$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft File: cNpFkZHpBoa9sKxHq9owqcPhdPo.mft (raw, json) Hash identifier: JO972b/CT9yjeSFQTAu3bX3moFMXe7hm0cglsz43TaY= Subject key identifier: 4F:DB:6D:76:0F:6E:7C:ED:C7:1F:18:EB:91:0E:AD:0E:28:88:21:02 Authority key identifier: 70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA Certificate issuer: /CN=A91AF145/serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft Manifest number: 014C Signing time: Fri 25 Apr 2025 03:27:01 +0000 Manifest this update: Fri 25 Apr 2025 03:27:01 +0000 Manifest next update: Fri 02 May 2025 03:27:01 +0000 Files and hashes: 1: cNpFkZHpBoa9sKxHq9owqcPhdPo.crl (hash: nuTRf1SvO962JTno55mr5L9bYIZlo8Zd2SwmWePF2bg=) 2: 43E9CB90DFF511EF8E4E3982C4F9AE02.roa (hash: ed3VnRz1sRChg/cFQmGXFi6QslMtcDU5X1xXHCQiW6k=) 3: 971B23D236EA11EE802E9246C4F9AE02.roa (hash: 4S5HT3Umab8tv1JR8LX9cjuccjEduaZGTp680hfQmts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF145, serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Validity Not Before: Apr 25 03:27:01 2025 GMT Not After : May 2 03:27:01 2025 GMT Subject: CN=680b0105-5bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:cb:00:8e:5a:21:48:e7:79:e8:bf:66:bb:43: 67:56:2e:c8:6c:11:82:19:13:b4:c7:a4:93:b0:f2: 47:bc:7b:74:95:bb:22:01:a1:6c:55:18:b2:f9:d0: b5:80:b3:96:25:20:4b:ea:bb:60:76:bd:98:d1:ba: 53:eb:9b:ad:e6:c0:26:0b:ef:b3:d5:da:43:6b:72: 23:6f:ab:6b:eb:65:53:5f:f9:45:71:85:45:43:73: 38:72:e1:ea:54:58:c6:b8:48:45:cf:ed:d5:66:a6: 25:6b:85:78:77:73:58:ac:59:22:ad:26:cd:29:6b: 15:11:4e:ff:9b:04:1e:04:15:96:de:98:a1:e5:3a: db:7d:96:4c:0f:1c:58:ab:90:73:eb:fc:b5:24:36: bd:d4:30:c7:ba:7c:08:ec:87:ca:5e:f1:c5:77:49: 1c:0a:cc:62:a5:d3:f0:b4:a4:18:c3:cc:3d:75:7d: 5f:98:f9:36:84:12:f3:6c:10:38:c2:59:0f:5c:23: 3d:ab:60:3d:55:d2:bc:4d:78:ed:11:4d:3a:49:13: 7d:61:74:de:22:01:cc:c9:90:6d:bf:45:33:f2:d5: 13:e2:4a:e1:1b:5d:50:66:b9:61:a9:03:11:0e:b2: c6:4c:d3:32:56:f6:9e:7e:65:d2:dc:f9:d8:30:16: e6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DB:6D:76:0F:6E:7C:ED:C7:1F:18:EB:91:0E:AD:0E:28:88:21:02 X509v3 Authority Key Identifier: keyid:70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:a8:e7:a8:39:85:34:65:ca:a8:d4:7d:cb:2d:85:bf:ae:1b: c0:cc:ad:25:09:c6:dd:0e:fa:11:a0:18:3e:7d:ff:84:07:ec: