$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft File: mnPxqRn79GyHLjiAWxZQtfiCdtM.mft (raw, json) Hash identifier: UbUUpLvAd56WkNQrKLOAldq/OjMMvXT5KQ0vnFFBXdg= Subject key identifier: 09:B3:68:0E:25:A7:EF:4B:4A:00:A1:CE:88:AD:42:6C:BB:BF:F7:25 Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Certificate serial: 103F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft Manifest number: 0C59 Signing time: Fri 25 Apr 2025 10:49:57 +0000 Manifest this update: Fri 25 Apr 2025 10:49:56 +0000 Manifest next update: Fri 02 May 2025 10:49:56 +0000 Files and hashes: 1: mnPxqRn79GyHLjiAWxZQtfiCdtM.crl (hash: ueTeBG30bHoXPbCYWYA2p/GaV+6skTcepMmVs30in3g=) 2: A173B894112711F0845DF16FC4F9AE02.roa (hash: 1FUidFpQdgyVeVd6dq7ydz7SnAOpAHmcB7Z6XzdkCnA=) 3: 5E33E734160411F0B1C61658C4F9AE02.roa (hash: 0ZILpjfOmEfimXouRxfrnSfFxh02X1W7uYp1g4rvnjk=) 4: 24B754BA9B7911EFBA9A2A42C4F9AE02.roa (hash: y4GAkxc1wnMMcIWRORtwNgAVULVWlMkQgSrzLVx7bAs=) 5: 285D206C19F111F08D2D3E50C4F9AE02.roa (hash: hW/uNyqgLNWVa0LzcNzD6kSsI6OpIvslQ6OH2VbCEgQ=) 6: EE9ACA30FE4011EFB3C87416C4F9AE02.roa (hash: kByynmdC17TVU0YIFjiBOfnmZC+piAX0qD9IVzYo/Is=) 7: BE7E4E9891F911EF86353E28C4F9AE02.roa (hash: cdF0IEAin6BEbgZDiectcRjj/Qj2LqehP647MMLBn4Y=) 8: 40F0E4DC75AB11EFB897AF69C4F9AE02.roa (hash: 66mcnb1x9N203HeKzYtZYqy46nvM7OGyg282gr346uI=) 9: 2F8ECC8C19EC11F0AD003527C4F9AE02.roa (hash: 6cH56hTLA7dRVXPmioJlFabzTom8uaHSuBnjlJSZDw8=) 10: 27888CE6FB6D11EF8B0AC378C4F9AE02.roa (hash: SwoWdydjTyjB87GcmJesuDZnK7lMqvQOllCR5999h28=) 11: EE9F1FB41AAA11F099EC1E37C4F9AE02.roa (hash: hGo7k+Phtc9cVtpZA39rUYN5eI9x8m7ZK0WTy1C1Fz8=) 12: FA9BC95A548711EF89E24A18C4F9AE02.roa (hash: TzqKssNJoGfL9wI2PFMHpXN5yW7cil9sz1WNr4GCrKI=) 13: B0C6D7AC21BE11F09CFB8129C4F9AE02.roa (hash: cGottOkVLxnL8Gv6x28aqRqpEQNo1OzHLYdEVTIG+GE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 10:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4159 (0x103f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Validity Not Before: Apr 25 10:49:56 2025 GMT Not After : May 2 10:49:56 2025 GMT Subject: CN=680b68d4-dc5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ea:cd:2d:2c:ee:21:33:06:30:38:4f:47:f5: 2f:c7:48:2f:95:64:45:da:27:ee:4e:34:ef:71:f5: a2:f8:62:38:e7:59:24:d6:9f:eb:16:56:3e:96:1d: f1:d5:76:15:79:32:97:fe:50:81:30:0f:ec:54:7d: e6:f5:0a:13:9d:fa:2a:f9:24:be:af:ab:e0:80:af: 93:eb:ff:91:d1:31:ca:ae:1e:7a:fe:1c:bb:53:16: ed:49:4d:14:22:a8:66:22:b7:e6:be:1f:ac:79:0b: 19:63:06:6e:60:72:ee:44:bb:b8:6d:e5:b7:8f:47: fb:84:00:48:ce:f6:61:60:9b:ad:04:ad:06:e3:98: 1f:6d:07:ee:9c:1a:5c:fe:db:30:3c:5f:5f:14:d0: 