$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft File: C-AoY1W14laYjORU35P8D8p_YEA.mft (raw, json) Hash identifier: v6fh1RHyXvnXWfM1SYzo4adGM96C/T/i58DFTVJP5a8= Subject key identifier: 0E:E0:56:21:04:96:00:E6:90:EF:95:4C:43:C1:EF:44:9A:2A:C5:AC Authority key identifier: 0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40 Certificate issuer: /CN=A91A1D43/serialNumber=0BE0286355B5E256988CE454DF93FC0FCA7F6040 Certificate serial: 0182 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft Manifest number: 017C Signing time: Sun 11 May 2025 02:37:28 +0000 Manifest this update: Sun 11 May 2025 02:37:27 +0000 Manifest next update: Sun 18 May 2025 02:37:27 +0000 Files and hashes: 1: C-AoY1W14laYjORU35P8D8p_YEA.crl (hash: 1+3SxX73NdO4v2PqmcXP3DM/DdPU1wTbShjB7XExleY=) 2: 8BCB2CFAEA3911EDB91E190BC4F9AE02.roa (hash: Gn3bl+JlcAfK7NlSkgTYoj+Bsl8m7KISn3HM2ix+w34=) 3: 8B1BDC14EA3911EDB91E190BC4F9AE02.roa (hash: +iPaNHR0I7CGA19//oU6de8PSF7FBlMHBTXC8ZhTdUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.crl rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:37:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1D43, serialNumber=0BE0286355B5E256988CE454DF93FC0FCA7F6040 Validity Not Before: May 11 02:37:27 2025 GMT Not After : May 18 02:37:27 2025 GMT Subject: CN=68200d68-5dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:30:27:f8:af:e9:ff:0c:38:03:4a:79:f7:a6: 28:65:c1:f2:5b:ed:3d:a8:20:8d:69:f0:01:ad:1c: 2a:85:13:49:61:22:8c:a7:54:dd:73:8f:10:f6:73: 6a:75:60:15:6a:d1:96:da:13:52:02:99:a5:48:61: 7f:da:37:aa:a5:8b:99:07:66:5c:f1:a1:8c:2a:80: bd:cf:b3:7d:e7:83:e4:b6:06:5b:96:10:d6:8b:08: 12:1d:10:23:7d:4d:28:74:db:a5:fa:21:56:01:65: f5:61:34:d9:55:58:79:ad:5c:54:1c:fc:92:a5:5f: b1:8f:f2:20:f5:65:e9:f0:4f:09:ec:79:20:7f:61: 5a:f8:14:b3:07:5a:aa:32:59:d4:88:7e:16:49:81: 20:ae:10:c5:c4:64:b4:60:5e:18:a4:00:c3:de:8b: bc:36:37:80:ca:2a:4f:2b:2b:a1:9c:e8:e8:6f:01: 97:a8:ec:f4:81:8c:b8:6f:7d:03:0f:c8:51:2d:dc: b1:3a:18:6b:12:d3:61:c7:52:71:39:dc:8b:47:2f: e9:ee:e5:3d:d5:f7:86:86:72:3d:f8:e6:59:9c:e1: 68:1d:32:73:97:cf:fb:e5:b4:d0:d2:ee:6c:d4:46: 78:85:a4:f5:59:81:85:9f:96:d9:10:62:85:27:15: 98:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E0:56:21:04:96:00:E6:90:EF:95:4C:43:C1:EF:44:9A:2A:C5:AC X509v3 Authority Key Identifier: keyid:0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:50:ff:99:58:0e:b1:f4:b1:83:67:cc:dd:d0:70:aa:b0:a5: c8:75:12:e9:ac:0e:0d:26:86:3b:8f:e2:1d:3e:74:e3:07:07: ac:80:37:d5:a4:4a:b4:64:72:5b:47:b1:d9:c0:89:b4:39:06: 1c:16:41:c1:29:a5:66:89:1d:5c:e0:96:b8:a2:d6:55:45:33: f4:24:f5:06:07:fa:07:a5:00:3e:4d:e5:7d:49:aa:3e:e9:fe: 01:d7:88:42:e5:f8:63:c2:c3:78:6c:1c:23:d9:ec:16:b3:84: 5c:b9:91:08:5a:4b:89:32:bb:be:8d:1d:c2:c2:45:a7:58:70: c6:65:74:28:17:58:f5:fc:5a:e6:cb:64:e4:0f:26:2a:e3:2c: 3f:ea:40:f0:d5:a9:ba:be:eb:f2:5b:13:e6:5b:90:44:46:e9: de:15:c9:b8:4e:ac:3e:0f:c7:7b:b9:d5:16:cf:4f:6d:2a:10: 42:90:d2:f3:ab:13:b6:1d:be:4d:d9:71:20:bb:64:7c:d8:6d: 70:e8:ce:cf:0e:e1:fe:20:e8:8f:fd:1c:1e:30:8b:c7:3a:9c: 47:bb:8d:e2:c3:38:78:ff:c9:09:49:21:52:df:68:70:18:94: 82:a0:89:cc:12:bb:cb:29:65:02:2b:2e:de:fb:01:17:b1:07: 5e:67:43:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFENDMxMTAvBgNVBAUTKDBCRTAyODYzNTVCNUUyNTY5ODhDRTQ1NERGOTNGQzBG Q0E3RjYwNDAwHhcNMjUwNTExMDIzNzI3WhcNMjUwNTE4MDIzNzI3WjAYMRYwFAYD VQQDEw02ODIwMGQ2OC01ZGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTAn+K/p/ww4A0p596YoZcHyW+09qCCNafABrRwqhRNJYSKMp1Tdc48Q9nNq dWAVatGW2hNSApmlSGF/2jeqpYuZB2Zc8aGMKoC9z7N954PktgZblhDWiwgSHRAj fU0odNul+iFWAWX1YTTZVVh5rVxUHPySpV+xj/Ig9WXp8E8J7Hkgf2Fa+BSzB1qq MlnUiH4WSYEgrhDFxGS0YF4YpADD3ou8NjeAyipPKyuhnOjobwGXqOz0gYy4b30D D8hRLdyxOhhrEtNhx1JxOdyLRy/p7uU91feGhnI9+OZZnOFoHTJzl8/75bTQ0u5s 1EZ4haT1WYGFn5bZEGKFJxWYmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7gViEE lgDmkO+VTEPB70SaKsWsMB8GA1UdIwQYMBaAFAvgKGNVteJWmIzkVN+T/A/Kf2BA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUQ0My84OTI5REZERUVB MjgxMUVEQjdERDAxMThDNEY5QUUwMi9DLUFvWTFXMTRsYVlqT1JVMzVQOEQ4cF9Z RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MtQW9ZMVcxNGxhWWpPUlUzNVA4RDhwX1lFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUQ0My84OTI5REZERUVBMjgxMUVEQjdERDAxMThDNEY5QUUwMi9DLUFvWTFXMTRs YVlqT1JVMzVQOEQ4cF9ZRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlUP+ZWA6x9LGDZ8zd0HCqsKXIdRLprA4NJoY7j+IdPnTjBwesgDfV pEq0ZHJbR7HZwIm0OQYcFkHBKaVmiR1c4Ja4otZVRTP0JPUGB/oHpQA+TeV9Sao+ 6f4B14hC5fhjwsN4bBwj2ewWs4RcuZEIWkuJMru+jR3CwkWnWHDGZXQoF1j1/Frm y2TkDyYq4yw/6kDw1am6vuvyWxPmW5BERuneFcm4Tqw+D8d7udUWz09tKhBCkNLz qxO2Hb5N2XEgu2R82G1w6M7PDuH+IOiP/RweMIvHOpxHu43iwzh4/8kJSSFS32hw GJSCoInMErvLKWUCKy7e+wEXsQdeZ0OL -----END CERTIFICATE-----Generated at Mon May 12 23:58:20 2025 by rpki-client