$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft File: AduB721jlOZtOzIxW0eevteZyTc.mft (raw, json) Hash identifier: F8coS+y5WUr+UYuA8GHYelqoxf6QakM16qY88aqtlPc= Subject key identifier: 0A:E0:2D:F9:74:B4:EF:E9:30:BD:0E:56:12:32:8B:F0:D0:5E:23:B0 Authority key identifier: 01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37 Certificate issuer: /CN=A91FECDA/serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937 Certificate serial: 0F3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft Manifest number: 0F31 Signing time: Thu 24 Apr 2025 17:35:43 +0000 Manifest this update: Thu 24 Apr 2025 17:35:42 +0000 Manifest next update: Thu 01 May 2025 17:35:42 +0000 Files and hashes: 1: AduB721jlOZtOzIxW0eevteZyTc.crl (hash: gb9cJHJE59WB6IaSWx2er+pPF/WuoTaamwuuKs2+rC0=) 2: 85B9F090F35011EFAE695322C4F9AE02.roa (hash: lww/ZRWFPgZIaev9PDmaV5kjaByxeNEFJJYVjFLwNzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3898 (0xf3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FECDA, serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937 Validity Not Before: Apr 24 17:35:42 2025 GMT Not After : May 1 17:35:42 2025 GMT Subject: CN=680a766f-45bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:01:92:c1:02:6b:04:56:b7:92:db:d9:f2:eb: 09:cd:a3:e4:1a:45:69:80:b9:5c:dc:eb:95:31:66: e1:06:5f:de:e4:99:50:b0:d1:3f:1d:e2:19:7f:11: 10:8a:8e:7d:16:fb:4f:40:5d:b1:bb:c1:73:3b:2e: d8:c1:e3:00:6e:50:ec:a6:8e:bc:cd:e1:34:8c:0e: 63:3c:3b:9e:e0:ac:7a:d9:bb:8d:38:b7:52:1a:9c: 56:d0:d8:a0:50:95:c1:69:ad:c4:0f:94:a7:56:df: d5:0b:b3:34:59:8f:35:2b:62:7c:c5:a1:39:ae:e4: 32:a5:25:62:c1:6c:b4:26:e3:0e:b5:56:68:3f:02: 96:96:f5:6a:fb:61:a8:a1:d0:f7:9f:34:73:90:3a: 48:3a:07:de:e0:b7:5d:e1:1a:a4:82:f5:fb:96:74: 80:dc:db:a9:69:bd:9a:43:5c:d3:d2:e5:2d:08:c5: cf:7b:20:42:7d:58:7a:56:4e:2f:d5:80:0f:f8:e9: ce:92:b7:bb:90:ff:0e:9a:a9:10:26:c0:4e:b3:cd: 03:22:f1:eb:57:0c:d9:e2:fe:6b:89:a9:3d:3d:2c: 35:17:f1:b2:35:4f:a3:b9:2e:85:87:eb:58:00:99: 41:e9:52:8e:c0:52:35:3b:d3:80:e6:d4:4c:cb:6c: 42:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E0:2D:F9:74:B4:EF:E9:30:BD:0E:56:12:32:8B:F0:D0:5E:23:B0 X509v3 Authority Key Identifier: keyid:01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:28:76:85:bf:a6:31:53:b3:31:fe:25:cb:84:db:02:3a:e1: d4:c3:ae:cc:99:bd:c8:71:78:74:50:68:9e:a1:3f:71:bf:f3: 1a:9d:fb:5c:91:ac:11:1d:b9:bc:1f:03:c9:b8:6b:f9:88:7d: 1e:34:1a:aa:be:50:a2:fa:c2:51:8b:c9:67:bb:c0:3e:78:d0: 21:f6:45:56:29:d1:61:d6:fc:66:02:c4:8a:3d:52:dc:48:b3: 09:9e:9c:ec:6e:c9:cf:28:e8:c2:19:7e:ab:3a:bc:d3:ac:71: 02:71:af:7d:c0:ce:75:f5:67:a5:1c:3b:e1:5e:f3:94:b2:47: 8b:e5:c6:bc:fd:4a:e4:c1:16:cd:57:31:56:89:76:3d:9b:f3: 28:b8:dc:05:0e:bc:db:c5:07:f1:51:ec:07:77:75:85:47:4c: 66:9f:c8:76:ca:88:56:4e:fe:c7:ad:74:19:53:9b:bd:41:b5: cd:67:af:29:78:a9:32:11:1f:94:b0:e4:77:20:b0:49:9e:13: 69:ab:29:ea:2c:80:5c:77:68:9c:3d:7b:7a:91:78:a0:49:d6: 0a:f7:ba:33:1f:4c:1d:a9:0b:5a:21:22:ae:fd:d8:4b:9c:c7: 0d:65:b6:f5:09:a7:be:b3:3d:47:09:36:f7:09:db:33:5d:c6: 57:72:66:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVDREExMTAvBgNVBAUTKDAxREI4MUVGNkQ2Mzk0RTY2RDNCMzIzMTVCNDc5RUJF RDc5OUM5MzcwHhcNMjUwNDI0MTczNTQyWhcNMjUwNTAxMTczNTQyWjAYMRYwFAYD VQQDEw02ODBhNzY2Zi00NWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAGSwQJrBFa3ktvZ8usJzaPkGkVpgLlc3OuVMWbhBl/e5JlQsNE/HeIZfxEQ io59FvtPQF2xu8FzOy7YweMAblDspo68zeE0jA5jPDue4Kx62buNOLdSGpxW0Nig UJXBaa3ED5SnVt/VC7M0WY81K2J8xaE5ruQypSViwWy0JuMOtVZoPwKWlvVq+2Go odD3nzRzkDpIOgfe4Ldd4RqkgvX7lnSA3Nupab2aQ1zT0uUtCMXPeyBCfVh6Vk4v 1YAP+OnOkre7kP8OmqkQJsBOs80DIvHrVwzZ4v5riak9PSw1F/GyNU+juS6Fh+tY AJlB6VKOwFI1O9OA5tRMy2xCvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArgLfl0 tO/pML0OVhIyi/DQXiOwMB8GA1UdIwQYMBaAFAHbge9tY5TmbTsyMVtHnr7Xmck3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNEQS84QTg4RjEwNDZG OUMxMUU5QTUwNzRCMkZDNEY5QUUwMi9BZHVCNzIxamxPWnRPekl4VzBlZXZ0ZVp5 VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FkdUI3MjFqbE9adE96SXhXMGVldnRlWnlUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUNEQS84QTg4RjEwNDZGOUMxMUU5QTUwNzRCMkZDNEY5QUUwMi9BZHVCNzIxamxP WnRPekl4VzBlZXZ0ZVp5VGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsKHaFv6YxU7Mx/iXLhNsCOuHUw67Mmb3IcXh0UGieoT9xv/Manftc kawRHbm8HwPJuGv5iH0eNBqqvlCi+sJRi8lnu8A+eNAh9kVWKdFh1vxmAsSKPVLc SLMJnpzsbsnPKOjCGX6rOrzTrHECca99wM519WelHDvhXvOUskeL5ca8/UrkwRbN VzFWiXY9m/MouNwFDrzbxQfxUewHd3WFR0xmn8h2yohWTv7HrXQZU5u9QbXNZ68p eKkyER+UsOR3ILBJnhNpqynqLIBcd2icPXt6kXigSdYK97ozH0wdqQtaISKu/dhL nMcNZbb1Cae+sz1HCTb3CdszXcZXcmaJ -----END CERTIFICATE-----Generated at Sat Apr 26 05:09:15 2025 by rpki-client