$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft File: 64E_WXYcfGsa4oxHgWfiBhq1ys8.mft (raw, json) Hash identifier: PrdlYYVXhXGmkjzbbEuvvvlsZ+vz1kMUuThwjTh4Da4= Subject key identifier: C5:B2:0F:E2:A9:AE:E0:38:BB:71:38:1A:BB:7A:CD:B7:15:6D:F3:6C Authority key identifier: EB:81:3F:59:76:1C:7C:6B:1A:E2:8C:47:81:67:E2:06:1A:B5:CA:CF Certificate issuer: /CN=A91DD75B/serialNumber=EB813F59761C7C6B1AE28C478167E2061AB5CACF Certificate serial: 0289 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64E_WXYcfGsa4oxHgWfiBhq1ys8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft Manifest number: 0285 Signing time: Fri 25 Apr 2025 01:21:29 +0000 Manifest this update: Fri 25 Apr 2025 01:21:28 +0000 Manifest next update: Fri 02 May 2025 01:21:28 +0000 Files and hashes: 1: 64E_WXYcfGsa4oxHgWfiBhq1ys8.crl (hash: FqSKiyZ5wYlfLeOIK2bReC7dWKY4KQC0Pog+Qj7ZpN0=) 2: D6A658CE01DE11ED8236F073C4F9AE02.roa (hash: kmjWEDePak7RaIzaM2s6P+tZd0JsQcs5f1UxF22C33k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.crl rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64E_WXYcfGsa4oxHgWfiBhq1ys8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 649 (0x289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD75B, serialNumber=EB813F59761C7C6B1AE28C478167E2061AB5CACF Validity Not Before: Apr 25 01:21:28 2025 GMT Not After : May 2 01:21:28 2025 GMT Subject: CN=680ae399-5cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6c:8f:96:9e:30:82:ab:18:f5:0c:d7:f6:5a: 32:58:7b:22:8d:76:80:25:5b:df:1c:d0:46:9a:5f: c3:47:2a:fc:da:98:70:1d:5a:a3:89:80:3e:61:59: c1:20:3f:6e:97:8d:bb:9c:c2:91:5d:8f:fd:c6:28: 62:58:70:fa:9e:9f:0b:bf:68:1f:aa:96:18:b0:e7: 06:cc:9f:77:bb:07:45:dd:0e:01:95:3e:f8:04:d6: 67:29:85:c3:ac:83:a0:d1:db:e6:e2:32:1a:a2:52: e6:a6:4f:52:4a:58:78:74:7b:8f:b8:99:4f:ca:1a: a5:57:67:1d:0b:ea:4b:93:5f:6a:d8:4a:31:01:a3: 0c:62:eb:2a:f0:86:35:c6:33:dd:25:94:a1:1c:7c: 8e:1a:74:e6:b7:ce:16:04:cf:de:60:ac:b3:34:a9: 30:2d:1c:75:35:33:7e:19:81:4d:f5:38:a7:6f:4a: e7:1e:ed:3e:7a:d5:68:7e:26:04:fe:6f:93:00:86: 2e:2c:61:5a:ce:35:1a:97:11:3b:d6:cb:e0:cd:7b: c0:43:e2:3b:00:cb:6f:00:40:9f:03:1c:bf:4f:0a: a7:3d:00:6f:0d:98:3c:29:aa:7b:a7:2d:49:18:15: c0:a5:fd:82:85:90:b1:99:1f:0f:80:79:b8:69:6d: 34:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B2:0F:E2:A9:AE:E0:38:BB:71:38:1A:BB:7A:CD:B7:15:6D:F3:6C X509v3 Authority Key Identifier: