$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft File: byPyfwkL70UxgCBy4drPIQ2dQjw.mft (raw, json) Hash identifier: CvX39CUFBFp4cZJhIFGafC0MO1nA4g335giDwyB1PMU= Subject key identifier: 24:36:77:3C:34:21:FE:AA:D6:20:47:7D:55:5D:7E:4D:11:1C:42:97 Authority key identifier: 6F:23:F2:7F:09:0B:EF:45:31:80:20:72:E1:DA:CF:21:0D:9D:42:3C Certificate issuer: /CN=A91AEB80/serialNumber=6F23F27F090BEF4531802072E1DACF210D9D423C Certificate serial: 0402 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byPyfwkL70UxgCBy4drPIQ2dQjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft Manifest number: 03E2 Signing time: Fri 25 Apr 2025 00:20:36 +0000 Manifest this update: Fri 25 Apr 2025 00:20:36 +0000 Manifest next update: Fri 02 May 2025 00:20:36 +0000 Files and hashes: 1: byPyfwkL70UxgCBy4drPIQ2dQjw.crl (hash: ErK25Irz5V0PeCRYfiKMLGqkBLx6oNQkzO3F/tgOx7I=) 2: 6759C60223C311ED9CF26A56C4F9AE02.roa (hash: hfhgYw3LQAm38USWum4YWAZ6gIly4M1LyEp15dh2XTA=) 3: EE8E0F3AA26711ECAFB48B53C4F9AE02.roa (hash: 3MDrKz+RefMI5j73wYkUuNy3Oa/4hoC/hS0v0G3eEHg=) 4: 6637CBD423C311ED9CF26A56C4F9AE02.roa (hash: DfRsMdJEDtch+C5Yk6n2+rHqExZkbfMsESmjI6z6r5c=) 5: EDE820B6A26711ECAFB48B53C4F9AE02.roa (hash: GJiUmX3/HTWKDyD6ZSjgX6IZE0JTW/U81xlvCFIWxoU=) 6: 6D7FBCBE129111ED81E82D3DC4F9AE02.roa (hash: D3Mr1RF7NLA+SlRnm9qkHlBkKJAhwvA5FpODqeYJRmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.crl rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byPyfwkL70UxgCBy4drPIQ2dQjw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:20:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1026 (0x402) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEB80, serialNumber=6F23F27F090BEF4531802072E1DACF210D9D423C Validity Not Before: Apr 25 00:20:36 2025 GMT Not After : May 2 00:20:36 2025 GMT Subject: CN=680ad554-7711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:dd:19:57:dc:b4:cf:4a:48:5f:e2:8e:11:30: 7f:71:18:e6:e3:5b:75:a5:c1:0e:42:02:6b:55:fc: 92:6c:ac:36:3b:00:3e:bf:9c:f0:0d:87:c2:48:2c: 95:d3:4c:8b:7d:fc:6c:e5:67:13:30:3c:17:fa:d6: a9:a1:23:fd:fe:5c:cc:f4:60:d2:14:fc:fe:48:90: 42:60:b5:d6:d2:eb:a6:76:83:3f:24:2a:52:be:d9: 2e:b8:dd:8c:0a:d7:e2:c7:e3:45:69:49:10:16:23: a8:96:81:32:7c:16:10:a0:a9:ad:c0:06:62:b4:04: bf:11:37:b0:35:57:c3:e2:d6:ce:69:cc:f0:e4:b8: d1:10:6c:92:77:ee:11:7c:a3:cf:bb:76:8a:94:49: 7b:fa:fc:7b:e1:a4:35:0e:c8:a6:a8:28:d4:d3:b5: 61:da:6d:d2:62:81:99:ab:79:9b:c0:a2:33:ca:1a: 2d:19:f8:a8:e8:c0:48:3f:6d:c9:75:b9:23:99:3c: 36:02:40:c7:2c:50:36:66:40:93:2c:1b:8c:07:6a: b8:20:d3:9a:2d:71:52:ae:41:4e:c3:68:b6:e4:52: cb:89:2a:6a:15:7b:e2:aa:12:45:9d:32:35:ad:47: 10:f7:7a:2f:92:d3:9a:39:e9:91:50:d0:72:aa:f2: fa:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:36:77:3C:34:21:FE:AA:D6:20:47:7D:55:5D:7E:4D:11:1C:42:97 