$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft File: K1F8a3njzrA4nUGrxeziEH_sU_s.mft (raw, json) Hash identifier: 1lAkm1H+eEkpT17CS+bXDXjAIP+aqBpmXS3aoqcSP3Q= Subject key identifier: 3C:84:13:D9:49:33:2C:29:A3:5C:F3:DE:F2:54:7C:C8:85:85:80:A1 Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB Certificate issuer: /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Certificate serial: 03A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft Manifest number: 0399 Signing time: Fri 25 Apr 2025 00:32:55 +0000 Manifest this update: Fri 25 Apr 2025 00:32:55 +0000 Manifest next update: Fri 02 May 2025 00:32:54 +0000 Files and hashes: 1: K1F8a3njzrA4nUGrxeziEH_sU_s.crl (hash: saJLg1Np891QB0tcOxMW0GV/lU8H87zOMNR8wQdKOKU=) 2: B0F9178297B811ECA8AA4230C4F9AE02.roa (hash: 7UvGO2r60JLS/okHiWx8rHAHMyUcsuX/jNwXXCmMBho=) 3: 0E1EAB66961011ECA540626AC4F9AE02.roa (hash: TzVnkqN0tq39UUa2lfdZqlKLVdLg+S4NlfoqQ2G24uU=) 4: 457D2B5A28DC11ED839D6243C4F9AE02.roa (hash: 4G2u0IIjNz0CyenUMTN7OBV5SwfSrRJSXkJu6HMP/+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 934 (0x3a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2A61, serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Validity Not Before: Apr 25 00:32:55 2025 GMT Not After : May 2 00:32:54 2025 GMT Subject: CN=680ad837-4d59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c3:3b:70:85:14:88:47:df:ab:39:89:f0:14: ec:29:3f:1b:f8:4a:6c:75:cb:ff:56:82:72:60:4b: f1:31:e0:38:77:a4:a6:93:30:3e:69:3e:61:81:d3: f8:75:30:d6:12:c1:3e:5f:84:b5:6c:57:18:85:99: 26:6d:99:49:8b:52:6d:0f:b8:2e:36:10:42:4e:04: 35:90:70:2d:c3:2b:66:53:74:b0:52:0c:79:0b:e1: e3:94:d5:ac:87:fe:dd:d4:82:e7:6d:09:83:a4:1a: da:6d:f7:01:4b:68:a7:31:fd:a5:4e:36:34:f6:ea: ec:de:aa:f4:4c:12:72:3d:c5:0c:f7:84:1d:5a:02: d2:bd:d8:a7:6a:84:97:b0:87:17:c2:b3:53:12:c9: 9a:97:37:0e:7e:60:be:4f:e0:60:45:5f:fa:5a:a1: 1b:2a:d3:0e:ad:07:da:45:b6:95:40:1d:95:d0:d4: 2e:19:8b:d7:e6:61:07:09:86:e7:05:e1:09:c1:60: d4:9d:ba:ed:38:de:ba:0b:87:fc:c7:e3:99:2e:29: 51:8b:37:7e:1c:a1:f4:12:d3:8e:41:21:9a:7e:d5: cd:d0:db:e9:a7:d6:08:9a:51:62:99:ef:48:36:ff: 08:f7:d6:21:5b:3f:d3:aa:90:b1:30:18:57:4e:d8: c5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:84:13:D9:49:33:2C:29:A3:5C:F3:DE:F2:54:7C:C8:85:85:80:A1 X509v3 Authority Key Identifier: keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:cf:33:7d:20:08:17:ba:ef:b0:6a:d4:a0:27:da:1f:1c:b5: 