$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft File: CyVhxLV9qB1w85cksN4scQF0n10.mft (raw, json) Hash identifier: wQ/FxazSyNKbnvcmf7/BfiCeG2b+d3SYR/CAJiSpNw0= Subject key identifier: 2A:D6:8E:C8:C1:4D:3A:B7:28:BA:81:7C:80:AB:48:B6:AC:D0:23:E6 Authority key identifier: 0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D Certificate issuer: /CN=A91E1155/serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D Certificate serial: 0EF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft Manifest number: 0EE4 Signing time: Thu 24 Apr 2025 17:38:56 +0000 Manifest this update: Thu 24 Apr 2025 17:38:55 +0000 Manifest next update: Thu 01 May 2025 17:38:55 +0000 Files and hashes: 1: CyVhxLV9qB1w85cksN4scQF0n10.crl (hash: BfZL624g2MO/UoW8Kav0ZJ2aoUVC+N1T980gOgKNTKc=) 2: 4B1E3E947EB411E994ED5B25C4F9AE02.roa (hash: v5g7cjNReibtump5AZbTVG2Okqg2HIeG+osQENS8uAY=) 3: AC8695B8A60611EE8FEB2160C4F9AE02.roa (hash: e0d6vw79IEqP0AdvR6b4v7RskAnTjUKydxlFYiex0pY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3825 (0xef1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1155, serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D Validity Not Before: Apr 24 17:38:55 2025 GMT Not After : May 1 17:38:55 2025 GMT Subject: CN=680a7730-950e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:49:5d:96:e8:dd:2d:d2:1b:bb:a2:c1:89:56: f2:3a:56:9b:dd:8c:54:c1:ed:10:74:e0:6f:5a:57: e1:56:6e:8b:8a:ef:8b:ee:02:c0:db:02:6a:b2:f6: bf:67:33:ad:f0:12:e9:67:f1:9e:70:fb:1e:1f:85: 6f:02:60:72:ee:cf:07:f7:fa:a6:b3:c1:3d:31:e8: df:ed:fa:22:5d:5a:16:85:79:f6:aa:9e:25:ee:21: 2a:31:02:dd:d5:f1:49:c1:d4:cd:ef:a3:68:18:a5: 27:1e:00:37:68:73:6c:8d:fa:04:42:91:ae:3a:82: 7a:49:1b:7c:41:5b:1c:9a:53:44:8b:8d:49:86:d6: 8a:ab:f0:9f:29:d1:a5:15:a4:28:99:65:90:e0:3b: 97:31:32:bd:31:fe:c6:e0:44:e8:8c:2a:57:97:aa: 3a:47:8b:e2:0e:f7:ae:e0:34:8e:2f:d7:3a:be:ea: d9:71:32:00:6b:6d:a2:16:bf:51:03:fe:b3:1d:40: 60:5f:1e:9d:a1:d4:f8:03:f7:e4:f0:dd:ca:e5:7d: 72:62:81:39:70:95:69:ae:13:0f:ec:3e:36:87:4a: 3e:d0:fa:95:56:3e:42:1c:19:e9:c4:1a:30:e7:a0: dd:6d:ea:34:9c:52:17:2a:e9:dc:eb:cf:08:ff:7b: 8f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D6:8E:C8:C1:4D:3A:B7:28:BA:81:7C:80:AB:48:B6:AC:D0:23:E6 X509v3 Authority Key Identifier: keyid:0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:f1:9d:d4:80:33:06:d0:97:00:89:26:38:f3:87:09:52:77: 