$ rpki-client -vvf rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft File: 67oUOyhmNxjNjH2j9jEAmpgE7l8.mft (raw, json) Hash identifier: urmHGfWIL3dmnVHKa1V5Z+OKsHRGON6BP7vMOs/7zkk= Subject key identifier: 10:D5:F7:FD:89:66:18:DF:BE:45:47:26:4A:AD:02:84:93:A6:2D:F3 Authority key identifier: EB:BA:14:3B:28:66:37:18:CD:8C:7D:A3:F6:31:00:9A:98:04:EE:5F Certificate issuer: /CN=A919676F/serialNumber=EBBA143B28663718CD8C7DA3F631009A9804EE5F Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67oUOyhmNxjNjH2j9jEAmpgE7l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft Manifest number: 018D Signing time: Tue 13 May 2025 02:49:00 +0000 Manifest this update: Tue 13 May 2025 02:48:59 +0000 Manifest next update: Tue 20 May 2025 02:48:59 +0000 Files and hashes: 1: 67oUOyhmNxjNjH2j9jEAmpgE7l8.crl (hash: E7LV3T5tL5tbv2i9SG6Q51RRz+5vxE4s9/3TFXMxr0k=) 2: D277F83CD3A411ED8C51160FC4F9AE02.roa (hash: xeDK9WlWOxddaeQUzhh0jJMfgRYN6KWkgPqKssZPync=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.crl rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67oUOyhmNxjNjH2j9jEAmpgE7l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919676F, serialNumber=EBBA143B28663718CD8C7DA3F631009A9804EE5F Validity Not Before: May 13 02:48:59 2025 GMT Not After : May 20 02:48:59 2025 GMT Subject: CN=6822b31c-1a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:97:57:9a:53:67:3d:fd:80:fb:f6:78:60:85: de:63:66:d2:3d:c8:03:e0:4a:7d:d8:1d:71:01:f6: f5:e7:7d:6b:b8:20:a1:1a:c4:4f:ee:82:b7:8e:82: 75:49:db:fe:05:cb:30:33:e6:d5:11:7e:7c:70:34: f4:94:29:f5:7c:69:94:35:69:34:b6:47:e0:78:d5: 1d:3e:29:84:d6:97:e4:b0:aa:7e:b4:da:76:74:b5: 08:e5:05:96:45:4b:a2:eb:d8:f1:4f:32:ee:53:76: f1:58:58:f7:d1:ea:ea:75:82:e2:0b:c3:c1:e9:ff: a9:65:bc:ee:55:56:c2:dd:9c:64:fa:1b:0e:74:0d: 0b:78:5e:44:0c:8d:1a:cb:ff:74:84:a0:0e:e4:fc: 8c:b5:f0:99:7c:0f:2d:1f:0f:3d:d3:ae:79:51:43: e3:af:b8:2d:51:44:eb:39:90:69:00:3d:05:0b:de: 90:3e:c3:da:64:c5:b0:88:f2:4f:d8:a5:a8:6b:00: 34:44:25:2b:45:d0:93:3c:e5:5f:20:a6:86:c7:0c: a6:8f:c0:e7:9e:21:b2:e3:66:7c:1b:31:77:3f:7e: d1:2b:6c:c2:aa:24:c7:6e:1c:26:3a:de:67:35:4f: 01:72:e7:45:48:06:d9:d3:65:51:bf:5d:99:95:9d: b6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D5:F7:FD:89:66:18:DF:BE:45:47:26:4A:AD:02:84:93:A6:2D:F3 X509v3 Authority Key Identifier: keyid:EB:BA:14:3B:28:66:37:18:CD:8C:7D:A3:F6:31:00:9A:98:04:EE:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67oUOyhmNxjNjH2j9jEAmpgE7l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919676F/FE49FAC2D3A011ED814C4C18C4F9AE02/67oUOyhmNxjNjH2j9jEAmpgE7l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:af:6d:e2:73:f9:3c:84:fe:9b:62:b6:1b:53:d4:d6:dc:c5: 