keyid:EB:81:3F:59:76:1C:7C:6B:1A:E2:8C:47:81:67:E2:06:1A:B5:CA:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64E_WXYcfGsa4oxHgWfiBhq1ys8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:2f:0e:41:37:9f:8f:b3:92:d9:c6:13:27:a8:a5:5f:7d:b2: 93:34:4e:77:94:5c:c2:f7:8f:2b:fb:01:c7:97:a4:10:88:c5: ec:d6:62:08:df:db:0b:ae:f9:ea:b8:94:eb:18:66:ed:7f:31: 32:33:20:91:27:02:84:20:0b:80:0c:aa:59:42:78:68:9d:d2: 5e:03:b9:1e:c9:db:a0:2a:72:cc:56:5e:f8:35:82:b3:04:a7: 75:03:87:e6:f5:18:de:ce:8c:19:6d:51:69:35:5d:58:89:38: d6:ca:59:f4:40:1c:f5:72:d1:16:5e:fc:d3:c9:cc:85:c6:55: be:49:d4:35:34:1a:57:14:da:3f:11:db:ba:5e:a8:8e:34:69: b8:0f:41:b4:56:de:74:c4:aa:da:a1:0d:4e:45:34:b7:a2:ba: fb:4a:07:9e:7c:cc:36:fe:7e:37:99:5c:10:1e:09:54:12:b1: 2a:32:d9:18:aa:d6:53:50:4a:7c:07:4c:5a:2c:7d:0d:b7:39: 6e:17:12:25:65:63:72:5b:78:be:4f:56:57:2f:c5:16:23:99: c1:7a:3d:83:b6:91:84:c5:db:74:74:59:09:1b:a0:89:a5:2e: e9:43:ef:fb:97:73:da:9f:e6:36:90:84:57:61:30:9b:82:dc: 21:ee:32:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ3NUIxMTAvBgNVBAUTKEVCODEzRjU5NzYxQzdDNkIxQUUyOEM0NzgxNjdFMjA2 MUFCNUNBQ0YwHhcNMjUwNDI1MDEyMTI4WhcNMjUwNTAyMDEyMTI4WjAYMRYwFAYD VQQDEw02ODBhZTM5OS01Y2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWyPlp4wgqsY9QzX9loyWHsijXaAJVvfHNBGml/DRyr82phwHVqjiYA+YVnB ID9ul427nMKRXY/9xihiWHD6np8Lv2gfqpYYsOcGzJ93uwdF3Q4BlT74BNZnKYXD rIOg0dvm4jIaolLmpk9SSlh4dHuPuJlPyhqlV2cdC+pLk19q2EoxAaMMYusq8IY1 xjPdJZShHHyOGnTmt84WBM/eYKyzNKkwLRx1NTN+GYFN9Tinb0rnHu0+etVofiYE /m+TAIYuLGFazjUalxE71svgzXvAQ+I7AMtvAECfAxy/TwqnPQBvDZg8Kap7py1J GBXApf2ChZCxmR8PgHm4aW00FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWyD+Kp ruA4u3E4Grt6zbcVbfNsMB8GA1UdIwQYMBaAFOuBP1l2HHxrGuKMR4Fn4gYatcrP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDc1Qi82NEExREE0ODAx REMxMUVEOUVGRTJBNTZDNEY5QUUwMi82NEVfV1hZY2ZHc2E0b3hIZ1dmaUJocTF5 czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0RV9XWFljZkdzYTRveEhnV2ZpQmhxMXlzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDc1Qi82NEExREE0ODAxREMxMUVEOUVGRTJBNTZDNEY5QUUwMi82NEVfV1hZY2ZH c2E0b3hIZ1dmaUJocTF5czgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZLw5BN5+Ps5LZxhMnqKVffbKTNE53lFzC948r+wHHl6QQiMXs1mII 39sLrvnquJTrGGbtfzEyMyCRJwKEIAuADKpZQnhondJeA7keydugKnLMVl74NYKz BKd1A4fm9RjezowZbVFpNV1YiTjWyln0QBz1ctEWXvzTycyFxlW+SdQ1NBpXFNo/ Edu6XqiONGm4D0G0Vt50xKraoQ1ORTS3orr7SgeefMw2/n43mVwQHglUErEqMtkY qtZTUEp8B0xaLH0NtzluFxIlZWNyW3i+T1ZXL8UWI5nBej2DtpGExdt0dFkJG6CJ pS7pQ+/7l3Pan+Y2kIRXYTCbgtwh7jKE -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:53 2025 by rpki-client