$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft File: f2vh1aJzD8In-vyJbRNDMkF4MXk.mft (raw, json) Hash identifier: l6IghWuRyY3X/RUBrFI6CIumIJA4m9olo0mVWg7P2J4= Subject key identifier: 54:E5:AD:26:48:7D:D7:95:ED:D3:11:97:B5:4C:38:8A:A3:84:E7:EF Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 Certificate issuer: /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Certificate serial: 0871 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft Manifest number: 077D Signing time: Thu 24 Apr 2025 22:20:33 +0000 Manifest this update: Thu 24 Apr 2025 22:20:32 +0000 Manifest next update: Thu 01 May 2025 22:20:32 +0000 Files and hashes: 1: f2vh1aJzD8In-vyJbRNDMkF4MXk.crl (hash: PK5IJgQDN0d5AFzVOyr/l7JYKJmIY2HGgFgDAzQreZ8=) 2: 5A034FE6BD9011EF8EBE9D64C4F9AE02.roa (hash: M0Fcljsjjstipss7xqc7MHaM40CrhRfp+Ko6GKTS2eY=) 3: 71921B808DBD11EBB4566432C4F9AE02.roa (hash: /G2Mgl5uzW1IjI6PHih/zk+tlWLrMlnnVYCS55/UFdM=) 4: 95EC5BBE0DC811F0A0561D5AC4F9AE02.roa (hash: E4qGKWG7PfGIitr8iGGPNSOx9z6hB7rmiJDWW78bXko=) 5: DB120D6EC34A11EB9559E184C4F9AE02.roa (hash: 5xpmMyySrXgvXThxY4s4oxrkg/HJvlh/5VD0HqrC+TE=) 6: 284AFDA0F86011EE8DCC542DC4F9AE02.roa (hash: ibBpC0J7xssLmpNwn4rG5DteNDNkqNer4WUY/po6k0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2161 (0x871) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB4FE, serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Validity Not Before: Apr 24 22:20:32 2025 GMT Not After : May 1 22:20:32 2025 GMT Subject: CN=680ab931-190b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cc:21:37:6b:1f:b5:95:b2:4f:85:d3:75:71: ac:1f:6e:02:c7:88:ff:7e:d2:71:04:54:53:ae:be: 9a:5a:f9:42:0d:7c:df:fa:30:6d:fe:cd:1f:33:d2: df:c7:50:b1:c7:bc:e7:cb:43:f8:68:7b:87:8a:50: 3d:ec:81:32:05:d4:dd:11:b8:cc:64:7b:e1:d6:e4: a5:99:90:1a:bf:c1:56:2c:06:cc:bc:eb:dc:fe:6c: 15:d2:5d:e5:b2:41:10:33:28:89:82:2d:dc:05:2d: d2:de:81:17:fa:d8:97:eb:94:8e:af:bb:78:65:79: 4e:b4:a1:1f:68:b9:02:0f:48:22:be:f3:81:bb:c5: a3:04:4d:df:9b:55:14:54:e3:d2:32:85:ef:e5:a5: 98:00:dd:18:04:eb:32:8a:d8:86:ae:51:66:d9:de: 39:e1:22:2d:ac:3a:24:c3:7e:8e:ed:32:10:10:f7: 8c:90:4d:56:ee:11:95:92:0f:91:5a:00:d0:4e:21: 16:9d:29:80:c5:a8:13:27:21:98:94:33:7d:bb:98: 75:62:fb:ab:d8:7a:e0:06:db:cd:64:f4:92:e1:1c: db:47:48:df:8d:2f:e5:4c:e8:a3:c7:29:ab:c5:47: 3a:24:80:83:c3:bd:be:2b:49:24:f8:b6:ab:ff:2c: 29:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E5:AD:26:48:7D:D7:95:ED:D3:11:97:B5:4C:38:8A:A3:84:E7:EF X509v3 