$ rpki-client -vvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft File: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft (raw, json) Hash identifier: q02GYrK9eQJZsVzxemHeqMBixaBXHBPBflS5N5fZDtk= Subject key identifier: BB:C2:94:3A:EA:E9:AE:4B:F7:4A:D9:5D:54:4D:B7:39:81:FA:55:A9 Authority key identifier: D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59 Certificate issuer: /CN=A91233F8/serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft Manifest number: 067C Signing time: Thu 24 Apr 2025 23:35:31 +0000 Manifest this update: Thu 24 Apr 2025 23:35:30 +0000 Manifest next update: Thu 01 May 2025 23:35:30 +0000 Files and hashes: 1: 1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl (hash: MEudyBfTO+8NHzGpLeLzRjHe9wtoVrNSJah8XjI9uNw=) 2: 1B4BA08497A711EDA815F80AC4F9AE02.roa (hash: i3AC8vPuhzwp18lBIjdc3QexvCV8/oJkEtYwjXr5lB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91233F8, serialNumber=D434E59E98E4508EEAA40DF960DA4F3342416759 Validity Not Before: Apr 24 23:35:30 2025 GMT Not After : May 1 23:35:30 2025 GMT Subject: CN=680acac2-18c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:57:51:a5:ee:0c:6f:91:f2:8f:af:92:f2:96: 1b:5a:20:4d:b6:72:4c:78:5b:30:55:c7:b0:97:82: 1d:8c:88:65:7e:42:63:64:b4:29:92:15:3e:94:f1: bb:76:de:6a:5b:6a:85:aa:95:03:cf:04:d0:6e:5c: 7a:62:53:65:1f:64:43:23:44:8b:de:3d:a3:ce:f1: 19:6f:ea:5e:34:e7:8c:67:30:b2:7c:f6:3a:b9:84: ce:01:f7:33:ec:32:1d:8a:f9:c6:97:30:ac:87:7c: a8:c1:63:88:10:56:c8:21:fc:09:ad:81:a5:bd:0e: 76:9a:f3:70:33:6b:4b:59:4c:f2:fa:b6:f6:a7:9a: d9:cf:b2:c8:5f:4a:c0:01:37:b3:fa:9b:db:01:de: 13:1f:6e:a9:af:3b:79:c5:48:44:5b:74:b3:34:ec: 96:55:75:45:c3:d7:f6:33:11:1b:ee:9a:fd:80:86: 43:d5:01:aa:6e:04:38:7d:40:42:9d:01:21:41:7f: 32:48:be:f9:8f:10:7a:db:60:b1:82:3f:9b:27:18: 60:c5:28:69:9a:78:af:4f:73:c8:7c:9e:4e:96:9a: 76:b2:b7:14:88:fe:8a:b9:c5:96:e3:92:2d:10:06: 97:bf:17:96:a4:b5:3d:39:2b:e0:40:48:03:34:45: 82:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C2:94:3A:EA:E9:AE:4B:F7:4A:D9:5D:54:4D:B7:39:81:FA:55:A9 X509v3 Authority Key Identifier: keyid:D4:34:E5:9E:98:E4:50:8E:EA:A4:0D:F9:60:DA:4F:33:42:41:67:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DTlnpjkUI7qpA35YNpPM0JBZ1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/1DTlnpjkUI7qpA35YNpPM0JBZ1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:aa:a2:9c:67:0b:ff:1c:fb:58:ec:03:15:31:f6:27:84:1d: