$ rpki-client -vvf rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft File: RSWIQffwT7Odkdo-P6u1KehSj0k.mft (raw, json) Hash identifier: Yb2OYsZU4b2G9FvA1I3hkcCSeVcht6JCInx/oLf0RmI= Subject key identifier: 07:06:66:7E:A9:0C:E3:AD:61:C1:17:CD:9A:F0:A1:C7:1C:BB:D1:F4 Authority key identifier: 45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49 Certificate issuer: /CN=A91317E5/serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49 Certificate serial: 0611 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft Manifest number: 0609 Signing time: Thu 24 Apr 2025 22:40:34 +0000 Manifest this update: Thu 24 Apr 2025 22:40:33 +0000 Manifest next update: Thu 01 May 2025 22:40:33 +0000 Files and hashes: 1: RSWIQffwT7Odkdo-P6u1KehSj0k.crl (hash: Yk3s5vNvwcv6VGXKCByDmgHO2jmVmHtbxjfB4J6waiU=) 2: 53E7583E3D0511EF99169B21C4F9AE02.roa (hash: qCXzkeKuPVL2AFCLekUycL2ac1PSk1oLXnC7v+nyDIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:40:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1553 (0x611) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91317E5, serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49 Validity Not Before: Apr 24 22:40:33 2025 GMT Not After : May 1 22:40:33 2025 GMT Subject: CN=680abde2-a33b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c0:e7:8d:4e:79:e8:d3:3d:e7:42:63:6e:07: 9c:80:23:51:09:a2:26:12:b2:11:8d:89:3a:02:1b: 36:54:6d:68:f7:49:ad:f2:d1:04:75:b3:4e:61:71: 5e:39:16:32:ea:b2:5d:3d:9c:b3:a4:7d:f8:1f:55: ac:e3:12:a2:89:1b:1f:0e:5a:ea:7d:76:5a:e3:56: d0:9b:af:17:30:6d:c1:fd:0b:97:47:2b:f5:d0:fc: 04:c0:92:e6:25:0a:14:7f:b9:23:da:91:01:93:d4: e9:7a:28:ae:b2:a4:f1:64:3c:00:bf:0e:fa:bb:0a: a4:d4:b0:35:bd:95:30:5d:93:60:5a:a2:64:b7:39: 9e:62:93:4e:4c:cd:6b:8e:7a:73:3e:08:70:da:58: c0:7f:d5:5e:4c:f8:a9:bc:52:d8:94:1e:48:e3:fd: 40:f2:8c:75:ba:b1:2b:8e:f9:69:11:ee:a1:30:23: 19:9e:65:35:01:48:15:34:e1:ce:2c:5c:6b:26:5e: 6e:9d:d8:7d:a5:9b:c9:6e:1a:55:36:7a:dd:c0:b8: 7e:56:1f:b8:f5:5c:ea:13:8f:71:a8:91:fc:5b:3c: d8:91:df:dc:9b:45:63:c9:9c:b5:5a:13:93:82:36: 00:35:48:2a:07:d9:a9:dd:3f:40:6a:d1:b1:9e:8d: 19:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:06:66:7E:A9:0C:E3:AD:61:C1:17:CD:9A:F0:A1:C7:1C:BB:D1:F4 X509v3 Authority Key Identifier: keyid:45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:01:25:75:3b:bc:ec:da:7c:48:21:fb:b8:67:92:18:16:2e: 