$ rpki-client -vvf rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft File: RMCz5V6PTVgxhgXnITScArKJwv0.mft (raw, json) Hash identifier: Osm/PZxVJ2GnVKIcatAM1qJi4fzx/hvhOdawW4gWhzs= Subject key identifier: 7E:A5:EF:3F:D0:FA:BD:12:67:DE:54:00:CA:BD:38:9F:F9:2B:D3:9F Authority key identifier: 44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD Certificate issuer: /CN=A91167F7/serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD Certificate serial: 06C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft Manifest number: 06C4 Signing time: Thu 24 Apr 2025 21:52:02 +0000 Manifest this update: Thu 24 Apr 2025 21:52:02 +0000 Manifest next update: Thu 01 May 2025 21:52:02 +0000 Files and hashes: 1: RMCz5V6PTVgxhgXnITScArKJwv0.crl (hash: nvZIj2T+UdDLd+vV9EP1gKJkkxBpM8C+x+PLuWBeSyU=) 2: 980A0D7254B511EBAC30E864C4F9AE02.roa (hash: PrgqmGPVCZutr73KuPF9z7k4L5rKkcCQ9HWUA608bqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1737 (0x6c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91167F7, serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD Validity Not Before: Apr 24 21:52:02 2025 GMT Not After : May 1 21:52:02 2025 GMT Subject: CN=680ab282-6083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f0:a0:a2:dd:05:4a:fc:ab:2d:ab:84:a9:cd: 18:85:e3:6d:0d:aa:d9:f0:54:58:8c:77:12:4e:bf: 89:d8:45:14:e6:4b:86:08:7f:e3:ec:63:48:bd:b6: 68:13:f9:4e:2c:a4:df:c8:db:3a:60:99:a5:9f:e8: 7f:04:66:91:0d:ca:a2:25:8e:7c:59:2c:ce:6e:e1: ff:97:6d:04:2e:25:4c:31:b1:cb:8a:c3:b8:38:3d: 60:05:6d:fa:05:3e:e8:03:98:bb:4d:e1:b7:e4:1b: 36:98:e5:f2:bb:21:b4:0e:84:4a:9b:d9:78:9a:b8: 27:2e:40:6c:78:1c:41:41:7a:19:2f:06:24:88:59: 7c:1a:56:82:56:31:b7:0d:d3:1f:0b:a3:69:23:e0: 64:69:5b:d7:e0:c8:2b:e5:a5:f2:99:d5:ff:9e:e0: c8:ce:1c:06:f5:38:52:8e:0b:87:dd:4f:17:52:58: ab:e1:90:00:dc:02:32:f5:99:2c:23:b3:e5:02:9f: 18:cf:cc:c6:85:88:50:36:10:10:85:43:ca:f1:19: 3e:88:eb:cf:ca:a6:5d:d1:a3:c6:71:d8:f9:dd:b5: 1e:2b:73:76:91:b5:0a:c7:93:f7:94:fa:af:24:d5: 54:a2:8d:03:a4:cc:ab:96:4c:92:39:ef:79:69:e0: f4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A5:EF:3F:D0:FA:BD:12:67:DE:54:00:CA:BD:38:9F:F9:2B:D3:9F X509v3 Authority Key Identifier: keyid:44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:58:af:2d:59:f0:50:90:04:df:06:28:d6:33:30:0a:fe:ab: be:f3:66:b3:fa:b3:e7:fe:99:fa:af:51:86:0a:74:44:45:5b: da:66:a1:46:7a:b9:fc:3d:0e:bf:c8:e6:cb:ca:78:9c:d8:f5: 5c:39:4c:b3:c7:e2:a0:87:98:be:92:d5:d7:90:75:89:76:44: 83:2f:8a:a7:1f:e0:e1:72:6a:4c:c3:38:01:39:45:21:50:68: 1f:99:5c:6a:f0:b4:cf:7a:8e:44:1e:1e:ed:94:16:e1:e5:b9: f1:30:63:ca:19:05:54:78:84:66:54:d5:c1:24:c8:f6:07:c4: bd:64:88:29:07:2f:26:ce:02:f5:89:40:f2:14:93:99:cb:3c: 75:bd:be:dc:21:a4:d6:e5:f9:06:dd:66:45:a7:b7:1c:37:12: da:fc:2c:e4:b6:fb:f1:4f:2e:2c:c7:d0:ed:c4:4d:14:e3:a8: 59:c2:28:93:91:5b:12:c7:48:d0:1c:0c:c0:0f:70:dd:88:4b: 0b:bc:f5:3e:93:56:3e:89:d9:98:c4:c6:7b:66:b3:1a:ae:97: 2e:92:91:83:73:ca:7d:14:ed:bf:14:ea:ee:d5:ad:d0:de:3f: 0c:a5:51:83:ee:ec:c3:3b:85:1f:e8:59:ee:d3:d8:5e:ed:c6: 60:f8:0b:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY3RjcxMTAvBgNVBAUTKDQ0QzBCM0U1NUU4RjRENTgzMTg2MDVFNzIxMzQ5QzAy QjI4OUMyRkQwHhcNMjUwNDI0MjE1MjAyWhcNMjUwNTAxMjE1MjAyWjAYMRYwFAYD VQQDEw02ODBhYjI4Mi02MDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfCgot0FSvyrLauEqc0YheNtDarZ8FRYjHcSTr+J2EUU5kuGCH/j7GNIvbZo E/lOLKTfyNs6YJmln+h/BGaRDcqiJY58WSzObuH/l20ELiVMMbHLisO4OD1gBW36 BT7oA5i7TeG35Bs2mOXyuyG0DoRKm9l4mrgnLkBseBxBQXoZLwYkiFl8GlaCVjG3 DdMfC6NpI+BkaVvX4Mgr5aXymdX/nuDIzhwG9ThSjguH3U8XUlir4ZAA3AIy9Zks I7PlAp8Yz8zGhYhQNhAQhUPK8Rk+iOvPyqZd0aPGcdj53bUeK3N2kbUKx5P3lPqv JNVUoo0DpMyrlkySOe95aeD0MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6l7z/Q +r0SZ95UAMq9OJ/5K9OfMB8GA1UdIwQYMBaAFETAs+Vej01YMYYF5yE0nAKyicL9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjdGNy9CRkQzRUIxQTU0 MTYxMUVCQTRENTY4NjNDNEY5QUUwMi9STUN6NVY2UFRWZ3hoZ1huSVRTY0FyS0p3 djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JNQ3o1VjZQVFZneGhnWG5JVFNjQXJLSnd2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjdGNy9CRkQzRUIxQTU0MTYxMUVCQTRENTY4NjNDNEY5QUUwMi9STUN6NVY2UFRW Z3hoZ1huSVRTY0FyS0p3djAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApWK8tWfBQkATfBijWMzAK/qu+82az+rPn/pn6r1GGCnRERVvaZqFG ern8PQ6/yObLynic2PVcOUyzx+Kgh5i+ktXXkHWJdkSDL4qnH+DhcmpMwzgBOUUh UGgfmVxq8LTPeo5EHh7tlBbh5bnxMGPKGQVUeIRmVNXBJMj2B8S9ZIgpBy8mzgL1 iUDyFJOZyzx1vb7cIaTW5fkG3WZFp7ccNxLa/CzktvvxTy4sx9DtxE0U46hZwiiT kVsSx0jQHAzAD3DdiEsLvPU+k1Y+idmYxMZ7ZrMarpcukpGDc8p9FO2/FOru1a3Q 3j8MpVGD7uzDO4Uf6Fnu09he7cZg+AuQ -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:29 2025 by rpki-client