a6:7a:45:8d:9f:0f:d6:db:c8:38:c9:5f:78:41:58:33:39:20: e7:e1:ec:8d:20:e1:02:1b:02:27:82:3e:59:5b:26:63:3b:f5: fb:0b:a0:b4:94:f7:18:1e:9e:7a:b1:2e:c0:c1:56:6b:b1:9e: 46:34:f0:de:08:a5:1b:b4:8c:56:5e:95:d8:7b:26:29:92:81: ab:66:02:41:6f:b6:10:45:60:22:74:80:33:59:b2:c9:f1:97: cb:5d:6a:47:64:99:b7:3f:38:d1:49:f2:7d:b8:3d:cd:16:63: 85:54:4a:17:35:6c:e4:7a:b9:0f:da:0e:9a:4a:33:e4:f3:97: 19:e9:a0:a2:cb:24:fb:39:09:86:50:e7:89:dd:6e:f6:40:3b: bd:67:ec:28:13:99:c7:0b:6f:f2:79:90:e7:16:58:14:55:db: 3e:0d:48:65:c3:25:f9:06:e1:a1:88:3b:52:8c:b8:94:8d:ce: fb:ba:69:ab:0a:22:05:c8:75:6f:e8:31:30:84:ff:84:13:a8: ad:bb:5b:56:e5:ee:c7:1c:9b:dd:9a:f7:5b:36:50:68:1d:ef: 1f:50:85:ff:a0:eb:68:c0:10:fa:c7:dd:2a:a7:02:7e:4b:1e: 89:ba:54:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMzRjgxMTAvBgNVBAUTKEQ0MzRFNTlFOThFNDUwOEVFQUE0MERGOTYwREE0RjMz NDI0MTY3NTkwHhcNMjUwNDI0MjMzNTMwWhcNMjUwNTAxMjMzNTMwWjAYMRYwFAYD VQQDEw02ODBhY2FjMi0xOGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVdRpe4Mb5Hyj6+S8pYbWiBNtnJMeFswVcewl4IdjIhlfkJjZLQpkhU+lPG7 dt5qW2qFqpUDzwTQblx6YlNlH2RDI0SL3j2jzvEZb+peNOeMZzCyfPY6uYTOAfcz 7DIdivnGlzCsh3yowWOIEFbIIfwJrYGlvQ52mvNwM2tLWUzy+rb2p5rZz7LIX0rA ATez+pvbAd4TH26przt5xUhEW3SzNOyWVXVFw9f2MxEb7pr9gIZD1QGqbgQ4fUBC nQEhQX8ySL75jxB622Cxgj+bJxhgxShpmnivT3PIfJ5Olpp2srcUiP6KucWW45It EAaXvxeWpLU9OSvgQEgDNEWC5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvClDrq 6a5L90rZXVRNtzmB+lWpMB8GA1UdIwQYMBaAFNQ05Z6Y5FCO6qQN+WDaTzNCQWdZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNGOC9GMDkwMTlENjFC QjcxMUVDOTAzRDhBNENDNEY5QUUwMi8xRFRsbnBqa1VJN3FwQTM1WU5wUE0wSkJa MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEVGxucGprVUk3cXBBMzVZTnBQTTBKQloxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzNGOC9GMDkwMTlENjFCQjcxMUVDOTAzRDhBNENDNEY5QUUwMi8xRFRsbnBqa1VJ N3FwQTM1WU5wUE0wSkJaMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPqqKcZwv/HPtY7AMVMfYnhB2mekWNnw/W28g4yV94QVgzOSDn4eyN IOECGwIngj5ZWyZjO/X7C6C0lPcYHp56sS7AwVZrsZ5GNPDeCKUbtIxWXpXYeyYp koGrZgJBb7YQRWAidIAzWbLJ8ZfLXWpHZJm3PzjRSfJ9uD3NFmOFVEoXNWzkerkP 2g6aSjPk85cZ6aCiyyT7OQmGUOeJ3W72QDu9Z+woE5nHC2/yeZDnFlgUVds+DUhl wyX5BuGhiDtSjLiUjc77ummrCiIFyHVv6DEwhP+EE6itu1tW5e7HHJvdmvdbNlBo He8fUIX/oOtowBD6x90qpwJ+Sx6JulTx -----END CERTIFICATE-----Generated at Sat Apr 26 08:31:39 2025 by rpki-client