$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft File: RIvZcaMGqwNjmecW3CIcozj1i1k.mft (raw, json) Hash identifier: GRrgUUnZLs56bLvEE13yxsmhn+ODdWOAdW2Cw5zA+BM= Subject key identifier: 14:21:2A:D0:25:EE:B8:7C:C3:65:D4:0C:29:19:D2:F0:7E:6B:F7:8B Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 Certificate issuer: /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Certificate serial: 1501 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft Manifest number: 14B9 Signing time: Thu 24 Apr 2025 16:53:53 +0000 Manifest this update: Thu 24 Apr 2025 16:53:53 +0000 Manifest next update: Thu 01 May 2025 16:53:53 +0000 Files and hashes: 1: RIvZcaMGqwNjmecW3CIcozj1i1k.crl (hash: GPzC1WJU3I0gPK7+nN/fAhujbCtUDcQ6Oj2mTJ74LjQ=) 2: 7338235CC06011EE882BC34AC4F9AE02.roa (hash: gzRITOkOOGrTx/TsBYiR/c3khv1Gc2m9Qh3FJnnq+g4=) 3: 743770A0C06011EE882BC34AC4F9AE02.roa (hash: wDUkAV/G8nH6a42xA1jspBcH2CyrvgBJPhHTMVF0vF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5377 (0x1501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91301D5, serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Validity Not Before: Apr 24 16:53:53 2025 GMT Not After : May 1 16:53:53 2025 GMT Subject: CN=680a6ca1-1499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:00:3c:4e:6f:67:45:47:15:03:ff:95:4f:eb: ee:54:3d:c2:b3:e4:c9:ce:55:f9:84:ae:e3:04:14: 86:46:cd:86:4f:de:a1:3f:ac:16:21:e1:04:2c:42: 60:f4:ab:90:4d:a3:8c:41:7c:d1:0e:b9:5e:71:96: 7b:53:ef:17:12:73:11:d5:d7:c9:ab:bf:08:00:2b: 8a:19:f3:51:f2:93:9c:e6:f6:b0:50:a8:ff:3d:3a: 64:29:3a:24:b6:cf:d5:da:3e:c5:a4:74:30:89:05: 13:ff:bb:7c:66:27:70:b3:13:eb:7d:42:29:15:ef: 18:d8:e3:df:32:41:31:f2:81:96:88:e5:46:fe:23: 1d:ab:54:2f:cf:e6:35:96:a7:7b:92:37:1f:54:ee: 0a:6b:74:54:0b:8b:09:86:57:53:46:5f:8a:ba:2c: 78:9f:a8:8e:76:ab:9a:9b:36:93:ec:25:d2:13:e8: 17:df:42:a7:f5:66:e4:0f:a0:c7:5a:ea:be:fe:61: a0:a4:77:9f:8f:50:0e:53:cd:33:88:cc:55:62:0e: 3e:ec:85:e5:64:1e:44:21:c3:8d:dd:00:a1:56:75: cf:64:3a:8a:9d:99:53:63:6f:b2:5f:3b:e4:93:49: 2d:cd:77:ca:df:7d:42:44:92:85:21:ff:d0:3a:ff: 8a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:21:2A:D0:25:EE:B8:7C:C3:65:D4:0C:29:19:D2:F0:7E:6B:F7:8B X509v3 Authority Key Identifier: keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:7f:7a:65:2e:39:eb:e2:0a:f9:ec:3f:6a:3e:4b:ca:39:e2: f7:1e:de:38:ed:69:1d:24:13:51:29:64:21:c2:3b:4d:98:6e: 1e:36:ea:15:7c:ea:40:db:f1:e6:30:60:24:de:8c:90:78:08: 81:39:69:a8:0d:cb:a2:10:f2:68:ed:ab:2b:ab:c3:bc:72:f4: 02:3c:14:84:54:45:f7:88:1f:a1:15:86:d0:30:0d:3d:d1:73: 2d:63:c4:ae:1b:7c:2e:d5:9c:91:fd:9e:22:e1:7e:a8:77:ad: 6e:7e:75:b1:71:36:24:34:91:46:21:95:f4:56:a2:15:73:84: 70:4e:d1:fe:c3:ef:bf:c5:65:e6:a0:ba:eb:a9:1e:89:52:e8: 38:89:a9:72:0d:fe:1e:02:0a:82:fe:c3:7b:46:6c:8a:78:e0: 8b:71:8e:ae:e7:0f:7c:b0:bc:c1:a5:51:35:d8:81:4e:f4:10: 14:bb:33:d4:85:89:d8:d5:d7:d5:c3:6c:e2:53:f8:fd:34:0f: 32:d2:52:63:57:40:a1:99:47:6f:31:6a:68:1d:b4:e8:c8:1d: a1:d4:47:39:9e:d0:5b:73:8f:d8:18:15:a8:52:af:12:e8:39: 20:8f:44:60:28:8f:23:0f:92:ca:9b:87:5b:72:58:a8:38:ff: 64:94:b3:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxRDUxMTAvBgNVBAUTKDQ0OEJEOTcxQTMwNkFCMDM2Mzk5RTcxNkRDMjIxQ0Ez MzhGNThCNTkwHhcNMjUwNDI0MTY1MzUzWhcNMjUwNTAxMTY1MzUzWjAYMRYwFAYD VQQDEw02ODBhNmNhMS0xNDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgA8Tm9nRUcVA/+VT+vuVD3Cs+TJzlX5hK7jBBSGRs2GT96hP6wWIeEELEJg 9KuQTaOMQXzRDrlecZZ7U+8XEnMR1dfJq78IACuKGfNR8pOc5vawUKj/PTpkKTok ts/V2j7FpHQwiQUT/7t8ZidwsxPrfUIpFe8Y2OPfMkEx8oGWiOVG/iMdq1Qvz+Y1 lqd7kjcfVO4Ka3RUC4sJhldTRl+Kuix4n6iOdquamzaT7CXSE+gX30Kn9WbkD6DH Wuq+/mGgpHefj1AOU80ziMxVYg4+7IXlZB5EIcON3QChVnXPZDqKnZlTY2+yXzvk k0ktzXfK331CRJKFIf/QOv+K4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQhKtAl 7rh8w2XUDCkZ0vB+a/eLMB8GA1UdIwQYMBaAFESL2XGjBqsDY5nnFtwiHKM49YtZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDFENS9ENEJFMDBENDYz RTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3TmptZWNXM0NJY296ajFp MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JJdlpjYU1HcXdOam1lY1czQ0ljb3pqMWkxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDFENS9ENEJFMDBENDYzRTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3 TmptZWNXM0NJY296ajFpMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGf3plLjnr4gr57D9qPkvKOeL3Ht447WkdJBNRKWQhwjtNmG4eNuoV fOpA2/HmMGAk3oyQeAiBOWmoDcuiEPJo7asrq8O8cvQCPBSEVEX3iB+hFYbQMA09 0XMtY8SuG3wu1ZyR/Z4i4X6od61ufnWxcTYkNJFGIZX0VqIVc4RwTtH+w++/xWXm oLrrqR6JUug4ialyDf4eAgqC/sN7RmyKeOCLcY6u5w98sLzBpVE12IFO9BAUuzPU hYnY1dfVw2ziU/j9NA8y0lJjV0ChmUdvMWpoHbToyB2h1Ec5ntBbc4/YGBWoUq8S 6Dkgj0RgKI8jD5LKm4dbclioOP9klLNa -----END CERTIFICATE-----Generated at Sat Apr 26 03:26:52 2025 by rpki-client