14:b1:aa:85:d4:f4:dd:35:fc:76:b4:0c:1e:bc:1b:04:a4:35: 62:0b:9d:4d:df:7e:30:78:c7:6d:d1:2c:09:ce:50:c0:67:2e: aa:b6:29:ea:21:bf:68:29:6b:1e:4b:c3:af:ab:93:6e:d9:d7: d5:5e:97:b2:f7:ea:49:d5:2d:45:bb:5d:1f:72:56:d2:5e:b1: 1a:52:00:2b:5d:25:fb:38:0c:30:ff:d2:e5:b8:65:38:81:33: ec:e8:8f:97:72:65:05:61:82:dd:c5:e7:0f:63:a2:98:b5:e9: ba:c0:79:2c:d3:cd:15:cc:5e:4f:84:f2:f5:6a:36:71:48:1f: 92:43:2d:97:77:24:fa:8d:18:10:3d:ae:86:f5:c1:48:a5:9d: 4c:cd:d3:d9:4f:f5:5c:7e:80:66:5c:b2:53:08:67:cb:ef:ee: 34:8e:dd:37:9b:24:b5:9c:07:87:45:46:03:2d:00:e5:cd:bf: 8b:cf:13:13:ad:c3:77:6a:ca:35:46:ba:04:60:96:19:71:6c: da:97:04:29:0e:64:d4:9b:15:88:d6:02:89:7b:be:ed:17:81: 6b:f4:87:65:19:4b:07:e5:7f:23:b4:a7:6e:a1:eb:3c:cb:84: 42:70:22:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTExNTUxMTAvBgNVBAUTKDBCMjU2MUM0QjU3REE4MUQ3MEYzOTcyNEIwREUyQzcx MDE3NDlGNUQwHhcNMjUwNDI0MTczODU1WhcNMjUwNTAxMTczODU1WjAYMRYwFAYD VQQDEw02ODBhNzczMC05NTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kldlujdLdIbu6LBiVbyOlab3YxUwe0QdOBvWlfhVm6Liu+L7gLA2wJqsva/ ZzOt8BLpZ/GecPseH4VvAmBy7s8H9/qms8E9Mejf7foiXVoWhXn2qp4l7iEqMQLd 1fFJwdTN76NoGKUnHgA3aHNsjfoEQpGuOoJ6SRt8QVscmlNEi41JhtaKq/CfKdGl FaQomWWQ4DuXMTK9Mf7G4ETojCpXl6o6R4viDveu4DSOL9c6vurZcTIAa22iFr9R A/6zHUBgXx6dodT4A/fk8N3K5X1yYoE5cJVprhMP7D42h0o+0PqVVj5CHBnpxBow 56Ddbeo0nFIXKunc688I/3uPxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrWjsjB TTq3KLqBfICrSLas0CPmMB8GA1UdIwQYMBaAFAslYcS1fagdcPOXJLDeLHEBdJ9d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTE1NS81Mzk5OEEzNDdF QjMxMUU5QUI5QzdCMjRDNEY5QUUwMi9DeVZoeExWOXFCMXc4NWNrc040c2NRRjBu MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N5Vmh4TFY5cUIxdzg1Y2tzTjRzY1FGMG4xMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTE1NS81Mzk5OEEzNDdFQjMxMUU5QUI5QzdCMjRDNEY5QUUwMi9DeVZoeExWOXFC MXc4NWNrc040c2NRRjBuMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ8Z3UgDMG0JcAiSY484cJUncUsaqF1PTdNfx2tAwevBsEpDViC51N 334weMdt0SwJzlDAZy6qtinqIb9oKWseS8Ovq5Nu2dfVXpey9+pJ1S1Fu10fclbS XrEaUgArXSX7OAww/9LluGU4gTPs6I+XcmUFYYLdxecPY6KYtem6wHks080VzF5P hPL1ajZxSB+SQy2XdyT6jRgQPa6G9cFIpZ1MzdPZT/VcfoBmXLJTCGfL7+40jt03 myS1nAeHRUYDLQDlzb+LzxMTrcN3aso1RroEYJYZcWzalwQpDmTUmxWI1gKJe77t F4Fr9IdlGUsH5X8jtKduoes8y4RCcCKm -----END CERTIFICATE-----Generated at Sat Apr 26 15:05:37 2025 by rpki-client