$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft File: MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft (raw, json) Hash identifier: bsbipyhxj5+uplE+aMk8fNCJ19mx8ppXBVxrPto2pf4= Subject key identifier: 22:9B:22:E1:A7:84:23:18:CA:9E:CD:47:99:77:79:92:01:C5:0C:DC Authority key identifier: 31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38 Certificate issuer: /CN=A91DEF04/serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38 Certificate serial: 0678 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft Manifest number: 0668 Signing time: Thu 24 Apr 2025 22:10:05 +0000 Manifest this update: Thu 24 Apr 2025 22:10:05 +0000 Manifest next update: Thu 01 May 2025 22:10:05 +0000 Files and hashes: 1: MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl (hash: 99xFOMPW1SSsPIK5rdmckkt51dOK5LPMiInUaVdJX2g=) 2: 74543474865311EFAD6A3A72C4F9AE02.roa (hash: tSsmwrABsD5su5pyP7TCNOYO6hRvgrJ+hDiXInlwpOE=) 3: 204B342ECEF111ED9D71580AC4F9AE02.roa (hash: V/douCj4U7M/9Bt5a7qzsCzrgcxHQH1b+ixRaTUpN4M=) 4: 1F8EE77ECEF111ED9D71580AC4F9AE02.roa (hash: elY+yIl1H3F26OUjA40A23dujn0CummnltINa5yusRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:10:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1656 (0x678) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEF04, serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38 Validity Not Before: Apr 24 22:10:05 2025 GMT Not After : May 1 22:10:05 2025 GMT Subject: CN=680ab6bd-af56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7a:49:99:3a:c0:4b:18:5e:22:96:91:f1:92: 66:7f:b5:81:cd:a5:16:d1:59:43:31:1b:c7:9e:66: ee:04:6d:f6:46:56:15:89:51:a9:ac:9e:3c:83:53: 4c:35:db:55:83:b3:84:23:21:a8:81:e5:48:ff:f0: 11:4a:c1:f5:6b:fb:78:77:d9:81:1c:4e:a5:c0:88: db:c3:4e:49:97:63:9c:42:ac:07:93:dd:7b:cc:d8: bc:0c:18:96:e8:f7:cd:61:47:84:d1:1e:19:bd:a9: 51:88:06:1d:e2:cd:f9:27:a8:84:83:f6:59:8c:3b: 88:2f:7d:a1:32:9c:16:d6:3f:f7:6f:1d:f7:ef:a4: c4:0c:be:2a:7a:97:12:41:26:10:71:b6:d4:58:9c: 92:53:db:e0:28:71:ff:6c:98:47:81:0f:53:c3:42: 92:60:96:04:7f:f6:69:62:e7:72:6a:1b:f8:b6:f3: 50:6e:bf:10:cf:dc:21:f5:74:04:e4:7e:c8:5c:97: b8:94:22:81:42:60:72:68:20:45:93:8d:34:c6:77: d4:cd:74:c5:d2:6b:f5:0a:d0:0c:b8:9e:7a:42:04: 53:06:c6:f4:fb:59:43:4e:b7:1b:2c:3b:91:bc:d5: dd:d3:86:59:12:21:10:46:1b:92:18:4a:b9:f2:2b: 9c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9B:22:E1:A7:84:23:18:CA:9E:CD:47:99:77:79:92:01:C5:0C:DC X509v3 Authority