$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft File: 36hgRQpvzrHG57jU_1SxVBobabM.mft (raw, json) Hash identifier: yyDAa12BVv7vU3QIr1anLsZBZyiEVKLXj/UkDIUcxxk= Subject key identifier: E1:87:25:BA:85:B0:16:D9:6D:3A:B7:36:C2:7A:C8:CB:4A:81:F3:4F Authority key identifier: DF:A8:60:45:0A:6F:CE:B1:C6:E7:B8:D4:FF:54:B1:54:1A:1B:69:B3 Certificate issuer: /CN=A91534B8/serialNumber=DFA860450A6FCEB1C6E7B8D4FF54B1541A1B69B3 Certificate serial: 028F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft Manifest number: 0287 Signing time: Sun 11 May 2025 01:12:32 +0000 Manifest this update: Sun 11 May 2025 01:12:31 +0000 Manifest next update: Sun 18 May 2025 01:12:31 +0000 Files and hashes: 1: 36hgRQpvzrHG57jU_1SxVBobabM.crl (hash: IZoZoA5XTGp7s44PjUo9cJtLJ5NXbTKWK31NzfexkNo=) 2: 56C4B5083DF511ED98215F18C4F9AE02.roa (hash: u+f2WuZi/RfejSsKb+UJ5iop6uONOfiC5gYEcHsbs6w=) 3: B0FA33FE6F9611ED8A672F69C4F9AE02.roa (hash: YDAiAdPjFYhBL5YjXoGqzzo8vheOfOc5VPFiiANGCJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.crl rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:12:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 655 (0x28f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91534B8, serialNumber=DFA860450A6FCEB1C6E7B8D4FF54B1541A1B69B3 Validity Not Before: May 11 01:12:31 2025 GMT Not After : May 18 01:12:31 2025 GMT Subject: CN=681ff980-9af0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3f:f9:79:31:64:3c:a3:18:07:03:32:1f:b0: 90:e0:10:cd:41:2c:a6:57:97:2c:68:b3:68:bc:8f: b2:1c:61:62:95:3e:1d:3c:74:fe:32:1c:e3:36:6d: 5f:29:b0:41:8d:d4:07:f5:52:a7:e8:25:1e:64:cf: 50:09:58:ee:a3:1a:92:08:4e:f5:08:33:3b:79:00: 74:8a:89:40:cf:f2:f9:cc:a0:ab:dc:bd:0b:3d:64: 99:f5:80:08:2a:09:f6:76:5b:6f:b4:3d:8d:ce:20: ff:56:59:6f:79:14:16:17:c8:e4:0d:6c:52:68:06: 4c:13:74:38:5f:0d:60:80:f5:20:4c:1f:5a:81:f8: 3b:44:5e:d2:be:99:29:6e:67:e9:e6:44:62:40:ac: d1:66:75:24:5a:61:83:0d:cc:39:dc:30:62:6e:93: 00:47:26:29:ad:01:de:b2:76:ff:a6:13:65:33:e9: 09:d4:5a:5a:50:f8:26:44:40:3c:ec:83:89:92:8f: 06:29:ce:08:43:2b:99:51:62:ff:a5:ce:c5:8e:9e: 71:f8:1f:a3:9b:17:39:2e:a0:92:af:7c:c9:23:dd: 28:07:8e:45:1c:2a:59:06:44:49:80:fc:c9:d9:5e: 75:21:b9:c0:ff:27:7e:4d:4c:18:4a:49:c5:81:7d: 53:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:87:25:BA:85:B0:16:D9:6D:3A:B7:36:C2:7A:C8:CB:4A:81:F3:4F X509v3 Authority Key Identifier: keyid:DF:A8:60:45:0A:6F:CE:B1:C6:E7:B8:D4:FF:54:B1:54:1A:1B:69:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:56:0e:7a:5d:fa:ed:8f:dc:cd:7e:ef:8d:36:41:42:e1:ba: 51:5e:de:8f:14:83:4e:28:5d:4c:22:5b:26:61:e5:62:3c:90: aa:77:95:68:10:d6:81:ed:a9:56:db:51:46:77:4c:6a:fb:96: 63:da:9f:44:47:f5:a4:81:20:32:1f:4b:96:f6:79:f0:33:8e: 0d:16:09:64:06:90:5f:4d:79:89:00:13:fc:75:0b:ed:ed:3b: 75:4a:f1:ab:11:83:67:84:9e:62:a8:d7:9f:11:1a:16:0b:ba: 81:40:36:42:3e:54:5d:ad:47:b8:a0:3a:83:7f:ec:24:81:aa: b9:64:ee:94:91:f1:1d:81:1c:8f:bd:12:f3:b1:15:0f:8d:c8: f4:91:27:3c:5b:09:d0:5b:8e:90:cf:ab:59:61:78:08:9c:71: a9:da:10:9d:76:2b:34:2a:ff:fc:33:c2:30:e7:e4:8f:c9:db: cf:14:c6:07:77:95:3e:c0:95:ec:63:15:e4:1b:de:65:60:9e: ec:d8:08:8e:b9:30:45:84:1c:80:97:38:3f:7d:3d:12:50:20: c4:a8:2d:cb:60:4f:10:ec:2f:39:1b:f7:92:58:24:d6:9b:e0: d3:be:09:ca:a7:44:df:66:46:c1:1a:f2:03:b4:c8:db:16:7b: d8:52:67:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0QjgxMTAvBgNVBAUTKERGQTg2MDQ1MEE2RkNFQjFDNkU3QjhENEZGNTRCMTU0 MUExQjY5QjMwHhcNMjUwNTExMDExMjMxWhcNMjUwNTE4MDExMjMxWjAYMRYwFAYD VQQDEw02ODFmZjk4MC05YWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzj/5eTFkPKMYBwMyH7CQ4BDNQSymV5csaLNovI+yHGFilT4dPHT+MhzjNm1f KbBBjdQH9VKn6CUeZM9QCVjuoxqSCE71CDM7eQB0iolAz/L5zKCr3L0LPWSZ9YAI Kgn2dltvtD2NziD/VllveRQWF8jkDWxSaAZME3Q4Xw1ggPUgTB9agfg7RF7Svpkp bmfp5kRiQKzRZnUkWmGDDcw53DBibpMARyYprQHesnb/phNlM+kJ1FpaUPgmREA8 7IOJko8GKc4IQyuZUWL/pc7Fjp5x+B+jmxc5LqCSr3zJI90oB45FHCpZBkRJgPzJ 2V51IbnA/yd+TUwYSknFgX1T3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGHJbqF sBbZbTq3NsJ6yMtKgfNPMB8GA1UdIwQYMBaAFN+oYEUKb86xxue41P9UsVQaG2mz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzRCOC85RjAzQkI2MDA5 NDQxMUVEOEREMTA5NzFDNEY5QUUwMi8zNmhnUlFwdnpySEc1N2pVXzFTeFZCb2Jh Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzM2aGdSUXB2enJIRzU3alVfMVN4VkJvYmFiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzRCOC85RjAzQkI2MDA5NDQxMUVEOEREMTA5NzFDNEY5QUUwMi8zNmhnUlFwdnpy SEc1N2pVXzFTeFZCb2JhYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXVg56Xfrtj9zNfu+NNkFC4bpRXt6PFINOKF1MIlsmYeViPJCqd5Vo ENaB7alW21FGd0xq+5Zj2p9ER/WkgSAyH0uW9nnwM44NFglkBpBfTXmJABP8dQvt 7Tt1SvGrEYNnhJ5iqNefERoWC7qBQDZCPlRdrUe4oDqDf+wkgaq5ZO6UkfEdgRyP vRLzsRUPjcj0kSc8WwnQW46Qz6tZYXgInHGp2hCddis0Kv/8M8Iw5+SPydvPFMYH d5U+wJXsYxXkG95lYJ7s2AiOuTBFhByAlzg/fT0SUCDEqC3LYE8Q7C85G/eSWCTW m+DTvgnKp0TfZkbBGvIDtMjbFnvYUmfd -----END CERTIFICATE-----Generated at Mon May 12 19:19:52 2025 by rpki-client