$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft File: inTvQOZaEnwOZmsUpsZXSlNvNnM.mft (raw, json) Hash identifier: WBbnK+xuReFi02wq5ws1byo3/3ivVEKtT82CNvCML9k= Subject key identifier: 1D:F7:76:53:CC:A2:95:5B:F9:5B:ED:71:97:1C:D0:B9:7E:D1:B9:19 Authority key identifier: 8A:74:EF:40:E6:5A:12:7C:0E:66:6B:14:A6:C6:57:4A:53:6F:36:73 Certificate issuer: /CN=A91583E4/serialNumber=8A74EF40E65A127C0E666B14A6C6574A536F3673 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft Manifest number: 01A9 Signing time: Fri 25 Apr 2025 02:28:16 +0000 Manifest this update: Fri 25 Apr 2025 02:28:15 +0000 Manifest next update: Fri 02 May 2025 02:28:15 +0000 Files and hashes: 1: inTvQOZaEnwOZmsUpsZXSlNvNnM.crl (hash: /ZY1V7uIyb/eVGPZGJYuV+TqJpw1nD9Zme8SlFsO2cM=) 2: 94817492A7AF11EE9ABC7953C4F9AE02.roa (hash: 0cSwyQIrwsLrX5HCGrd1L+L8tXaOyusCzdo4wFfko7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.crl rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E4, serialNumber=8A74EF40E65A127C0E666B14A6C6574A536F3673 Validity Not Before: Apr 25 02:28:15 2025 GMT Not After : May 2 02:28:15 2025 GMT Subject: CN=680af33f-db12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bc:67:c2:8a:44:cb:33:41:35:32:2e:64:48: 59:44:8c:f6:0c:ca:04:d3:cf:84:3c:f4:7e:3c:a6: aa:67:ea:f0:49:f5:da:b8:c6:31:d2:f3:d5:90:11: 54:13:69:8e:cc:67:ef:9a:47:00:85:ab:47:54:90: 0f:48:ce:92:53:f2:b8:45:af:bd:0a:43:59:7d:a2: 3d:6f:a5:1c:b3:21:d6:28:d0:71:d9:67:da:08:f5: f7:b5:e6:01:68:27:fb:13:4f:ca:19:23:60:78:ee: 14:eb:4a:ed:63:e1:14:0c:c7:aa:f3:8b:63:ae:24: d7:77:f1:4f:ef:29:8b:d6:35:b9:40:67:41:7e:8a: 29:99:76:2a:89:3a:11:aa:9b:07:ec:6a:76:a5:e5: 2e:72:05:2e:d3:ff:1f:0c:98:8f:8e:63:c0:5e:f4: a0:52:f9:e3:f4:77:50:3f:09:0d:eb:bd:b3:57:9c: e4:be:4b:ac:0a:92:f2:fb:af:1e:2f:fc:08:c6:5d: 3c:50:35:0a:28:cf:f5:11:ec:69:18:06:b2:3c:cf: 3a:5e:90:ce:9e:e3:3a:9b:f3:9d:49:85:f8:7c:3d: 00:4d:75:5b:83:39:e5:d4:83:9e:b9:67:39:44:5a: 81:ab:6c:c4:2d:a8:3f:d3:cf:ec:c2:5c:c7:36:45: 97:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F7:76:53:CC:A2:95:5B:F9:5B:ED:71:97:1C:D0:B9:7E:D1:B9:19 X509v3 Authority Key Identifier: keyid:8A:74:EF:40:E6:5A:12:7C:0E:66:6B:14:A6:C6:57:4A:53:6F:36:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:40:3c:68:16:41:8d:ab:85:43:ea:4f:06:16:1f:4e:00:6c: