$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft File: 1j3oKnWfllf48HOyUSUarme6S6Y.mft (raw, json) Hash identifier: d5ugJCaTMIJkbCafInrv6a5HvW3sflddk2SvfiGxibo= Subject key identifier: DB:3D:B6:D7:3F:A4:90:E5:EB:7C:A5:60:4F:D0:A2:D3:20:55:49:D4 Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6 Certificate issuer: /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6 Certificate serial: 0445 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft Manifest number: 03F0 Signing time: Fri 25 Apr 2025 00:27:41 +0000 Manifest this update: Fri 25 Apr 2025 00:27:40 +0000 Manifest next update: Fri 02 May 2025 00:27:40 +0000 Files and hashes: 1: 1j3oKnWfllf48HOyUSUarme6S6Y.crl (hash: rYXoHZkVm9Y//gt/Ohf804lVYWlUTc7aGaSLg076rPY=) 2: ABE3468CBB5611EE936F4785C4F9AE02.roa (hash: 85cGKhcFvfLsa3fKkS4OSkRQ0VqdCtjeFSWGED/065w=) 3: A15115E6DF3E11EC83CCFE1EC4F9AE02.roa (hash: AFhkaTS9H9SYq32LCGLZ0ybHnkII09gZHj0VVB5f314=) 4: 9FEE9516DF3E11EC83CCFE1EC4F9AE02.roa (hash: cotJkdbyDdnoqnW03wwLgBND9x/lhPuMs/gJ3BCR7lI=) 5: A09F8E52DF3E11EC83CCFE1EC4F9AE02.roa (hash: 1tRgJ3aPzibyR+z50Gw9nZnYt8M73G+bJYsVfkg2zT8=) 6: F563D916248D11EF93237035C4F9AE02.roa (hash: B9+ujxo3UgWLMG+B0g5KGVMUgAJmIzvebILB++raaNc=) 7: 9DEFF2FADF3E11EC83CCFE1EC4F9AE02.roa (hash: K8HM6DIcOQOpn7mr5HRxJGQ+LZPGnSM+a9C5ehvgnkk=) 8: 86C8EBA2B12A11EF985A2D32C4F9AE02.roa (hash: 7nV+jajMliwqjNqYG+S6G7SOAx0aeStohPloUPjdM80=) 9: 9F598EEEDF3E11EC83CCFE1EC4F9AE02.roa (hash: ML8bUrH07kWDsJzW00Kjv/Bk94cyav3h3f9sQ1/S5a0=) 10: 9D13F282DF3E11EC83CCFE1EC4F9AE02.roa (hash: 4TUF4fCsd6U4sl8CKjbb5lEPYX8IdLYlZccOBdKP5o0=) 11: 56EC4CB4927911EFABEC2D46C4F9AE02.roa (hash: 5jFOXz91ZZ50fpVnfRxRJl436xHddATVpaygKT2CLho=) 12: A1FED136DF3E11EC83CCFE1EC4F9AE02.roa (hash: gOJa8cYlazWQ7UQ+EjuycM05p/sMIN86mUAHCGBMKow=) 13: 05163DEADD8711EC9BF56E5BC4F9AE02.roa (hash: zGN2nOJQWd9Hxkuu+Xvwm7K9HCh0xLUXhnRjE+idexs=) 14: 9EB0F9FADF3E11EC83CCFE1EC4F9AE02.roa (hash: BczitAlbCQvjk6wnUERPJgdefO0W2XIU7kagZ/uo8Uo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1093 (0x445) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6 Validity Not Before: Apr 25 00:27:40 2025 GMT Not After : May 2 00:27:40 2025 GMT Subject: CN=680ad6fd-5a0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:81:35:ec:75:ea:e1:9c:4d:5c:66:61:98:12: 02:b5:a8:4f:f7:8d:a1:c1:2c:21:a4:5a:82:6d:14: 5c:84:22:e2:3f:29:8a:0d:7c:61:be:15:49:3d:72: 01:0a:30:69:2a:c7:bb:e2:57:f3:15:0a:a5:41:c6: 5f:0f:3b:e7:fb:f6:2d:55:a2:2d:b6:71:52:db:a0: bb:04:17:7f:9c:93:b4:e5:3e:82:4b:8e:a0:6f:d5: 73:3a:a4:f2:20:91:ec:e0:f0:d3:70:99:1a:19:64: 24:ea:9e:11:59:88:4a:fd:5e:5f:51:8e:1c:83:74: 32:d7:17:17:9e:61:64:a9:bb:42:b5:3c:0c:f8:c3: b6:11:70:1f:10:fd:35:53:08:42:b8:e2:3d:a7:24: 3a:b4:56:ab:60:13:5d:07:08:19:bd:b7:30:0c:56: d0:8d:ff:d6:7c:d6:b9:83:99:9a:05:24:09:20:f5: d0:fb:d5:8c:b4:a0:2f:1b:19:9f:d9:84:05:a3:06: e8:11:15:57:ec:1c:b1:af:ee:ec:25:f5:4e:40:64: 62:d9:55:57:69:9d:cb:00:d7:06:0b:be:4e:f0:60: f8:ac:b7:d2:b6:55:ec:67:a0:e6:46:f6:12:1a:a7: a1:fd:c1:65:79:ea:1c:13:e8:b3:49:25:a7:f7:20: bd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:3D:B6:D7:3F:A4:90:E5:EB:7C:A5:60:4F:D0:A2:D3:20:55:49:D4 X509v3 Authority Key Identifier: keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:01:fb:ac:59:7c:58:c2:f1:27:6b:d7:b1:5f:ba:8e:35:d3: 1a:ee:95:62:e3:db:93:cd:ee:c5:54:2a:4e:c0:64:bf:e8:8d: 19:39:e3:9b:ea:fb:dd:43:92:e6:9f:7b:e5:a0:86:89:b7:41: 18:7d:61:83:f2:6c:f7:d1:d1:e0:ed:a5:b6:64:6f:8d:45:de: dd:9d:c0:9d:25:7d:11:16:67:e3:c2:53:7b:f3:89:24:c4:34: a1:2a:bd:39:ad:3b:46:e7:1f:53:ea:c3:6e:0b:ff:48:41:53: 71:3b:f8:3d:f9:df:7f:4b:c6:43:eb:c6:ed:15:31:a5:63:3b: 50:d3:02:e2:0d:b3:2c:f4:a8:dc:43:24:40:08:37:bb:7b:a2: 27:e6:bc:9e:30:34:e7:34:5b:02:0b:58:63:36:06:53:3b:a4: e1:4c:0e:93:d0:85:31:c1:f4:a5:77:22:8d:5e:63:a2:93:69: 83:27:39:4d:10:9e:44:52:ed:8b:df:af:79:e7:c8:b2:31:ce: a8:ea:17:39:2a:6a:b3:c5:7a:ab:70:b6:74:9c:6f:cb:e7:95: 08:59:5c:3c:07:ba:93:13:dd:cb:79:7f:60:e2:b5:19:fb:17: 2a:20:5d:cd:ca:54:88:63:13:1b:de:71:8a:06:19:11:35:96: 1c:b4:ae:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyQ0ExMTAvBgNVBAUTKEQ2M0RFODJBNzU5Rjk2NTdGOEYwNzNCMjUxMjUxQUFF NjdCQTRCQTYwHhcNMjUwNDI1MDAyNzQwWhcNMjUwNTAyMDAyNzQwWjAYMRYwFAYD VQQDEw02ODBhZDZmZC01YTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYE17HXq4ZxNXGZhmBICtahP942hwSwhpFqCbRRchCLiPymKDXxhvhVJPXIB CjBpKse74lfzFQqlQcZfDzvn+/YtVaIttnFS26C7BBd/nJO05T6CS46gb9VzOqTy IJHs4PDTcJkaGWQk6p4RWYhK/V5fUY4cg3Qy1xcXnmFkqbtCtTwM+MO2EXAfEP01 UwhCuOI9pyQ6tFarYBNdBwgZvbcwDFbQjf/WfNa5g5maBSQJIPXQ+9WMtKAvGxmf 2YQFowboERVX7Byxr+7sJfVOQGRi2VVXaZ3LANcGC75O8GD4rLfStlXsZ6DmRvYS Gqeh/cFleeocE+izSSWn9yC91wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNs9ttc/ pJDl63ylYE/QotMgVUnUMB8GA1UdIwQYMBaAFNY96Cp1n5ZX+PBzslElGq5nukum MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9FQzFFRTY1MjhB NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi8xajNvS25XZmxsZjQ4SE95VVNVYXJtZTZT NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFqM29LbldmbGxmNDhIT3lVU1Vhcm1lNlM2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjJDQS9FQzFFRTY1MjhBNTcxMUVDOTZFQkMwMTRDNEY5QUUwMi8xajNvS25XZmxs ZjQ4SE95VVNVYXJtZTZTNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnAfusWXxYwvEna9exX7qONdMa7pVi49uTze7FVCpOwGS/6I0ZOeOb 6vvdQ5Lmn3vloIaJt0EYfWGD8mz30dHg7aW2ZG+NRd7dncCdJX0RFmfjwlN784kk xDShKr05rTtG5x9T6sNuC/9IQVNxO/g9+d9/S8ZD68btFTGlYztQ0wLiDbMs9Kjc QyRACDe7e6In5ryeMDTnNFsCC1hjNgZTO6ThTA6T0IUxwfSldyKNXmOik2mDJzlN EJ5EUu2L369558iyMc6o6hc5KmqzxXqrcLZ0nG/L55UIWVw8B7qTE93LeX9g4rUZ +xcqIF3NylSIYxMb3nGKBhkRNZYctK6e -----END CERTIFICATE-----Generated at Sat Apr 26 13:05:21 2025 by rpki-client