$ rpki-client -vvf rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft File: MJ8WI5oTsNAQQo21URRuUu63C7c.mft (raw, json) Hash identifier: XfJ89wa1uZuooiav3tcAAdqgrxOj+0HL5m1azcfahjE= Subject key identifier: 8F:CC:04:6B:84:03:96:F9:30:70:C5:DC:5A:CD:D6:6B:4E:5F:3C:12 Authority key identifier: 30:9F:16:23:9A:13:B0:D0:10:42:8D:B5:51:14:6E:52:EE:B7:0B:B7 Certificate issuer: /CN=A91B423C/serialNumber=309F16239A13B0D010428DB551146E52EEB70BB7 Certificate serial: 0455 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft Manifest number: 044A Signing time: Fri 25 Apr 2025 00:00:07 +0000 Manifest this update: Fri 25 Apr 2025 00:00:06 +0000 Manifest next update: Fri 02 May 2025 00:00:06 +0000 Files and hashes: 1: MJ8WI5oTsNAQQo21URRuUu63C7c.crl (hash: KDu1ty/jJ5n3pPU7WfXaB+5+U+OUxWAykvkm74f90+E=) 2: 118BA98C51CA11EC9067E22CC4F9AE02.roa (hash: L87/P71GLyeOVHRuWVUui3Zcv+2yVuGxBuaLmPWeK04=) 3: 12A7C1D451CA11EC9067E22CC4F9AE02.roa (hash: hvSnlb31gfJnIJknYF0rYUKJLZVmXt9VjFEolvqLYLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.crl rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1109 (0x455) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B423C, serialNumber=309F16239A13B0D010428DB551146E52EEB70BB7 Validity Not Before: Apr 25 00:00:06 2025 GMT Not After : May 2 00:00:06 2025 GMT Subject: CN=680ad086-c988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:97:3c:47:37:0c:7d:3a:75:09:bf:d4:b8:97: b0:5b:9a:a3:31:78:86:ae:9e:cb:ce:16:72:1b:44: f4:1a:07:fa:7c:9b:53:0d:ff:3b:06:67:44:5e:2b: 28:15:03:4d:6d:e8:5c:b8:76:ca:9e:c4:79:16:7b: bd:69:ed:5c:96:52:d8:94:2f:6d:4b:1d:35:17:59: aa:35:3b:4e:3b:ca:1c:c2:24:13:6a:80:06:78:b3: 2a:ef:66:0b:24:c3:c1:88:9f:85:d8:ed:75:aa:1a: 14:a6:5d:ff:0b:f6:4e:de:b9:6a:5b:58:df:1d:13: ac:9a:f7:81:ab:a3:50:0f:b0:5c:7f:61:0a:40:03: 43:c1:1a:8f:bc:42:46:11:5c:83:e7:22:4a:31:35: 72:90:cd:67:1f:c4:b7:e7:e3:e9:93:b7:62:bd:1f: 7d:d7:50:32:4f:00:3c:07:34:e6:c8:92:a8:71:00: b5:93:00:2f:17:29:6d:44:e9:54:cf:3f:1b:16:d6: b3:9a:cf:39:56:e1:c5:3c:f1:94:ff:10:14:35:58: 27:3d:89:59:c5:18:21:e4:46:14:a5:02:ab:3b:a8: 7b:dc:14:70:55:4b:83:bf:85:a3:94:ea:a4:38:cd: 16:a6:49:b7:2f:55:13:cb:67:39:45:db:57:b0:a2: dc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:CC:04:6B:84:03:96:F9:30:70:C5:DC:5A:CD:D6:6B:4E:5F:3C:12 X509v3 Authority Key Identifier: