$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft File: c72yoCvL7DyQAPZfcFyW6AgOlzA.mft (raw, json) Hash identifier: /rhkWqzV14YOHl92t+a8ItRfqaQwnKtGfWXtf0i4Z1c= Subject key identifier: 3A:10:00:32:FB:63:97:9A:FD:2A:2E:14:87:E2:94:46:B8:25:38:1A Authority key identifier: 73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30 Certificate issuer: /CN=A91F34BF/serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730 Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft Manifest number: 0106 Signing time: Fri 25 Apr 2025 04:12:40 +0000 Manifest this update: Fri 25 Apr 2025 04:12:39 +0000 Manifest next update: Fri 02 May 2025 04:12:39 +0000 Files and hashes: 1: c72yoCvL7DyQAPZfcFyW6AgOlzA.crl (hash: XXJgDqb4LIUV3E1vhvsYj9lW35AybQuy6u9UA2iUSfc=) 2: D4F8CEB8FE4211EF958ABE3BC4F9AE02.roa (hash: e+itOOHa2GS7haggfAySbnRHvgH3I9TscI3l9ZgslXk=) 3: 13310E94FCD011EF8F21DE62C4F9AE02.roa (hash: pCYjff74rDvqaSSHh6b2YJXJxIU8kNQvxw7uQ6aFFQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:12:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F34BF, serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730 Validity Not Before: Apr 25 04:12:39 2025 GMT Not After : May 2 04:12:39 2025 GMT Subject: CN=680b0bb7-6b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b5:19:7b:c3:b7:d3:22:97:43:19:f3:53:92: 70:f2:de:60:96:da:d9:92:0f:c2:e1:e0:75:0f:4b: a7:b1:02:32:70:3c:e4:25:33:97:a9:b4:7d:34:19: c8:b5:50:46:3d:77:f1:8f:bc:56:b0:01:2a:1a:a8: ae:0f:ec:26:56:99:09:33:30:50:b6:9b:bc:11:c5: fc:39:92:6a:13:f8:f2:c2:75:25:08:50:49:4e:d4: fb:46:51:6d:45:ae:ff:cd:64:ea:72:26:4c:d3:9e: 62:75:ce:70:b4:7e:e1:e0:f7:3e:87:f4:67:d2:d8: b8:a5:9e:17:3e:e0:16:e9:07:ad:0d:97:31:c8:e9: 66:5a:b6:4e:2a:d6:77:51:7d:a7:db:2a:88:26:10: aa:e6:bb:3a:fd:f5:fa:7d:a8:08:98:0d:03:e4:f9: 43:ab:44:d7:41:83:b9:84:17:00:01:00:f9:ae:24: c2:99:06:dc:d3:57:4c:ff:c1:07:05:08:91:da:fb: 64:1d:84:3a:1c:14:a3:f4:fd:28:3b:2f:7b:4d:a6: 17:a0:87:d1:b8:2a:f0:49:7d:c0:0e:41:9b:7f:90: 98:af:a0:0f:b1:b7:44:01:21:7a:e4:a8:39:7d:40: ed:d7:e1:68:92:f0:61:08:7a:fb:ff:d6:33:e7:4e: a6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:10:00:32:FB:63:97:9A:FD:2A:2E:14:87:E2:94:46:B8:25:38:1A X509v3 Authority Key Identifier: keyid:73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:7f:56:87:71:d4:43:ce:89:62:4f:a4:68:ec:1d:49:0c:76: 