$ rpki-client -vvf rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft File: Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft (raw, json) Hash identifier: ekSX0/zmqqbP/EY6zaXTXVl1m2hgc263rxARpI0p/ow= Subject key identifier: 8E:8C:22:27:7F:D1:1D:96:E2:A4:3C:6A:8B:9E:80:DB:03:F8:9F:84 Authority key identifier: 46:F9:72:D7:B8:3D:CA:06:1D:B9:DF:AA:F0:17:7F:2D:DF:1E:E9:0A Certificate issuer: /CN=A91F006D/serialNumber=46F972D7B83DCA061DB9DFAAF0177F2DDF1EE90A Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft Manifest number: 010D Signing time: Fri 25 Apr 2025 04:10:56 +0000 Manifest this update: Fri 25 Apr 2025 04:10:55 +0000 Manifest next update: Fri 02 May 2025 04:10:55 +0000 Files and hashes: 1: Rvly17g9ygYdud-q8Bd_Ld8e6Qo.crl (hash: 2FrzpkV34Wzm0I5H4gb2ev+M9Sd0uBRrsam2UYstwhU=) 2: 8BBDAB46651411EFBBCB6F31C4F9AE02.roa (hash: /I9CcLQXhCW4GEfreSLW1LTWj50i7vh8PtKD8gQU1UQ=) 3: 66D4A06E651411EF9F534031C4F9AE02.roa (hash: pW8SIPuT5kOD4eZTF7di+hTXS7DwDK8pm89HGFANye4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.crl rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:10:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F006D, serialNumber=46F972D7B83DCA061DB9DFAAF0177F2DDF1EE90A Validity Not Before: Apr 25 04:10:55 2025 GMT Not After : May 2 04:10:55 2025 GMT Subject: CN=680b0b4f-ed15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f5:65:b0:e6:cd:e0:69:28:69:1d:d5:57:e4: c9:ab:96:74:4d:24:91:fd:b0:d4:04:59:4c:71:24: 91:c5:1b:6a:f2:35:28:cf:9b:e7:f4:e7:7c:ba:bb: 3e:a8:fa:a4:cb:28:d1:d6:d5:18:05:bd:4b:21:06: e9:01:10:49:fb:e5:94:7a:12:15:66:af:50:9f:2b: db:ba:8c:6b:8e:f0:85:bb:32:d4:28:83:da:33:81: f7:71:49:fa:f2:66:db:72:d8:fe:a5:6d:d1:4b:25: f3:72:e4:54:27:e9:e3:02:92:4e:ca:9d:c6:06:fd: 10:de:58:4e:4c:ff:49:dd:b9:1c:24:ff:0e:52:da: 78:23:23:a1:dd:37:e6:35:55:fa:e5:25:4a:02:e2: 97:30:25:4b:ed:73:9e:50:16:f1:35:ff:c2:8d:1b: d5:ea:24:1f:70:c5:95:7c:b9:a1:b5:e6:77:3b:9f: a7:c1:03:f8:89:a6:3f:f9:12:eb:7f:24:37:ad:93: 62:e5:df:3d:d3:a0:3f:d1:1a:c9:6d:27:53:95:b8: 8e:58:2c:87:58:38:2e:fa:eb:a3:b9:8d:0f:cc:1b: 5a:fb:f6:cd:02:2d:3c:e1:35:5a:87:40:fd:94:e9: 03:c5:17:eb:50:93:65:93:69:70:62:39:35:cc:d3: ba:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8C:22:27:7F:D1:1D:96:E2:A4:3C:6A:8B:9E:80:DB:03:F8:9F:84 X509v3 Authority Key Identifier: