$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft File: D6tO-YKPSvJnwW2K1HEKjuybu64.mft (raw, json) Hash identifier: vVPBzxk3ZbIohsXx42bTju4oDaghhetNZFbpX2b+JPs= Subject key identifier: EB:EB:9D:3F:25:4C:6D:37:B2:20:88:74:94:C0:26:F0:1E:C2:FE:33 Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE Certificate issuer: /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft Manifest number: 0171 Signing time: Thu 15 May 2025 03:12:01 +0000 Manifest this update: Thu 15 May 2025 03:12:01 +0000 Manifest next update: Thu 22 May 2025 03:12:01 +0000 Files and hashes: 1: D6tO-YKPSvJnwW2K1HEKjuybu64.crl (hash: 9TphkoXykzYjJ7okRumq6iUnkPYCZT/Y/kIUnMvG/Jk=) 2: A0DEDD52FDF811EEA4D57274C4F9AE02.roa (hash: vdvXxO6hOVkfy87PEKE+BccPO1owcMEO3zlcdidAXcY=) 3: A16366C6FDF811EEA4D57274C4F9AE02.roa (hash: XPJpmrYNcSNbm9TnuwsF2hc9Dluf13QgHRh9YOFG7n8=) 4: A1C0742EFDF811EEA4D57274C4F9AE02.roa (hash: JXeJqxRjv6XY1o3PZOsZQUdvlF7VbU2rS+ppRqunUIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:12:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Validity Not Before: May 15 03:12:01 2025 GMT Not After : May 22 03:12:01 2025 GMT Subject: CN=68255b81-e703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d5:53:d5:5f:37:ef:5b:48:3a:2e:17:b2:91: f4:6b:53:b1:f7:cc:da:87:62:7e:34:56:f0:20:63: 20:2b:6d:61:30:de:1e:a0:f4:05:91:6f:d9:79:85: 46:12:95:b8:26:c4:67:cb:7e:0e:47:c2:de:a4:4b: 86:73:a2:5d:0b:78:34:e7:59:f4:df:37:35:50:d1: a8:e4:bb:f6:59:2e:40:cf:2b:7a:ca:de:50:8f:46: 60:a0:c9:3f:71:eb:29:58:bd:57:3c:e8:9b:b8:bd: 6e:61:e2:d4:2e:7c:42:c9:56:ce:30:8d:d1:ac:7b: 07:a9:77:23:0e:62:25:6f:d3:ed:48:52:0f:fd:14: 87:50:fa:78:1d:e0:66:f2:58:bc:f2:b4:bb:4f:8d: c7:aa:1a:6e:79:0b:4e:f2:52:c4:a5:4d:03:7e:c3: b8:f8:54:ee:bb:31:75:f7:16:1f:dd:ac:a5:da:a0: 97:f1:e9:b4:c9:e1:77:96:b6:52:1c:1d:59:1f:0e: 35:8c:a5:86:d8:4f:0e:05:bd:d3:34:eb:90:2c:e1: 2d:16:0c:bc:45:08:eb:24:c0:a2:4f:e7:1b:e4:f2: 5a:de:2b:44:a2:95:9a:29:db:d9:dd:6a:5d:e7:cd: 45:0d:0c:e5:26:24:f6:11:b5:5a:3c:48:24:e3:ca: 30:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:EB:9D:3F:25:4C:6D:37:B2:20:88:74:94:C0:26:F0:1E:C2:FE:33 X509v3 Authority Key Identifier: keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:04:bb:6c:23:39:25:bb:db:c3:c7:cb:07:c1:44:23:ac:de: a1:c7:ca:81:6d:70:2c:24:a5:d3:ed:bc:96:4f:70:ef:d0:09: