$ rpki-client -vvf rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/76QjuvW_0YkxbmUDHozq9aP_oUs.mft File: 76QjuvW_0YkxbmUDHozq9aP_oUs.mft (raw, json) Hash identifier: i1D10HJboPsvAkU4SGY1UZYqfZnMk/tSOtQ1FaXTkas= Subject key identifier: 7A:6D:AB:64:10:01:93:A0:B9:4C:9A:9B:FD:CB:F7:FA:34:C9:C4:8D Authority key identifier: EF:A4:23:BA:F5:BF:D1:89:31:6E:65:03:1E:8C:EA:F5:A3:FF:A1:4B Certificate issuer: /CN=A91F264C/serialNumber=EFA423BAF5BFD189316E65031E8CEAF5A3FFA14B Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76QjuvW_0YkxbmUDHozq9aP_oUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/76QjuvW_0YkxbmUDHozq9aP_oUs.mft Manifest number: 11 Signing time: Fri 25 Apr 2025 07:04:35 +0000 Manifest this update: Fri 25 Apr 2025 07:04:35 +0000 Manifest next update: Fri 02 May 2025 07:04:35 +0000 Files and hashes: 1: 76QjuvW_0YkxbmUDHozq9aP_oUs.crl (hash: ECX9Aw8aeLwWYhA0dH4AS416AV8Nk56FRUhtHG4lulc=) 2: DB5AB9A0195A11F081485C3AC4F9AE02.roa (hash: JaGf75N3pf7IqU+djnr2Hy5ZxGye9c0JY8fFDo/3ks0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/76QjuvW_0YkxbmUDHozq9aP_oUs.crl rsync://rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/76QjuvW_0YkxbmUDHozq9aP_oUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76QjuvW_0YkxbmUDHozq9aP_oUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:04:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F264C, serialNumber=EFA423BAF5BFD189316E65031E8CEAF5A3FFA14B Validity Not Before: Apr 25 07:04:35 2025 GMT Not After : May 2 07:04:35 2025 GMT Subject: CN=680b3403-aca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7c:5d:8d:8b:7f:ce:56:bc:99:1d:ac:a4:4c: 05:95:e7:f9:54:60:a0:15:cb:aa:8c:1c:58:67:18: 1d:ea:22:7b:d3:b7:6a:2f:f2:3f:56:a7:20:78:98: 72:ef:89:10:26:81:86:85:b5:b6:00:d6:dd:d7:ef: 83:30:b9:7c:ed:49:8c:0a:43:43:15:77:a9:97:ad: 35:ad:f6:cd:2f:98:14:65:c7:20:40:d2:bc:35:f9: 7d:44:83:ed:99:69:cc:eb:22:26:43:ba:5e:00:c2: 10:99:fe:51:06:9c:c2:1b:28:71:e1:f2:45:52:11: 13:01:86:f0:93:52:39:b3:7e:fd:b3:b9:7f:4a:4f: e6:61:e8:06:5c:01:da:3c:fa:04:ad:cf:19:7c:23: 28:af:93:84:48:da:ad:e8:f1:52:e2:59:d5:77:08: f0:96:91:82:b6:92:a8:cb:74:be:65:c3:27:14:aa: 85:1f:8c:e3:4a:8d:1a:c5:ab:61:5c:bd:77:ba:be: 4f:d4:1c:c0:0f:45:c9:a1:d7:97:65:e5:22:3c:86: 4a:39:1e:76:55:77:43:80:d7:7a:7e:6a:22:6a:72: c3:12:67:2c:28:10:e4:b3:8f:0e:7f:57:f9:60:1d: 5a:1c:d4:1b:9a:fd:d9:22:41:30:9a:42:76:7b:bc: f3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:6D:AB:64:10:01:93:A0:B9:4C:9A:9B:FD:CB:F7:FA:34:C9:C4:8D X509v3 Authority Key Identifier: