$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft File: du8ZOVeobWTTw83rngdGdG70KQo.mft (raw, json) Hash identifier: U4/dNr8mCyUyXCAQ53BAs/ABN3psH0qdlc0tpfwDro8= Subject key identifier: 36:3C:12:91:98:8A:38:7C:91:76:63:53:E8:7B:AC:2B:39:EE:90:DC Authority key identifier: 76:EF:19:39:57:A8:6D:64:D3:C3:CD:EB:9E:07:46:74:6E:F4:29:0A Certificate issuer: /CN=A91C40D6/serialNumber=76EF193957A86D64D3C3CDEB9E0746746EF4290A Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft Manifest number: E8 Signing time: Sat 26 Apr 2025 20:07:20 +0000 Manifest this update: Sat 26 Apr 2025 20:07:19 +0000 Manifest next update: Sat 03 May 2025 20:07:19 +0000 Files and hashes: 1: du8ZOVeobWTTw83rngdGdG70KQo.crl (hash: KYI8b9+HV43LrL4omg0dZ8C9B9F4y1P1gDQO12p3Qgg=) 2: DF4EFA76CA7811EE838E0A73C4F9AE02.roa (hash: /FORfGBg9zOxItBO8An19jk30uxSaavKCQfEXQzUIIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.crl rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 20:07:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C40D6, serialNumber=76EF193957A86D64D3C3CDEB9E0746746EF4290A Validity Not Before: Apr 26 20:07:19 2025 GMT Not After : May 3 20:07:19 2025 GMT Subject: CN=680d3cf7-526d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:73:a6:19:53:db:41:22:7a:54:af:09:71:74: ae:c5:f5:da:58:a0:41:50:da:92:db:b1:01:01:fd: f9:02:74:88:74:35:81:29:74:14:c4:8e:3b:82:04: 74:d6:f0:7a:11:42:ef:ed:31:82:cc:43:ca:4f:19: 4c:80:8f:39:70:d5:87:d1:b1:b8:41:74:e8:8a:86: 41:d6:56:e7:16:f9:5f:81:3f:96:55:e2:6f:18:ac: 8b:61:ff:c5:e4:59:14:70:d4:fb:26:d9:36:18:e7: 8b:01:86:19:0c:a5:3a:d5:13:cd:22:ec:ed:a6:a3: 31:9e:03:32:82:91:85:96:e9:5e:4a:97:2d:64:ff: 72:d0:52:78:75:55:a5:66:59:cc:05:f1:ce:07:fc: b3:62:0d:14:3e:5f:cc:31:e3:49:a0:57:bc:ee:09: 16:80:de:17:5a:9b:16:74:f4:f6:d7:a0:21:14:5a: cb:d0:21:d5:1e:9a:92:0b:55:ba:76:64:21:da:65: 96:8a:8f:3c:ae:6d:f9:33:70:f2:c1:dc:ed:0b:41: bc:75:0f:13:0b:18:a0:df:c6:88:06:5d:2c:24:3b: dc:1c:1e:05:9f:71:f9:6a:7a:16:e9:26:a4:78:34: ef:11:f5:ab:b4:ec:2e:d4:68:11:77:43:af:fa:0f: 1f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3C:12:91:98:8A:38:7C:91:76:63:53:E8:7B:AC:2B:39:EE:90:DC X509v3 Authority Key Identifier: keyid:76:EF:19:39:57:A8:6D:64:D3:C3:CD:EB:9E:07:46:74:6E:F4:29:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:88:6e:7b:b4:cc:34:aa:f9:2d:46:8c:89:62:84:cf:5e:66: 