$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft File: vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft (raw, json) Hash identifier: W7p0AMdbC1nJoTKMrdHZPRW+idsqSKkmSCNaLaZCJ2s= Subject key identifier: D4:C8:AB:CE:A5:EE:3E:7D:AA:D0:42:C4:64:FD:34:18:6B:57:F3:8F Authority key identifier: BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F Certificate issuer: /CN=A91F4957/serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft Manifest number: 0156 Signing time: Fri 25 Apr 2025 03:14:37 +0000 Manifest this update: Fri 25 Apr 2025 03:14:36 +0000 Manifest next update: Fri 02 May 2025 03:14:36 +0000 Files and hashes: 1: vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl (hash: u7tNTurYi381yEZaW2L5IQLDwHXmUczSLLpaqsFrSEE=) 2: 4231A1AA1B1711EEA5566A23C4F9AE02.roa (hash: lTkc7C0RlmKbFSYdbjr+dPk/Bz3louAuGeeNLMUaa3U=) 3: F0237E941B1911EE9DFF2942C4F9AE02.roa (hash: OFcdlnYr84QtfXIjFkq221jW9RB67N6+iA5hYs6y+y0=) 4: 60B707FA1AEA11EE92BEA24CC4F9AE02.roa (hash: kXqagkJo/A0eBKA6rzsFPrgkBqXmX4C+r5kQGo8fciw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:14:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4957, serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F Validity Not Before: Apr 25 03:14:36 2025 GMT Not After : May 2 03:14:36 2025 GMT Subject: CN=680afe1c-e9fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:91:61:cf:f2:ff:49:07:24:d1:68:ae:9c:dd: 27:3b:bf:a8:4b:c7:99:a2:9b:f3:bb:4c:55:13:17: 14:60:c4:b4:68:2d:fb:00:77:ea:d9:f1:e6:e3:6f: cf:09:02:92:f3:6b:2e:fc:48:0e:9c:5d:ed:c5:4f: 9c:d9:be:f1:96:24:a3:dc:b9:d6:7e:46:c2:6e:23: dd:b3:73:87:5f:bc:a5:9f:b4:d8:d7:a6:dc:c5:f9: 93:5f:4d:20:e2:c2:3d:4a:4a:78:8b:ed:ff:86:36: 02:12:79:34:d9:c8:24:33:36:16:b3:c0:f2:47:c2: 51:e7:9a:13:d1:be:16:c7:fe:da:eb:54:6e:e3:dc: b6:ac:eb:29:08:c3:fe:0f:5f:a9:c1:c6:97:df:71: b2:9b:f8:4c:9d:3a:6d:47:78:fe:79:b8:a8:7a:99: 95:b7:85:46:f2:36:f6:82:d7:38:da:4e:5d:cc:cc: 94:1a:f6:e0:2f:0e:84:4e:c8:bb:b0:bb:b0:22:93: 00:e8:e8:b7:9a:e8:01:fb:66:d8:96:e7:6c:b7:71: ba:ac:de:68:07:f1:7b:39:a4:15:09:20:d1:5a:17: 1a:0c:dc:6a:aa:d8:0f:9c:a4:8f:c2:3d:23:c3:79: 02:23:39:09:49:92:bc:e0:1e:6d:41:f4:fd:12:77: f5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C8:AB:CE:A5:EE:3E:7D:AA:D0:42:C4:64:FD:34:18:6B:57:F3:8F X509v3 Authority Key Identifier: keyid:BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:57:05:14:38:66:b0:57:f1:55:d6:67:24:7b:53:ea:af:d2: