$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft File: pYh4bi_YjPqvU6qilsNkRg7m6m0.mft (raw, json) Hash identifier: xi+1HjzXRKDQTs/OkV+lCduy3kwwaI2IablT2S2GRNc= Subject key identifier: 61:3A:0D:A7:75:AE:54:32:19:59:D7:51:8E:EA:24:F9:40:64:03:BC Authority key identifier: A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D Certificate issuer: /CN=A91C8485/serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft Manifest number: 4B Signing time: Fri 25 Apr 2025 06:21:55 +0000 Manifest this update: Fri 25 Apr 2025 06:21:54 +0000 Manifest next update: Fri 02 May 2025 06:21:54 +0000 Files and hashes: 1: pYh4bi_YjPqvU6qilsNkRg7m6m0.crl (hash: gxzXEIXZ5N1LKy5hvEywxncFVGx/+p81f7g157wAy/8=) 2: 5B4A5E7EB7CF11EF860F535AC4F9AE02.roa (hash: P4e7hg24wbNE0iYWlZNKVYCuvbgx+YoBC75Ik3ogStQ=) 3: A59FFB3EB7D711EF9ED0C324C4F9AE02.roa (hash: ko6zibH/Gh8JhBqwZ3M7VGiDwD5udZ8uVAs4re/9Ths=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:21:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8485, serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Validity Not Before: Apr 25 06:21:54 2025 GMT Not After : May 2 06:21:54 2025 GMT Subject: CN=680b2a02-ebf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:16:6d:29:ac:64:e0:6e:fa:b7:3f:95:e3:94: 11:6a:5e:10:eb:12:8d:1d:1b:3f:93:ef:b6:92:dc: cf:fb:fc:27:5b:7f:79:24:a3:f0:b9:de:0e:f6:59: 86:e3:29:4a:84:51:f9:8b:a5:3c:16:0f:f5:ff:e4: 87:31:fc:14:1b:54:64:18:6f:f7:b7:bb:00:d4:ef: a1:e2:0c:2a:3a:bb:c4:c7:33:c3:b1:f2:37:44:df: e8:a3:53:de:84:28:e4:6d:66:d2:c2:82:92:8e:0f: 1c:48:85:aa:c6:a6:12:48:42:43:4a:96:98:00:e4: a6:a0:2c:a0:46:39:a8:f2:5e:63:e8:99:42:79:1b: 94:21:be:a0:d4:03:38:ef:d1:92:98:61:67:8c:71: 91:54:a9:ee:a5:15:e8:28:61:a6:2b:94:dc:1a:f4: 81:0f:d8:ef:54:83:50:a4:b9:18:c7:c6:1b:55:40: ca:b5:ec:ce:5c:de:17:ba:4d:7a:d0:52:14:7c:d2: 00:c1:db:95:5f:30:a8:c1:c1:80:85:8c:e6:72:1c: 6b:d1:bc:c5:4a:bb:ec:01:0f:dc:6c:68:c0:31:5c: 64:e0:5a:ee:1b:8b:9a:e9:bc:25:0d:40:3a:35:bb: 8a:7a:04:d5:79:24:ac:a2:3b:25:53:c6:d7:63:ec: 82:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:3A:0D:A7:75:AE:54:32:19:59:D7:51:8E:EA:24:F9:40:64:03:BC X509v3 Authority Key Identifier: keyid:A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:92:5b:31:07:e7:43:be:eb:e2:96:13:5a:ca:fb:6f:df:1b: