$ rpki-client -vvf rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft File: PurfFFrim0gkCj-6OvvZSajxU10.mft (raw, json) Hash identifier: 9+13gbSKQW6k96rZn6IvI2qjqMqXiSAJGoVTPbf7uw8= Subject key identifier: 63:78:A7:7F:55:99:C1:BC:74:64:E4:E6:1F:F0:1B:C7:7A:74:D0:E6 Authority key identifier: 3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D Certificate issuer: /CN=A91F823E/serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D Certificate serial: 02F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft Manifest number: 02F4 Signing time: Fri 25 Apr 2025 01:03:19 +0000 Manifest this update: Fri 25 Apr 2025 01:03:18 +0000 Manifest next update: Fri 02 May 2025 01:03:18 +0000 Files and hashes: 1: PurfFFrim0gkCj-6OvvZSajxU10.crl (hash: MBpOJQHUhK7as/6SVzYMfpB5wrflcj+h14vaaycZ91c=) 2: B3481ED4D5B611ECA61EEC28C4F9AE02.roa (hash: 7bYPkVMZrrnunuEV97KsBcLOn5jOLNiIR6VQXBJQwkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 760 (0x2f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F823E, serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D Validity Not Before: Apr 25 01:03:18 2025 GMT Not After : May 2 01:03:18 2025 GMT Subject: CN=680adf57-9a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:64:58:89:cf:2f:e1:d1:17:2b:3d:98:b4:86: 19:24:a6:34:55:5d:7f:7b:be:46:3d:67:3a:38:ec: c6:ac:8f:8b:eb:d0:b8:16:5d:7c:03:86:cd:a2:98: 3b:a8:03:86:a3:3a:d1:ed:3c:9f:23:3e:53:b2:ef: be:22:81:99:07:09:78:89:cd:34:94:06:ec:09:80: 71:cc:e5:0f:f2:30:86:65:93:36:a5:a8:b6:ab:5c: 3e:7d:c9:58:61:f3:26:ce:6b:25:a3:6b:69:a0:34: 74:04:37:d3:3d:6d:04:ab:91:c2:ab:0f:9f:dc:3d: fe:68:53:79:0e:b6:a9:73:a4:e6:8f:1b:47:11:ae: 3e:2d:0e:c6:1c:5b:b0:21:c4:1c:8c:3e:97:45:94: 1b:b1:90:e7:0d:90:63:00:cb:0f:2a:d7:28:db:d4: c0:70:6c:3b:9d:ae:ac:3e:e1:f2:a8:3d:24:9b:75: ca:39:7e:75:e6:32:ae:4c:9d:f4:99:71:5f:c9:d4: 1c:30:77:cf:e8:ec:61:ea:ef:7b:d3:8e:19:25:c9: 1e:a0:fb:3d:bc:81:50:c5:39:ce:c1:49:77:89:4c: 23:98:c5:0e:59:5d:9a:98:ad:c6:5a:fa:be:86:24: 4f:1c:89:41:e3:ec:89:64:af:30:64:d1:7e:44:70: c5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:78:A7:7F:55:99:C1:BC:74:64:E4:E6:1F:F0:1B:C7:7A:74:D0:E6 X509v3 Authority Key Identifier: keyid:3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:6d:bc:dd:98:1e:f8:64:ef:23:4e:8d:61:75:ac:66:0f:8a: 99:75:8e:69:62:50:99:2b:5a:9e:22:81:68:2b:a9:f8:dd:7b: 71:28:1e:cb:32:35:67:7a:10:df:be:a3:99:03:c0:b6:66:32: 66:5d:20:04:81:2b:de:9f:cc:33:dd:7f:38:c9:a9:e3:38:92: 01:73:94:67:40:fe:1f:d4:4c:4e:a8:fd:4e:b9:dd:12:3b:2b: 0f:35:3f:08:dd:1d:38:b7:b7:15:73:be:53:4d:b9:b2:b6:35: cb:5a:55:c1:45:8f:9e:16:4d:e1:19:3c:29:72:be:d2:cd:56: e4:fa:d4:0c:7a:18:56:8f:bf:dd:0f:70:5a:2c:6b:6c:a5:1b: ee:48:eb:59:8a:4e:d0:88:ae:47:2c:a5:d1:16:d8:cd:b7:c7: 4d:a5:02:58:f8:e2:c4:75:2c:35:02:6f:f0:d1:2c:5c:b2:dd: 25:3f:56:42:30:dd:e3:2e:36:f0:f4:df:39:b9:2a:3c:09:12: 2b:74:23:4e:2a:ad:d5:0d:50:7d:dd:60:f7:29:18:76:13:eb: 26:b9:30:50:77:28:68:72:41:50:bc:47:b8:86:40:08:68:b4: b9:73:a0:3e:7f:44:28:a2:7f:df:e4:87:8f:06:79:77:26:21: cd:ea:5b:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgyM0UxMTAvBgNVBAUTKDNFRUFERjE0NUFFMjlCNDgyNDBBM0ZCQTNBRkJEOTQ5 QThGMTUzNUQwHhcNMjUwNDI1MDEwMzE4WhcNMjUwNTAyMDEwMzE4WjAYMRYwFAYD VQQDEw02ODBhZGY1Ny05YTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7mRYic8v4dEXKz2YtIYZJKY0VV1/e75GPWc6OOzGrI+L69C4Fl18A4bNopg7 qAOGozrR7TyfIz5Tsu++IoGZBwl4ic00lAbsCYBxzOUP8jCGZZM2pai2q1w+fclY YfMmzmslo2tpoDR0BDfTPW0Eq5HCqw+f3D3+aFN5Drapc6TmjxtHEa4+LQ7GHFuw IcQcjD6XRZQbsZDnDZBjAMsPKtco29TAcGw7na6sPuHyqD0km3XKOX515jKuTJ30 mXFfydQcMHfP6Oxh6u97044ZJckeoPs9vIFQxTnOwUl3iUwjmMUOWV2amK3GWvq+ hiRPHIlB4+yJZK8wZNF+RHDFxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGN4p39V mcG8dGTk5h/wG8d6dNDmMB8GA1UdIwQYMBaAFD7q3xRa4ptIJAo/ujr72Umo8VNd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODIzRS83RDY5QTgzQ0Q1 QjExMUVDOTM1MUU2MjBDNEY5QUUwMi9QdXJmRkZyaW0wZ2tDai02T3Z2WlNhanhV MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1cmZGRnJpbTBna0NqLTZPdnZaU2FqeFUxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODIzRS83RDY5QTgzQ0Q1QjExMUVDOTM1MUU2MjBDNEY5QUUwMi9QdXJmRkZyaW0w Z2tDai02T3Z2WlNhanhVMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEbbzdmB74ZO8jTo1hdaxmD4qZdY5pYlCZK1qeIoFoK6n43XtxKB7L MjVnehDfvqOZA8C2ZjJmXSAEgSven8wz3X84yanjOJIBc5RnQP4f1ExOqP1Oud0S OysPNT8I3R04t7cVc75TTbmytjXLWlXBRY+eFk3hGTwpcr7SzVbk+tQMehhWj7/d D3BaLGtspRvuSOtZik7QiK5HLKXRFtjNt8dNpQJY+OLEdSw1Am/w0Sxcst0lP1ZC MN3jLjbw9N85uSo8CRIrdCNOKq3VDVB93WD3KRh2E+smuTBQdyhockFQvEe4hkAI aLS5c6A+f0Qoon/f5IePBnl3JiHN6lsS -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:54 2025 by rpki-client