20:cc:a9:e3:03:71:5f:ea:da:16:41:5a:70:bd:85:80:8c:82: 12:af:df:3b:b9:ce:c2:01:ce:04:aa:1c:c2:31:65:f2:a5:6c: 16:9f:b7:12:68:d8:fb:b6:71:f4:b8:d9:27:eb:c1:97:d8:ea: e1:3c:ef:a2:72:38:75:a0:a9:2b:e9:fa:d6:96:a4:4e:2d:a4: c4:61:19:ac:22:e3:d7:4a:a5:51:11:a6:f0:a6:d6:3d:1c:c8: 13:72:6a:36:82:be:09:cb:5b:e6:39:f8:21:ec:e8:21:8b:58: 4a:f9:9a:36:f4:4b:e0:e9:9a:a2:49:bc:d1:c1:0f:09:78:99: ca:bf:85:9b:88:54:66:25:85:d0:11:4d:92:fa:bc:d3:67:09: a2:8d:53:61:a7:7f:27:8b:28:2f:bd:30:24:c6:3f:67:26:20: f3:dd:6f:64:97:5f:41:43:79:48:98:eb:e8:e6:56:fb:8d:80: 5c:50:e3:c9:1c:2e:84:17:68:62:c1:8e:ba:b3:96:c7:6b:b9: 71:a3:7d:70:3a:ae:5f:92:8d:83:69:13:7a:81:4b:d2:c4:10: 6f:0e:4f:f0:fd:f2:e2:84:5f:03:cd:dd:6c:d7:3c:f5:7d:ad: 1f:b0:6d:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3RTUxMTAvBgNVBAUTKDQ1MjU4ODQxRjdGMDRGQjM5RDkxREEzRTNGQUJCNTI5 RTg1MjhGNDkwHhcNMjUwNDI0MjI0MDMzWhcNMjUwNTAxMjI0MDMzWjAYMRYwFAYD VQQDEw02ODBhYmRlMi1hMzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA78DnjU556NM950JjbgecgCNRCaImErIRjYk6Ahs2VG1o90mt8tEEdbNOYXFe ORYy6rJdPZyzpH34H1Ws4xKiiRsfDlrqfXZa41bQm68XMG3B/QuXRyv10PwEwJLm JQoUf7kj2pEBk9TpeiiusqTxZDwAvw76uwqk1LA1vZUwXZNgWqJktzmeYpNOTM1r jnpzPghw2ljAf9VeTPipvFLYlB5I4/1A8ox1urErjvlpEe6hMCMZnmU1AUgVNOHO LFxrJl5undh9pZvJbhpVNnrdwLh+Vh+49VzqE49xqJH8WzzYkd/cm0VjyZy1WhOT gjYANUgqB9mp3T9AatGxno0ZrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAcGZn6p DOOtYcEXzZrwocccu9H0MB8GA1UdIwQYMBaAFEUliEH38E+znZHaPj+rtSnoUo9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTdFNS9EQjAwRjgwMkEw RkExMUVCQkMwOTk0M0FDNEY5QUUwMi9SU1dJUWZmd1Q3T2RrZG8tUDZ1MUtlaFNq MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JTV0lRZmZ3VDdPZGtkby1QNnUxS2VoU2oway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTdFNS9EQjAwRjgwMkEwRkExMUVCQkMwOTk0M0FDNEY5QUUwMi9SU1dJUWZmd1Q3 T2RrZG8tUDZ1MUtlaFNqMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+ASV1O7zs2nxIIfu4Z5IYFi4gzKnjA3Ff6toWQVpwvYWAjIISr987 uc7CAc4EqhzCMWXypWwWn7cSaNj7tnH0uNkn68GX2OrhPO+icjh1oKkr6frWlqRO LaTEYRmsIuPXSqVREabwptY9HMgTcmo2gr4Jy1vmOfgh7Oghi1hK+Zo29Evg6Zqi SbzRwQ8JeJnKv4WbiFRmJYXQEU2S+rzTZwmijVNhp38niygvvTAkxj9nJiDz3W9k l19BQ3lImOvo5lb7jYBcUOPJHC6EF2hiwY66s5bHa7lxo31wOq5fko2DaRN6gUvS xBBvDk/w/fLihF8Dzd1s1zz1fa0fsG0F -----END CERTIFICATE-----Generated at Sat Apr 26 03:42:17 2025 by rpki-client