1d:d1:02:cc:e5:d0:5a:64:9c:1d:e8:2b:79:d7:89:c3:73:84: 62:5d:94:51:1d:50:b9:eb:3b:95:00:f5:89:7b:25:31:aa:99: 37:ff:e9:f7:88:ae:e7:3b:bf:7f:d6:9e:ca:a7:17:c9:a0:04: 4a:68:1b:71:d9:bc:88:54:84:ba:f3:cd:32:a6:56:e3:49:a7: 23:d2:15:6f:c4:f8:ec:52:ff:12:ef:13:0f:d5:fe:7a:ad:2b: 83:76:b9:0c:02:52:72:45:0f:c5:e1:ce:55:5b:d9:48:21:99: c9:a8:6b:fd:ef:66:ba:18:d9:11:d5:48:04:a7:87:d2:83:ad: 87:2b:9a:69:c7:14:cb:7c:39:5d:2b:13:a0:3a:56:05:0a:31: 8b:33:c9:2e:46:e8:e2:f0:1b:62:ee:64:ef:4c:bd:ee:c4:f9: 8a:26:e8:67:e0:8d:c6:47:66:d7:79:17:d9:ee:3c:85:27:8a: 74:d7:76:1b:1d:83:18:0e:0a:36:5c:3e:cc:47:69:a8:a4:3e: d2:c8:4c:b2:af:7a:07:4e:d3:05:b9:3f:7a:14:cf:35:5e:78: 36:05:6d:1b:88:8b:c1:aa:b5:52:ff:df:1c:63:7b:f7:7b:be: 53:a4:ff:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM0QkYxMTAvBgNVBAUTKDczQkRCMkEwMkJDQkVDM0M5MDAwRjY1RjcwNUM5NkU4 MDgwRTk3MzAwHhcNMjUwNDI1MDQxMjM5WhcNMjUwNTAyMDQxMjM5WjAYMRYwFAYD VQQDEw02ODBiMGJiNy02YjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7UZe8O30yKXQxnzU5Jw8t5gltrZkg/C4eB1D0unsQIycDzkJTOXqbR9NBnI tVBGPXfxj7xWsAEqGqiuD+wmVpkJMzBQtpu8EcX8OZJqE/jywnUlCFBJTtT7RlFt Ra7/zWTqciZM055idc5wtH7h4Pc+h/Rn0ti4pZ4XPuAW6QetDZcxyOlmWrZOKtZ3 UX2n2yqIJhCq5rs6/fX6fagImA0D5PlDq0TXQYO5hBcAAQD5riTCmQbc01dM/8EH BQiR2vtkHYQ6HBSj9P0oOy97TaYXoIfRuCrwSX3ADkGbf5CYr6APsbdEASF65Kg5 fUDt1+FokvBhCHr7/9Yz506mSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDoQADL7 Y5ea/SouFIfilEa4JTgaMB8GA1UdIwQYMBaAFHO9sqAry+w8kAD2X3BclugIDpcw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRCRi80RjAzM0Q4NDlD RjUxMUVFOUU0QzMzMUZDNEY5QUUwMi9jNzJ5b0N2TDdEeVFBUFpmY0Z5VzZBZ09s ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3MnlvQ3ZMN0R5UUFQWmZjRnlXNkFnT2x6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzRCRi80RjAzM0Q4NDlDRjUxMUVFOUU0QzMzMUZDNEY5QUUwMi9jNzJ5b0N2TDdE eVFBUFpmY0Z5VzZBZ09sekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkf1aHcdRDzoliT6Ro7B1JDHYd0QLM5dBaZJwd6Ct514nDc4RiXZRR HVC56zuVAPWJeyUxqpk3/+n3iK7nO79/1p7KpxfJoARKaBtx2byIVIS6880yplbj Sacj0hVvxPjsUv8S7xMP1f56rSuDdrkMAlJyRQ/F4c5VW9lIIZnJqGv972a6GNkR 1UgEp4fSg62HK5ppxxTLfDldKxOgOlYFCjGLM8kuRuji8Bti7mTvTL3uxPmKJuhn 4I3GR2bXeRfZ7jyFJ4p013YbHYMYDgo2XD7MR2mopD7SyEyyr3oHTtMFuT96FM81 Xng2BW0biIvBqrVS/98cY3v3e75TpP+E -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:15 2025 by rpki-client