70:65:15:c1:fe:b0:f3:5b:69:17:69:71:4b:20:07: ec:af:4d:23:16:4c:24:d4:ab:6b:9b:38:e6:54:72: fb:0b:a5:9c:0f:fd:de:c4:b1:f8:23:af:37:3d:e7: 90:3d:ea:4f:a9:18:de:a9:2a:bc:00:03:bb:06:eb: 65:eb:06:e0:5a:38:9f:47:57:8f:11:81:1d:98:51: 24:80:4b:7c:e5:a8:6c:51:73:d5:6b:08:31:fa:ec: 2b:32:68:f7:eb:af:bd:37:91:6f:93:3d:57:bd:95: 59:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B3:68:0E:25:A7:EF:4B:4A:00:A1:CE:88:AD:42:6C:BB:BF:F7:25 X509v3 Authority Key Identifier: keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:ac:f5:1a:78:5d:20:2a:f5:d3:63:07:40:4c:03:23:a8:b8: 42:62:36:05:34:f6:7b:da:80:38:4b:d0:0f:dc:b0:2f:d5:ed: 60:2b:74:cc:c7:cd:37:d6:c5:d6:62:22:f5:f5:82:eb:f6:29: d3:cd:61:cb:20:1e:e2:1b:c6:38:b6:49:84:4c:2f:3f:a9:85: ad:45:cd:ba:97:25:1c:b9:28:9b:64:aa:a8:53:7b:e9:80:c1: 17:88:5c:f9:6e:95:72:12:10:78:4d:34:7c:76:da:89:1b:b9: 5f:05:19:31:b4:a1:15:7c:0e:3b:b0:3c:76:80:ec:f9:34:bb: ec:f6:83:88:f7:a3:8c:fe:75:18:d7:dc:3b:9f:81:a4:bc:da: 0d:75:d3:b7:ca:a6:52:29:f4:65:8b:b7:07:5f:8c:69:61:5d: e4:f2:a2:7a:20:06:72:b2:ed:3e:cb:3b:81:23:15:8d:ff:3f: f2:ba:4a:15:b1:f9:6f:09:e4:35:8b:bf:c3:eb:a5:25:aa:3f: 58:d7:41:e5:af:a1:ad:91:63:e2:79:7f:17:a7:42:e5:59:60: c4:59:a1:e1:ea:2b:be:ab:64:66:84:09:85:21:81:4b:8f:d8: b1:26:eb:02:00:8a:9a:90:dc:60:d9:6c:61:81:f6:a8:d2:78: 25:d9:df:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICED8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1 Rjg4Mjc2RDMwHhcNMjUwNDI1MTA0OTU2WhcNMjUwNTAyMTA0OTU2WjAYMRYwFAYD VQQDEw02ODBiNjhkNC1kYzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzerNLSzuITMGMDhPR/Uvx0gvlWRF2ifuTjTvcfWi+GI451kk1p/rFlY+lh3x 1XYVeTKX/lCBMA/sVH3m9QoTnfoq+SS+r6vggK+T6/+R0THKrh56/hy7UxbtSU0U IqhmIrfmvh+seQsZYwZuYHLuRLu4beW3j0f7hABIzvZhYJutBK0G45gfbQfunBpc /tswPF9fFNBwZRXB/rDzW2kXaXFLIAfsr00jFkwk1KtrmzjmVHL7C6WcD/3exLH4 I683PeeQPepPqRjeqSq8AAO7Butl6wbgWjifR1ePEYEdmFEkgEt85ahsUXPVawgx +uwrMmj366+9N5Fvkz1XvZVZBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmzaA4l p+9LSgChzoitQmy7v/clMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjEzNC81N0IzRTBCQ0MyQTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlH eUhMamlBV3haUXRmaUNkdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4rPUaeF0gKvXTYwdATAMjqLhCYjYFNPZ72oA4S9AP3LAv1e1gK3TM x8031sXWYiL19YLr9inTzWHLIB7iG8Y4tkmETC8/qYWtRc26lyUcuSibZKqoU3vp gMEXiFz5bpVyEhB4TTR8dtqJG7lfBRkxtKEVfA47sDx2gOz5NLvs9oOI96OM/nUY 19w7n4GkvNoNddO3yqZSKfRli7cHX4xpYV3k8qJ6IAZysu0+yzuBIxWN/z/yukoV sflvCeQ1i7/D66Ulqj9Y10Hlr6GtkWPieX8Xp0LlWWDEWaHh6iu+q2RmhAmFIYFL j9ixJusCAIqakNxg2Wxhgfao0ngl2d/i -----END CERTIFICATE-----Generated at Sat Apr 26 16:46:17 2025 by rpki-client