e1:22:d6:fd:aa:6e:08:41:2e:42:62:83:19:e5:2e:4b:33:5f: 16:17:96:fe:7e:71:61:b4:ce:e9:d0:dd:43:11:8e:bc:e6:b3: ce:16:d1:ac:0e:9b:f0:b7:ec:76:21:25:e8:52:2f:4c:24:e9: 7d:6a:22:a9:eb:1a:4c:5d:df:94:a4:88:ec:fa:8e:6a:ec:08: 62:7f:11:8c:aa:23:6c:7b:21:48:2a:ae:fd:62:f7:3f:46:3f: d9:b1:51:5e:49:eb:ee:ba:f6:15:79:ab:d7:11:03:a8:37:b4: 4c:3b:9e:9b:9a:cf:75:cc:37:4e:ec:4d:df:ef:db:f7:ed:48: 44:e8:48:dd:6f:13:72:02:ee:b9:2c:aa:c3:94:f2:f0:78:d8: 83:ad:a8:e2:99:8b:a4:0a:16:5c:4e:52:de:a4:cc:a3:c9:33: 51:e9:07:91:8d:9e:c3:2e:4d:bb:2d:8f:9b:14:f6:c8:27:c0: cc:e8:5f:b8:4e:5e:6c:44:71:96:f4:0e:d2:b2:ba:59:9b:15: d6:b6:5d:33:cc:84:fa:6d:ec:ee:9d:95:8b:18:e8:d7:e6:76: 80:41:1a:a6:c8:51:a6:b6:d9:3d:f9:9f:ba:c9:79:9c:28:d8: 4e:53:77:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgzRTQxMTAvBgNVBAUTKDhBNzRFRjQwRTY1QTEyN0MwRTY2NkIxNEE2QzY1NzRB NTM2RjM2NzMwHhcNMjUwNDI1MDIyODE1WhcNMjUwNTAyMDIyODE1WjAYMRYwFAYD VQQDEw02ODBhZjMzZi1kYjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrxnwopEyzNBNTIuZEhZRIz2DMoE08+EPPR+PKaqZ+rwSfXauMYx0vPVkBFU E2mOzGfvmkcAhatHVJAPSM6SU/K4Ra+9CkNZfaI9b6UcsyHWKNBx2WfaCPX3teYB aCf7E0/KGSNgeO4U60rtY+EUDMeq84tjriTXd/FP7ymL1jW5QGdBfoopmXYqiToR qpsH7Gp2peUucgUu0/8fDJiPjmPAXvSgUvnj9HdQPwkN672zV5zkvkusCpLy+68e L/wIxl08UDUKKM/1EexpGAayPM86XpDOnuM6m/OdSYX4fD0ATXVbgznl1IOeuWc5 RFqBq2zELag/08/swlzHNkWXMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB33dlPM opVb+VvtcZcc0Ll+0bkZMB8GA1UdIwQYMBaAFIp070DmWhJ8DmZrFKbGV0pTbzZz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODNFNC8wNUZFRjQ0QTlF MEMxMUVEQkE5RDFEMjZDNEY5QUUwMi9pblR2UU9aYUVud09abXNVcHNaWFNsTnZO bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2luVHZRT1phRW53T1ptc1Vwc1pYU2xOdk5uTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODNFNC8wNUZFRjQ0QTlFMEMxMUVEQkE5RDFEMjZDNEY5QUUwMi9pblR2UU9aYUVu d09abXNVcHNaWFNsTnZObk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcQDxoFkGNq4VD6k8GFh9OAGzhItb9qm4IQS5CYoMZ5S5LM18WF5b+ fnFhtM7p0N1DEY685rPOFtGsDpvwt+x2ISXoUi9MJOl9aiKp6xpMXd+UpIjs+o5q 7AhifxGMqiNseyFIKq79Yvc/Rj/ZsVFeSevuuvYVeavXEQOoN7RMO56bms91zDdO 7E3f79v37UhE6EjdbxNyAu65LKrDlPLweNiDrajimYukChZcTlLepMyjyTNR6QeR jZ7DLk27LY+bFPbIJ8DM6F+4Tl5sRHGW9A7SsrpZmxXWtl0zzIT6bezunZWLGOjX 5naAQRqmyFGmttk9+Z+6yXmcKNhOU3ei -----END CERTIFICATE-----Generated at Sat Apr 26 05:14:31 2025 by rpki-client