$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft File: cB88FPCtfu9l000APNwZJGSM3jc.mft (raw, json) Hash identifier: d1JRI65fraqj3O7oS4EcGIVgDW+cpGUawziOxtvTi68= Subject key identifier: 0B:E3:85:E5:9A:D4:E9:63:CD:A4:B3:B1:1A:9C:47:04:90:4A:1D:CB Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Certificate serial: 03B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft Manifest number: 0397 Signing time: Fri 25 Apr 2025 00:34:50 +0000 Manifest this update: Fri 25 Apr 2025 00:34:49 +0000 Manifest next update: Fri 02 May 2025 00:34:49 +0000 Files and hashes: 1: cB88FPCtfu9l000APNwZJGSM3jc.crl (hash: GsgtRydKCOK2pqL/MKmVJEr+RJ9l9GNeR0l9z/3YKW0=) 2: 7E16D3240B5011EE9A518C7BC4F9AE02.roa (hash: U0JaFB8CVVgKbLBmTTRMW+oeZZCXLA9kdsldXtwigwA=) 3: CDDEC562011711EEB15FDD2AC4F9AE02.roa (hash: PgsogDDZQkDovTqfqAZnCJjtewKfx64pNU23F3h3LOI=) 4: 2BF1D5F07E3511EE8CB63458C4F9AE02.roa (hash: xABbFnxjesSqqxHb5Z3LU/MaNyiAYDrCsWPlJjK46gQ=) 5: DF49B4400B4B11EEBAD3047AC4F9AE02.roa (hash: 5EplJ/qwJeqGMd35PNuR9x2zdZw/zJYIhHM0ma+2rK4=) 6: 513415BC400011EE88B66B4FC4F9AE02.roa (hash: La9bIBXUn7Pcc0HHfxEl2RzNwtBMPkoEmLR0KZnlaWs=) 7: 86550F680B4311EE8ABEE820C4F9AE02.roa (hash: yWfAEaYcbh5fjpOL87NsV9hi8Cg9epFjV+c+Su0AUew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 946 (0x3b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C63A6, serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Validity Not Before: Apr 25 00:34:49 2025 GMT Not After : May 2 00:34:49 2025 GMT Subject: CN=680ad8a9-fa1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:96:12:5b:86:73:f3:82:48:1b:7b:ba:dc:2a: 77:2d:93:01:95:c7:b2:d5:8b:6a:4a:73:d1:61:03: ac:d1:8f:10:81:b2:d7:79:ec:6e:35:38:7e:c1:47: b0:e3:56:ef:76:7a:9c:12:af:a4:96:ba:1e:85:49: 8c:f3:aa:55:9d:52:b7:17:0a:05:ce:9f:3b:23:70: 04:fa:cd:7c:81:39:ee:13:8b:80:d4:97:88:ad:4f: f8:f9:07:c8:86:ee:76:0a:5c:fd:38:c5:8e:dd:2a: 19:92:5c:92:84:f6:62:81:ba:05:20:a8:b8:7f:a1: a0:b8:57:67:06:46:bd:a4:4b:af:02:6d:e1:d0:8b: ce:56:33:cd:3a:71:12:76:b1:16:3a:26:7d:90:75: ff:c9:b2:c1:49:a8:53:6d:c3:8d:c2:c2:84:44:8c: 90:e9:ae:69:5e:34:2a:cd:f4:49:60:b9:a0:e0:9d: 7c:70:28:ef:43:cf:1a:2f:c7:70:d1:63:af:24:92: 83:1d:2d:dd:bb:02:70:6d:c3:9d:88:b0:55:56:1b: 03:bb:3a:9c:46:f9:d2:d1:bd:63:56:7e:1d:84:9d: 58:fa:35:f4:d4:2d:4e:77:5e:55:75:6a:8f:f1:60: 1d:c1:51:22:a9:d9:71:7e:44:2e:da:89:34:5e:25: f7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E3:85:E5:9A:D4:E9:63:CD:A4:B3:B1:1A:9C:47:04:90:4A:1D:CB X509v3 