3b:eb:94:b0:28:8d:33:cc:c1:5a:c0:5e:77:fd:c3:d1:c4:ea: be:23:e3:67:30:25:f9:2b:d9:8e:16:8f:8a:f6:ad:5b:e2:7d: aa:ad:47:96:a6:1a:d5:97:fc:35:77:ac:d5:17:82:8e:9c:0f: c6:ec:38:e7:5f:9a:1f:c5:64:0b:87:a7:22:6a:93:6f:da:7d: cf:de:55:0d:27:c2:78:f0:03:e1:84:17:73:a9:cc:ce:bb:77: 70:57:b3:b2:b0:71:78:96:eb:50:0b:a8:9a:bf:9b:02:df:3d: 46:35:50:50:f6:26:cf:49:a8:e0:2b:f2:66:fd:00:6a:b6:d5: 50:e8:a8:da:6a:9b:43:0b:23:8c:7b:13:c3:e5:cd:55:59:06: ca:98:48:74:ac:d0:c1:9e:5b:04:f0:55:f2:29:44:44:f6:d7: 80:0d:21:c6:d1:cd:4e:5f:00:84:a9:b3:81:f4:eb:4c:5a:5b: 3b:16:b1:e5:b5:bc:43:14:20:16:43:c8:73:4b:4a:1b:e4:b2: ef:0a:98:6a:77:5f:43:87:66:9f:f6:fd:d3:8c:d0:00:b5:65: 8a:11:08:6e:56:07:06:dd:5f:5e:e4:d9:6f:38:d2:f7:da:58: b0:45:3b:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBNjExMTAvBgNVBAUTKDJCNTE3QzZCNzlFM0NFQjAzODlENDFBQkM1RUNFMjEw N0ZFQzUzRkIwHhcNMjUwNDI1MDAzMjU1WhcNMjUwNTAyMDAzMjU0WjAYMRYwFAYD VQQDEw02ODBhZDgzNy00ZDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMM7cIUUiEffqzmJ8BTsKT8b+Epsdcv/VoJyYEvxMeA4d6SmkzA+aT5hgdP4 dTDWEsE+X4S1bFcYhZkmbZlJi1JtD7guNhBCTgQ1kHAtwytmU3SwUgx5C+HjlNWs h/7d1ILnbQmDpBrabfcBS2inMf2lTjY09urs3qr0TBJyPcUM94QdWgLSvdinaoSX sIcXwrNTEsmalzcOfmC+T+BgRV/6WqEbKtMOrQfaRbaVQB2V0NQuGYvX5mEHCYbn BeEJwWDUnbrtON66C4f8x+OZLilRizd+HKH0EtOOQSGaftXN0Nvpp9YImlFime9I Nv8I99YhWz/TqpCxMBhXTtjFAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDyEE9lJ Mywpo1zz3vJUfMiFhYChMB8GA1UdIwQYMBaAFCtRfGt5486wOJ1Bq8Xs4hB/7FP7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkE2MS9FREMwOEZFNjk2 MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpyQTRuVUdyeGV6aUVIX3NV X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxRjhhM25qenJBNG5VR3J4ZXppRUhfc1Vfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkE2MS9FREMwOEZFNjk2MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpy QTRuVUdyeGV6aUVIX3NVX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3zzN9IAgXuu+watSgJ9ofHLU765SwKI0zzMFawF53/cPRxOq+I+Nn MCX5K9mOFo+K9q1b4n2qrUeWphrVl/w1d6zVF4KOnA/G7DjnX5ofxWQLh6ciapNv 2n3P3lUNJ8J48APhhBdzqczOu3dwV7OysHF4lutQC6iav5sC3z1GNVBQ9ibPSajg K/Jm/QBqttVQ6KjaaptDCyOMexPD5c1VWQbKmEh0rNDBnlsE8FXyKURE9teADSHG 0c1OXwCEqbOB9OtMWls7FrHltbxDFCAWQ8hzS0ob5LLvCphqd19Dh2af9v3TjNAA tWWKEQhuVgcG3V9e5NlvONL32liwRTvm -----END CERTIFICATE-----Generated at Sat Apr 26 14:13:04 2025 by rpki-client