$ rpki-client -vvf rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft File: 29rQCQF9kd-0ONcNG41NNIYvBo4.mft (raw, json) Hash identifier: 2Fg8Kv1HJukHf2zNMwJMCTinTLg1nmgoqJXpvXd5pj4= Subject key identifier: 56:E6:F7:87:EF:6D:94:7A:70:A4:87:BA:E3:03:CD:B5:D2:E3:B1:17 Authority key identifier: DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E Certificate issuer: /CN=A91F223F/serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft Manifest number: 010C Signing time: Fri 25 Apr 2025 04:03:33 +0000 Manifest this update: Fri 25 Apr 2025 04:03:32 +0000 Manifest next update: Fri 02 May 2025 04:03:32 +0000 Files and hashes: 1: 29rQCQF9kd-0ONcNG41NNIYvBo4.crl (hash: XmADLts5yG7bARPyB2qYx/0UBSzlxhQgrt+wwk4bVkc=) 2: 63E8E1AA8CAA11EE8B20D86EC4F9AE02.roa (hash: FS0NZn6HmMNUVE243zK4MTv8yDH9emQLgpWFOPvCnxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:03:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F223F, serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E Validity Not Before: Apr 25 04:03:32 2025 GMT Not After : May 2 04:03:32 2025 GMT Subject: CN=680b0994-d0a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e5:3a:cf:33:53:d2:4f:92:74:21:a4:82:fc: a5:43:eb:ab:1f:39:74:22:fc:78:b1:3e:ad:89:22: 0e:7f:34:7b:80:dc:ff:57:93:85:69:df:26:ad:bb: 7c:cd:65:71:c7:06:e8:87:db:61:56:e3:e2:14:60: ab:f0:8f:b9:ea:a7:8b:d2:aa:a5:ae:d8:2b:01:49: bd:de:dc:ad:d0:4a:23:e4:46:cd:1d:9d:6b:48:d9: 23:76:c2:29:b9:f6:04:63:c9:ab:c0:f1:9e:e0:24: 09:e7:12:e2:6e:01:ac:cc:58:64:e5:a0:de:fb:2e: 10:1c:e2:0c:d2:0c:75:5a:7b:62:92:5d:5b:0d:ed: c2:23:37:9c:cf:1e:78:67:2c:ed:f1:29:a1:f4:ff: fe:8d:77:31:0f:3c:e9:ec:b8:a4:b5:0b:c0:a8:58: 19:11:fc:53:07:54:31:37:66:7c:15:17:8c:28:ce: 91:dd:2a:a1:1b:c0:09:6d:ad:2e:f1:fb:50:02:3b: 6a:f1:77:30:c5:9b:34:e7:87:a1:a8:fe:fd:c2:aa: 8f:18:60:4c:50:0e:c2:c7:19:51:84:c5:9a:5e:19: 7c:a4:bf:be:af:9d:31:81:fd:2c:7e:55:3d:83:3f: f2:8b:1b:33:a5:80:64:06:24:9a:32:35:af:c0:26: b2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E6:F7:87:EF:6D:94:7A:70:A4:87:BA:E3:03:CD:B5:D2:E3:B1:17 X509v3 Authority Key Identifier: keyid:DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:53:36:a7:b8:c5:21:14:7c:fb:fb:53:c7:b8:a2:51:a2:ca: d4:95:61:33:3a:a0:c6:17:da:64:0f:28:58:ac:06:e6:67:ae: 07:c5:18:3d:d5:08:b6:64:7c:f1:71:c9:0d:1a:f9:28:64:c8: b9:9e:6d:d2:89:f1:17:78:58:50:67:93:78:c2:a5:fc:be:4b: 0e:43:5d:be:73:9c:8f:e4:2b:cf:63:62:99:b9:d9:50:62:23: 21:0e:64:dc:c1:62:cb:0b:cf:98:6b:d2:23:20:ef:cc:b0:1a: a6:04:5a:84:c6:82:4b:ff:57:98:6b:17:72:92:35:03:80:a5: 36:d2:67:22:45:b9:c0:9e:0f:9d:81:e8:2c:da:d1:41:1a:9c: 04:8d:40:ce:b5:85:48:18:bb:14:3e:23:bd:e5:d9:c3:e4:89: 72:25:90:a5:e6:93:25:00:b5:a3:b7:66:0a:83:32:bb:49:30: 8c:1b:4a:90:3c:7f:91:29:33:4a:9c:ea:f8:70:74:95:45:52: 0b:96:7c:d9:30:a1:70:16:11:7e:68:a7:1f:03:89:a9:85:b3: 2f:5b:ac:2d:ea:54:28:f2:07:f3:80:2b:2d:f8:3d:7b:91:fb: 1c:38:fb:21:95:31:87:2f:3a:e1:e9:c0:30:91:69:de:9f:7e: 19:a9:aa:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIyM0YxMTAvBgNVBAUTKERCREFEMDA5MDE3RDkxREZCNDM4RDcwRDFCOEQ0RDM0 ODYyRjA2OEUwHhcNMjUwNDI1MDQwMzMyWhcNMjUwNTAyMDQwMzMyWjAYMRYwFAYD VQQDEw02ODBiMDk5NC1kMGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOU6zzNT0k+SdCGkgvylQ+urHzl0Ivx4sT6tiSIOfzR7gNz/V5OFad8mrbt8 zWVxxwboh9thVuPiFGCr8I+56qeL0qqlrtgrAUm93tyt0Eoj5EbNHZ1rSNkjdsIp ufYEY8mrwPGe4CQJ5xLibgGszFhk5aDe+y4QHOIM0gx1Wntikl1bDe3CIzeczx54 Zyzt8Smh9P/+jXcxDzzp7LiktQvAqFgZEfxTB1QxN2Z8FReMKM6R3SqhG8AJba0u 8ftQAjtq8XcwxZs054ehqP79wqqPGGBMUA7CxxlRhMWaXhl8pL++r50xgf0sflU9 gz/yixszpYBkBiSaMjWvwCayBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbm94fv bZR6cKSHuuMDzbXS47EXMB8GA1UdIwQYMBaAFNva0AkBfZHftDjXDRuNTTSGLwaO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjIzRi8wOTY5MTI3QzhD QUExMUVFODY0REZENkRDNEY5QUUwMi8yOXJRQ1FGOWtkLTBPTmNORzQxTk5JWXZC bzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI5clFDUUY5a2QtME9OY05HNDFOTklZdkJvNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjIzRi8wOTY5MTI3QzhDQUExMUVFODY0REZENkRDNEY5QUUwMi8yOXJRQ1FGOWtk LTBPTmNORzQxTk5JWXZCbzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVUzanuMUhFHz7+1PHuKJRosrUlWEzOqDGF9pkDyhYrAbmZ64HxRg9 1Qi2ZHzxcckNGvkoZMi5nm3SifEXeFhQZ5N4wqX8vksOQ12+c5yP5CvPY2KZudlQ YiMhDmTcwWLLC8+Ya9IjIO/MsBqmBFqExoJL/1eYaxdykjUDgKU20mciRbnAng+d gegs2tFBGpwEjUDOtYVIGLsUPiO95dnD5IlyJZCl5pMlALWjt2YKgzK7STCMG0qQ PH+RKTNKnOr4cHSVRVILlnzZMKFwFhF+aKcfA4mphbMvW6wt6lQo8gfzgCst+D17 kfscOPshlTGHLzrh6cAwkWnen34Zqapj -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:56 2025 by rpki-client