e5:72:c4:84:f8:28:62:c0:23:81:97:cf:06:12:6e:30:c2:03: 99:15:2a:80:08:ed:92:0f:61:22:32:a5:04:3e:de:10:5f:a6: 09:af:1f:6b:ca:65:33:42:a0:20:42:18:5f:49:5c:3d:33:3e: a8:ce:ad:16:3f:1d:f9:41:41:91:bc:bf:a0:0b:2e:d4:14:6a: 2c:74:4c:48:c7:23:2a:fb:df:b3:8f:da:7b:78:36:20:c6:70: 64:01:2f:d4:b5:26:74:a9:ec:76:e4:26:69:b7:f6:42:6a:d9: 2a:fa:73:f8:66:93:f6:86:64:65:82:bb:ef:28:d0:e9:7d:aa: 86:24:e3:54:6f:74:d8:05:96:4f:40:1f:61:48:c6:df:5e:ce: 29:bc:0d:6e:a0:39:04:83:1d:0e:9d:f5:8d:dc:db:41:00:f6: 6f:bf:80:bb:1b:fb:3f:d9:39:d1:b6:15:22:68:57:5b:f9:49: cc:d6:ea:31:be:e7:3f:c4:49:31:60:4c:0e:5b:a0:7f:8a:be: cc:19:40:25:91:19:27:a2:ce:b1:25:ca:b4:d9:6e:10:ff:06: 48:44:04:ac:d9:14:d6:7c:7c:39:e6:fb:8e:dc:d8:cf:06:ef: ff:fc:c9:b2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD ODQ4NTExMC8GA1UEBRMoQTU4ODc4NkUyRkQ4OENGQUFGNTNBQUEyOTZDMzY0NDYw RUU2RUE2RDAeFw0yNTA0MjUwNjIxNTRaFw0yNTA1MDIwNjIxNTRaMBgxFjAUBgNV BAMTDTY4MGIyYTAyLWViZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMFm0prGTgbvq3P5XjlBFqXhDrEo0dGz+T77aS3M/7/Cdbf3kko/C53g72WYbj KUqEUfmLpTwWD/X/5Icx/BQbVGQYb/e3uwDU76HiDCo6u8THM8Ox8jdE3+ijU96E KORtZtLCgpKODxxIharGphJIQkNKlpgA5KagLKBGOajyXmPomUJ5G5QhvqDUAzjv 0ZKYYWeMcZFUqe6lFegoYaYrlNwa9IEP2O9Ug1CkuRjHxhtVQMq17M5c3he6TXrQ UhR80gDB25VfMKjBwYCFjOZyHGvRvMVKu+wBD9xsaMAxXGTgWu4bi5rpvCUNQDo1 u4p6BNV5JKyiOyVTxtdj7IIVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYToNp3Wu VDIZWddRjuok+UBkA7wwHwYDVR0jBBgwFoAUpYh4bi/YjPqvU6qilsNkRg7m6m0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4NDg1LzJEQkNFRjQ2QjQx MjExRUZCOEU2RTc3M0M0RjlBRTAyL3BZaDRiaV9ZalBxdlU2cWlsc05rUmc3bTZt MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcFloNGJpX1lqUHF2VTZxaWxzTmtSZzdtNm0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4 NDg1LzJEQkNFRjQ2QjQxMjExRUZCOEU2RTc3M0M0RjlBRTAyL3BZaDRiaV9ZalBx dlU2cWlsc05rUmc3bTZtMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFKSWzEH50O+6+KWE1rK+2/fG+VyxIT4KGLAI4GXzwYSbjDCA5kVKoAI 7ZIPYSIypQQ+3hBfpgmvH2vKZTNCoCBCGF9JXD0zPqjOrRY/HflBQZG8v6ALLtQU aix0TEjHIyr737OP2nt4NiDGcGQBL9S1JnSp7HbkJmm39kJq2Sr6c/hmk/aGZGWC u+8o0Ol9qoYk41RvdNgFlk9AH2FIxt9ezim8DW6gOQSDHQ6d9Y3c20EA9m+/gLsb +z/ZOdG2FSJoV1v5SczW6jG+5z/ESTFgTA5boH+KvswZQCWRGSeizrElyrTZbhD/ BkhEBKzZFNZ8fDnm+47c2M8G7//8ybI= -----END CERTIFICATE-----Generated at Sat Apr 26 15:06:33 2025 by rpki-client