$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft File: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft (raw, json) Hash identifier: ev5+sCnpDB37onqzJy2yzaBZOEXXDC/sjza/hd4RG5M= Subject key identifier: 9E:C0:15:4E:71:35:C7:CF:4C:87:78:0F:B3:49:9D:4A:74:08:35:99 Authority key identifier: 0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40 Certificate issuer: /CN=A91EDFAF/serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft Manifest number: 67 Signing time: Fri 25 Apr 2025 06:01:26 +0000 Manifest this update: Fri 25 Apr 2025 06:01:26 +0000 Manifest next update: Fri 02 May 2025 06:01:26 +0000 Files and hashes: 1: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl (hash: SbTraTkKmZ5laRC7WR2YyL39WY2hUTH553XJHdyrqQg=) 2: 5E89A9888CBD11EFBA479615C4F9AE02.roa (hash: YUDcoFmZ6Z8eSf+ykpnCcDAS77nR9kd6RW9K0Z7WPIA=) 3: 5D58A6368CBD11EFBA479615C4F9AE02.roa (hash: fQEPggKeUXGb8ZTYlH41koJENtuHoAxNSC/aql+imTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDFAF, serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40 Validity Not Before: Apr 25 06:01:26 2025 GMT Not After : May 2 06:01:26 2025 GMT Subject: CN=680b2536-820f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d1:8c:fe:3f:19:0b:bb:31:2f:ff:ea:47:7c: 91:6c:03:66:4e:47:e6:af:1a:ed:f0:1f:a6:76:ec: 40:3f:24:3d:03:e7:26:97:51:04:93:f4:11:e5:4f: ce:f6:03:26:67:60:a0:bd:2e:89:68:89:17:d7:c3: cf:6c:26:93:e0:b1:46:99:e7:49:c7:38:e6:b2:0c: 63:1d:9c:62:16:a1:31:98:8e:e2:a9:2f:10:57:05: 56:90:66:6f:26:7c:77:8b:d5:5b:3c:36:10:15:6a: 46:98:94:33:ab:2d:22:70:5f:0d:e6:54:76:9b:ce: a5:ac:71:37:b1:b2:7d:15:d4:3d:b7:44:96:46:0d: 5a:b5:54:d5:58:0e:43:3a:65:25:12:65:db:6f:cc: 99:97:44:c6:eb:a8:fa:1c:79:43:13:97:10:7c:c5: a8:48:9f:31:18:2d:83:70:f7:58:5d:75:b5:b7:84: 5c:54:dd:9f:c5:99:e1:7f:38:b6:25:cc:b3:f9:7e: 51:0c:63:80:a2:50:47:d1:ef:73:13:cf:33:3e:c8: 90:d8:28:04:11:71:1a:d1:76:e5:38:a5:8e:ac:7b: 62:ad:e8:c5:32:13:48:e2:0c:66:97:64:80:ee:0e: c3:a1:d6:bf:c2:f7:36:a4:e8:a9:59:a5:56:3a:dc: b2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C0:15:4E:71:35:C7:CF:4C:87:78:0F:B3:49:9D:4A:74:08:35:99 X509v3 Authority Key Identifier: keyid:0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:2d:ea:87:b7:c4:f7:49:fd:80:6a:3f:16:9c:66:81:3c:05: e2:64:2e:1f:ad:65:f8:dd:bd:7a:96:02:33:a1:4e:0c:21:8d: ff:7c:3b:6b:a0:6b:2e:39:06:cf:d2:cd:11:c9:2e:47:9c:88: bd:66:bb:b3:db:42:40:4b:0e:e7:7c:24:07:41:d1:45:15:83: 7b:31:43:08:63:ec:f7:cb:71:ea:26:c8:a6:12:d1:b5:93:b3: ec:63:29:ca:58:58:67:0f:ce:b9:06:b7:7a:32:39:18:88:a0: 9d:ce:df:e7:ec:e6:31:b9:1e:8b:b0:5c:fd:5a:51:9b:d9:a8: ee:f2:ad:f2:9e:e5:a9:6b:0d:b8:b2:65:92:91:e8:aa:2e:dd: f3:b8:e6:7a:08:94:4f:3a:e2:3e:ee:8d:37:a3:e0:f1:a5:59: 46:9b:01:5a:ca:87:d0:c5:39:b5:7f:c0:85:88:f8:17:65:92: 52:fd:4c:e6:4c:80:c5:b7:96:97:23:d9:b3:9b:a6:f1:bd:62: 82:d1:43:7b:c2:47:c7:53:44:26:e6:a8:29:0b:d8:5b:5f:02: a2:07:d1:16:9d:0a:6a:88:58:ac:9d:dd:d9:5e:54:a6:77:84: 8e:1e:b8:7b:38:2e:f0:72:af:0b:6f:f3:57:89:f9:3d:eb:f4: bb:6c:44:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF REZBRjExMC8GA1UEBRMoMEU2NjNDQjQ5MDBFRjREODIyRjk5QUJERTI3RkE0MDNB QjlGNEM0MDAeFw0yNTA0MjUwNjAxMjZaFw0yNTA1MDIwNjAxMjZaMBgxFjAUBgNV BAMTDTY4MGIyNTM2LTgyMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCu0Yz+PxkLuzEv/+pHfJFsA2ZOR+avGu3wH6Z27EA/JD0D5yaXUQST9BHlT872 AyZnYKC9LoloiRfXw89sJpPgsUaZ50nHOOayDGMdnGIWoTGYjuKpLxBXBVaQZm8m fHeL1Vs8NhAVakaYlDOrLSJwXw3mVHabzqWscTexsn0V1D23RJZGDVq1VNVYDkM6 ZSUSZdtvzJmXRMbrqPoceUMTlxB8xahInzEYLYNw91hddbW3hFxU3Z/FmeF/OLYl zLP5flEMY4CiUEfR73MTzzM+yJDYKAQRcRrRduU4pY6se2Kt6MUyE0jiDGaXZIDu DsOh1r/C9zak6KlZpVY63LL9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnsAVTnE1 x89Mh3gPs0mdSnQINZkwHwYDVR0jBBgwFoAUDmY8tJAO9Ngi+Zq94n+kA6ufTEAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVERkFGLzk3QkU5MzBFOENC QzExRUZCRjIyMDAxMkM0RjlBRTAyL0RtWTh0SkFPOU5naS1acTk0bi1rQTZ1ZlRF QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRG1ZOHRKQU85TmdpLVpxOTRuLWtBNnVmVEVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVE RkFGLzk3QkU5MzBFOENCQzExRUZCRjIyMDAxMkM0RjlBRTAyL0RtWTh0SkFPOU5n aS1acTk0bi1rQTZ1ZlRFQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABYt6oe3xPdJ/YBqPxacZoE8BeJkLh+tZfjdvXqWAjOhTgwhjf98O2ug ay45Bs/SzRHJLkeciL1mu7PbQkBLDud8JAdB0UUVg3sxQwhj7PfLceomyKYS0bWT s+xjKcpYWGcPzrkGt3oyORiIoJ3O3+fs5jG5HouwXP1aUZvZqO7yrfKe5alrDbiy ZZKR6Kou3fO45noIlE864j7ujTej4PGlWUabAVrKh9DFObV/wIWI+BdlklL9TOZM gMW3lpcj2bObpvG9YoLRQ3vCR8dTRCbmqCkL2FtfAqIH0RadCmqIWKyd3dleVKZ3 hI4euHs4LvByrwtv81eJ+T3r9LtsRAc= -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:53 2025 by rpki-client