keyid:EF:A4:23:BA:F5:BF:D1:89:31:6E:65:03:1E:8C:EA:F5:A3:FF:A1:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/76QjuvW_0YkxbmUDHozq9aP_oUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76QjuvW_0YkxbmUDHozq9aP_oUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/76QjuvW_0YkxbmUDHozq9aP_oUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:76:ad:64:5e:93:d4:21:ec:13:fd:b0:11:64:23:1c:61:72: 04:29:98:ce:26:04:5b:c1:1f:5a:f1:53:85:fd:3c:6f:89:22: 1c:2a:bf:d0:98:4b:0d:3e:b8:b5:21:26:b4:60:bb:18:a3:78: 7d:74:6f:98:d1:36:e7:67:1c:54:07:89:65:cb:5d:d7:0c:61: b5:37:f7:28:c0:a5:cb:fd:31:a2:a7:cc:1e:fa:b1:56:37:fc: a4:49:ee:0c:b2:e1:10:7a:d8:74:06:8b:fa:fd:e1:df:ad:f8: 46:e0:7d:20:b0:14:3e:6c:df:0d:96:07:58:87:33:0f:14:eb: 0f:cf:f3:10:5e:73:08:39:5b:4e:8a:77:41:c2:59:62:b2:83: 4a:58:de:3f:49:ad:4f:6a:e0:46:61:4b:22:a1:bc:b2:23:66: eb:6c:be:3b:93:26:db:83:f4:ee:c2:dc:c0:a2:b8:e2:14:78: 2b:a8:3e:91:11:59:3b:fb:2e:b5:31:f1:df:a2:cc:3f:c5:78: f0:cd:e8:fd:d0:02:80:7d:b7:af:55:d4:9d:d9:59:99:c7:8b: f6:88:ef:64:3c:3f:c0:eb:3a:57:21:c3:f6:23:58:01:a6:e3: be:12:40:23:04:cd:c1:41:a4:1d:89:a1:18:39:59:a8:9e:b4: a4:9b:b5:68 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MjY0QzExMC8GA1UEBRMoRUZBNDIzQkFGNUJGRDE4OTMxNkU2NTAzMUU4Q0VBRjVB M0ZGQTE0QjAeFw0yNTA0MjUwNzA0MzVaFw0yNTA1MDIwNzA0MzVaMBgxFjAUBgNV BAMTDTY4MGIzNDAzLWFjYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJfF2Ni3/OVryZHaykTAWV5/lUYKAVy6qMHFhnGB3qInvTt2ov8j9WpyB4mHLv iRAmgYaFtbYA1t3X74MwuXztSYwKQ0MVd6mXrTWt9s0vmBRlxyBA0rw1+X1Eg+2Z aczrIiZDul4AwhCZ/lEGnMIbKHHh8kVSERMBhvCTUjmzfv2zuX9KT+Zh6AZcAdo8 +gStzxl8Iyivk4RI2q3o8VLiWdV3CPCWkYK2kqjLdL5lwycUqoUfjONKjRrFq2Fc vXe6vk/UHMAPRcmh15dl5SI8hko5HnZVd0OA13p+aiJqcsMSZywoEOSzjw5/V/lg HVoc1Bua/dkiQTCaQnZ7vPMTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUem2rZBAB k6C5TJqb/cv3+jTJxI0wHwYDVR0jBBgwFoAU76QjuvW/0YkxbmUDHozq9aP/oUsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyNjRDLzI0MUFDN0JFMEUx ODExRjBCNjlCOEIzOEM0RjlBRTAyLzc2UWp1dldfMFlreGJtVURIb3pxOWFQX29V cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNzZRanV2V18wWWt4Ym1VREhvenE5YVBfb1VzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy NjRDLzI0MUFDN0JFMEUxODExRjBCNjlCOEIzOEM0RjlBRTAyLzc2UWp1dldfMFlr eGJtVURIb3pxOWFQX29Vcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIt2rWRek9Qh7BP9sBFkIxxhcgQpmM4mBFvBH1rxU4X9PG+JIhwqv9CY Sw0+uLUhJrRguxijeH10b5jRNudnHFQHiWXLXdcMYbU39yjApcv9MaKnzB76sVY3 /KRJ7gyy4RB62HQGi/r94d+t+EbgfSCwFD5s3w2WB1iHMw8U6w/P8xBecwg5W06K d0HCWWKyg0pY3j9JrU9q4EZhSyKhvLIjZutsvjuTJtuD9O7C3MCiuOIUeCuoPpER WTv7LrUx8d+izD/FePDN6P3QAoB9t69V1J3ZWZnHi/aI72Q8P8DrOlchw/YjWAGm 474SQCMEzcFBpB2JoRg5WaietKSbtWg= -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:10 2025 by rpki-client