d:43:1a:49:34:e4:55:28:9d:da:9b:c4:8f: 15:c8:73:98:db:0f:87:7e:23:62:2d:c2:95:f7:09: f5:f7:8b:09:4e:bc:0b:db:6e:64:d6:db:2a:44:34: be:ca:77:6a:bf:d4:bb:1a:3a:c7:d3:e3:2c:f5:bf: 16:5f:59:86:c0:57:45:7c:1a:0b:cd:fb:66:25:b4: 58:7c:1f:cf:d8:9b:3c:bc:7a:5a:91:de:81:cb:96: f5:03:6d:4b:ec:fb:fc:6a:82:52:0d:ec:01:82:75: 73:cd:8d:f3:d4:4f:a7:f0:a5:ee:6d:96:d6:bf:d2: 8b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:2B:34:83:A6:56:7C:40:6F:05:5E:82:C2:3A:A7:38:F1:56:7E:AA X509v3 Authority Key Identifier: keyid:D3:26:7A:F9:FB:96:90:89:C3:C1:2A:FE:BF:D0:FD:E9:BD:86:75:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:76:bc:a8:56:cc:2e:07:45:e4:8e:f2:1b:29:75:52:fa:8d: 08:0f:b2:1b:11:bc:d2:b0:84:c2:08:f7:8c:5b:1c:d4:48:c9: 74:51:c6:55:e4:80:58:33:d7:37:c1:95:f4:f2:45:4a:7a:6d: 6d:69:36:c5:d3:24:4a:8a:3f:39:ea:fc:64:5b:84:d1:52:0a: e8:7b:b7:d0:c0:80:92:7b:7d:5c:92:b4:07:a9:69:85:56:0c: 0c:99:dc:ca:b5:c2:1a:d4:71:43:18:10:62:bb:08:0d:08:90: af:b9:48:c6:03:c7:2d:df:f2:2e:19:20:e1:4c:e5:0f:90:df: f4:cf:a0:b6:0d:b6:54:75:65:3b:ce:ad:90:21:8b:e7:e3:f8: f3:31:01:e8:e4:e0:12:3d:31:94:f4:d2:b7:f0:a9:b5:0c:ca: d8:60:ce:5f:96:7d:45:51:09:94:15:3d:71:8e:9b:e8:5d:60: 47:e1:c9:37:86:eb:6b:3b:23:99:46:84:9a:2b:02:11:54:b0: 60:34:79:ea:58:4f:0c:eb:86:7d:ea:3b:12:de:3f:50:9a:cc: f6:dc:db:c9:e6:6f:56:2d:06:54:a6:0f:6a:da:5e:bc:b4:e8: 52:41:c5:11:3a:e2:8d:ad:a6:2a:35:8a:96:cb:48:28:ca:d3: 1e:fd:41:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNGMzAxMTAvBgNVBAUTKEQzMjY3QUY5RkI5NjkwODlDM0MxMkFGRUJGRDBGREU5 QkQ4Njc1ODEwHhcNMjUwNDI0MjA1NTEyWhcNMjUwNTAxMjA1NTEyWjAYMRYwFAYD VQQDEw02ODBhYTUzMS03NWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlG7jTiagA8FtSSJOKOrem4j/rdc831+MA8ma32OEeSND4+gFMw7TdJyZmwq IW26sd0gZAO7mWIhwofE63VXRR6VDAZroOqy4M1V1s1MqwgQ7QP01+K/28pLgbUU C3Zd1WEq8WXfRZNrGzwln/vl3mk5GeeimKUpK22jKzvVCH8rlrOUPp9LAC1DGkk0 5FUondqbxI8VyHOY2w+HfiNiLcKV9wn194sJTrwL225k1tsqRDS+yndqv9S7GjrH 0+Ms9b8WX1mGwFdFfBoLzftmJbRYfB/P2Js8vHpakd6By5b1A21L7Pv8aoJSDewB gnVzzY3z1E+n8KXubZbWv9KLXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGorNIOm VnxAbwVegsI6pzjxVn6qMB8GA1UdIwQYMBaAFNMmevn7lpCJw8Eq/r/Q/em9hnWB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0YzMC8zQjkxMkYxMkYx ODIxMUVBQTUzNzk3MEFDNEY5QUUwMi8weVo2LWZ1V2tJbkR3U3ItdjlEOTZiMkdk WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB5WjYtZnVXa0luRHdTci12OUQ5NmIyR2RZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0YzMC8zQjkxMkYxMkYxODIxMUVBQTUzNzk3MEFDNEY5QUUwMi8weVo2LWZ1V2tJ bkR3U3ItdjlEOTZiMkdkWUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtdryoVswuB0XkjvIbKXVS+o0ID7IbEbzSsITCCPeMWxzUSMl0UcZV 5IBYM9c3wZX08kVKem1taTbF0yRKij856vxkW4TRUgroe7fQwICSe31ckrQHqWmF VgwMmdzKtcIa1HFDGBBiuwgNCJCvuUjGA8ct3/IuGSDhTOUPkN/0z6C2DbZUdWU7 zq2QIYvn4/jzMQHo5OASPTGU9NK38Km1DMrYYM5fln1FUQmUFT1xjpvoXWBH4ck3 hutrOyOZRoSaKwIRVLBgNHnqWE8M64Z96jsS3j9Qmsz23NvJ5m9WLQZUpg9q2l68 tOhSQcUROuKNraYqNYqWy0goytMe/UHo -----END CERTIFICATE-----Generated at Sat Apr 26 05:13:01 2025 by rpki-client