ec:d3:1c:a1:ad:ef:a3:6e:e4:85:69:a5:94:5a:14:24:9c:f4: ed:29:a8:c5:93:68:49:58:71:db:49:1c:f1:ed:40:1f:29:d1: 61:e5:4c:bc:84:47:a9:07:d1:d5:cb:af:cd:2d:8c:37:7b:a1: d2:cb:73:6c:66:31:5f:5e:e7:1f:e1:df:94:d3:ae:09:8b:55: 75:05:76:0b:ff:d7:49:83:06:aa:6e:5e:0e:39:b5:01:07:69: 02:b2:ed:3f:a4:80:7d:d1:57:9f:fd:e6:c9:4b:59:f5:b5:08: f8:85:e0:a7:52:92:3e:a8:c1:cc:b0:27:0b:27:80:44:ed:39: 21:95:8e:f2:fb:37:9b:4d:94:f5:58:15:2b:af:6a:94:8a:68: 0f:d9:a9:54:83:b7:10:5e:63:c1:0e:7a:74:07:74:82:ca:43: 45:89:30:cc:63:7d:4c:40:d7:7e:53:80:65:ae:05:fb:11:ee: 3f:b1:bf:90:69:ca:50:7b:b0:d7:80:81:8e:22:50:e2:9a:8b: 60:6a:ac:a8:0e:7e:16:d8:fa:99:19:06:5d:74:bc:dd:d1:88: a3:9f:7b:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYxNDUxMTAvBgNVBAUTKDcwREE0NTkxOTFFOTA2ODZCREIwQUM0N0FCREEzMEE5 QzNFMTc0RkEwHhcNMjUwNDI1MDMyNzAxWhcNMjUwNTAyMDMyNzAxWjAYMRYwFAYD VQQDEw02ODBiMDEwNS01YmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA78sAjlohSOd56L9mu0NnVi7IbBGCGRO0x6STsPJHvHt0lbsiAaFsVRiy+dC1 gLOWJSBL6rtgdr2Y0bpT65ut5sAmC++z1dpDa3Ijb6tr62VTX/lFcYVFQ3M4cuHq VFjGuEhFz+3VZqYla4V4d3NYrFkirSbNKWsVEU7/mwQeBBWW3pih5TrbfZZMDxxY q5Bz6/y1JDa91DDHunwI7IfKXvHFd0kcCsxipdPwtKQYw8w9dX1fmPk2hBLzbBA4 wlkPXCM9q2A9VdK8TXjtEU06SRN9YXTeIgHMyZBtv0Uz8tUT4krhG11QZrlhqQMR DrLGTNMyVvaefmXS3PnYMBbm4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/bbXYP bnztxx8Y65EOrQ4oiCECMB8GA1UdIwQYMBaAFHDaRZGR6QaGvbCsR6vaMKnD4XT6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjE0NS8yNzgwNzNDRTM2 RUExMUVFQUUxMEFBNDVDNEY5QUUwMi9jTnBGa1pIcEJvYTlzS3hIcTlvd3FjUGhk UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOcEZrWkhwQm9hOXNLeEhxOW93cWNQaGRQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjE0NS8yNzgwNzNDRTM2RUExMUVFQUUxMEFBNDVDNEY5QUUwMi9jTnBGa1pIcEJv YTlzS3hIcTlvd3FjUGhkUG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1qOeoOYU0Zcqo1H3LLYW/rhvAzK0lCcbdDvoRoBg+ff+EB+zs0xyh re+jbuSFaaWUWhQknPTtKajFk2hJWHHbSRzx7UAfKdFh5Uy8hEepB9HVy6/NLYw3 e6HSy3NsZjFfXucf4d+U064Ji1V1BXYL/9dJgwaqbl4OObUBB2kCsu0/pIB90Vef /ebJS1n1tQj4heCnUpI+qMHMsCcLJ4BE7TkhlY7y+zebTZT1WBUrr2qUimgP2alU g7cQXmPBDnp0B3SCykNFiTDMY31MQNd+U4BlrgX7Ee4/sb+QacpQe7DXgIGOIlDi motgaqyoDn4W2PqZGQZddLzd0Yijn3uW -----END CERTIFICATE-----Generated at Sat Apr 26 13:41:42 2025 by rpki-client