$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft File: PinOb2p9uUttCRM7c_7VLd7hLas.mft (raw, json) Hash identifier: o5h0DHvqnO4qQiLHexG5i00sezYPcvi8DunjRLtp4GA= Subject key identifier: BC:FA:8A:99:46:20:C0:00:78:04:F0:5B:48:24:46:13:8C:5F:86:89 Authority key identifier: 3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB Certificate issuer: /CN=A91CF285/serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB Certificate serial: 1074 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft Manifest number: 1064 Signing time: Thu 24 Apr 2025 17:22:32 +0000 Manifest this update: Thu 24 Apr 2025 17:22:32 +0000 Manifest next update: Thu 01 May 2025 17:22:32 +0000 Files and hashes: 1: PinOb2p9uUttCRM7c_7VLd7hLas.crl (hash: yaz6bGuQxXl66NWsOD2r5uSsnhAXKkHTopzbSC9D4KY=) 2: 073BC4F4ED3B11EDB5A01A46C4F9AE02.roa (hash: pBAdtg5q7fupj3C2NkgZi3lj80AO2X+XBbLJrZHCCV0=) 3: DC83478EEB0311ED875DD72EC4F9AE02.roa (hash: wC4P834uMCwewPqC4AzB3L42gf9vs93AMppygyyTSdg=) 4: AB731B004B2A11EFAAFCC92CC4F9AE02.roa (hash: Zx75smDZoCLc3BQeMy0zIEYFPQvHS5X5/v68oiFszVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4212 (0x1074) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF285, serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB Validity Not Before: Apr 24 17:22:32 2025 GMT Not After : May 1 17:22:32 2025 GMT Subject: CN=680a7358-32ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ce:d7:40:98:3b:65:85:d5:f3:c0:23:74:2b: fc:27:21:00:db:dc:6c:c5:a6:86:29:50:8f:ca:8a: b4:01:91:ed:e5:55:3b:9c:c7:e0:3a:f8:c7:e5:4b: bf:1f:d0:19:13:ae:03:cb:76:cb:c4:72:89:56:5d: df:2f:55:9d:6b:f7:8b:9c:fe:93:b4:77:97:89:e9: 45:18:67:ee:2f:bc:1f:70:91:88:a1:4d:35:30:e4: 04:52:39:b3:64:1d:a9:c8:0c:91:dc:28:56:32:8a: 2d:74:e4:ed:b2:e9:9c:42:10:7a:73:ee:9c:3a:94: ad:f5:24:b8:bd:5e:9e:39:3a:b9:b7:b2:96:30:15: f6:d1:c6:02:25:a8:c3:4c:31:97:a5:7d:99:f1:67: ce:ac:6f:d4:1f:e9:97:53:83:f4:ad:69:27:4f:55: 27:1e:4c:a9:de:4a:6a:3d:e1:b6:c9:64:4c:df:a9: b3:3b:1a:13:d7:3f:20:d7:7e:41:e9:cd:7e:6a:e2: 9d:31:7d:cd:dc:37:e0:25:ef:4c:a2:52:28:2d:d5: 11:37:6c:63:89:e6:37:8c:f3:17:9d:d7:06:ff:96: a2:8c:da:b5:f7:ad:aa:f0:39:e0:a4:02:1a:6c:19: 53:a6:7b:95:22:b7:41:c2:2b:6d:a1:ce:5e:9a:af: 13:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:FA:8A:99:46:20:C0:00:78:04:F0:5B:48:24:46:13:8C:5F:86:89 X509v3 Authority Key Identifier: keyid:3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:5d:26:04:d6:76:2f:7b:0a:e5:77:2c:16:dc:1a:c0:e9:ed: d5:54:6f:e8:f7:13:d4:7d:18:49:ae:44:25:af:b7:4b:50:14: 9f:d7:36:29:3f:14:fc:69:e9:45:25:51:de:7a:0e:4a:3a:0f: e5:08:17:e7:dc:0a:72:66:2c:1a:98:3a:07:48:9b:a1:bd:f2: 5f:08:72:26:93:bd:80:3a:57:28:03:27:bd:ba:7e:b7:d5:f7: dd:1a:da:24:a5:13:23:75:ab:d7:c2:e5:31:9b:00:3d:22:be: 76:59:f9:f2:e3:9e:cc:a9:72:fa:9b:2d:de:0b:90:1c:11:d3: 32:27:0f:61:aa:bf:39:0c:85:9b:ed:c3:b2:2e:34:cb:e6:fa: fa:8e:f5:7d:d1:78:7c:16:80:0a:32:12:0c:09:cb:79:3d:27: ee:a8:29:2a:15:6b:13:25:c3:01:2f:7c:af:5c:e7:fd:2f:28: 81:ed:cc:e3:0e:10:37:6d:93:54:3e:b2:87:52:f2:91:f1:ea: f3:fe:ad:a4:9a:ec:ff:56:42:a5:44:16:77:ea:00:8c:85:b1: b0:be:2d:95:44:f9:77:e8:bb:6a:87:d0:11:ba:1c:64:14:2f: ca:c6:96:75:01:e4:06:c1:35:f4:09:72:88:e3:a6:1f:ee:a5: 25:78:61:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YyODUxMTAvBgNVBAUTKDNFMjlDRTZGNkE3REI5NEI2RDA5MTMzQjczRkVENTJE REVFMTJEQUIwHhcNMjUwNDI0MTcyMjMyWhcNMjUwNTAxMTcyMjMyWjAYMRYwFAYD VQQDEw02ODBhNzM1OC0zMmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxM7XQJg7ZYXV88AjdCv8JyEA29xsxaaGKVCPyoq0AZHt5VU7nMfgOvjH5Uu/ H9AZE64Dy3bLxHKJVl3fL1Wda/eLnP6TtHeXielFGGfuL7wfcJGIoU01MOQEUjmz ZB2pyAyR3ChWMootdOTtsumcQhB6c+6cOpSt9SS4vV6eOTq5t7KWMBX20cYCJajD TDGXpX2Z8WfOrG/UH+mXU4P0rWknT1UnHkyp3kpqPeG2yWRM36mzOxoT1z8g135B 6c1+auKdMX3N3DfgJe9MolIoLdURN2xjieY3jPMXndcG/5aijNq1962q8DngpAIa bBlTpnuVIrdBwittoc5emq8TQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLz6iplG IMAAeATwW0gkRhOMX4aJMB8GA1UdIwQYMBaAFD4pzm9qfblLbQkTO3P+1S3e4S2r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjI4NS9GRDY0RjBCODM0 MEMxMUU5OTY2QzVBNzZDNEY5QUUwMi9QaW5PYjJwOXVVdHRDUk03Y183VkxkN2hM YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Bpbk9iMnA5dVV0dENSTTdjXzdWTGQ3aExhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjI4NS9GRDY0RjBCODM0MEMxMUU5OTY2QzVBNzZDNEY5QUUwMi9QaW5PYjJwOXVV dHRDUk03Y183VkxkN2hMYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAXSYE1nYvewrldywW3BrA6e3VVG/o9xPUfRhJrkQlr7dLUBSf1zYp PxT8aelFJVHeeg5KOg/lCBfn3ApyZiwamDoHSJuhvfJfCHImk72AOlcoAye9un63 1ffdGtokpRMjdavXwuUxmwA9Ir52Wfny457MqXL6my3eC5AcEdMyJw9hqr85DIWb 7cOyLjTL5vr6jvV90Xh8FoAKMhIMCct5PSfuqCkqFWsTJcMBL3yvXOf9LyiB7czj DhA3bZNUPrKHUvKR8erz/q2kmuz/VkKlRBZ36gCMhbGwvi2VRPl36Ltqh9ARuhxk FC/KxpZ1AeQGwTX0CXKI46Yf7qUleGGy -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:52 2025 by rpki-client