keyid:46:F9:72:D7:B8:3D:CA:06:1D:B9:DF:AA:F0:17:7F:2D:DF:1E:E9:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F006D/3C100C9298BE11EEB1DDE835C4F9AE02/Rvly17g9ygYdud-q8Bd_Ld8e6Qo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:0f:bb:a3:08:f6:6b:80:6f:2a:36:66:3b:4c:e2:32:69:7e: f8:de:7d:25:57:c0:e4:1c:a7:96:a0:b1:99:cb:e9:49:77:2e: 46:4d:bd:4e:8d:55:f1:76:8d:9a:25:eb:50:26:18:b7:23:e5: 66:c4:a6:b4:c5:62:86:b3:5a:65:ec:ae:1e:d3:46:0b:f2:fc: 5e:1e:a3:05:37:34:55:90:d4:71:44:e2:bc:00:a8:b7:cd:36: c2:8f:4f:0c:ad:6a:6e:c4:04:4c:9d:93:67:2f:24:6e:b1:0a: e0:24:04:50:e6:c7:f5:fb:74:11:d1:f7:2b:23:68:f7:92:8e: 91:a7:6d:2b:10:68:ed:22:ef:70:c4:81:7b:3c:6d:46:d3:1c: 6d:bf:07:fb:32:76:24:67:49:bf:43:05:db:8d:3c:cf:1a:82: 97:3d:2d:72:6e:e6:f6:f8:cf:7c:43:33:35:c9:6f:52:34:e9: 13:85:89:e6:ea:ac:bd:b8:0f:d2:a0:a3:5c:3a:2d:d3:a6:73: 6d:b7:a7:83:38:20:3a:ff:e3:a0:0d:34:51:0d:d6:dd:f4:23: dc:d8:74:e1:0b:e7:27:fe:77:43:43:0d:2c:d3:42:39:db:9c: 49:00:61:73:36:ec:13:79:3f:7a:fa:b2:fe:6b:8c:86:11:3f: 3f:c6:65:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAwNkQxMTAvBgNVBAUTKDQ2Rjk3MkQ3QjgzRENBMDYxREI5REZBQUYwMTc3RjJE REYxRUU5MEEwHhcNMjUwNDI1MDQxMDU1WhcNMjUwNTAyMDQxMDU1WjAYMRYwFAYD VQQDEw02ODBiMGI0Zi1lZDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/VlsObN4GkoaR3VV+TJq5Z0TSSR/bDUBFlMcSSRxRtq8jUoz5vn9Od8urs+ qPqkyyjR1tUYBb1LIQbpARBJ++WUehIVZq9QnyvbuoxrjvCFuzLUKIPaM4H3cUn6 8mbbctj+pW3RSyXzcuRUJ+njApJOyp3GBv0Q3lhOTP9J3bkcJP8OUtp4IyOh3Tfm NVX65SVKAuKXMCVL7XOeUBbxNf/CjRvV6iQfcMWVfLmhteZ3O5+nwQP4iaY/+RLr fyQ3rZNi5d8906A/0RrJbSdTlbiOWCyHWDgu+uujuY0PzBta+/bNAi084TVah0D9 lOkDxRfrUJNlk2lwYjk1zNO6lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6MIid/ 0R2W4qQ8aouegNsD+J+EMB8GA1UdIwQYMBaAFEb5cte4PcoGHbnfqvAXfy3fHukK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDA2RC8zQzEwMEM5Mjk4 QkUxMUVFQjFEREU4MzVDNEY5QUUwMi9Sdmx5MTdnOXlnWWR1ZC1xOEJkX0xkOGU2 UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J2bHkxN2c5eWdZZHVkLXE4QmRfTGQ4ZTZRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDA2RC8zQzEwMEM5Mjk4QkUxMUVFQjFEREU4MzVDNEY5QUUwMi9Sdmx5MTdnOXln WWR1ZC1xOEJkX0xkOGU2UW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHD7ujCPZrgG8qNmY7TOIyaX743n0lV8DkHKeWoLGZy+lJdy5GTb1O jVXxdo2aJetQJhi3I+VmxKa0xWKGs1pl7K4e00YL8vxeHqMFNzRVkNRxROK8AKi3 zTbCj08MrWpuxARMnZNnLyRusQrgJARQ5sf1+3QR0fcrI2j3ko6Rp20rEGjtIu9w xIF7PG1G0xxtvwf7MnYkZ0m/QwXbjTzPGoKXPS1ybub2+M98QzM1yW9SNOkThYnm 6qy9uA/SoKNcOi3TpnNtt6eDOCA6/+OgDTRRDdbd9CPc2HThC+cn/ndDQw0s00I5 25xJAGFzNuwTeT96+rL+a4yGET8/xmVq -----END CERTIFICATE-----Generated at Sat Apr 26 12:31:15 2025 by rpki-client