Authority Key Identifier: keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:f8:57:cc:2d:d0:5f:bb:74:7e:8d:6b:52:0c:5d:a0:f9:a1: 32:2a:97:fd:94:b0:40:cc:fb:8b:82:03:9c:9a:99:7d:06:fa: 99:7d:1a:1b:0f:8e:2a:dc:f3:6d:2b:69:cb:33:c2:00:10:4b: b6:82:dd:2e:b0:b3:33:16:c0:6a:e7:1d:20:31:f2:18:28:76: 95:5b:23:04:8f:f3:cc:19:d6:cc:6c:86:cc:e6:56:72:f8:6b: 8d:f0:e6:47:4e:27:72:07:e8:6c:75:3c:19:46:02:80:65:ab: ba:99:09:2b:d7:22:f0:e6:56:62:69:88:d7:96:3d:e7:0e:4c: 38:01:35:4d:72:1b:47:ef:f7:09:b2:e5:62:53:40:0f:c5:8d: 73:b0:91:24:71:b4:ac:ef:e9:d5:70:e3:4c:60:e0:ac:05:a6: 2a:08:8b:85:98:d7:af:2f:f0:8d:89:b9:2f:a8:66:fd:1a:0c: 21:9b:03:50:24:b8:f2:63:f9:bf:ea:79:6a:a3:d3:7f:9a:4f: d3:73:1e:c4:20:58:5d:15:25:38:38:09:a9:68:af:2f:61:5c: 76:90:ac:2e:f4:bc:e1:47:e7:84:24:d1:84:09:5f:fa:a0:1d: 1e:51:40:e8:62:40:79:3d:92:31:4f:25:11:7c:3b:41:e9:77: 80:18:c5:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYzQTYxMTAvBgNVBAUTKDcwMUYzQzE0RjBBRDdFRUY2NUQzNEQwMDNDREMxOTI0 NjQ4Q0RFMzcwHhcNMjUwNDI1MDAzNDQ5WhcNMjUwNTAyMDAzNDQ5WjAYMRYwFAYD VQQDEw02ODBhZDhhOS1mYTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmJYSW4Zz84JIG3u63Cp3LZMBlcey1YtqSnPRYQOs0Y8QgbLXeexuNTh+wUew 41bvdnqcEq+klroehUmM86pVnVK3FwoFzp87I3AE+s18gTnuE4uA1JeIrU/4+QfI hu52Clz9OMWO3SoZklyShPZigboFIKi4f6GguFdnBka9pEuvAm3h0IvOVjPNOnES drEWOiZ9kHX/ybLBSahTbcONwsKERIyQ6a5pXjQqzfRJYLmg4J18cCjvQ88aL8dw 0WOvJJKDHS3duwJwbcOdiLBVVhsDuzqcRvnS0b1jVn4dhJ1Y+jX01C1Od15VdWqP 8WAdwVEiqdlxfkQu2ok0XiX3hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvjheWa 1OljzaSzsRqcRwSQSh3LMB8GA1UdIwQYMBaAFHAfPBTwrX7vZdNNADzcGSRkjN43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjNBNi8wRDM5QzRFNDlB OUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1OWwwMDBBUE53WkpHU00z amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NCODhGUEN0ZnU5bDAwMEFQTndaSkdTTTNqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjNBNi8wRDM5QzRFNDlBOUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1 OWwwMDBBUE53WkpHU00zamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH+FfMLdBfu3R+jWtSDF2g+aEyKpf9lLBAzPuLggOcmpl9BvqZfRob D44q3PNtK2nLM8IAEEu2gt0usLMzFsBq5x0gMfIYKHaVWyMEj/PMGdbMbIbM5lZy +GuN8OZHTidyB+hsdTwZRgKAZau6mQkr1yLw5lZiaYjXlj3nDkw4ATVNchtH7/cJ suViU0APxY1zsJEkcbSs7+nVcONMYOCsBaYqCIuFmNevL/CNibkvqGb9GgwhmwNQ JLjyY/m/6nlqo9N/mk/Tcx7EIFhdFSU4OAmpaK8vYVx2kKwu9LzhR+eEJNGECV/6 oB0eUUDoYkB5PZIxTyURfDtB6XeAGMXL -----END CERTIFICATE-----Generated at Sat Apr 26 20:00:46 2025 by rpki-client