$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft File: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft (raw, json) Hash identifier: 3W5T7AVDBwuce02jMztP1iwhRDKqmUVj2tHZjjiuS6I= Subject key identifier: B7:8F:18:9F:FC:50:A2:02:E1:4B:3B:D5:B7:35:F3:BC:D9:8B:30:BE Authority key identifier: 32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 Certificate issuer: /CN=A91CBF47/serialNumber=326371E399824F8004ED96756819760881B7CD96 Certificate serial: 347F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft Manifest number: 347B Signing time: Thu 24 Apr 2025 14:32:18 +0000 Manifest this update: Thu 24 Apr 2025 14:32:18 +0000 Manifest next update: Thu 01 May 2025 14:32:18 +0000 Files and hashes: 1: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl (hash: qnKi11swy432MBHzT6JimOdCLxVxD373h1KYrrhH81g=) 2: 608C129E33E011ED979ED20EC4F9AE02.roa (hash: ZrPgwoRLGJ2fTtJOsuC6YjXCZss5mwGvBq/beIOJfYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13439 (0x347f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBF47, serialNumber=326371E399824F8004ED96756819760881B7CD96 Validity Not Before: Apr 24 14:32:18 2025 GMT Not After : May 1 14:32:18 2025 GMT Subject: CN=680a4b72-b6b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:69:66:c6:b2:4c:d0:f3:d3:df:4c:d8:66:54: 70:1c:1c:3f:6d:0d:07:b6:37:8e:ea:fd:19:32:18: 80:8f:ee:0d:29:d8:74:39:b2:9e:98:b7:75:05:1c: 1c:3c:5b:d9:f4:51:23:7d:3d:46:2d:11:3b:71:58: ba:aa:63:3a:f2:e6:3b:72:14:d7:fe:eb:3b:b5:b6: ca:3c:14:73:f9:ce:c5:69:56:f2:0c:57:b9:35:f3: a7:2a:09:59:e5:ad:dd:53:e1:0e:44:97:cb:f8:9e: 2f:11:85:5f:e9:f3:9f:23:30:84:7d:35:f3:8f:7c: f5:39:4b:3c:ea:99:00:c7:6c:0f:d0:52:cd:9a:18: 4c:df:28:b3:02:db:c1:c8:81:11:36:b2:da:36:6b: 35:02:d9:01:24:b6:ea:f0:0b:af:45:47:50:ce:53: c5:77:94:bc:f3:cb:c7:8d:b0:3c:dd:9e:58:ad:0e: 9f:10:10:ae:6d:5a:14:26:8b:70:b8:4b:9c:04:ac: 92:59:5c:78:44:06:d2:5e:e0:7e:44:b8:36:d8:0d: 65:b7:df:19:70:65:03:a2:e5:e6:4c:dc:ce:8e:86: 78:20:d9:30:35:ad:1b:c9:ed:8e:d7:33:bf:04:31: 98:bd:f7:19:41:de:d9:21:33:46:13:cf:27:e3:54: 78:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8F:18:9F:FC:50:A2:02:E1:4B:3B:D5:B7:35:F3:BC:D9:8B:30:BE X509v3 Authority Key Identifier: keyid:32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:33:dd:49:0c:a1:56:76:18:d3:d0:21:be:88:f1:85:ce:89: cd:bc:7c:6c:df:f2:9f:8f:a9:f5:e2:88:0b:ff:ce:5b:0b:dc: 48:7a:59:ba:0d:af:c3:21:b5:f8:ed:b4:9a:10:4f:bc:ee:6f: 8b:c5:c8:46:d5:1b:6a:e3:92:65:87:86:a3:eb:72:da:70:c0: 78:38:3a:a2:3d:27:b7:d8:9a:d3:2b:d0:a1:2d:16:a3:37:2d: 66:32:c9:a5:29:b9:13:be:3d:cc:18:67:72:62:3c:7d:b1:a3: b6:00:41:6b:e0:4d:42:57:b9:fe:07:3f:7a:b7:6a:d2:8f:75: 30:79:ed:3d:c6:48:f9:4b:94:b1:a7:44:76:ef:27:44:e3:4d: 71:c6:f6:ff:ca:32:a1:fa:84:c4:ba:71:14:d6:29:2b:77:97: a4:26:2c:e2:17:08:d5:c0:03:b9:ff:a7:6d:06:4c:b4:91:55: 77:70:57:3b:fe:42:4a:6c:6f:5b:b9:b9:f7:70:ff:0f:22:a2: 11:f5:73:6a:90:32:97:1b:93:e1:8c:de:bc:6b:b7:37:ca:a6: 83:ba:c4:4b:98:40:d3:49:96:de:57:fe:3f:ce:fa:ec:e5:dd: 76:cf:2f:a2:bd:5d:8d:d5:db:38:d5:36:f1:ba:35:88:19:3f: 02:51:14:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JGNDcxMTAvBgNVBAUTKDMyNjM3MUUzOTk4MjRGODAwNEVEOTY3NTY4MTk3NjA4 ODFCN0NEOTYwHhcNMjUwNDI0MTQzMjE4WhcNMjUwNTAxMTQzMjE4WjAYMRYwFAYD VQQDEw02ODBhNGI3Mi1iNmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGlmxrJM0PPT30zYZlRwHBw/bQ0HtjeO6v0ZMhiAj+4NKdh0ObKemLd1BRwc PFvZ9FEjfT1GLRE7cVi6qmM68uY7chTX/us7tbbKPBRz+c7FaVbyDFe5NfOnKglZ 5a3dU+EORJfL+J4vEYVf6fOfIzCEfTXzj3z1OUs86pkAx2wP0FLNmhhM3yizAtvB yIERNrLaNms1AtkBJLbq8AuvRUdQzlPFd5S888vHjbA83Z5YrQ6fEBCubVoUJotw uEucBKySWVx4RAbSXuB+RLg22A1lt98ZcGUDouXmTNzOjoZ4INkwNa0bye2O1zO/ BDGYvfcZQd7ZITNGE88n41R4BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLePGJ/8 UKIC4Us71bc187zZizC+MB8GA1UdIwQYMBaAFDJjceOZgk+ABO2WdWgZdgiBt82W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkY0Ny8zNzBDQTJDMDFE OEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0QUU3WloxYUJsMkNJRzN6 WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tTng0NW1DVDRBRTdaWjFhQmwyQ0lHM3paWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkY0Ny8zNzBDQTJDMDFEOEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0 QUU3WloxYUJsMkNJRzN6WlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFM91JDKFWdhjT0CG+iPGFzonNvHxs3/Kfj6n14ogL/85bC9xIelm6 Da/DIbX47bSaEE+87m+LxchG1Rtq45Jlh4aj63LacMB4ODqiPSe32JrTK9ChLRaj Ny1mMsmlKbkTvj3MGGdyYjx9saO2AEFr4E1CV7n+Bz96t2rSj3Uwee09xkj5S5Sx p0R27ydE401xxvb/yjKh+oTEunEU1ikrd5ekJiziFwjVwAO5/6dtBky0kVV3cFc7 /kJKbG9bubn3cP8PIqIR9XNqkDKXG5PhjN68a7c3yqaDusRLmEDTSZbeV/4/zvrs 5d12zy+ivV2N1ds41TbxujWIGT8CURQZ -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:57 2025 by rpki-client