$ rpki-client -vvf rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.mft File: acVuJtdk8a5PRoYo5XUx03NKwCc.mft (raw, json) Hash identifier: jVTQCsBITziTX0WejqbmW3GC4I+7oqsxTdQ5QnBjpWI= Subject key identifier: 74:69:B2:EE:22:87:09:DE:2F:57:3F:47:EC:55:06:AC:00:73:02:FC Authority key identifier: 69:C5:6E:26:D7:64:F1:AE:4F:46:86:28:E5:75:31:D3:73:4A:C0:27 Certificate issuer: /CN=A91105F6/serialNumber=69C56E26D764F1AE4F468628E57531D3734AC027 Certificate serial: 01A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acVuJtdk8a5PRoYo5XUx03NKwCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.mft Manifest number: 019C Signing time: Fri 25 Apr 2025 02:34:31 +0000 Manifest this update: Fri 25 Apr 2025 02:34:31 +0000 Manifest next update: Fri 02 May 2025 02:34:31 +0000 Files and hashes: 1: acVuJtdk8a5PRoYo5XUx03NKwCc.crl (hash: sL773QIu9TymLWRVn15NT/Qh9x2ssYAnwMwXT2NlE8M=) 2: 3D93BEB65E6611EEA526DB11C4F9AE02.roa (hash: rj/BOYyadeyH55DESWaHfqSsiGriCli8KPof7zAigo4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.crl rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acVuJtdk8a5PRoYo5XUx03NKwCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:34:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91105F6, serialNumber=69C56E26D764F1AE4F468628E57531D3734AC027 Validity Not Before: Apr 25 02:34:31 2025 GMT Not After : May 2 02:34:31 2025 GMT Subject: CN=680af4b7-65ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:96:5a:51:94:d4:57:9e:f1:6b:73:c6:ce:7b: 39:61:c3:f4:2e:92:89:27:4b:c2:1e:ab:1b:ca:e8: 19:96:e3:a2:28:75:25:bd:47:18:6a:98:47:54:64: 12:d5:1e:5e:c5:15:47:ac:1c:ef:7a:d8:51:a3:d1: 24:36:f1:81:78:4c:df:ae:dd:40:82:ec:ad:47:93: 91:e8:6d:16:13:3e:3b:34:d7:6b:6f:5d:9b:a1:c4: 0b:5a:20:5d:07:83:e0:94:b2:cf:8a:da:60:b8:be: c9:1e:06:dd:5a:7b:c1:d5:7b:30:d8:53:24:11:2b: 6b:17:f9:4b:cc:5d:e1:70:ff:b8:52:30:46:9a:f4: 4f:38:c3:de:c0:73:40:db:1f:2a:c6:fc:4a:b6:40: 77:72:c9:e4:d4:46:d2:2c:a2:b5:86:b6:2d:6c:8b: a2:2b:db:0f:f2:6d:38:b6:a9:bc:ab:ed:f2:25:7d: 69:10:c6:9e:70:31:26:e5:71:e2:17:95:ff:82:1e: db:ff:63:2d:16:cd:a4:b8:04:67:a7:dd:7f:5b:d1: 1f:86:31:0f:c5:c8:9a:2c:03:ed:90:79:bc:f1:55: 77:f0:aa:0d:9f:4f:3a:f2:4a:c8:f0:43:21:2f:2b: fb:61:77:53:53:19:35:74:cf:25:ce:7b:b4:21:82: 82:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:69:B2:EE:22:87:09:DE:2F:57:3F:47:EC:55:06:AC:00:73:02:FC X509v3 Authority Key Identifier: keyid:69:C5:6E:26:D7:64:F1:AE:4F:46:86:28:E5:75:31:D3:73:4A:C0:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acVuJtdk8a5PRoYo5XUx03NKwCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ac:ea:e0:a8:21:6a:99:3f:70:a0:4e:4b:e8:00:06:9d:ab: 1e:b4:16:75:16:9b:56:1b:b5:4e:26:f8:ed:ba:97:d2:24:1a: 03:d5:79:dd:06:84:85:4e:d9:79:c1:9e:c1:7d:d0:ef:90:c8: 51:a9:5b:90:12:bf:3a:ca:e3:d9:6d:96:ae:b4:9d:29:d5:ba: 1a:c0:e3:bd:4d:b7:16:39:f7:2d:64:f2:51:20:f1:93:88:6f: a1:c5:89:1d:56:9e:ad:f8:c1:80:8d:9f:1c:b5:7d:34:f4:b1: ca:f7:db:e6:f0:21:da:bb:02:1c:cd:09:14:78:1e:99:27:c3: 01:9d:be:f0:55:67:52:4d:15:e6:d0:0d:12:5c:b3:95:71:ec: a3:c4:16:bf:54:ab:be:d3:20:34:83:e0:d8:50:54:cf:63:5a: 42:95:95:e8:4c:60:af:69:41:31:ae:c1:18:a4:28:c8:65:46: 70:a7:4b:bd:d2:1e:ac:be:4f:05:b1:f8:54:8c:6c:1d:4a:40: 44:03:ac:47:ec:64:54:34:84:9b:8f:e0:70:ab:c3:4a:b6:e1: 43:9f:8e:56:b7:d5:2c:13:00:f3:29:af:68:f8:22:64:a7:5d: 02:7c:76:ff:e2:60:2c:60:c0:65:68:f5:0c:c7:ae:75:19:69: 2b:8b:ac:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA1RjYxMTAvBgNVBAUTKDY5QzU2RTI2RDc2NEYxQUU0RjQ2ODYyOEU1NzUzMUQz NzM0QUMwMjcwHhcNMjUwNDI1MDIzNDMxWhcNMjUwNTAyMDIzNDMxWjAYMRYwFAYD VQQDEw02ODBhZjRiNy02NWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpZaUZTUV57xa3PGzns5YcP0LpKJJ0vCHqsbyugZluOiKHUlvUcYaphHVGQS 1R5exRVHrBzvethRo9EkNvGBeEzfrt1AguytR5OR6G0WEz47NNdrb12bocQLWiBd B4PglLLPitpguL7JHgbdWnvB1Xsw2FMkEStrF/lLzF3hcP+4UjBGmvRPOMPewHNA 2x8qxvxKtkB3csnk1EbSLKK1hrYtbIuiK9sP8m04tqm8q+3yJX1pEMaecDEm5XHi F5X/gh7b/2MtFs2kuARnp91/W9EfhjEPxciaLAPtkHm88VV38KoNn0868krI8EMh Lyv7YXdTUxk1dM8lznu0IYKC+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHRpsu4i hwneL1c/R+xVBqwAcwL8MB8GA1UdIwQYMBaAFGnFbibXZPGuT0aGKOV1MdNzSsAn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDVGNi9FODIwMDI2QUIz RkIxMUVEQkJEQjMwMjJDNEY5QUUwMi9hY1Z1SnRkazhhNVBSb1lvNVhVeDAzTkt3 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FjVnVKdGRrOGE1UFJvWW81WFV4MDNOS3dDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDVGNi9FODIwMDI2QUIzRkIxMUVEQkJEQjMwMjJDNEY5QUUwMi9hY1Z1SnRkazhh NVBSb1lvNVhVeDAzTkt3Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArrOrgqCFqmT9woE5L6AAGnasetBZ1FptWG7VOJvjtupfSJBoD1Xnd BoSFTtl5wZ7BfdDvkMhRqVuQEr86yuPZbZautJ0p1boawOO9TbcWOfctZPJRIPGT iG+hxYkdVp6t+MGAjZ8ctX009LHK99vm8CHauwIczQkUeB6ZJ8MBnb7wVWdSTRXm 0A0SXLOVceyjxBa/VKu+0yA0g+DYUFTPY1pClZXoTGCvaUExrsEYpCjIZUZwp0u9 0h6svk8FsfhUjGwdSkBEA6xH7GRUNISbj+Bwq8NKtuFDn45Wt9UsEwDzKa9o+CJk p10CfHb/4mAsYMBlaPUMx651GWkri6wq -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:56 2025 by rpki-client