60:38:a4:64:67:f0:50:2a:f6:c3:03:c4:43:82:6d:7e:74:38: 57:76:67:b0:80:ff:3d:0b:b9:6b:f8:6d:f0:9d:95:91:7a:97: 12:bb:1e:97:16:9a:90:a0:40:45:42:53:35:e6:65:ac:9b:5d: 67:10:31:02:05:c7:35:d4:4e:f7:39:7f:7b:a1:00:77:5f:74: be:23:eb:51:94:0a:0a:77:d9:8f:b9:9d:14:3f:17:48:15:06: c4:71:9e:8d:e5:b5:60:3f:29:66:f3:f2:99:e5:a3:4e:a7:39: 7a:26:a0:4b:9d:43:dd:2b:8d:85:f1:65:f9:d2:f6:af:ca:b2: ee:8c:56:5b:ff:14:eb:5f:5d:a3:fb:e0:38:b3:00:58:53:b4: 1d:af:a5:48:5d:09:0f:5e:9d:1c:50:79:c0:06:80:03:de:67: 43:77:cd:fd:9e:5f:5e:20:dd:28:73:23:8c:68:24:82:87:6a: c2:ba:0d:61:17:b8:66:46:19:29:70:73:03:2e:33:3e:db:a3: e6:84:ed:10:34:43:5a:fe:f1:62:36:97:86:e2:1b:1b:47:30: 5d:03:41:44:9c:67:7d:11:ff:b4:81:e1:9d:12:09:2c:da:57: 38:4d:3c:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY3NkYxMTAvBgNVBAUTKEVCQkExNDNCMjg2NjM3MThDRDhDN0RBM0Y2MzEwMDlB OTgwNEVFNUYwHhcNMjUwNTEzMDI0ODU5WhcNMjUwNTIwMDI0ODU5WjAYMRYwFAYD VQQDEw02ODIyYjMxYy0xYTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZdXmlNnPf2A+/Z4YIXeY2bSPcgD4Ep92B1xAfb1531ruCChGsRP7oK3joJ1 Sdv+BcswM+bVEX58cDT0lCn1fGmUNWk0tkfgeNUdPimE1pfksKp+tNp2dLUI5QWW RUui69jxTzLuU3bxWFj30erqdYLiC8PB6f+pZbzuVVbC3Zxk+hsOdA0LeF5EDI0a y/90hKAO5PyMtfCZfA8tHw890655UUPjr7gtUUTrOZBpAD0FC96QPsPaZMWwiPJP 2KWoawA0RCUrRdCTPOVfIKaGxwymj8DnniGy42Z8GzF3P37RK2zCqiTHbhwmOt5n NU8BcudFSAbZ02VRv12ZlZ22OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDV9/2J ZhjfvkVHJkqtAoSTpi3zMB8GA1UdIwQYMBaAFOu6FDsoZjcYzYx9o/YxAJqYBO5f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Njc2Ri9GRTQ5RkFDMkQz QTAxMUVEODE0QzRDMThDNEY5QUUwMi82N29VT3lobU54ak5qSDJqOWpFQW1wZ0U3 bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3b1VPeWhtTnhqTmpIMmo5akVBbXBnRTdsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Njc2Ri9GRTQ5RkFDMkQzQTAxMUVEODE0QzRDMThDNEY5QUUwMi82N29VT3lobU54 ak5qSDJqOWpFQW1wZ0U3bDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKr23ic/k8hP6bYrYbU9TW3MVgOKRkZ/BQKvbDA8RDgm1+dDhXdmew gP89C7lr+G3wnZWRepcSux6XFpqQoEBFQlM15mWsm11nEDECBcc11E73OX97oQB3 X3S+I+tRlAoKd9mPuZ0UPxdIFQbEcZ6N5bVgPylm8/KZ5aNOpzl6JqBLnUPdK42F 8WX50vavyrLujFZb/xTrX12j++A4swBYU7Qdr6VIXQkPXp0cUHnABoAD3mdDd839 nl9eIN0ocyOMaCSCh2rCug1hF7hmRhkpcHMDLjM+26PmhO0QNENa/vFiNpeG4hsb RzBdA0FEnGd9Ef+0geGdEgks2lc4TTyn -----END CERTIFICATE-----Generated at Wed May 14 01:53:23 2025 by rpki-client