keyid:30:9F:16:23:9A:13:B0:D0:10:42:8D:B5:51:14:6E:52:EE:B7:0B:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:55:47:a2:4f:b9:4c:0e:33:51:27:18:3f:f3:9d:6a:ae:e6: a4:81:e3:02:86:7b:be:8b:63:38:58:3d:45:9f:e9:35:56:e4: 3b:3b:e1:91:29:79:82:71:c1:b4:31:3d:a1:a2:c8:ad:7a:6b: bd:b7:5b:c4:2b:da:a3:ef:4e:e2:02:b3:20:e8:fd:fa:77:dc: d4:49:b7:da:33:6a:6f:dc:9e:01:dd:04:26:f0:5a:bc:f5:ea: c4:63:35:d6:7b:ad:71:fe:69:4d:eb:f1:1c:4c:3e:99:ca:54: a1:ab:6d:16:fe:e7:6c:c8:b5:f5:f5:3e:bf:d0:76:e6:26:16: 76:85:3f:aa:d7:e1:9b:02:c6:0e:c0:cd:11:2b:c0:5b:0c:ff: a7:ae:16:7b:eb:f1:ef:d7:91:e7:15:5e:60:5d:e9:e6:18:39: 75:37:81:dc:53:5a:5b:29:ff:ab:0b:57:51:f8:34:18:b3:d8: 56:9a:3f:7b:f5:b5:12:28:00:0f:cb:92:0f:5b:7d:ca:94:9a: e5:06:0f:b7:a2:da:58:29:3d:61:58:33:e8:09:77:50:b0:96: 45:f1:a9:1a:d7:a2:44:29:ce:dd:a4:61:d8:f2:dd:89:81:07: 2e:c3:06:99:ba:58:29:af:c2:3c:cd:50:fb:e4:37:4f:1d:53: c5:f6:3c:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyM0MxMTAvBgNVBAUTKDMwOUYxNjIzOUExM0IwRDAxMDQyOERCNTUxMTQ2RTUy RUVCNzBCQjcwHhcNMjUwNDI1MDAwMDA2WhcNMjUwNTAyMDAwMDA2WjAYMRYwFAYD VQQDEw02ODBhZDA4Ni1jOTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5c8RzcMfTp1Cb/UuJewW5qjMXiGrp7LzhZyG0T0Ggf6fJtTDf87BmdEXiso FQNNbehcuHbKnsR5Fnu9ae1cllLYlC9tSx01F1mqNTtOO8ocwiQTaoAGeLMq72YL JMPBiJ+F2O11qhoUpl3/C/ZO3rlqW1jfHROsmveBq6NQD7Bcf2EKQANDwRqPvEJG EVyD5yJKMTVykM1nH8S35+Ppk7divR9911AyTwA8BzTmyJKocQC1kwAvFyltROlU zz8bFtazms85VuHFPPGU/xAUNVgnPYlZxRgh5EYUpQKrO6h73BRwVUuDv4WjlOqk OM0Wpkm3L1UTy2c5RdtXsKLccwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/MBGuE A5b5MHDF3FrN1mtOXzwSMB8GA1UdIwQYMBaAFDCfFiOaE7DQEEKNtVEUblLutwu3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDIzQy8yNzM3RTZCMjUw RUMxMUVDQUEzQzEzN0NDNEY5QUUwMi9NSjhXSTVvVHNOQVFRbzIxVVJSdVV1NjND N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01KOFdJNW9Uc05BUVFvMjFVUlJ1VXU2M0M3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDIzQy8yNzM3RTZCMjUwRUMxMUVDQUEzQzEzN0NDNEY5QUUwMi9NSjhXSTVvVHNO QVFRbzIxVVJSdVV1NjNDN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaVUeiT7lMDjNRJxg/851qruakgeMChnu+i2M4WD1Fn+k1VuQ7O+GR KXmCccG0MT2hositemu9t1vEK9qj707iArMg6P36d9zUSbfaM2pv3J4B3QQm8Fq8 9erEYzXWe61x/mlN6/EcTD6ZylShq20W/udsyLX19T6/0HbmJhZ2hT+q1+GbAsYO wM0RK8BbDP+nrhZ76/Hv15HnFV5gXenmGDl1N4HcU1pbKf+rC1dR+DQYs9hWmj97 9bUSKAAPy5IPW33KlJrlBg+3otpYKT1hWDPoCXdQsJZF8aka16JEKc7dpGHY8t2J gQcuwwaZulgpr8I8zVD75DdPHVPF9jzZ -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:29 2025 by rpki-client