$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft File: y51BptqW92pP8FhrXoqIn8AjVFc.mft (raw, json) Hash identifier: CJa6FLpMg6jf5MVCUrrqehtWFKg0CtV037kr0xbHIPY= Subject key identifier: 1B:EA:AB:87:5B:CC:EB:F6:56:E4:1D:68:43:8D:72:D2:4D:36:69:89 Authority key identifier: CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 Certificate issuer: /CN=A91C7A69/serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Certificate serial: 0324 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft Manifest number: 031E Signing time: Fri 25 Apr 2025 00:55:17 +0000 Manifest this update: Fri 25 Apr 2025 00:55:16 +0000 Manifest next update: Fri 02 May 2025 00:55:16 +0000 Files and hashes: 1: y51BptqW92pP8FhrXoqIn8AjVFc.crl (hash: uQAatNYGuZzltsBoB96MsTst6XSE8fR+eOVjz62s4Y8=) 2: 94FE3AB6D55011EF8A1E1855C4F9AE02.roa (hash: gYpqfZKhxCcGgy3HXhq4upY/4aTqMhzYgAIN8Unlk1w=) 3: 4FF0079CC6CB11ECB185E43EC4F9AE02.roa (hash: p51YofghFqe/P1BWUf3vy05r4fDl5jSux9C8jQxGEcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 804 (0x324) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7A69, serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Validity Not Before: Apr 25 00:55:16 2025 GMT Not After : May 2 00:55:16 2025 GMT Subject: CN=680add75-d4be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:33:f1:e4:dc:6c:24:84:38:48:ce:40:f4:58: 7f:59:c2:08:2f:83:1b:20:a1:7c:e0:c7:0b:83:89: 94:2d:c1:c5:84:c9:b0:c2:71:21:7c:17:19:d6:7c: b4:29:de:40:58:89:15:a3:b9:b8:5e:95:70:81:e8: 99:8e:c5:26:0d:81:e2:0d:53:cb:47:af:59:1b:a6: de:fb:69:c4:1d:12:47:c7:00:88:87:86:f0:b2:fa: a7:8d:e7:00:33:45:14:5f:fe:47:a4:d7:ce:1e:7d: 54:ac:04:bb:d8:35:f8:cb:2d:be:1a:d3:40:30:4a: 00:95:b2:fe:71:c4:c3:3f:09:ea:39:fe:49:b9:5a: 1b:5a:39:dd:c4:31:d2:a7:21:11:fe:22:ca:3c:23: 99:c2:0d:89:00:d0:43:d9:cf:69:4e:88:2a:1b:96: 7b:e4:b1:55:b6:4a:a4:df:93:cc:cd:bf:9c:cc:1b: f7:8b:67:42:63:39:2f:73:b2:5f:74:6f:e6:50:0d: 89:a3:4a:52:f7:9a:ae:6d:0c:03:0e:d2:5f:e2:20: 81:0e:b4:22:e7:39:fb:c6:34:07:7c:b7:20:2b:7e: 2b:29:82:7f:6f:03:e4:28:f1:a9:fa:46:47:42:b2: 2f:12:18:fa:95:28:fd:14:8f:86:75:dc:6e:e6:18: 05:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:EA:AB:87:5B:CC:EB:F6:56:E4:1D:68:43:8D:72:D2:4D:36:69:89 X509v3 Authority Key Identifier: keyid:CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:11:8e:f2:6d:76:5e:e1:80:1c:11:7b:8b:59:04:8b:2e:4a: 9a:f1:45:06:52:d4:ce:f1:1c:9e:a1:8e:08:50:8e:79:23:37: fa:73:cc:42:23:96:4e:bb:f9:a5:64:d4:ca:01:6a:70:e5:0c: dc:95:e2:83:8f:c1:88:18:6f:b5:02:36:9c:e3:73:52:6d:49: 50:c3:e8:95:4e:b3:85:47:e4:9d:56:ab:c2:3a:30:2e:48:61: 95:5f:50:96:9a:7e:e6:d1:85:cb:46:09:72:6c:be:39:d5:94: c3:6e:84:cb:45:44:0f:a3:6d:91:0e:7e:ba:87:74:f9:78:6b: 06:50:71:66:58:1c:93:25:0b:f7:99:ad:ae:45:8d:b5:fd:93: f5:1f:7e:a0:e3:49:b5:ec:e9:42:ea:3a:6e:e0:94:04:b5:9b: c4:0f:61:53:77:24:c2:4b:69:0b:f3:50:ff:9e:b1:df:bb:25: ad:b2:c2:a8:ab:06:88:f6:86:81:cf:75:1f:d9:af:b4:31:02: 68:d6:60:fc:db:8c:32:cd:5d:94:ef:52:78:25:d9:71:c8:d4: 1d:a6:1b:b8:c3:f8:83:01:3c:33:82:42:e3:85:ef:a0:e7:b9: a9:2c:52:9b:f0:a1:26:c2:77:ce:3f:45:52:a6:b6:8b:73:12: d3:1e:9d:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdBNjkxMTAvBgNVBAUTKENCOUQ0MUE2REE5NkY3NkE0RkYwNTg2QjVFOEE4ODlG QzAyMzU0NTcwHhcNMjUwNDI1MDA1NTE2WhcNMjUwNTAyMDA1NTE2WjAYMRYwFAYD VQQDEw02ODBhZGQ3NS1kNGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoTPx5NxsJIQ4SM5A9Fh/WcIIL4MbIKF84McLg4mULcHFhMmwwnEhfBcZ1ny0 Kd5AWIkVo7m4XpVwgeiZjsUmDYHiDVPLR69ZG6be+2nEHRJHxwCIh4bwsvqnjecA M0UUX/5HpNfOHn1UrAS72DX4yy2+GtNAMEoAlbL+ccTDPwnqOf5JuVobWjndxDHS pyER/iLKPCOZwg2JANBD2c9pTogqG5Z75LFVtkqk35PMzb+czBv3i2dCYzkvc7Jf dG/mUA2Jo0pS95qubQwDDtJf4iCBDrQi5zn7xjQHfLcgK34rKYJ/bwPkKPGp+kZH QrIvEhj6lSj9FI+Gddxu5hgFqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvqq4db zOv2VuQdaEONctJNNmmJMB8GA1UdIwQYMBaAFMudQabalvdqT/BYa16KiJ/AI1RX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0E2OS84QUYzRDVCMkM2 MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzkycFA4RmhyWG9xSW44QWpW RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1MUJwdHFXOTJwUDhGaHJYb3FJbjhBalZGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0E2OS84QUYzRDVCMkM2MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzky cFA4RmhyWG9xSW44QWpWRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3EY7ybXZe4YAcEXuLWQSLLkqa8UUGUtTO8RyeoY4IUI55Izf6c8xC I5ZOu/mlZNTKAWpw5QzcleKDj8GIGG+1Ajac43NSbUlQw+iVTrOFR+SdVqvCOjAu SGGVX1CWmn7m0YXLRglybL451ZTDboTLRUQPo22RDn66h3T5eGsGUHFmWByTJQv3 ma2uRY21/ZP1H36g40m17OlC6jpu4JQEtZvED2FTdyTCS2kL81D/nrHfuyWtssKo qwaI9oaBz3Uf2a+0MQJo1mD824wyzV2U71J4JdlxyNQdphu4w/iDATwzgkLjhe+g 57mpLFKb8KEmwnfOP0VSpraLcxLTHp1E -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:58 2025 by rpki-client