$ rpki-client -vvf rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft File: R29XKjgCNq8z9i2CpbomTS-7rXw.mft (raw, json) Hash identifier: 64u1/q2xw+AM24Z9cKdRc1WEPg6gP6XpBfskMTtLvK4= Subject key identifier: F0:26:C5:86:D7:D2:17:0F:C1:E4:F2:6E:FC:20:EE:3A:E6:AF:F2:60 Authority key identifier: 47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C Certificate issuer: /CN=A91115D5/serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C Certificate serial: 1288 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft Manifest number: 1266 Signing time: Thu 24 Apr 2025 17:07:53 +0000 Manifest this update: Thu 24 Apr 2025 17:07:53 +0000 Manifest next update: Thu 01 May 2025 17:07:53 +0000 Files and hashes: 1: R29XKjgCNq8z9i2CpbomTS-7rXw.crl (hash: pwomhZ97diKAebIP+0+Ne7TnKTY4RE5pM3NMo6qiUKQ=) 2: 4978C5B2089911F0B2664480C4F9AE02.roa (hash: 00dFUbxtRi+P5zmsb5ryh9HhmqE32J+HOZ/FYXFpiHQ=) 3: 48B8F476089911F0B2664480C4F9AE02.roa (hash: JWTxPbAMnC0V4yG1gFdPedapzuHJ8Aw4XsiM14hADdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4744 (0x1288) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91115D5, serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C Validity Not Before: Apr 24 17:07:53 2025 GMT Not After : May 1 17:07:53 2025 GMT Subject: CN=680a6fe9-7b26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8b:b8:b1:9f:7f:9b:9d:de:d9:ad:9e:6f:7d: 99:80:19:4a:58:9e:b0:f6:2d:98:87:7b:36:f9:fb: 8c:1d:2b:82:ef:e4:10:25:80:31:8c:25:61:fe:1b: d6:11:c8:a1:fd:1b:7d:21:8c:1e:32:ae:30:40:9c: e2:5e:b8:e9:68:34:38:a3:71:79:04:fd:e4:b5:87: 8b:ca:71:5a:19:20:a1:a1:b7:c1:17:0a:8e:d7:66: f8:f4:47:5b:05:85:c3:a6:d2:45:1e:9d:b8:ed:8f: dc:18:33:14:16:56:bf:61:6b:fb:45:10:c4:81:81: 37:52:39:3f:cb:95:61:e0:75:34:2d:f5:b5:37:d9: 03:1d:ff:53:b3:6b:bf:ba:85:92:e0:4e:0e:55:4f: 20:9b:4e:e4:8e:4e:85:24:37:fd:5b:ef:20:dc:68: 29:34:2e:d5:28:db:d9:c4:c5:c0:32:73:00:c4:e3: 98:35:3a:5b:5f:2b:bf:fb:28:bf:0d:30:fc:32:ab: 36:da:bc:5a:cf:38:d9:c9:a9:f0:88:0e:e3:8d:f3: b2:05:7f:ad:7b:20:fd:e8:2b:af:72:5d:50:11:d7: eb:1e:ae:7f:4e:ac:8f:65:3a:73:16:eb:3c:62:79: 0c:9b:ea:a9:74:b3:3b:53:90:05:92:46:3c:89:36: ef:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:26:C5:86:D7:D2:17:0F:C1:E4:F2:6E:FC:20:EE:3A:E6:AF:F2:60 X509v3 Authority Key Identifier: keyid:47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:28:1d:4d:a8:11:f5:bd:2e:39:0a:25:fb:62:0b:2e:34:a4: 