$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft File: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft (raw, json) Hash identifier: LNE6lopWJJJqcdqUvAgqX9Trc92rDlu1rbG18cUe+YQ= Subject key identifier: FF:23:19:32:84:E4:C9:F7:2D:E7:B7:D1:E0:05:1E:06:AE:F7:E2:7A Authority key identifier: 75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94 Certificate issuer: /CN=A91C72E6/serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94 Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft Manifest number: 016C Signing time: Fri 25 Apr 2025 02:59:35 +0000 Manifest this update: Fri 25 Apr 2025 02:59:33 +0000 Manifest next update: Fri 02 May 2025 02:59:33 +0000 Files and hashes: 1: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl (hash: QrVAJGiF1GL5j4j5FYHYAgrbgoCX631HGfYOluS965Q=) 2: 2340D07AF2F111ED91F08A4FC4F9AE02.roa (hash: RN4BzBKzm6DEJmTceToRMZocfmFw/tmq9npppNN/f6I=) 3: 23EE2B76F2F111ED91F08A4FC4F9AE02.roa (hash: R4MOqPNazPvSSKVGkQoTvV/niZowhUllvkAn/iWShNw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:59:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72E6, serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94 Validity Not Before: Apr 25 02:59:33 2025 GMT Not After : May 2 02:59:33 2025 GMT Subject: CN=680afa96-f8b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fc:71:4f:fc:e9:08:ae:6c:35:2d:55:27:73: 6e:ff:64:85:e3:3c:d2:9b:3f:e3:f4:f6:3a:a5:d9: b9:72:0c:a4:20:24:92:44:d1:ec:99:ce:46:ff:b9: e0:54:ee:26:fe:23:6d:2e:e2:8c:b1:97:80:0c:ec: bd:78:c2:e7:4e:39:37:c9:27:0a:8d:78:f3:77:0d: c0:dc:f5:67:89:f8:f6:21:e1:45:79:0d:34:9e:d3: fe:67:21:4d:15:9e:e4:89:52:ad:3c:85:9a:a9:ac: 8f:05:b0:d3:2d:ef:1e:06:f1:29:a4:c1:2f:20:82: f6:7e:da:45:d9:d3:e6:e1:6c:06:0d:29:16:b5:cc: 90:e4:50:80:14:9c:e0:0e:01:10:bb:f9:cf:be:f7: 69:03:95:95:51:26:61:20:9f:cc:a6:d8:c1:a5:de: 3c:1a:88:07:8a:33:07:20:df:69:52:fa:0f:40:ab: 43:19:c1:f5:71:9c:f2:03:30:8b:ed:b0:d2:55:b6: 70:d8:f4:54:2e:ad:9b:62:40:b3:b0:1a:2c:a3:c9: 67:0c:c2:38:e9:eb:f0:96:be:91:b0:64:55:f7:05: e6:f0:82:34:52:b2:42:b9:f9:8b:33:98:a8:e9:77: ce:99:fa:2b:d5:ca:65:7b:ef:33:fb:73:5d:d8:47: 72:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:23:19:32:84:E4:C9:F7:2D:E7:B7:D1:E0:05:1E:06:AE:F7:E2:7A X509v3 Authority Key Identifier: keyid:75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:05:a3:b4:89:b6:d4:6d:3d:fe:32:76:00:82:97:8a:f7:55: 5a:fa:c1:b5:c1:dc:8e:8c:8f:b4:d6:73:fa:37:2c:94:b6:1f: e9:bb:64:07:be:d7:3b:76:ba:e6:ed:67:cf:04:47:b8:58:55: e0:17:03:5f:0a:bb:cd:96:6c:a3:2c:e5:79:db:1b:2a:59:1f: 9a:91:de:1a:c8:69:4a:7b:bb:63:1b:62:a1:2a:24:db:81:63: ec:07:24:8a:37:83:39:c3:68:be:c3:b1:f7:c5:da:96:bd:52: 33:7f:6b:af:b8:b0:b4:72:85:56:24:40:bc:2e:3d:79:b2:26: dc:ad:ce:f0:e4:d2:f4:f5:de:20:6b:d5:1f:4f:b4:26:f2:f6: 45:02:37:c9:fa:6c:39:52:c0:a3:fb:38:d2:c1:36:d4:e6:4f: 8b:9d:49:46:d0:67:ac:8a:40:4c:ba:83:d3:3a:9a:23:f4:f4: 41:62:23:88:7b:db:d5:d7:dd:b2:44:18:33:ec:54:da:76:29: 83:57:00:7e:fa:34:65:b5:81:6d:90:42:52:8d:e3:da:1b:fd: 43:5e:93:04:08:ad:c0:03:a2:6d:82:6f:10:6f:f2:de:38:44: 33:53:97:74:d6:a2:00:37:80:a0:a0:f6:52:0b:4c:b6:61:95: a9:65:0a:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyRTYxMTAvBgNVBAUTKDc1MjUzM0IxODUyRjdEMkFDNkU3MERDREVCRkQ1NDdE REM0MzhGOTQwHhcNMjUwNDI1MDI1OTMzWhcNMjUwNTAyMDI1OTMzWjAYMRYwFAYD VQQDEw02ODBhZmE5Ni1mOGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfxxT/zpCK5sNS1VJ3Nu/2SF4zzSmz/j9PY6pdm5cgykICSSRNHsmc5G/7ng VO4m/iNtLuKMsZeADOy9eMLnTjk3yScKjXjzdw3A3PVnifj2IeFFeQ00ntP+ZyFN FZ7kiVKtPIWaqayPBbDTLe8eBvEppMEvIIL2ftpF2dPm4WwGDSkWtcyQ5FCAFJzg DgEQu/nPvvdpA5WVUSZhIJ/MptjBpd48GogHijMHIN9pUvoPQKtDGcH1cZzyAzCL 7bDSVbZw2PRULq2bYkCzsBoso8lnDMI46evwlr6RsGRV9wXm8II0UrJCufmLM5io 6XfOmfor1cple+8z+3Nd2Edy+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8jGTKE 5Mn3Lee30eAFHgau9+J6MB8GA1UdIwQYMBaAFHUlM7GFL30qxucNzev9VH3cQ4+U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJFNi9FNkU2RkIzMkYy RUExMUVEOTA5OTAwNEFDNEY5QUUwMi9kU1V6c1lVdmZTckc1dzNONl8xVWZkeERq NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RTVXpzWVV2ZlNyRzV3M042XzFVZmR4RGo1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzJFNi9FNkU2RkIzMkYyRUExMUVEOTA5OTAwNEFDNEY5QUUwMi9kU1V6c1lVdmZT ckc1dzNONl8xVWZkeERqNVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiBaO0ibbUbT3+MnYAgpeK91Va+sG1wdyOjI+01nP6NyyUth/pu2QH vtc7drrm7WfPBEe4WFXgFwNfCrvNlmyjLOV52xsqWR+akd4ayGlKe7tjG2KhKiTb gWPsBySKN4M5w2i+w7H3xdqWvVIzf2uvuLC0coVWJEC8Lj15sibcrc7w5NL09d4g a9UfT7Qm8vZFAjfJ+mw5UsCj+zjSwTbU5k+LnUlG0GesikBMuoPTOpoj9PRBYiOI e9vV192yRBgz7FTadimDVwB++jRltYFtkEJSjePaG/1DXpMECK3AA6Jtgm8Qb/Le OEQzU5d01qIAN4CgoPZSC0y2YZWpZQrj -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:27 2025 by rpki-client