Key Identifier: keyid:31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:67:1a:c1:a9:c6:77:d8:9d:91:1d:87:14:e6:77:0c:39:56: c3:52:f2:9e:0d:d7:38:16:b7:be:14:f1:4d:0a:4d:7d:1d:f8: f1:fc:59:85:55:ea:54:33:bc:c9:9e:43:06:61:5e:64:98:f4: 65:ef:ec:3a:fe:13:ad:2a:c9:cd:b5:26:b9:65:38:48:e9:6a: 7e:fa:4a:44:7a:d4:7b:9e:a0:ca:7a:10:06:bd:37:72:92:80: b1:d9:92:9c:e0:9b:9f:0d:2f:90:e4:52:82:c7:ec:af:6c:61: 62:c6:f1:c8:27:bf:aa:be:dc:5f:0c:89:f1:82:e9:77:59:51: 08:cd:14:94:10:e0:89:f5:a7:e5:94:1d:47:38:1d:b7:36:26: 5c:c8:30:40:58:0d:bb:0b:0d:9a:d5:78:bd:1d:2d:71:7f:d8: b0:3f:3f:89:e3:45:68:e7:55:ac:b5:c0:a4:03:83:70:5a:04: 6c:83:75:ca:ee:11:49:d7:a4:8a:d2:4f:3a:be:9d:89:90:23: e0:91:17:2c:68:56:56:50:82:72:9f:90:a0:04:b8:53:2b:d4: 4c:9d:71:5a:36:6d:16:fb:50:e2:59:bc:4e:f2:c9:4e:87:e6: be:7d:23:34:44:28:1c:00:85:0a:4f:73:ea:d8:8f:13:10:98: 9d:e2:d6:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVGMDQxMTAvBgNVBAUTKDMxMTZFMDc1ODQwNTZDMTZGNTY4RjBFQzYwOThFN0RD NEY1MDRBMzgwHhcNMjUwNDI0MjIxMDA1WhcNMjUwNTAxMjIxMDA1WjAYMRYwFAYD VQQDEw02ODBhYjZiZC1hZjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnnpJmTrASxheIpaR8ZJmf7WBzaUW0VlDMRvHnmbuBG32RlYViVGprJ48g1NM NdtVg7OEIyGogeVI//ARSsH1a/t4d9mBHE6lwIjbw05Jl2OcQqwHk917zNi8DBiW 6PfNYUeE0R4ZvalRiAYd4s35J6iEg/ZZjDuIL32hMpwW1j/3bx3376TEDL4qepcS QSYQcbbUWJySU9vgKHH/bJhHgQ9Tw0KSYJYEf/ZpYudyahv4tvNQbr8Qz9wh9XQE 5H7IXJe4lCKBQmByaCBFk400xnfUzXTF0mv1CtAMuJ56QgRTBsb0+1lDTrcbLDuR vNXd04ZZEiEQRhuSGEq58iuc4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKbIuGn hCMYyp7NR5l3eZIBxQzcMB8GA1UdIwQYMBaAFDEW4HWEBWwW9Wjw7GCY59xPUEo4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUYwNC85OTFFQjc1QTdB QjAxMUVCQTAyN0JCN0ZDNEY5QUUwMi9NUmJnZFlRRmJCYjFhUERzWUpqbjNFOVFT amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SYmdkWVFGYkJiMWFQRHNZSmpuM0U5UVNqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUYwNC85OTFFQjc1QTdBQjAxMUVCQTAyN0JCN0ZDNEY5QUUwMi9NUmJnZFlRRmJC YjFhUERzWUpqbjNFOVFTamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdZxrBqcZ32J2RHYcU5ncMOVbDUvKeDdc4Fre+FPFNCk19Hfjx/FmF VepUM7zJnkMGYV5kmPRl7+w6/hOtKsnNtSa5ZThI6Wp++kpEetR7nqDKehAGvTdy koCx2ZKc4JufDS+Q5FKCx+yvbGFixvHIJ7+qvtxfDInxgul3WVEIzRSUEOCJ9afl lB1HOB23NiZcyDBAWA27Cw2a1Xi9HS1xf9iwPz+J40Vo51WstcCkA4NwWgRsg3XK 7hFJ16SK0k86vp2JkCPgkRcsaFZWUIJyn5CgBLhTK9RMnXFaNm0W+1DiWbxO8slO h+a+fSM0RCgcAIUKT3Pq2I8TEJid4tah -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:52 2025 by rpki-client