$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft File: rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft (raw, json) Hash identifier: eMawT3OlWRYNFQ6NCP7zkauJPTl+Hi0Drl3ar/zIgns= Subject key identifier: 9B:DF:41:14:9C:80:8C:D8:51:20:5B:33:54:B6:ED:0B:57:77:0B:0E Authority key identifier: AD:84:F4:BC:BE:B3:C9:36:5F:28:27:15:3B:A6:9C:ED:2A:99:12:E2 Certificate issuer: /CN=A91EF8B6/serialNumber=AD84F4BCBEB3C9365F2827153BA69CED2A9912E2 Certificate serial: 0B30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft Manifest number: 0B25 Signing time: Thu 24 Apr 2025 19:06:59 +0000 Manifest this update: Thu 24 Apr 2025 19:06:59 +0000 Manifest next update: Thu 01 May 2025 19:06:59 +0000 Files and hashes: 1: rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl (hash: PnhbdJ29z2YQ/gWyZkcrC6ruodH5Iix/hW1ocpTEKSA=) 2: FB6D5292263C11EEB9F5DB43C4F9AE02.roa (hash: F4+ANWrgSV1BYAbYrEyoAC+HEYBZsl5dMdzlHwWIwy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2864 (0xb30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF8B6, serialNumber=AD84F4BCBEB3C9365F2827153BA69CED2A9912E2 Validity Not Before: Apr 24 19:06:59 2025 GMT Not After : May 1 19:06:59 2025 GMT Subject: CN=680a8bd3-82f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e0:95:2d:28:24:70:a1:8b:e2:76:48:9b:04: 19:ab:61:b7:ba:20:99:d7:c3:0c:67:55:5b:32:8c: ae:13:f2:90:14:c0:08:31:17:04:61:84:95:30:69: 70:0a:d7:6f:02:32:0b:71:82:21:89:bd:da:c4:cc: e3:ec:d3:e1:e5:3d:79:01:9f:b5:82:41:73:ba:6f: e2:dc:49:2d:91:9a:e7:25:05:7b:85:37:da:70:d2: 89:26:93:b5:2e:0a:e7:20:00:f6:34:91:58:47:70: 0e:df:93:dc:12:5f:70:a5:c5:8c:97:94:35:ed:40: 80:6c:6d:63:2e:cd:76:50:a3:07:1e:91:12:13:03: e8:b6:bf:75:7b:82:2d:0a:87:5b:c2:22:c0:80:47: 68:ab:5e:be:53:e0:3e:1e:82:e5:e1:43:36:1a:7a: d1:a4:07:ee:ce:27:3d:66:b7:58:60:85:96:b2:8f: fd:9c:3f:8a:a8:f8:f8:55:d2:0c:5d:87:ba:fc:f0: f2:e8:bc:68:0a:55:c3:d5:6a:78:34:fc:8d:6c:ef: 33:cc:e9:97:b7:95:97:d9:aa:bd:cd:b9:38:3a:78: 8a:f1:c8:1f:ef:5f:2f:ad:9e:bb:fa:60:34:5f:f7: 07:2c:1b:0c:9a:ba:30:64:af:7b:5a:cd:1b:28:42: 26:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DF:41:14:9C:80:8C:D8:51:20:5B:33:54:B6:ED:0B:57:77:0B:0E X509v3 Authority Key Identifier: keyid:AD:84:F4:BC:BE:B3:C9:36:5F:28:27:15:3B:A6:9C:ED:2A:99:12:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:d5:e2:29:7a:8d:90:6a:5a:67:69:7b:35:99:73:2d:c5:67: c7:ea:85:1b:fb:35:0a:f8:a8:b5:c7:9c:91:7c:ec:4c:17:bd: cb:61:a5:06:97:bd:80:ee:17:cc:2a:79:5b:da:6b:d7:bd:d7: ff:e8:bf:94:f5:75:a6:97:c2:ae:84:95:4b:91:f8:c3:0d:82: a9:5d:5c:96:2b:79:60:76:99:ac:5d:29:b1:fb:86:2a:70:7a: 50:29:f7:97:1a:38:6a:d2:85:2e:fe:ba:ae:c5:16:b4:99:3d: da:03:ac:02:9f:d2:7e:4d:30:0a:dc:a7:24:5e:85:91:1a:ce: eb:d5:f3:95:f8:8e:b8:eb:fe:46:9e:e0:c5:94:6e:95:a3:99: 1b:fa:60:06:d1:92:03:e5:52:d2:88:d9:3e:16:35:01:d0:1b: eb:3e:81:c5:55:c2:ac:73:6c:6a:74:18:69:c4:51:f0:1c:4f: 32:c5:41:cd:de:b5:14:fd:73:f9:1f:36:bf:de:98:75:21:9e: 08:b4:59:f0:84:33:91:81:bc:82:aa:16:32:bf:79:e4:5f:b4: ca:a9:8b:6f:22:8c:3e:4c:76:43:dc:5e:77:b8:d5:7e:42:9c: 31:08:1f:9b:c0:9d:e5:89:10:a9:ef:1b:be:3d:06:11:2c:0d: c0:2a:56:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY4QjYxMTAvBgNVBAUTKEFEODRGNEJDQkVCM0M5MzY1RjI4MjcxNTNCQTY5Q0VE MkE5OTEyRTIwHhcNMjUwNDI0MTkwNjU5WhcNMjUwNTAxMTkwNjU5WjAYMRYwFAYD VQQDEw02ODBhOGJkMy04MmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnuCVLSgkcKGL4nZImwQZq2G3uiCZ18MMZ1VbMoyuE/KQFMAIMRcEYYSVMGlw CtdvAjILcYIhib3axMzj7NPh5T15AZ+1gkFzum/i3EktkZrnJQV7hTfacNKJJpO1 LgrnIAD2NJFYR3AO35PcEl9wpcWMl5Q17UCAbG1jLs12UKMHHpESEwPotr91e4It CodbwiLAgEdoq16+U+A+HoLl4UM2GnrRpAfuzic9ZrdYYIWWso/9nD+KqPj4VdIM XYe6/PDy6LxoClXD1Wp4NPyNbO8zzOmXt5WX2aq9zbk4OniK8cgf718vrZ67+mA0 X/cHLBsMmrowZK97Ws0bKEImYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvfQRSc gIzYUSBbM1S27QtXdwsOMB8GA1UdIwQYMBaAFK2E9Ly+s8k2XygnFTumnO0qmRLi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjhCNi80MEU3RkFCQTNB QTYxMUVBQUM4RjE4NzVDNEY5QUUwMi9yWVQwdkw2enlUWmZLQ2NWTzZhYzdTcVpF dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JZVDB2TDZ6eVRaZktDY1ZPNmFjN1NxWkV1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjhCNi80MEU3RkFCQTNBQTYxMUVBQUM4RjE4NzVDNEY5QUUwMi9yWVQwdkw2enlU WmZLQ2NWTzZhYzdTcVpFdUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp1eIpeo2QalpnaXs1mXMtxWfH6oUb+zUK+Ki1x5yRfOxMF73LYaUG l72A7hfMKnlb2mvXvdf/6L+U9XWml8KuhJVLkfjDDYKpXVyWK3lgdpmsXSmx+4Yq cHpQKfeXGjhq0oUu/rquxRa0mT3aA6wCn9J+TTAK3KckXoWRGs7r1fOV+I646/5G nuDFlG6Vo5kb+mAG0ZID5VLSiNk+FjUB0BvrPoHFVcKsc2xqdBhpxFHwHE8yxUHN 3rUU/XP5Hza/3ph1IZ4ItFnwhDORgbyCqhYyv3nkX7TKqYtvIow+THZD3F53uNV+ QpwxCB+bwJ3liRCp7xu+PQYRLA3AKlbt -----END CERTIFICATE-----Generated at Sat Apr 26 12:59:24 2025 by rpki-client