$ rpki-client -vvf rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.mft File: d0ZKhG930cTTZqMGuAaTn88qYBo.mft (raw, json) Hash identifier: sMoQJUlMJi11zpRL9mBbIGs0sigZWfyLjYqqz9TjnJY= Subject key identifier: D5:A8:62:1B:02:AC:E3:55:D5:E6:2E:E3:64:53:07:A4:F3:55:29:74 Authority key identifier: 77:46:4A:84:6F:77:D1:C4:D3:66:A3:06:B8:06:93:9F:CF:2A:60:1A Certificate issuer: /CN=A91B74D6/serialNumber=77464A846F77D1C4D366A306B806939FCF2A601A Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0ZKhG930cTTZqMGuAaTn88qYBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.mft Manifest number: BB Signing time: Fri 25 Apr 2025 04:59:22 +0000 Manifest this update: Fri 25 Apr 2025 04:59:21 +0000 Manifest next update: Fri 02 May 2025 04:59:21 +0000 Files and hashes: 1: d0ZKhG930cTTZqMGuAaTn88qYBo.crl (hash: 2AIXh3S3CYtNuhN1JkYt1X1jdMwwwzSdbuVLNjDuz44=) 2: ABD84FB00F8A11EF943CC917C4F9AE02.roa (hash: PDnutuYB/riFGiwE/DA4jtgTvwtaDb0EZnLNk2dEE1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.crl rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0ZKhG930cTTZqMGuAaTn88qYBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B74D6, serialNumber=77464A846F77D1C4D366A306B806939FCF2A601A Validity Not Before: Apr 25 04:59:21 2025 GMT Not After : May 2 04:59:21 2025 GMT Subject: CN=680b16a9-efa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:45:25:d1:ec:4b:22:ff:46:fc:f3:d2:14:bb: c1:e8:21:1b:b2:1d:ec:9a:63:de:46:50:35:cf:aa: 21:9c:3c:69:72:63:10:1d:21:4b:1d:f6:31:4b:f2: bd:de:67:59:5f:9b:25:3d:87:f6:de:1e:11:3c:5b: 45:63:14:f3:be:3c:f8:1a:fb:09:eb:30:60:35:a0: 77:84:75:d7:85:68:58:20:f4:c7:b5:5e:15:bd:63: 84:ae:9a:e9:4c:f0:0a:d4:21:79:5d:ca:32:40:fd: 1b:b6:bc:8e:b4:43:b0:44:ff:3f:f5:0f:55:01:d1: dc:89:5b:b2:ef:ca:06:90:a4:f3:37:f2:46:35:d8: bc:33:08:d2:28:d5:22:f7:32:21:73:0f:d2:aa:c7: d4:56:9d:c4:93:4c:7d:6c:a9:db:b1:70:8c:d3:f5: 8b:c1:a0:e5:88:8a:40:8f:d5:bb:c9:dc:48:11:9a: 04:2b:0a:5b:17:2c:7d:7f:dc:22:6f:c3:6b:a7:30: ba:3a:9f:3d:eb:7c:03:74:99:20:4a:59:ba:fd:68: 7a:38:f4:97:e6:97:f1:42:cb:2f:b0:39:d0:31:fa: 4d:62:2e:25:ad:3e:45:4c:19:a7:df:91:35:ba:70: 5a:cb:e4:d0:52:ba:40:d7:af:ba:39:bf:9f:d3:68: fc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A8:62:1B:02:AC:E3:55:D5:E6:2E:E3:64:53:07:A4:F3:55:29:74 X509v3 Authority Key Identifier: keyid:77:46:4A:84:6F:77:D1:C4:D3:66:A3:06:B8:06:93:9F:CF:2A:60:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0ZKhG930cTTZqMGuAaTn88qYBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:9c:20:ab:2d:9b:f2:09:65:e4:51:f9:e7:39:1f:2a:f1:7b: 