ed:8e:70:eb:26:9e:98:95:4c:ae:ac:7c:a6:00:a6:f4:39:42: 3d:86:5e:a0:ad:af:32:c2:e9:fe:30:98:05:58:5a:ab:64:f2: 40:9a:16:ac:41:8c:ea:5d:b6:1f:f2:0c:a3:31:03:37:bc:08: c6:c6:78:88:22:1b:26:dc:34:76:8f:56:8e:46:ef:ca:eb:4c: b1:8c:45:d4:e3:9e:b8:b1:3a:37:45:21:67:1f:91:55:ef:9c: 97:58:59:82:00:e4:b7:1b:3a:b7:fb:99:4a:35:e3:44:6a:ee: f4:5d:04:40:b4:f2:1f:8c:dd:55:c9:e1:eb:4b:63:16:d4:e9: 4b:ff:31:4a:10:73:14:a3:6d:c3:d1:35:19:97:fd:11:4d:69: 7a:e8:aa:ca:56:8c:20:f2:d0:57:be:05:64:6f:d8:18:0e:86: e1:f5:e3:7b:c1:73:95:4e:c5:08:e2:46:d4:de:1b:76:a0:ba: 71:ec:96:e0:88:78:68:73:4f:77:17:4c:85:73:ca:5d:bf:2d: fb:25:be:43:0d:a4:6a:46:03:ba:4f:e9:f7:4c:3a:46:f8:89: 0c:61:af:5d:c6:c7:81:30:8b:b3:d6:bb:f6:fa:a9:39:24:7b: 8b:8e:01:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ5NTcxMTAvBgNVBAUTKEJGMkQxQjM5RDNDMkU5QUUwQUE4RkFCOTRCQUM1NDBD QzUyNjUyNEYwHhcNMjUwNDI1MDMxNDM2WhcNMjUwNTAyMDMxNDM2WjAYMRYwFAYD VQQDEw02ODBhZmUxYy1lOWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZFhz/L/SQck0WiunN0nO7+oS8eZopvzu0xVExcUYMS0aC37AHfq2fHm42/P CQKS82su/EgOnF3txU+c2b7xliSj3LnWfkbCbiPds3OHX7yln7TY16bcxfmTX00g 4sI9Skp4i+3/hjYCEnk02cgkMzYWs8DyR8JR55oT0b4Wx/7a61Ru49y2rOspCMP+ D1+pwcaX33Gym/hMnTptR3j+ebioepmVt4VG8jb2gtc42k5dzMyUGvbgLw6ETsi7 sLuwIpMA6Oi3mugB+2bYludst3G6rN5oB/F7OaQVCSDRWhcaDNxqqtgPnKSPwj0j w3kCIzkJSZK84B5tQfT9Enf1IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTIq86l 7j59qtBCxGT9NBhrV/OPMB8GA1UdIwQYMBaAFL8tGznTwumuCqj6uUusVAzFJlJP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Ny81NzFCMjIxMDFB RTcxMUVFOERENEI5NDlDNEY5QUUwMi92eTBiT2RQQzZhNEtxUHE1UzZ4VURNVW1V azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z5MGJPZFBDNmE0S3FQcTVTNnhVRE1VbVVrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDk1Ny81NzFCMjIxMDFBRTcxMUVFOERENEI5NDlDNEY5QUUwMi92eTBiT2RQQzZh NEtxUHE1UzZ4VURNVW1VazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYVwUUOGawV/FV1mcke1Pqr9LtjnDrJp6YlUyurHymAKb0OUI9hl6g ra8ywun+MJgFWFqrZPJAmhasQYzqXbYf8gyjMQM3vAjGxniIIhsm3DR2j1aORu/K 60yxjEXU4564sTo3RSFnH5FV75yXWFmCAOS3Gzq3+5lKNeNEau70XQRAtPIfjN1V yeHrS2MW1OlL/zFKEHMUo23D0TUZl/0RTWl66KrKVowg8tBXvgVkb9gYDobh9eN7 wXOVTsUI4kbU3ht2oLpx7JbgiHhoc093F0yFc8pdvy37Jb5DDaRqRgO6T+n3TDpG +IkMYa9dxseBMIuz1rv2+qk5JHuLjgGG -----END CERTIFICATE-----Generated at Sat Apr 26 03:43:54 2025 by rpki-client