4d:0c:37:9b:3c:f8:d6:a0:cb:96:1a:33:37:ab:ab:24:50:cb: e0:2c:96:28:aa:61:73:33:05:a2:94:53:55:65:63:7a:43:1b: ae:b5:fd:f9:bb:a7:3b:9f:d1:a9:11:be:42:0a:e4:7e:0c:f2: 46:5c:b8:e0:60:2c:1d:3e:ad:1c:b3:5c:59:07:f3:56:15:57: 61:2b:16:b2:e3:71:d5:46:59:91:f9:13:19:14:ac:40:5a:f4: 55:48:2a:91:59:c6:a1:d8:a1:8c:3d:17:42:50:a2:21:a0:f5: 53:d8:4f:ef:04:00:3a:c9:54:ce:5f:69:0b:b6:da:5e:c4:3a: 41:35:4e:00:46:28:d2:21:91:b4:b3:76:b3:6e:0e:0d:8a:27: e6:4a:7f:56:10:3c:ab:f6:cf:7b:95:1d:69:da:76:89:4c:c2: 1d:43:c1:f2:3b:d3:d8:42:be:e4:a3:99:8c:44:21:b1:38:d0: a4:30:d3:e6:73:99:cf:64:07:e9:5e:5a:31:d8:0d:92:4b:47: e9:9f:ab:e6:a5:a0:a8:df:4f:3b:a1:c4:bf:4f:2e:c8:ad:b8: d2:7c:64:5c:98:1d:32:00:6d:40:49:b9:c1:7a:fc:31:b6:94: 6c:1c:06:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE1RDUxMTAvBgNVBAUTKDQ3NkY1NzJBMzgwMjM2QUYzM0Y2MkQ4MkE1QkEyNjRE MkZCQkFEN0MwHhcNMjUwNDI0MTcwNzUzWhcNMjUwNTAxMTcwNzUzWjAYMRYwFAYD VQQDEw02ODBhNmZlOS03YjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo4u4sZ9/m53e2a2eb32ZgBlKWJ6w9i2Yh3s2+fuMHSuC7+QQJYAxjCVh/hvW Ecih/Rt9IYweMq4wQJziXrjpaDQ4o3F5BP3ktYeLynFaGSChobfBFwqO12b49Edb BYXDptJFHp247Y/cGDMUFla/YWv7RRDEgYE3Ujk/y5Vh4HU0LfW1N9kDHf9Ts2u/ uoWS4E4OVU8gm07kjk6FJDf9W+8g3GgpNC7VKNvZxMXAMnMAxOOYNTpbXyu/+yi/ DTD8Mqs22rxazzjZyanwiA7jjfOyBX+teyD96Cuvcl1QEdfrHq5/TqyPZTpzFus8 YnkMm+qpdLM7U5AFkkY8iTbv3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAmxYbX 0hcPweTybvwg7jrmr/JgMB8GA1UdIwQYMBaAFEdvVyo4AjavM/YtgqW6Jk0vu618 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTVENS80RUJDQUYyNkQw QUYxMUU4QUFFQjA3NTZDNEY5QUUwMi9SMjlYS2pnQ05xOHo5aTJDcGJvbVRTLTdy WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IyOVhLamdDTnE4ejlpMkNwYm9tVFMtN3JYdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTVENS80RUJDQUYyNkQwQUYxMUU4QUFFQjA3NTZDNEY5QUUwMi9SMjlYS2pnQ05x OHo5aTJDcGJvbVRTLTdyWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvKB1NqBH1vS45CiX7YgsuNKRNDDebPPjWoMuWGjM3q6skUMvgLJYo qmFzMwWilFNVZWN6Qxuutf35u6c7n9GpEb5CCuR+DPJGXLjgYCwdPq0cs1xZB/NW FVdhKxay43HVRlmR+RMZFKxAWvRVSCqRWcah2KGMPRdCUKIhoPVT2E/vBAA6yVTO X2kLttpexDpBNU4ARijSIZG0s3azbg4NiifmSn9WEDyr9s97lR1p2naJTMIdQ8Hy O9PYQr7ko5mMRCGxONCkMNPmc5nPZAfpXlox2A2SS0fpn6vmpaCo3087ocS/Ty7I rbjSfGRcmB0yAG1ASbnBevwxtpRsHAYI -----END CERTIFICATE-----Generated at Sat Apr 26 05:22:22 2025 by rpki-client