X509v3 Authority Key Identifier: keyid:6F:23:F2:7F:09:0B:EF:45:31:80:20:72:E1:DA:CF:21:0D:9D:42:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byPyfwkL70UxgCBy4drPIQ2dQjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEB80/7762FC5A7E6C11EC873D6783C4F9AE02/byPyfwkL70UxgCBy4drPIQ2dQjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:9c:14:98:af:ec:74:29:be:f9:c7:bb:a7:2e:d3:d1:4b:84: 84:03:6c:76:34:d2:66:db:e3:f4:1c:4b:45:33:4d:cb:f3:76: a8:35:66:ea:f9:10:66:1b:2f:e9:0c:57:0e:e7:aa:00:ce:7c: 4a:d6:8c:7c:4a:93:5e:9b:9c:85:1e:19:dd:4b:31:4f:97:e6: 03:a6:fc:97:3e:63:28:3f:f8:f0:9c:dd:df:e7:68:2e:1d:2f: 14:24:f4:67:10:df:44:40:d3:45:ee:6c:a2:ef:56:df:f1:1b: ca:b9:19:f4:e3:8f:22:91:84:20:08:48:44:57:1f:a6:20:0a: cb:55:3c:02:6d:4d:75:4a:bd:a4:77:02:87:5e:2f:ee:a6:cc: f7:bf:b7:27:85:41:de:28:ad:08:42:fd:da:fa:56:c5:1b:c2: 27:97:24:b2:26:6f:df:dd:7d:c4:71:73:68:db:f1:67:7f:26: 8b:87:4a:4c:23:e4:59:8a:9a:30:f4:33:30:52:47:4d:1b:5b: 1b:f3:92:9a:a7:c3:0d:8f:7a:47:17:52:fd:3d:97:f7:17:6b: 0a:ac:23:96:63:d9:08:b1:8d:f6:c0:63:fa:be:3d:c4:9d:68: 1e:9f:1e:40:7c:72:06:d1:4d:25:51:a7:48:49:e5:e6:5f:2b: aa:b7:bd:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVCODAxMTAvBgNVBAUTKDZGMjNGMjdGMDkwQkVGNDUzMTgwMjA3MkUxREFDRjIx MEQ5RDQyM0MwHhcNMjUwNDI1MDAyMDM2WhcNMjUwNTAyMDAyMDM2WjAYMRYwFAYD VQQDEw02ODBhZDU1NC03NzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyt0ZV9y0z0pIX+KOETB/cRjm41t1pcEOQgJrVfySbKw2OwA+v5zwDYfCSCyV 00yLffxs5WcTMDwX+tapoSP9/lzM9GDSFPz+SJBCYLXW0uumdoM/JCpSvtkuuN2M Ctfix+NFaUkQFiOoloEyfBYQoKmtwAZitAS/ETewNVfD4tbOaczw5LjREGySd+4R fKPPu3aKlEl7+vx74aQ1DsimqCjU07Vh2m3SYoGZq3mbwKIzyhotGfio6MBIP23J dbkjmTw2AkDHLFA2ZkCTLBuMB2q4INOaLXFSrkFOw2i25FLLiSpqFXviqhJFnTI1 rUcQ93ovktOaOemRUNByqvL6ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQ2dzw0 If6q1iBHfVVdfk0RHEKXMB8GA1UdIwQYMBaAFG8j8n8JC+9FMYAgcuHazyENnUI8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUI4MC83NzYyRkM1QTdF NkMxMUVDODczRDY3ODNDNEY5QUUwMi9ieVB5ZndrTDcwVXhnQ0J5NGRyUElRMmRR ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J5UHlmd2tMNzBVeGdDQnk0ZHJQSVEyZFFqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUI4MC83NzYyRkM1QTdFNkMxMUVDODczRDY3ODNDNEY5QUUwMi9ieVB5ZndrTDcw VXhnQ0J5NGRyUElRMmRRancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtnBSYr+x0Kb75x7unLtPRS4SEA2x2NNJm2+P0HEtFM03L83aoNWbq +RBmGy/pDFcO56oAznxK1ox8SpNem5yFHhndSzFPl+YDpvyXPmMoP/jwnN3f52gu HS8UJPRnEN9EQNNF7myi71bf8RvKuRn0448ikYQgCEhEVx+mIArLVTwCbU11Sr2k dwKHXi/upsz3v7cnhUHeKK0IQv3a+lbFG8InlySyJm/f3X3EcXNo2/FnfyaLh0pM I+RZipow9DMwUkdNG1sb85Kap8MNj3pHF1L9PZf3F2sKrCOWY9kIsY32wGP6vj3E nWgenx5AfHIG0U0lUadISeXmXyuqt70j -----END CERTIFICATE-----Generated at Sat Apr 26 12:57:45 2025 by rpki-client