Authority Key Identifier: keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:20:52:0d:9f:88:23:90:45:1f:50:c2:38:1b:b4:7c:ce:f5: c9:b5:0b:80:d3:23:9a:17:fe:80:33:a5:f8:93:8c:23:d0:44: 5e:b6:ff:b0:8e:63:02:0d:64:f4:91:4b:9a:3e:8d:98:c9:e8: 29:43:59:79:ec:9e:5f:7e:34:7e:89:24:73:cf:43:bd:13:37: 7e:b3:ed:a6:af:22:63:d1:e8:54:c3:26:6d:ca:40:3b:cd:5c: e7:a0:75:3a:a9:e4:dd:ba:31:67:9f:ce:f6:c1:38:ba:a4:d7: ed:73:8e:43:58:e0:a9:b6:9c:60:87:6a:d3:00:24:21:25:d9: c8:d3:af:09:62:a0:c3:d1:90:96:96:23:a8:bc:d8:a6:e8:f0: 08:91:85:88:98:6c:a1:a1:cc:5f:79:50:42:4e:72:fe:0c:16: 14:6e:d8:50:b7:a7:a8:ed:c6:d0:6b:80:4e:25:06:fd:1c:46: 74:07:3b:ee:52:31:ad:49:07:9e:95:a4:b7:f9:91:33:e6:c8: d0:db:90:24:79:61:f2:51:c1:c7:5e:ab:83:77:fe:1d:d0:5a: 29:28:f6:9f:d9:8a:21:ad:07:af:84:74:96:11:f2:04:23:70: 84:53:02:07:63:50:e4:81:fb:e6:4f:6f:e3:be:65:24:8e:b4: 35:b3:f3:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0RkUxMTAvBgNVBAUTKDdGNkJFMUQ1QTI3MzBGQzIyN0ZBRkM4OTZEMTM0MzMy NDE3ODMxNzkwHhcNMjUwNDI0MjIyMDMyWhcNMjUwNTAxMjIyMDMyWjAYMRYwFAYD VQQDEw02ODBhYjkzMS0xOTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08whN2sftZWyT4XTdXGsH24Cx4j/ftJxBFRTrr6aWvlCDXzf+jBt/s0fM9Lf x1Cxx7zny0P4aHuHilA97IEyBdTdEbjMZHvh1uSlmZAav8FWLAbMvOvc/mwV0l3l skEQMyiJgi3cBS3S3oEX+tiX65SOr7t4ZXlOtKEfaLkCD0givvOBu8WjBE3fm1UU VOPSMoXv5aWYAN0YBOsyitiGrlFm2d454SItrDokw36O7TIQEPeMkE1W7hGVkg+R WgDQTiEWnSmAxagTJyGYlDN9u5h1Yvur2HrgBtvNZPSS4RzbR0jfjS/lTOijxymr xUc6JICDw72+K0kk+Lar/ywpLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFTlrSZI fdeV7dMRl7VMOIqjhOfvMB8GA1UdIwQYMBaAFH9r4dWicw/CJ/r8iW0TQzJBeDF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjRGRS9DRjRBMTBFQTg1 RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4SW4tdnlKYlJORE1rRjRN WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YydmgxYUp6RDhJbi12eUpiUk5ETWtGNE1Yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjRGRS9DRjRBMTBFQTg1RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4 SW4tdnlKYlJORE1rRjRNWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMIFINn4gjkEUfUMI4G7R8zvXJtQuA0yOaF/6AM6X4k4wj0ERetv+w jmMCDWT0kUuaPo2YyegpQ1l57J5ffjR+iSRzz0O9Ezd+s+2mryJj0ehUwyZtykA7 zVznoHU6qeTdujFnn872wTi6pNftc45DWOCptpxgh2rTACQhJdnI068JYqDD0ZCW liOovNim6PAIkYWImGyhocxfeVBCTnL+DBYUbthQt6eo7cbQa4BOJQb9HEZ0Bzvu UjGtSQeelaS3+ZEz5sjQ25AkeWHyUcHHXquDd/4d0FopKPaf2YohrQevhHSWEfIE I3CEUwIHY1DkgfvmT2/jvmUkjrQ1s/Os -----END CERTIFICATE-----Generated at Sat Apr 26 12:32:57 2025 by rpki-client