$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft File: 7Y9dbJv8FI96u3CMUpHThHgcYf0.mft (raw, json) Hash identifier: eVe5zXutY3X50Se/ifFfX0De7+nYfs9z2lqmnN9YEac= Subject key identifier: DB:3E:76:48:8E:AF:04:35:97:D5:B7:47:14:C7:F7:00:BD:C9:94:58 Authority key identifier: ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD Certificate issuer: /CN=A91DA0AA/serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD Certificate serial: 0187 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft Manifest number: 0178 Signing time: Fri 25 Apr 2025 03:04:44 +0000 Manifest this update: Fri 25 Apr 2025 03:04:43 +0000 Manifest next update: Fri 02 May 2025 03:04:43 +0000 Files and hashes: 1: 7Y9dbJv8FI96u3CMUpHThHgcYf0.crl (hash: bHwdKe/rg2a1prurQCFBWRsuElreqbIsyC6xRhWwytY=) 2: E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa (hash: 0tzqO1CmigPSpz/MhhBtA7Y+BKnfbYyMKy+tv5IkgiA=) 3: C5AFD098167311F0916F5435C4F9AE02.roa (hash: NKujXUGh0X/SkT7+y791gsNwYlUiCMjNSQHbtD/TZ7k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA0AA, serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD Validity Not Before: Apr 25 03:04:43 2025 GMT Not After : May 2 03:04:43 2025 GMT Subject: CN=680afbcc-ecdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:96:1f:90:6f:b0:0a:80:99:32:9b:c3:38:0a: 20:e5:ea:a9:23:c7:bd:4c:fb:75:a5:13:0e:a9:c0: 56:4a:a7:4a:4c:77:65:6a:1b:f6:37:cb:54:88:65: 4b:11:1e:25:6b:23:09:61:a5:67:57:eb:7b:2d:56: c2:1e:b2:ca:28:ed:8a:42:16:1f:1c:c6:86:54:75: b5:d5:1e:1a:d5:77:c0:7c:34:f0:44:32:5d:fe:fb: ca:40:26:4c:d6:78:c9:58:77:74:36:10:0c:f9:20: c4:29:b8:48:ec:5d:9b:7c:6a:71:2f:9e:7c:7c:70: d6:ca:3a:2e:c3:c1:f1:fc:ba:99:0e:86:23:fc:dd: 33:55:a0:dd:96:63:30:3a:ff:40:2d:51:4f:d4:26: 59:63:4e:81:7f:26:d4:99:af:ac:ce:99:ea:06:ec: c0:c4:29:de:95:4f:25:cd:f5:36:23:81:91:09:6a: 44:0a:06:6b:db:2f:dc:04:f7:28:42:38:ae:45:eb: 40:25:84:55:cc:dc:25:ef:37:66:2d:d4:35:2d:76: df:8f:4c:71:25:bc:c7:7f:4c:1e:a0:94:3d:1c:05: 82:7b:13:f7:e1:c8:90:21:fa:72:25:6c:d0:e5:da: 0a:5f:ae:fa:b7:84:a2:55:8d:bd:55:c3:e7:b2:b6: 95:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:3E:76:48:8E:AF:04:35:97:D5:B7:47:14:C7:F7:00:BD:C9:94:58 X509v3 Authority Key Identifier: keyid:ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:93:4a:57:32:89:7c:da:49:8d:85:43:fc:5f:d5:92:d3:e4: