$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft File: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft (raw, json) Hash identifier: 2bIiUZmg1R3yWnGTZJcm10lAlaldIj42XVzS+KskZRs= Subject key identifier: C2:EA:34:13:58:BF:58:40:1C:1D:91:9B:8B:97:D7:1B:0D:8C:E1:88 Authority key identifier: 63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 Certificate issuer: /CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Certificate serial: 3159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft Manifest number: 3145 Signing time: Thu 24 Apr 2025 15:26:32 +0000 Manifest this update: Thu 24 Apr 2025 15:26:32 +0000 Manifest next update: Thu 01 May 2025 15:26:32 +0000 Files and hashes: 1: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl (hash: Cdwu7nJGbtV894YM2m9UQJxe5hU6k93Sd6HA93Y/ajI=) 2: 33B0CCAEBCE311EA953FBB5EC4F9AE02.roa (hash: v67lW37yOK1EE+Ye9daXrMBIu71X0smdg0I3L06d6Kc=) 3: 32538B4EBCE311EA953FBB5EC4F9AE02.roa (hash: W3sK8AJb9TonKRiMiC+GBOGQDVtd6T29hWzDhem/MOk=) 4: 31CCE602BCE311EA953FBB5EC4F9AE02.roa (hash: pswsUG0qEzo4Lxip378d+/jtEbIDA6UOlyLDYYpHdnM=) 5: 33036E24BCE311EA953FBB5EC4F9AE02.roa (hash: h9X/Ha5+JAajFHpKe4PaLiXxR7AjtPZF1G/S4br67kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12633 (0x3159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1461, serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Validity Not Before: Apr 24 15:26:32 2025 GMT Not After : May 1 15:26:32 2025 GMT Subject: CN=680a5828-2f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:30:8b:0d:a2:eb:76:6b:d2:37:31:02:8c:5b: 75:78:7b:5a:ec:4e:ac:7a:21:03:40:15:c9:2a:49: 40:7d:2e:b0:9a:ed:fe:8d:72:e0:70:47:9f:6b:ec: 6c:a8:ae:d6:f7:a3:b9:7d:6e:14:fe:ec:29:b8:c0: dc:b3:5f:90:a2:70:e9:44:d6:fc:ff:03:e5:d4:63: 2b:28:31:83:a6:04:f3:bc:96:57:dd:7c:57:f4:5e: 47:ad:34:9d:4d:10:5e:2f:47:78:7d:71:81:48:b2: cb:9d:40:f3:3b:93:50:c6:8c:e8:73:79:f5:35:3d: d2:38:a8:96:59:78:39:34:49:4c:4f:75:d8:b5:d7: 49:12:b6:d4:80:05:b7:ee:8d:1c:de:19:1a:a0:32: 41:61:c9:66:3b:e2:cf:a5:93:37:a2:77:cb:50:bd: 32:a0:e9:68:9a:d6:c1:4b:cf:ab:2a:40:d3:28:ea: a1:93:9b:bb:92:47:51:c9:10:1b:99:45:30:7b:c5: 05:fd:75:11:d2:ac:5c:1e:40:4d:7a:8a:a6:3e:16: c2:b4:6e:c9:ea:c5:20:82:29:aa:fb:b3:3a:3c:f0: 39:75:8b:81:b4:95:73:58:10:a0:88:7a:8a:8c:d1: fa:fc:3a:fe:46:b6:9f:b7:30:55:06:a5:57:72:0f: 71:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EA:34:13:58:BF:58:40:1C:1D:91:9B:8B:97:D7:1B:0D:8C:E1:88 X509v3 Authority Key