$ rpki-client -vvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft File: 1cBKCsLVKt_nBVZHjcsOHYHtENo.mft (raw, json) Hash identifier: WpnUCSVfsa5uover8p7Ssd/qqRH8LdPbzeEKWsl8opI= Subject key identifier: 8D:CD:FD:CD:A8:20:90:36:0B:46:41:5E:72:30:94:A4:52:0D:5E:DD Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA Certificate issuer: /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA Certificate serial: 0466 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft Manifest number: 0460 Signing time: Thu 24 Apr 2025 23:57:06 +0000 Manifest this update: Thu 24 Apr 2025 23:57:06 +0000 Manifest next update: Thu 01 May 2025 23:57:06 +0000 Files and hashes: 1: 1cBKCsLVKt_nBVZHjcsOHYHtENo.crl (hash: 3JS4a6huxVPNd6r3iU6oUShJkpEYkY4Ood/kVj8X9LY=) 2: F11B4C14E40111ECBD78E571C4F9AE02.roa (hash: yrgJiB4VmkkkL0wy5q4A23svX1r+S/7CECcoJjyrMso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1126 (0x466) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91284EC, serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA Validity Not Before: Apr 24 23:57:06 2025 GMT Not After : May 1 23:57:06 2025 GMT Subject: CN=680acfd2-e446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0a:81:b7:d2:70:84:91:dd:23:5e:81:18:1e: 69:66:e6:07:56:0e:f7:76:99:42:00:86:d0:d2:5f: 36:1b:9a:9f:06:a3:88:96:41:c6:35:95:dd:f1:f3: 82:21:4b:a5:0f:e5:ee:7a:eb:25:f2:ec:1e:aa:63: 38:f2:aa:ed:cb:b5:d0:d0:b6:1c:c5:a2:58:87:a4: a4:d8:fd:52:c7:37:5e:e4:8e:4f:ac:b6:15:51:4b: 36:0c:2f:80:14:6f:de:00:b0:49:47:6c:98:b0:73: e3:ac:17:3c:5a:32:a8:b2:e5:c6:22:88:90:0b:d3: 0b:99:56:af:54:79:32:cc:01:21:39:28:f8:61:60: 19:8f:44:0f:33:3c:11:2e:a6:ec:de:c6:11:d5:c1: f4:ac:a4:3e:04:d5:fc:a5:5a:38:6b:26:1c:bd:42: 98:c8:e4:d8:22:08:d4:60:10:10:a5:7e:48:07:29: ac:24:cc:88:40:9b:c6:2d:4b:c4:9f:e0:18:64:d5: e6:27:a3:ec:fe:84:91:24:25:d9:5a:37:26:0c:cd: fb:e1:3b:04:d8:0b:fb:82:b1:05:c3:c8:5d:25:38: b3:3f:ae:52:f5:7e:e0:cd:ba:10:8a:86:44:73:c6: b7:65:54:2d:1b:45:da:59:c2:16:ab:41:58:28:d1: f5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:CD:FD:CD:A8:20:90:36:0B:46:41:5E:72:30:94:A4:52:0D:5E:DD X509v3 Authority Key Identifier: keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:70:5c:94:05:8d:d6:e5:2c:4d:b2:c3:4e:4a:fb:5b:54:9e: a9:c5:d7:ba:19:a3:a8:f0:36:fb:8c:94:b8:fd:96:cc:3e:cd: df:43:9d:95:b0:5e:f4:d8:d1:25:5c:ec:e3:20:b6:94:73:11: 95:a1:b8:ac:5a:74:11:96:e8:d6:c2:b6:a2:8f:96:b0:0a:df: aa:59:ce:d0:3e:a8:16:75:09:d3:47:91:e6:62:4f:92:cf:14: 75:7f:cb:ee:7a:6a:0d:d0:12:13:96:88:d5:24:5a:19:be:ab: 85:57:0d:f4:ba:0c:19:5c:11:45:2e:f6:2d:49:7a:2f:01:c8: ce:1e:53:bf:89:31:36:d0:af:21:96:f6:b6:9e:c4:be:d3:a5: 70:d2:3f:76:11:ac:5a:82:9b:d7:0f:ed:be:d5:6a:fb:1c:71: 49:5f:84:ba:a4:80:2f:c1:4c:9a:be:89:64:92:66:65:10:fe: d0:98:de:47:fb:5f:a7:74:d0:fc:47:ae:20:0b:55:54:ad:e6: f2:db:59:37:e3:81:a1:a1:46:5c:58:1a:d4:b1:89:d3:97:3a: 70:e7:65:ce:a5:c2:81:4d:48:02:22:98:4f:23:0f:e2:9a:f2: 4f:09:19:f6:00:9a:8b:12:ad:b6:dd:c6:ae:ed:0b:bd:ba:8d: 18:0d:86:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg0RUMxMTAvBgNVBAUTKEQ1QzA0QTBBQzJENTJBREZFNzA1NTY0NzhEQ0IwRTFE ODFFRDEwREEwHhcNMjUwNDI0MjM1NzA2WhcNMjUwNTAxMjM1NzA2WjAYMRYwFAYD VQQDEw02ODBhY2ZkMi1lNDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwqBt9JwhJHdI16BGB5pZuYHVg73dplCAIbQ0l82G5qfBqOIlkHGNZXd8fOC IUulD+Xueusl8uweqmM48qrty7XQ0LYcxaJYh6Sk2P1Sxzde5I5PrLYVUUs2DC+A FG/eALBJR2yYsHPjrBc8WjKosuXGIoiQC9MLmVavVHkyzAEhOSj4YWAZj0QPMzwR Lqbs3sYR1cH0rKQ+BNX8pVo4ayYcvUKYyOTYIgjUYBAQpX5IBymsJMyIQJvGLUvE n+AYZNXmJ6Ps/oSRJCXZWjcmDM374TsE2Av7grEFw8hdJTizP65S9X7gzboQioZE c8a3ZVQtG0XaWcIWq0FYKNH13QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3N/c2o IJA2C0ZBXnIwlKRSDV7dMB8GA1UdIwQYMBaAFNXASgrC1Srf5wVWR43LDh2B7RDa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODRFQy9FQkY2MDFGQzQ4 Q0YxMUVDQTY2NkIwM0VDNEY5QUUwMi8xY0JLQ3NMVkt0X25CVlpIamNzT0hZSHRF Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjQktDc0xWS3RfbkJWWkhqY3NPSFlIdEVOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODRFQy9FQkY2MDFGQzQ4Q0YxMUVDQTY2NkIwM0VDNEY5QUUwMi8xY0JLQ3NMVkt0 X25CVlpIamNzT0hZSHRFTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAccFyUBY3W5SxNssNOSvtbVJ6pxde6GaOo8Db7jJS4/ZbMPs3fQ52V sF702NElXOzjILaUcxGVobisWnQRlujWwraij5awCt+qWc7QPqgWdQnTR5HmYk+S zxR1f8vuemoN0BITlojVJFoZvquFVw30ugwZXBFFLvYtSXovAcjOHlO/iTE20K8h lva2nsS+06Vw0j92EaxagpvXD+2+1Wr7HHFJX4S6pIAvwUyavolkkmZlEP7QmN5H +1+ndND8R64gC1VUreby21k344GhoUZcWBrUsYnTlzpw52XOpcKBTUgCIphPIw/i mvJPCRn2AJqLEq223cau7Qu9uo0YDYad -----END CERTIFICATE-----Generated at Sat Apr 26 12:18:13 2025 by rpki-client