$ rpki-client -vvf rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft File: keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft (raw, json) Hash identifier: uk6bwwK2QM/Vd1FuPEQ7OEJu+wdi1j4jwA3YgHDZkKw= Subject key identifier: 7D:37:E4:A3:49:20:74:17:A3:20:F6:6B:E1:C6:CC:1D:00:DE:90:17 Authority key identifier: 91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A Certificate issuer: /CN=A911ACAC/serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A Certificate serial: 04AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft Manifest number: 04A0 Signing time: Thu 24 Apr 2025 23:46:30 +0000 Manifest this update: Thu 24 Apr 2025 23:46:30 +0000 Manifest next update: Thu 01 May 2025 23:46:30 +0000 Files and hashes: 1: keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl (hash: TlcOA3jCneWRA9sqJ7VTbwr8TD6VCi3XpDZePuJjQJk=) 2: C52B4E0A3FE011EF88794913C4F9AE02.roa (hash: BHc0YO4uerOV3pChxVjG7O544zd2LrVw+gOJhxCdrB0=) 3: 1295B5943FA611EF94664041C4F9AE02.roa (hash: FuWrvkmDIg3mxhyAWWbi/ukBRQacmBTwsE71FX0nX8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1196 (0x4ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ACAC, serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A Validity Not Before: Apr 24 23:46:30 2025 GMT Not After : May 1 23:46:30 2025 GMT Subject: CN=680acd56-f970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7f:23:09:a5:8b:7d:62:4c:0f:0a:5f:b1:2b: b5:cc:78:40:ba:6e:7f:88:0a:85:0a:f0:bf:f1:a2: 15:f9:4e:82:16:f5:8f:68:e3:70:bd:43:49:a5:d0: b5:4b:ff:1f:6f:9b:fa:57:0c:14:3c:72:f3:5a:cb: b5:fd:c7:84:8d:28:6d:e2:cd:b8:35:35:d7:57:50: f0:fa:b6:45:66:59:c0:a4:a7:36:37:de:a7:86:ee: 71:0c:0e:90:a4:2f:eb:ee:92:d4:67:af:ce:eb:f9: 3f:48:fc:38:84:93:8a:c2:0b:3b:20:9d:32:51:fc: 24:84:2c:45:2d:b1:7f:dc:62:d7:8a:52:1e:37:3f: f4:4f:cd:5d:a5:8f:ad:df:66:5d:77:4a:17:de:ff: ba:03:c1:73:82:2d:3d:c1:62:4c:c4:a8:38:34:a2: 5f:2d:cf:99:00:f3:10:e8:c2:d8:98:a6:81:76:d4: b4:e0:70:ad:c9:bf:60:a4:37:00:1f:ab:b4:7f:16: 8c:bd:2d:0c:03:17:c7:46:61:f0:9e:4d:8f:df:f1: af:63:d8:2f:4f:7f:fa:2d:ae:30:35:f9:dc:9c:21: 03:e2:91:c9:44:38:42:66:3a:49:9d:e5:d6:11:ea: 29:04:39:dd:8f:ee:fd:50:06:74:ac:36:11:91:fc: 85:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:37:E4:A3:49:20:74:17:A3:20:F6:6B:E1:C6:CC:1D:00:DE:90:17 X509v3 Authority Key Identifier: keyid:91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:fd:e1:c7:5d:b6:a1:cc:43:ad:04:c1:b6:d2:20:2f:08:c9: ee:6c:61:d2:2f:b3:c2:57:b5:79:52:f2:79:ad:0e:4e:4a:ea: de:33:82:68:fa:12:a7:16:1b:2f:a1:6a:9f:01:f6:53:56:a9: 84:40:93:f5:33:6c:89:6a:3e:d0:e1:20:7e:db:72:cb:00:1e: c6:20:1b:7a:b7:a5:eb:8c:d4:5a:2a:f9:b5:6b:f5:d4:95:d4: 2d:67:b1:72:1d:be:6f:8e:d7:4c:0b:27:74:37:1b:a3:37:d3: bd:7a:f5:55:2c:0f:d9:8a:85:50:2d:81:e7:ec:5b:5b:66:b6: 47:de:05:11:2c:e5:c3:88:22:07:2d:2e:b9:3d:8c:2d:50:8f: 71:fa:42:9a:43:a0:9a:6a:7f:b6:3d:ec:ae:6e:27:ec:2a:4a: 53:ff:f9:07:2d:f9:c0:0f:9d:cb:05:05:39:e1:3d:99:59:45: aa:7d:bc:89:fa:5b:1c:cb:38:83:5f:01:88:3a:43:92:39:97: 35:89:5d:bb:89:8f:ef:de:ce:e6:ea:e1:45:e7:3d:d6:38:48: a9:08:cb:34:22:02:e2:85:79:19:f1:89:51:49:ea:9c:89:14: 62:a8:7c:6f:5b:1a:9a:59:0e:82:1c:45:74:e6:c4:e9:9d:8d: 39:6b:37:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFDQUMxMTAvBgNVBAUTKDkxRTY3OTcyMUVEMUUwOTI3RUJCN0U0NjFDODA1ODBE MjM5MzU5MkEwHhcNMjUwNDI0MjM0NjMwWhcNMjUwNTAxMjM0NjMwWjAYMRYwFAYD VQQDEw02ODBhY2Q1Ni1mOTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1H8jCaWLfWJMDwpfsSu1zHhAum5/iAqFCvC/8aIV+U6CFvWPaONwvUNJpdC1 S/8fb5v6VwwUPHLzWsu1/ceEjSht4s24NTXXV1Dw+rZFZlnApKc2N96nhu5xDA6Q pC/r7pLUZ6/O6/k/SPw4hJOKwgs7IJ0yUfwkhCxFLbF/3GLXilIeNz/0T81dpY+t 32Zdd0oX3v+6A8Fzgi09wWJMxKg4NKJfLc+ZAPMQ6MLYmKaBdtS04HCtyb9gpDcA H6u0fxaMvS0MAxfHRmHwnk2P3/GvY9gvT3/6La4wNfncnCED4pHJRDhCZjpJneXW EeopBDndj+79UAZ0rDYRkfyFPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH035KNJ IHQXoyD2a+HGzB0A3pAXMB8GA1UdIwQYMBaAFJHmeXIe0eCSfrt+RhyAWA0jk1kq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUNBQy9CM0JEQTU2NDMx RDMxMUVDOEQzQkJGMzBDNEY5QUUwMi9rZVo1Y2g3UjRKSi11MzVHSElCWURTT1RX U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tlWjVjaDdSNEpKLXUzNUdISUJZRFNPVFdTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUNBQy9CM0JEQTU2NDMxRDMxMUVDOEQzQkJGMzBDNEY5QUUwMi9rZVo1Y2g3UjRK Si11MzVHSElCWURTT1RXU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK/eHHXbahzEOtBMG20iAvCMnubGHSL7PCV7V5UvJ5rQ5OSureM4Jo +hKnFhsvoWqfAfZTVqmEQJP1M2yJaj7Q4SB+23LLAB7GIBt6t6XrjNRaKvm1a/XU ldQtZ7FyHb5vjtdMCyd0NxujN9O9evVVLA/ZioVQLYHn7FtbZrZH3gURLOXDiCIH LS65PYwtUI9x+kKaQ6Caan+2PeyubifsKkpT//kHLfnAD53LBQU54T2ZWUWqfbyJ +lscyziDXwGIOkOSOZc1iV27iY/v3s7m6uFF5z3WOEipCMs0IgLihXkZ8YlRSeqc iRRiqHxvWxqaWQ6CHEV05sTpnY05azfK -----END CERTIFICATE-----Generated at Sat Apr 26 05:25:36 2025 by rpki-client