Identifier: keyid:63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:f8:77:e8:75:dd:3b:c7:41:a5:a7:50:a8:06:fa:b1:98:a0: 02:2a:d9:14:e4:9d:64:41:42:b3:86:cd:d3:e0:22:ab:4c:fe: 3f:4d:05:64:d4:89:6b:0e:b1:c2:af:4f:5e:31:c4:08:19:1f: d3:02:a4:51:18:18:2f:8e:aa:ef:ab:23:1e:a1:10:9f:0d:47: e8:04:e2:87:44:8c:cd:d3:92:76:49:e8:a6:33:e6:ee:30:d6: e9:eb:2f:2f:61:3d:b5:8f:51:d9:b2:7b:13:3c:1d:80:a8:3b: 0b:be:3f:db:e3:e4:54:ab:a9:83:2d:d5:51:43:52:1c:df:d8: 7f:d5:ce:dd:00:93:2c:90:29:dc:7a:2f:3c:8a:d5:32:50:57: 50:7c:f3:1b:3b:1d:d2:1e:75:c4:6d:ec:d3:8f:9d:8f:5f:2d: 0a:65:41:bb:de:be:91:b2:f3:c3:4a:ca:d4:8a:df:5a:86:61: 44:9f:a3:2f:77:c3:df:d0:d8:ea:03:ef:8b:ec:4d:d7:32:bf: d1:dd:1d:fc:42:8f:6e:48:ad:cb:92:f3:b4:98:f8:b6:85:00: ee:df:25:7a:bb:35:d8:30:d3:da:5b:1e:d6:99:dd:30:6e:60: b3:86:56:ab:d7:37:5a:bd:cd:69:e9:83:f8:47:c1:e9:a6:04: 65:3f:22:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE0NjExMTAvBgNVBAUTKDYzN0VEMTQxRkZFMDI1RkQwNTE5OTQ1Q0VENDhFNzRG OEJEMEY1QzkwHhcNMjUwNDI0MTUyNjMyWhcNMjUwNTAxMTUyNjMyWjAYMRYwFAYD VQQDEw02ODBhNTgyOC0yZjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmjCLDaLrdmvSNzECjFt1eHta7E6seiEDQBXJKklAfS6wmu3+jXLgcEefa+xs qK7W96O5fW4U/uwpuMDcs1+QonDpRNb8/wPl1GMrKDGDpgTzvJZX3XxX9F5HrTSd TRBeL0d4fXGBSLLLnUDzO5NQxozoc3n1NT3SOKiWWXg5NElMT3XYtddJErbUgAW3 7o0c3hkaoDJBYclmO+LPpZM3onfLUL0yoOlomtbBS8+rKkDTKOqhk5u7kkdRyRAb mUUwe8UF/XUR0qxcHkBNeoqmPhbCtG7J6sUggimq+7M6PPA5dYuBtJVzWBCgiHqK jNH6/Dr+RraftzBVBqVXcg9xbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLqNBNY v1hAHB2Rm4uX1xsNjOGIMB8GA1UdIwQYMBaAFGN+0UH/4CX9BRmUXO1I50+L0PXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTQ2MS9GQ0U5QTY4MEJE RjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pmMEZHWlJjN1VqblQ0dlE5 Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzN1JRZl9nSmYwRkdaUmM3VWpuVDR2UTljay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTQ2MS9GQ0U5QTY4MEJERjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pm MEZHWlJjN1VqblQ0dlE5Y2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBs+Hfodd07x0Glp1CoBvqxmKACKtkU5J1kQUKzhs3T4CKrTP4/TQVk 1IlrDrHCr09eMcQIGR/TAqRRGBgvjqrvqyMeoRCfDUfoBOKHRIzN05J2SeimM+bu MNbp6y8vYT21j1HZsnsTPB2AqDsLvj/b4+RUq6mDLdVRQ1Ic39h/1c7dAJMskCnc ei88itUyUFdQfPMbOx3SHnXEbezTj52PXy0KZUG73r6RsvPDSsrUit9ahmFEn6Mv d8Pf0NjqA++L7E3XMr/R3R38Qo9uSK3LkvO0mPi2hQDu3yV6uzXYMNPaWx7Wmd0w bmCzhlar1zdavc1p6YP4R8HppgRlPyIX -----END CERTIFICATE-----Generated at Sat Apr 26 13:41:23 2025 by rpki-client