$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft File: D6tO-YKPSvJnwW2K1HEKjuybu64.mft (raw, json) Hash identifier: C6wH6lE4yq+mVJl9l8Hpt6lnicJ064TOm5Y9rl+hoWA= Subject key identifier: BC:BC:2F:33:5C:61:D3:20:07:23:B8:C4:2A:05:DE:D2:1F:02:BA:C3 Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE Certificate issuer: /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft Manifest number: 0167 Signing time: Fri 25 Apr 2025 03:01:43 +0000 Manifest this update: Fri 25 Apr 2025 03:01:42 +0000 Manifest next update: Fri 02 May 2025 03:01:42 +0000 Files and hashes: 1: D6tO-YKPSvJnwW2K1HEKjuybu64.crl (hash: PS3CzvOp5Rog2IGAe8ReA7c/6G6jrdqbn6l2nA0rORY=) 2: A0DEDD52FDF811EEA4D57274C4F9AE02.roa (hash: vdvXxO6hOVkfy87PEKE+BccPO1owcMEO3zlcdidAXcY=) 3: A16366C6FDF811EEA4D57274C4F9AE02.roa (hash: XPJpmrYNcSNbm9TnuwsF2hc9Dluf13QgHRh9YOFG7n8=) 4: A1C0742EFDF811EEA4D57274C4F9AE02.roa (hash: JXeJqxRjv6XY1o3PZOsZQUdvlF7VbU2rS+ppRqunUIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Validity Not Before: Apr 25 03:01:42 2025 GMT Not After : May 2 03:01:42 2025 GMT Subject: CN=680afb17-a2d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d5:12:59:b8:8c:d9:bd:ee:51:b9:b3:2f:b6: 10:ff:77:78:d1:dc:1c:b8:e9:17:5e:c4:19:2f:4c: 27:91:24:92:d5:bc:23:88:3d:fd:e8:81:59:80:ac: 79:3a:d2:c1:cb:a2:b7:09:82:06:8e:35:73:39:d1: 18:bc:71:99:cc:52:f4:61:02:00:7e:9f:c9:9a:bf: 97:24:6f:f5:58:4d:5f:26:cb:5f:82:e2:ac:ce:82: 01:5a:a8:bd:c7:47:a9:b9:17:21:ac:a3:53:a3:56: 7b:63:49:14:60:5d:d6:38:39:67:bd:d2:36:39:a9: e4:73:e1:65:b1:2f:1e:d6:19:fa:5e:2b:d0:0b:9f: 28:a6:ca:6e:cd:81:ee:0b:cc:e8:93:cd:6b:1d:e6: ab:a0:de:a5:e3:0d:7b:62:69:9b:7a:e2:b6:1e:46: 04:1e:03:5f:c9:f7:47:9f:17:77:6c:d1:07:ad:51: 05:32:59:72:94:7f:da:79:3e:56:28:07:df:d5:64: 95:c8:26:d0:57:b6:34:d1:75:95:7c:90:bd:88:11: 90:25:15:9c:9d:15:95:8a:a1:ee:16:85:38:80:fd: 43:a3:cf:9c:c2:66:dd:61:0c:a6:15:c8:1b:c3:70: 2a:1e:46:dd:9b:b0:d9:a8:c6:2f:2d:27:2d:b4:2b: 96:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:BC:2F:33:5C:61:D3:20:07:23:B8:C4:2A:05:DE:D2:1F:02:BA:C3 X509v3 Authority Key Identifier: keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:4b:4d:c4:50:c4:40:f0:41:17:0a:b6:0a:d4:c0:11:40:84: b1:00:ea:31:af:6f:cd:91:3b:33:b4:38:81:30:00:d2:2e:cb: 80:57:9c:d7:e9:1e:8f:5b:c7:a5:fd:4f:32:08:c9:69:48:e7: 59:e8:16:f9:da:5e:a7:ce:55:4c:ed:c6:11:1f:40:eb:5f:aa: df:68:ce:f7:a3:4d:40:2b:c1:68:c9:a7:63:d5:07:93:f8:08: 21:68:36:65:28:fa:bc:15:00:fa:53:38:59:15:cb:d1:73:1f: 62:d7:c6:a9:28:95:e1:8d:61:db:0d:32:d4:a9:0b:42:e7:76: 31:53:fd:3a:aa:4a:96:f3:57:cb:5c:07:53:24:83:85:a6:16: 7d:9f:11:34:79:54:52:88:2e:cc:4f:aa:09:3f:cb:f0:6b:e9: b5:ab:13:73:95:8f:52:e8:c8:cf:c9:12:af:0d:2a:2a:70:f0: ea:1d:6c:7c:aa:b2:c5:06:92:3a:21:c0:24:59:48:16:e2:e3: f9:b6:0a:a8:3d:bf:07:17:7f:cd:e6:b9:cc:71:28:f8:0f:49: 2f:5d:1f:b2:ce:af:46:8e:be:e7:34:74:db:1e:88:4b:d6:4e: c0:b3:14:6d:f6:a3:bf:05:00:64:26:a9:0f:56:a0:c3:c4:af: 3c:53:b5:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCRTkxMTAvBgNVBAUTKDBGQUI0RUY5ODI4RjRBRjI2N0MxNkQ4QUQ0NzEwQThF RUM5QkJCQUUwHhcNMjUwNDI1MDMwMTQyWhcNMjUwNTAyMDMwMTQyWjAYMRYwFAYD VQQDEw02ODBhZmIxNy1hMmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutUSWbiM2b3uUbmzL7YQ/3d40dwcuOkXXsQZL0wnkSSS1bwjiD396IFZgKx5 OtLBy6K3CYIGjjVzOdEYvHGZzFL0YQIAfp/Jmr+XJG/1WE1fJstfguKszoIBWqi9 x0epuRchrKNTo1Z7Y0kUYF3WODlnvdI2Oankc+FlsS8e1hn6XivQC58opspuzYHu C8zok81rHearoN6l4w17YmmbeuK2HkYEHgNfyfdHnxd3bNEHrVEFMllylH/aeT5W KAff1WSVyCbQV7Y00XWVfJC9iBGQJRWcnRWViqHuFoU4gP1Do8+cwmbdYQymFcgb w3AqHkbdm7DZqMYvLScttCuWYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLy8LzNc YdMgByO4xCoF3tIfArrDMB8GA1UdIwQYMBaAFA+rTvmCj0ryZ8FtitRxCo7sm7uu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJFOS85NEM5Qjg3ODAw NUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2Sm53VzJLMUhFS2p1eWJ1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q2dE8tWUtQU3ZKbndXMksxSEVLanV5YnU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUJFOS85NEM5Qjg3ODAwNUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2 Sm53VzJLMUhFS2p1eWJ1NjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANS03EUMRA8EEXCrYK1MARQISxAOoxr2/NkTsztDiBMADSLsuAV5zX 6R6PW8el/U8yCMlpSOdZ6Bb52l6nzlVM7cYRH0DrX6rfaM73o01AK8Foyadj1QeT +AghaDZlKPq8FQD6UzhZFcvRcx9i18apKJXhjWHbDTLUqQtC53YxU/06qkqW81fL XAdTJIOFphZ9nxE0eVRSiC7MT6oJP8vwa+m1qxNzlY9S6MjPyRKvDSoqcPDqHWx8 qrLFBpI6IcAkWUgW4uP5tgqoPb8HF3/N5rnMcSj4D0kvXR+yzq9Gjr7nNHTbHohL 1k7AsxRt9qO/BQBkJqkPVqDDxK88U7XO -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:26 2025 by rpki-client