ac:da:ba:d8:35:c8:db:c2:04:4b:07:65:26:4b:b4:9f:d6:ca: b7:98:f1:4b:9a:9d:05:e1:94:bf:e1:72:85:a1:d1:29:bf:e3: e2:e5:56:d0:ff:64:3f:64:d3:a8:34:66:37:4f:66:50:35:ec: 23:76:76:a2:d9:d9:9a:55:50:cc:20:86:55:ab:9e:99:77:9a: 50:79:8a:73:af:73:d2:2c:ac:4a:82:97:e7:dc:d5:9c:e2:92: 46:65:06:66:41:27:e7:37:8c:99:c9:00:72:d8:11:ca:c2:89: 97:58:b5:8b:b7:de:4f:b3:3a:73:03:56:b0:5e:e1:f7:5d:88: 6a:02:94:02:1d:8e:1c:b0:69:ac:11:4d:69:20:0d:0e:26:e1: ed:99:73:3b:ed:bd:02:5a:b4:99:c2:fe:c1:fc:e7:08:99:a2: f0:32:2b:63:6c:63:06:9a:02:54:08:e1:10:89:64:06:08:91: 63:e8:c3:5c:6a:03:e8:58:dc:1b:be:fc:a9:fe:9a:16:70:27: 56:58:6b:09:d0:aa:4b:bc:45:37:39:ab:9c:ff:ca:dd:b7:b1: b8:eb:23:20:62:6a:ff:db:a8:35:ea:f3:84:29:f8:5a:e0:e4: f8:7a:37:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEwQUExMTAvBgNVBAUTKEVEOEY1RDZDOUJGQzE0OEY3QUJCNzA4QzUyOTFEMzg0 NzgxQzYxRkQwHhcNMjUwNDI1MDMwNDQzWhcNMjUwNTAyMDMwNDQzWjAYMRYwFAYD VQQDEw02ODBhZmJjYy1lY2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0pYfkG+wCoCZMpvDOAog5eqpI8e9TPt1pRMOqcBWSqdKTHdlahv2N8tUiGVL ER4layMJYaVnV+t7LVbCHrLKKO2KQhYfHMaGVHW11R4a1XfAfDTwRDJd/vvKQCZM 1njJWHd0NhAM+SDEKbhI7F2bfGpxL558fHDWyjouw8Hx/LqZDoYj/N0zVaDdlmMw Ov9ALVFP1CZZY06BfybUma+szpnqBuzAxCnelU8lzfU2I4GRCWpECgZr2y/cBPco QjiuRetAJYRVzNwl7zdmLdQ1LXbfj0xxJbzHf0weoJQ9HAWCexP34ciQIfpyJWzQ 5doKX676t4SiVY29VcPnsraVUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNs+dkiO rwQ1l9W3RxTH9wC9yZRYMB8GA1UdIwQYMBaAFO2PXWyb/BSPertwjFKR04R4HGH9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTBBQS84MkJCQjU1MjAw M0QxMUVFOTYwOEYxNDdDNEY5QUUwMi83WTlkYkp2OEZJOTZ1M0NNVXBIVGhIZ2NZ ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZOWRiSnY4Rkk5NnUzQ01VcEhUaEhnY1lmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTBBQS84MkJCQjU1MjAwM0QxMUVFOTYwOEYxNDdDNEY5QUUwMi83WTlkYkp2OEZJ OTZ1M0NNVXBIVGhIZ2NZZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSk0pXMol82kmNhUP8X9WS0+Ss2rrYNcjbwgRLB2UmS7Sf1sq3mPFL mp0F4ZS/4XKFodEpv+Pi5VbQ/2Q/ZNOoNGY3T2ZQNewjdnai2dmaVVDMIIZVq56Z d5pQeYpzr3PSLKxKgpfn3NWc4pJGZQZmQSfnN4yZyQBy2BHKwomXWLWLt95Pszpz A1awXuH3XYhqApQCHY4csGmsEU1pIA0OJuHtmXM77b0CWrSZwv7B/OcImaLwMitj bGMGmgJUCOEQiWQGCJFj6MNcagPoWNwbvvyp/poWcCdWWGsJ0KpLvEU3Oauc/8rd t7G46yMgYmr/26g16vOEKfha4OT4ejfT -----END CERTIFICATE-----Generated at Sat Apr 26 16:38:16 2025 by rpki-client