$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft File: u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft (raw, json) Hash identifier: CISGnrEcCK98rukDQ7KJByEYBEpQOWH8iFETHGhyJLQ= Subject key identifier: DC:04:DC:0C:7D:FB:FC:82:B1:C6:65:D0:29:86:8A:8F:B6:42:70:47 Authority key identifier: BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24 Certificate issuer: /CN=A91EDB37/serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924 Certificate serial: 0687 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft Manifest number: 067B Signing time: Thu 24 Apr 2025 22:08:59 +0000 Manifest this update: Thu 24 Apr 2025 22:08:58 +0000 Manifest next update: Thu 01 May 2025 22:08:58 +0000 Files and hashes: 1: u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl (hash: Uui+yrx2wBy+mqJH41RskJkog2/AZcqPPbCN0Dekq30=) 2: DE7B831C37DA11EDBEF9D050C4F9AE02.roa (hash: +kKylmkca6+FAx4sOYGqHKzwXEhQ+5JcXHkL0UhejKI=) 3: E959541EB28511ED8893C51CC4F9AE02.roa (hash: UcfQbjt5pGDSOZCx5IzeUlVnX3YAZQw3ib/ytvODV4c=) 4: DDC1A87037DA11EDBEF9D050C4F9AE02.roa (hash: JPtWkJd9tKQ9YS8DsRPubKSCxL1JQ7cieCqKgCXkh+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1671 (0x687) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDB37, serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924 Validity Not Before: Apr 24 22:08:58 2025 GMT Not After : May 1 22:08:58 2025 GMT Subject: CN=680ab67b-73e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:55:17:d2:93:03:00:c0:f3:26:4d:6a:9e:e0: 5e:73:4e:79:80:6b:a4:0b:a8:4f:f5:11:c3:6f:0a: 63:90:94:65:59:af:29:c1:3c:3c:b0:e4:59:0d:ee: 4f:8f:5c:8a:d4:a6:4c:a5:c3:d1:db:5d:cd:44:d3: 76:74:fd:a9:39:47:57:bf:f7:45:16:12:87:34:ab: 00:4a:7e:04:19:b4:13:75:15:97:33:d9:c2:fe:d1: 0c:24:5b:e8:7f:d0:15:f1:12:1e:38:50:ff:bf:13: fc:0c:e8:69:e7:b8:53:6a:e0:32:36:6a:4c:9e:cb: cd:23:f0:d6:8a:61:d1:5a:6d:32:9a:7c:a0:61:14: 0a:ec:b5:5a:5b:7d:9d:1e:2b:57:f9:50:ff:b1:ec: 9f:4f:ae:95:7a:4e:bc:b4:93:e8:f7:7b:1d:64:00: 13:17:a2:4c:48:7c:de:e9:67:e4:98:90:b3:a6:60: 8e:9d:c8:46:48:07:2d:13:20:21:e4:25:f2:9b:5e: b5:3b:e3:0f:74:9f:0c:71:b6:69:5f:e1:a1:bf:17: 67:44:35:9e:e4:61:07:6b:13:e6:d4:a1:5d:07:5d: d5:5c:43:e4:f7:18:aa:93:3e:07:ba:ed:bd:07:7e: 8d:b0:f2:7c:8d:71:43:b9:f6:12:82:fc:06:f2:a0: 79:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:04:DC:0C:7D:FB:FC:82:B1:C6:65:D0:29:86:8A:8F:B6:42:70:47 X509v3 Authority Key Identifier: keyid:BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:50:a9:39:25:0b:ed:c9:02:f6:c6:fb:30:91:fe:49:c8:16: 48:9c:4e:a7:21:79:f3:7b:7d:9a:84:c1:3f:32:f1:e2:31:ad: 84:83:9e:fc:a2:76:72:39:33:72:23:84:55:88:3c:aa:f6:df: 41:10:fd:b9:bd:be:49:8a:b0:ad:5c:43:a8:6d:56:2d:d6:cf: e6:c6:89:dc:d5:2a:9b:7d:02:db:df:5b:31:1a:4d:b9:1b:03: 63:75:3c:98:60:b9:a4:79:09:7c:34:2d:42:ec:fa:77:dc:35: 66:38:1f:bd:9e:8c:45:68:5f:a9:51:16:87:ef:40:f3:7b:77: 64:24:1e:2c:35:90:e6:bd:10:d2:f3:4d:58:fa:5a:ea:e3:bf: 8c:0b:40:a8:54:c7:2d:22:74:a1:6e:60:67:3d:f0:d1:1f:9e: 23:91:ae:cb:b3:51:90:10:6b:c3:32:84:88:f3:a5:15:33:7e: 55:f1:bf:fe:50:6e:bf:64:3b:ae:bc:27:1b:c6:33:86:0d:b4: d4:67:d1:fc:92:94:72:d1:bd:a8:06:3a:c6:65:64:b2:f0:53: f0:88:f7:6a:c0:ca:1d:a3:62:33:3a:49:14:6a:3c:bb:d4:e5: fc:e4:e2:78:2c:3b:d6:c3:19:03:08:cf:7a:8b:e1:a2:2d:a8: 4d:33:d6:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURCMzcxMTAvBgNVBAUTKEJCNTQ0MTc2RERFNjhFMzU4MUM1QzQzRjRGQzdDQzJD RjY4RDY5MjQwHhcNMjUwNDI0MjIwODU4WhcNMjUwNTAxMjIwODU4WjAYMRYwFAYD VQQDEw02ODBhYjY3Yi03M2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVUX0pMDAMDzJk1qnuBec055gGukC6hP9RHDbwpjkJRlWa8pwTw8sORZDe5P j1yK1KZMpcPR213NRNN2dP2pOUdXv/dFFhKHNKsASn4EGbQTdRWXM9nC/tEMJFvo f9AV8RIeOFD/vxP8DOhp57hTauAyNmpMnsvNI/DWimHRWm0ymnygYRQK7LVaW32d HitX+VD/seyfT66Vek68tJPo93sdZAATF6JMSHze6WfkmJCzpmCOnchGSActEyAh 5CXym161O+MPdJ8McbZpX+GhvxdnRDWe5GEHaxPm1KFdB13VXEPk9xiqkz4Huu29 B36NsPJ8jXFDufYSgvwG8qB5owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwE3Ax9 +/yCscZl0CmGio+2QnBHMB8GA1UdIwQYMBaAFLtUQXbd5o41gcXEP0/HzCz2jWkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy81NzY0NzM3QTc4 QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi91MVJCZHQzbWpqV0J4Y1FfVDhmTUxQYU5h U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxUkJkdDNtampXQnhjUV9UOGZNTFBhTmFTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REIzNy81NzY0NzM3QTc4QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi91MVJCZHQzbWpq V0J4Y1FfVDhmTUxQYU5hU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmUKk5JQvtyQL2xvswkf5JyBZInE6nIXnze32ahME/MvHiMa2Eg578 onZyOTNyI4RViDyq9t9BEP25vb5JirCtXEOobVYt1s/mxonc1SqbfQLb31sxGk25 GwNjdTyYYLmkeQl8NC1C7Pp33DVmOB+9noxFaF+pURaH70Dze3dkJB4sNZDmvRDS 801Y+lrq47+MC0CoVMctInShbmBnPfDRH54jka7Ls1GQEGvDMoSI86UVM35V8b/+ UG6/ZDuuvCcbxjOGDbTUZ9H8kpRy0b2oBjrGZWSy8FPwiPdqwModo2IzOkkUajy7 1OX85OJ4LDvWwxkDCM96i+GiLahNM9Y+ -----END CERTIFICATE-----Generated at Sat Apr 26 17:15:26 2025 by rpki-client