61:51:ad:f8:bd:e3:46:81:40:4e:13:40:d4:71:fe:a0:48:fb: 50:c5:b6:53:af:34:42:e1:d5:a3:97:80:bf:78:8c:38:10:3d: f8:61:25:f1:2f:ef:93:16:ac:5e:42:79:fb:53:be:2f:4f:12: ac:89:85:94:4a:4d:90:c4:12:d2:a3:7b:6a:5b:d4:4c:d1:b2: 15:b5:89:67:fa:7f:78:61:65:c1:7a:0f:84:c5:4f:52:fc:41: 5d:dd:1a:70:df:7f:3c:4d:f5:26:34:84:52:e7:51:55:48:57: a4:3b:1e:00:d3:b8:18:15:3d:f9:53:98:06:b2:e0:c1:c2:39: c0:62:cc:b9:a9:e2:23:c1:e3:5f:b3:94:86:10:49:cc:48:9d: 96:33:e0:d2:ae:2c:d3:86:96:33:27:d5:f2:d8:79:7f:64:f3: 34:09:c3:6c:0c:c8:5d:d8:04:37:e4:ea:56:53:9d:d3:ff:91: 69:2e:07:a7:cd:4e:6e:86:30:23:21:79:41:12:7f:78:7c:78: 92:1f:55:6d:08:0d:b9:df:94:d1:9a:ee:33:11:ae:4c:d9:ad: 12:f2:be:c6:f9:23:8a:1c:49:b7:b9:8c:9d:c3:9e:58:78:37: ca:c5:e4:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc0RDYxMTAvBgNVBAUTKDc3NDY0QTg0NkY3N0QxQzREMzY2QTMwNkI4MDY5MzlG Q0YyQTYwMUEwHhcNMjUwNDI1MDQ1OTIxWhcNMjUwNTAyMDQ1OTIxWjAYMRYwFAYD VQQDEw02ODBiMTZhOS1lZmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0Ul0exLIv9G/PPSFLvB6CEbsh3smmPeRlA1z6ohnDxpcmMQHSFLHfYxS/K9 3mdZX5slPYf23h4RPFtFYxTzvjz4GvsJ6zBgNaB3hHXXhWhYIPTHtV4VvWOErprp TPAK1CF5XcoyQP0btryOtEOwRP8/9Q9VAdHciVuy78oGkKTzN/JGNdi8MwjSKNUi 9zIhcw/SqsfUVp3Ek0x9bKnbsXCM0/WLwaDliIpAj9W7ydxIEZoEKwpbFyx9f9wi b8NrpzC6Op8963wDdJkgSlm6/Wh6OPSX5pfxQssvsDnQMfpNYi4lrT5FTBmn35E1 unBay+TQUrpA16+6Ob+f02j8uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWoYhsC rONV1eYu42RTB6TzVSl0MB8GA1UdIwQYMBaAFHdGSoRvd9HE02ajBrgGk5/PKmAa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzRENi9ERTIyQUQyNDBD REYxMUVGOTQ4NEU2MkFDNEY5QUUwMi9kMFpLaEc5MzBjVFRacU1HdUFhVG44OHFZ Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QwWktoRzkzMGNUVFpxTUd1QWFUbjg4cVlCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzRENi9ERTIyQUQyNDBDREYxMUVGOTQ4NEU2MkFDNEY5QUUwMi9kMFpLaEc5MzBj VFRacU1HdUFhVG44OHFZQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlnCCrLZvyCWXkUfnnOR8q8XthUa34veNGgUBOE0DUcf6gSPtQxbZT rzRC4dWjl4C/eIw4ED34YSXxL++TFqxeQnn7U74vTxKsiYWUSk2QxBLSo3tqW9RM 0bIVtYln+n94YWXBeg+ExU9S/EFd3Rpw3388TfUmNIRS51FVSFekOx4A07gYFT35 U5gGsuDBwjnAYsy5qeIjweNfs5SGEEnMSJ2WM+DSrizThpYzJ9Xy2Hl/ZPM0CcNs DMhd2AQ35OpWU53T/5FpLgenzU5uhjAjIXlBEn94fHiSH1VtCA2535TRmu4zEa5M 2a0S8r7G+SOKHEm3uYydw55YeDfKxeS8 -----END CERTIFICATE-----Generated at Sat Apr 26 05:20:54 2025 by rpki-client