16:2e:e9:82:ce:05:90:97:95:0c:08:ea:b0:b7:b5:5e:12:11: 63:61:6f:6a:c9:52:41:20:12:d0:a6:55:2c:81:f3:70:03:ef: 9e:3a:9d:59:f6:f7:c6:22:90:bc:f0:97:a1:76:96:1c:bc:30: af:4e:27:0e:9f:d3:40:71:8e:1f:4a:d6:1a:4f:44:92:d1:84: 05:88:50:bc:86:cf:9f:ce:9d:a9:c9:fc:5e:99:d5:c3:3a:76: 09:0f:c7:19:21:b1:16:5f:8f:e4:b3:9a:43:2d:4f:be:dd:f1: f8:26:8d:9e:ac:9a:26:ca:91:11:07:6d:cd:ba:33:48:da:09: 5e:cb:3d:4e:2c:28:cf:3f:b7:bb:b1:a3:2e:ac:6c:f5:ce:5f: 17:bf:19:9b:33:d7:69:a2:6e:94:02:df:ca:02:38:2c:9f:12: 75:80:14:00:f3:91:3a:16:25:8f:6d:cc:27:dd:4e:e2:62:23: 67:dd:0b:e3:d0:f9:c2:a8:12:54:a5:94:0d:10:13:57:65:af: 6c:f6:95:53:66:1d:44:48:01:9c:a0:2d:16:9f:ec:0d:55:56: 49:3f:4f:a4:9f:7d:bf:60:e5:7f:35:b8:80:da:da:37:7d:a9: de:c3:80:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQwRDYxMTAvBgNVBAUTKDc2RUYxOTM5NTdBODZENjREM0MzQ0RFQjlFMDc0Njc0 NkVGNDI5MEEwHhcNMjUwNDI2MjAwNzE5WhcNMjUwNTAzMjAwNzE5WjAYMRYwFAYD VQQDEw02ODBkM2NmNy01MjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1HOmGVPbQSJ6VK8JcXSuxfXaWKBBUNqS27EBAf35AnSIdDWBKXQUxI47ggR0 1vB6EULv7TGCzEPKTxlMgI85cNWH0bG4QXToioZB1lbnFvlfgT+WVeJvGKyLYf/F 5FkUcNT7Jtk2GOeLAYYZDKU61RPNIuztpqMxngMygpGFluleSpctZP9y0FJ4dVWl ZlnMBfHOB/yzYg0UPl/MMeNJoFe87gkWgN4XWpsWdPT216AhFFrL0CHVHpqSC1W6 dmQh2mWWio88rm35M3DywdztC0G8dQ8TCxig38aIBl0sJDvcHB4Fn3H5anoW6Sak eDTvEfWrtOwu1GgRd0Ov+g8foQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDY8EpGY ijh8kXZjU+h7rCs57pDcMB8GA1UdIwQYMBaAFHbvGTlXqG1k08PN654HRnRu9CkK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDBENi8wNUY4NjAxNEM1 MzcxMUVFQjY3QUVCNzlDNEY5QUUwMi9kdThaT1Zlb2JXVFR3ODNybmdkR2RHNzBL UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2R1OFpPVmVvYldUVHc4M3JuZ2RHZEc3MEtRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDBENi8wNUY4NjAxNEM1MzcxMUVFQjY3QUVCNzlDNEY5QUUwMi9kdThaT1Zlb2JX VFR3ODNybmdkR2RHNzBLUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkiG57tMw0qvktRoyJYoTPXmYWLumCzgWQl5UMCOqwt7VeEhFjYW9q yVJBIBLQplUsgfNwA++eOp1Z9vfGIpC88JehdpYcvDCvTicOn9NAcY4fStYaT0SS 0YQFiFC8hs+fzp2pyfxemdXDOnYJD8cZIbEWX4/ks5pDLU++3fH4Jo2erJomypER B23NujNI2gleyz1OLCjPP7e7saMurGz1zl8XvxmbM9dpom6UAt/KAjgsnxJ1gBQA 85E6FiWPbcwn3U7iYiNn3Qvj0PnCqBJUpZQNEBNXZa9s9pVTZh1ESAGcoC0Wn+wN VVZJP0+kn32/YOV/NbiA2to3fanew4D7 -----END CERTIFICATE-----Generated at Mon Apr 28 03:25:21 2025 by rpki-client