$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft File: D59xWNvf-ipXrgJIfJgga3g4BJY.mft (raw, json) Hash identifier: oPAm/N+fu2Hdhr88la4c6TtV7KWXaZpRYlLAcUP2ydA= Subject key identifier: 05:73:2B:E8:74:AA:EC:FF:9D:AC:BE:37:06:0A:53:87:25:0D:14:3A Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 Certificate issuer: /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft Manifest number: CD Signing time: Fri 25 Apr 2025 04:48:02 +0000 Manifest this update: Fri 25 Apr 2025 04:48:01 +0000 Manifest next update: Fri 02 May 2025 04:48:01 +0000 Files and hashes: 1: D59xWNvf-ipXrgJIfJgga3g4BJY.crl (hash: Q0Xnckl4d2Ryv3u8kxuCtxoM2wHtloQP4dsnFpLIsuI=) 2: CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa (hash: PLkTX8vn1+WKFw3HdqAbAwP/NjRYQ3swUNgQj1k4DSE=) 3: 1132F3026BD811EF90DBC631C4F9AE02.roa (hash: zPKvF8zxdu//FyrlKrsovUWXLD3CMiK5ihnLC2Ks3fU=) 4: 507476EE6BD811EFBDD72932C4F9AE02.roa (hash: T1g5Fuak08KUBroGfInKXOe5sVU0C30eA43zF3aV9tE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE9DC, serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Validity Not Before: Apr 25 04:48:01 2025 GMT Not After : May 2 04:48:01 2025 GMT Subject: CN=680b1402-cf9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a6:5a:09:10:74:05:d1:06:0a:13:30:37:29: 74:fe:b7:25:1d:22:6b:e4:40:56:aa:a0:9a:79:c2: 73:b4:21:a7:44:91:55:2d:9b:cb:d0:69:13:2a:17: 3a:1d:a4:d5:2c:98:94:3e:39:90:b8:1b:1b:de:04: e3:7b:ab:8c:c2:16:a5:6c:27:b1:84:70:4e:f6:f1: cb:93:31:ab:f4:df:15:a4:9c:0c:e8:06:71:88:4c: e6:61:52:6a:eb:21:4c:20:eb:1b:b9:ab:ea:a3:19: 16:1e:81:1a:eb:f8:dc:7a:8b:c9:b0:ac:e8:79:f3: 05:3b:0d:81:58:41:b7:83:cd:a3:aa:b8:df:41:35: 18:7a:35:70:cb:03:15:5c:38:8a:7a:56:3c:43:55: be:a6:cf:0e:63:1b:76:03:88:d4:21:db:f2:eb:7e: 36:b4:06:43:fa:84:ff:59:ce:c8:21:fd:b4:80:0a: 70:4b:9c:27:a6:60:57:e0:87:fb:58:2f:4f:36:8d: 71:17:de:04:20:d6:77:6c:49:15:23:86:12:f4:1a: 10:28:55:29:fd:10:67:12:12:00:cb:0f:c8:99:17: c3:68:0b:5d:7f:da:0e:8d:b1:64:4d:e9:d0:4c:b7: 99:ef:f0:78:a4:17:e9:e5:5d:65:21:09:b1:7e:2c: da:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:73:2B:E8:74:AA:EC:FF:9D:AC:BE:37:06:0A:53:87:25:0D:14:3A X509v3 Authority Key Identifier: keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ab:7e:59:86:7a:46:f9:b4:a2:ef:cd:65:22:a2:3c:88:0c: 99:50:41:50:18:44:8e:94:51:7c:93:6c:33:26:e4:b4:89:b9: 5e:b7:70:ae:9f:3f:41:fa:1a:e5:56:a3:84:ce:c1:0c:25:9b: 7d:c8:03:04:42:ff:30:d4:23:62:64:9c:b8:2d:e0:be:2e:84: ca:2e:8b:46:b8:7e:4e:7a:04:9f:5c:2e:4d:5b:2a:71:52:29: 03:cf:07:fe:8d:5e:28:5a:22:70:c4:ec:70:f7:47:46:f0:71: 03:e6:fd:a5:02:ac:b8:4b:df:28:ee:10:eb:af:e4:ff:2b:50: 24:48:26:02:b5:32:db:70:08:d6:8e:24:37:6d:8c:eb:d7:9c: b1:cb:a0:f0:80:cc:3a:e1:82:5f:f1:2d:46:d9:a0:a1:44:64: cb:32:ab:a1:f1:75:48:0f:33:d5:94:27:43:b3:23:c9:18:79: 1e:b7:4a:46:30:c3:d7:f5:39:0b:c6:61:b2:eb:85:dd:17:18: f3:09:96:41:d2:04:38:c9:61:67:49:af:b6:80:48:23:87:c0: d5:a6:10:1a:c0:2d:59:91:f6:f1:e6:54:5f:de:40:c6:1d:ac: 64:9d:09:ba:af:c1:7c:a2:84:9d:36:0d:41:96:89:b7:1c:08: 91:33:b7:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU5REMxMTAvBgNVBAUTKDBGOUY3MTU4REJERkZBMkE1N0FFMDI0ODdDOTgyMDZC NzgzODA0OTYwHhcNMjUwNDI1MDQ0ODAxWhcNMjUwNTAyMDQ0ODAxWjAYMRYwFAYD VQQDEw02ODBiMTQwMi1jZjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnqZaCRB0BdEGChMwNyl0/rclHSJr5EBWqqCaecJztCGnRJFVLZvL0GkTKhc6 HaTVLJiUPjmQuBsb3gTje6uMwhalbCexhHBO9vHLkzGr9N8VpJwM6AZxiEzmYVJq 6yFMIOsbuavqoxkWHoEa6/jceovJsKzoefMFOw2BWEG3g82jqrjfQTUYejVwywMV XDiKelY8Q1W+ps8OYxt2A4jUIdvy6342tAZD+oT/Wc7IIf20gApwS5wnpmBX4If7 WC9PNo1xF94EINZ3bEkVI4YS9BoQKFUp/RBnEhIAyw/ImRfDaAtdf9oOjbFkTenQ TLeZ7/B4pBfp5V1lIQmxfiza/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAVzK+h0 quz/nay+NwYKU4clDRQ6MB8GA1UdIwQYMBaAFA+fcVjb3/oqV64CSHyYIGt4OASW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTlEQy82RUVDMUY1Q0VG RkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1pcFhyZ0pJZkpnZ2EzZzRC SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1OXhXTnZmLWlwWHJnSklmSmdnYTNnNEJKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTlEQy82RUVDMUY1Q0VGRkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1p cFhyZ0pJZkpnZ2EzZzRCSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbq35ZhnpG+bSi781lIqI8iAyZUEFQGESOlFF8k2wzJuS0iblet3Cu nz9B+hrlVqOEzsEMJZt9yAMEQv8w1CNiZJy4LeC+LoTKLotGuH5OegSfXC5NWypx UikDzwf+jV4oWiJwxOxw90dG8HED5v2lAqy4S98o7hDrr+T/K1AkSCYCtTLbcAjW jiQ3bYzr15yxy6DwgMw64YJf8S1G2aChRGTLMquh8XVIDzPVlCdDsyPJGHket0pG MMPX9TkLxmGy64XdFxjzCZZB0gQ4yWFnSa+2gEgjh8DVphAawC1Zkfbx5lRf3kDG HaxknQm6r8F8ooSdNg1Blom3HAiRM7dR -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:33 2025 by rpki-client