$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft File: 67tHPRcLa4MG0eFsi5UjNK3UDxA.mft (raw, json) Hash identifier: RAdODk6y7+AVYKtnANVaNGbh+EwgYz6zO4yuhQubIJ8= Subject key identifier: EE:8F:B8:F7:EE:D7:5A:BB:6E:FB:5D:76:E7:6F:E0:0F:E5:C8:61:D3 Authority key identifier: EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10 Certificate issuer: /CN=A91D9F5A/serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10 Certificate serial: 0786 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft Manifest number: 077A Signing time: Wed 14 May 2025 21:31:33 +0000 Manifest this update: Wed 14 May 2025 21:31:33 +0000 Manifest next update: Wed 21 May 2025 21:31:33 +0000 Files and hashes: 1: 67tHPRcLa4MG0eFsi5UjNK3UDxA.crl (hash: HlWWHXUSvNNSdtNuoRpb0Sq0YY5j81EZe4PhBwgMQYU=) 2: 1ACA9A7011BC11EBA0759F52C4F9AE02.roa (hash: amC9VLfi+h/4ZDnU3sMw+WpldrrpwLAVL1VxjIVr5hA=) 3: 1A0FD01411BC11EBA0759F52C4F9AE02.roa (hash: UOZRKzCJH5HWiY2RxPCw9LX5ZD4SHgioNH/U/hkmK9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 21:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1926 (0x786) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9F5A, serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10 Validity Not Before: May 14 21:31:33 2025 GMT Not After : May 21 21:31:33 2025 GMT Subject: CN=68250bb5-ee6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bc:27:f8:75:e3:ff:f0:72:a0:d2:ab:42:4e: d8:ed:b6:3c:6c:48:6d:01:9a:1d:30:74:2f:fb:4b: 25:fa:58:c6:a3:f6:9a:90:ee:0f:fb:d6:7f:f5:1b: 0d:ca:fd:96:38:2f:b9:79:26:da:26:25:f5:08:18: d6:dd:47:0b:90:68:84:33:a8:ff:0b:68:bc:43:ae: ed:b3:b6:28:19:d5:90:f9:93:21:0b:0b:f7:74:c2: 8a:b5:75:c4:90:a5:fa:97:9b:f7:8d:da:05:17:4b: d7:7d:b7:f9:1e:12:43:cb:e3:40:6e:8d:be:66:fa: 22:15:27:bd:0d:ed:e9:a7:96:8e:13:20:f9:38:2f: 7e:5c:9a:c2:c8:1f:00:2c:76:d0:05:c1:16:d9:4b: 4a:97:f9:42:75:5e:8d:c8:6c:ef:e1:eb:2d:bb:20: 52:60:ad:2c:ed:e8:15:09:8a:16:d0:42:7e:9a:d0: d0:92:17:c3:23:95:c6:f8:08:2e:00:00:22:6e:ab: 49:10:64:d9:6c:4c:91:98:a6:31:3b:f1:f7:5d:16: 1d:0a:ea:7d:34:3c:d9:4e:fa:35:31:f9:c1:e1:18: 37:11:48:09:60:ef:78:24:ef:ec:e1:45:b6:a6:62: 09:c4:d5:74:97:c1:9b:9c:7f:f3:0e:fb:c5:f2:0f: 43:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8F:B8:F7:EE:D7:5A:BB:6E:FB:5D:76:E7:6F:E0:0F:E5:C8:61:D3 X509v3 Authority Key Identifier: keyid:EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:08:3f:fe:69:2a:a0:b4:a6:58:9b:3f:cd:0a:2f:c0:c8:dc: ee:17:ac:4e:de:40:74:12:9d:55:9a:cf:a7:61:06:9e:3d:ab: 34:58:cd:44:60:40:b6:57:01:27:4c:be:c9:32:56:99:de:95: 5a:80:a4:05:ca:aa:14:83:84:42:fa:f9:52:5f:d9:1e:1f:90: d9:91:66:89:e5:e6:46:46:25:98:b1:06:f6:32:64:0e:b7:20: a0:ba:7b:91:2a:10:1d:f8:cc:67:3d:a8:05:33:8e:b3:ea:a6: b5:63:90:fc:06:e5:da:99:9c:5f:61:f5:ed:39:5c:33:c3:5e: 75:82:78:eb:f7:ca:20:10:57:0c:40:dc:40:60:35:e1:f1:77: 10:9c:b1:a3:7d:06:ab:91:ca:74:56:69:6a:d6:a9:36:f4:9d: 00:cf:eb:2b:96:68:1c:32:7a:d0:ef:07:90:c0:38:e0:1f:c9: 21:ef:0d:4b:ea:2c:0a:61:21:c9:02:4d:14:c4:6b:0b:c8:28: a7:43:28:ea:77:a0:ac:43:f5:83:88:d4:49:52:7c:aa:8d:4b: 12:47:76:fd:f3:53:3b:d7:f3:3a:1b:00:75:5f:aa:69:5d:ba: 47:e8:af:86:a0:db:a2:39:51:a4:74:a9:db:fa:24:eb:a2:a5: db:69:68:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGNUExMTAvBgNVBAUTKEVCQkI0NzNEMTcwQjZCODMwNkQxRTE2QzhCOTUyMzM0 QURENDBGMTAwHhcNMjUwNTE0MjEzMTMzWhcNMjUwNTIxMjEzMTMzWjAYMRYwFAYD VQQDEw02ODI1MGJiNS1lZTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLwn+HXj//ByoNKrQk7Y7bY8bEhtAZodMHQv+0sl+ljGo/aakO4P+9Z/9RsN yv2WOC+5eSbaJiX1CBjW3UcLkGiEM6j/C2i8Q67ts7YoGdWQ+ZMhCwv3dMKKtXXE kKX6l5v3jdoFF0vXfbf5HhJDy+NAbo2+ZvoiFSe9De3pp5aOEyD5OC9+XJrCyB8A LHbQBcEW2UtKl/lCdV6NyGzv4estuyBSYK0s7egVCYoW0EJ+mtDQkhfDI5XG+Agu AAAibqtJEGTZbEyRmKYxO/H3XRYdCup9NDzZTvo1MfnB4Rg3EUgJYO94JO/s4UW2 pmIJxNV0l8GbnH/zDvvF8g9DVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO6PuPfu 11q7bvtddudv4A/lyGHTMB8GA1UdIwQYMBaAFOu7Rz0XC2uDBtHhbIuVIzSt1A8Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUY1QS8wODk4QjIzQTEx QkExMUVCQkMxQTU4NENDNEY5QUUwMi82N3RIUFJjTGE0TUcwZUZzaTVVak5LM1VE eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3dEhQUmNMYTRNRzBlRnNpNVVqTkszVUR4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUY1QS8wODk4QjIzQTExQkExMUVCQkMxQTU4NENDNEY5QUUwMi82N3RIUFJjTGE0 TUcwZUZzaTVVak5LM1VEeEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMCD/+aSqgtKZYmz/NCi/AyNzuF6xO3kB0Ep1Vms+nYQaePas0WM1E YEC2VwEnTL7JMlaZ3pVagKQFyqoUg4RC+vlSX9keH5DZkWaJ5eZGRiWYsQb2MmQO tyCgunuRKhAd+MxnPagFM46z6qa1Y5D8BuXamZxfYfXtOVwzw151gnjr98ogEFcM QNxAYDXh8XcQnLGjfQarkcp0Vmlq1qk29J0Az+srlmgcMnrQ7weQwDjgH8kh7w1L 6iwKYSHJAk0UxGsLyCinQyjqd6CsQ/WDiNRJUnyqjUsSR3b981M71/M6GwB1X6pp XbpH6K+GoNuiOVGkdKnb+iTroqXbaWjF -----END CERTIFICATE-----Generated at Thu May 15 01:41:34 2025 by rpki-client