e2:e3:98:8b:37:9f:7a:87:01:00:e6:6d:4d:64:58:39:4e:ca: ca:ab:b7:23:1b:7e:35:2a:1e:d4:2c:03:a8:9d:3b:49:00:9a: b1:00:38:45:d5:14:22:ca:ba:4a:94:ad:24:31:bb:26:c3:8e: 68:54:9d:06:a4:da:4b:fb:bc:d3:12:5d:18:77:c4:ae:82:ef: 90:43:2b:ac:ae:8b:dd:c1:df:69:f1:dc:ac:d2:dc:ce:ab:7a: 41:93:45:82:57:63:6e:29:8f:5c:18:e1:78:12:d9:42:15:fb: 24:8c:41:df:94:1a:9d:3d:9b:50:94:79:d1:82:15:24:73:03: cf:de:3e:b4:4a:7b:e6:81:7e:17:79:3c:fa:83:c8:01:ab:cd: 06:0e:6d:77:c2:e4:45:cf:e2:1d:4e:3d:67:d5:9d:21:c2:10: 3b:2a:d7:23:73:c7:4a:b8:15:16:8c:d3:bd:a3:a5:0c:88:27: c2:f5:6b:e6:34:70:9a:f7:b9:d8:0d:0f:98:2f:6f:bb:b9:84: 63:1f:35:d3:6e:0f:41:93:62:86:bb:1c:d4:97:dc:a2:77:04: b6:2e:07:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCRTkxMTAvBgNVBAUTKDBGQUI0RUY5ODI4RjRBRjI2N0MxNkQ4QUQ0NzEwQThF RUM5QkJCQUUwHhcNMjUwNTE1MDMxMjAxWhcNMjUwNTIyMDMxMjAxWjAYMRYwFAYD VQQDEw02ODI1NWI4MS1lNzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutVT1V8371tIOi4XspH0a1Ox98zah2J+NFbwIGMgK21hMN4eoPQFkW/ZeYVG EpW4JsRny34OR8LepEuGc6JdC3g051n03zc1UNGo5Lv2WS5Azyt6yt5Qj0ZgoMk/ cespWL1XPOibuL1uYeLULnxCyVbOMI3RrHsHqXcjDmIlb9PtSFIP/RSHUPp4HeBm 8li88rS7T43HqhpueQtO8lLEpU0DfsO4+FTuuzF19xYf3ayl2qCX8em0yeF3lrZS HB1ZHw41jKWG2E8OBb3TNOuQLOEtFgy8RQjrJMCiT+cb5PJa3itEopWaKdvZ3Wpd 581FDQzlJiT2EbVaPEgk48ow0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvrnT8l TG03siCIdJTAJvAewv4zMB8GA1UdIwQYMBaAFA+rTvmCj0ryZ8FtitRxCo7sm7uu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJFOS85NEM5Qjg3ODAw NUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2Sm53VzJLMUhFS2p1eWJ1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q2dE8tWUtQU3ZKbndXMksxSEVLanV5YnU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUJFOS85NEM5Qjg3ODAwNUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2 Sm53VzJLMUhFS2p1eWJ1NjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfBLtsIzklu9vDx8sHwUQjrN6hx8qBbXAsJKXT7byWT3Dv0Ani45iL N596hwEA5m1NZFg5TsrKq7cjG341Kh7ULAOonTtJAJqxADhF1RQiyrpKlK0kMbsm w45oVJ0GpNpL+7zTEl0Yd8Sugu+QQyusrovdwd9p8dys0tzOq3pBk0WCV2NuKY9c GOF4EtlCFfskjEHflBqdPZtQlHnRghUkcwPP3j60SnvmgX4XeTz6g8gBq80GDm13 wuRFz+IdTj1n1Z0hwhA7Ktcjc8dKuBUWjNO9o6UMiCfC9WvmNHCa97nYDQ+YL2+7 uYRjHzXTbg9Bk2KGuxzUl9yidwS2Lgei -----END CERTIFICATE-----Generated at Fri May 16 07:10:16 2025 by rpki-client