$ rpki-client -vvf rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft File: _ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft (raw, json) Hash identifier: ngyeLCF51SRCt71OypxnxcQgP83wFlCy+vqaLehy2T4= Subject key identifier: BD:6E:98:61:7C:23:3E:A6:88:7C:F2:A6:B2:DF:81:6B:D1:BD:7F:4E Authority key identifier: FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6 Certificate issuer: /CN=A91820AF/serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6 Certificate serial: 065E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft Manifest number: 0657 Signing time: Thu 24 Apr 2025 22:15:56 +0000 Manifest this update: Thu 24 Apr 2025 22:15:56 +0000 Manifest next update: Thu 01 May 2025 22:15:56 +0000 Files and hashes: 1: _ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl (hash: JK3TaxzBG+ZyBGqqItYSLo/nwLmz8MhC5Oq4dM/uIj0=) 2: D4DE5FF8A01F11EC87D72549C4F9AE02.roa (hash: 87anj6ScVkwh+H5EUFqHglOTYr+0YgLiGreNRecvlKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1630 (0x65e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91820AF, serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6 Validity Not Before: Apr 24 22:15:56 2025 GMT Not After : May 1 22:15:56 2025 GMT Subject: CN=680ab81c-dab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:61:29:3f:27:1e:d8:1a:ed:9d:7f:fe:6e:81: 88:f0:a0:8a:f9:5b:ce:1b:60:b0:a4:3a:54:17:2f: ca:88:7d:d5:7c:7d:cc:de:d0:b9:d4:23:45:96:bd: 6b:a5:fa:05:45:fa:ac:0a:c8:24:fc:54:05:b9:fb: ae:e9:40:0e:45:50:6e:68:59:1e:34:fc:db:48:35: 54:01:6c:83:bf:2e:84:66:e2:22:5d:04:b7:8a:db: 64:2a:34:c5:31:68:f8:07:35:bb:ce:7a:b6:f7:8f: c9:d4:56:55:3b:2d:f0:57:8a:3f:01:06:91:81:c9: c4:a8:dc:84:0e:ef:84:d9:88:ec:f9:e6:35:b9:8d: 88:3e:6d:ab:5a:85:38:bc:a9:43:6a:16:8c:9f:ff: e5:fd:58:f1:9e:e3:f3:3f:1c:7f:75:b4:8c:33:c9: bc:78:56:da:d9:a4:c3:60:8c:d6:e9:43:a5:61:a3: 5d:13:c0:0d:65:a9:6d:f0:56:1c:ed:fd:de:44:c3: d3:be:09:4e:47:5e:00:3d:b3:2b:07:5d:48:21:f7: cc:8e:71:7b:e4:d0:02:ac:5b:66:7c:3a:6d:59:8f: 6b:3d:9f:25:fa:25:62:ce:ac:72:64:57:13:68:76: ba:e2:74:c0:f0:1d:dc:e8:0d:14:06:11:5a:56:6b: d1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6E:98:61:7C:23:3E:A6:88:7C:F2:A6:B2:DF:81:6B:D1:BD:7F:4E X509v3 Authority Key Identifier: keyid:FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:d7:09:11:76:c7:b3:17:ed:fe:ea:a3:f8:50:59:67:a4:5a: 29:e6:28:b3:3a:fc:c4:1d:9d:77:a0:89:df:2f:f4:ab:5d:32: 8e:6d:a6:aa:4b:b9:ff:8c:91:c7:d6:59:d4:e3:a9:cf:91:0d: 23:4e:2d:1b:81:66:3b:b4:3c:80:39:61:84:9d:6c:88:e5:0c: d1:60:41:62:9c:62:1e:45:f6:0b:c3:22:8b:41:8b:47:4f:5f: 4e:3b:90:20:6f:03:f0:f3:a0:13:a8:99:e9:24:a1:d3:7a:6c: 87:ec:10:16:48:bb:09:73:34:fc:5e:ae:ce:62:3c:1d:4f:2c: 80:0c:eb:e9:62:3e:34:bc:70:d4:f9:47:33:65:a6:83:1a:2c: 3e:36:3e:59:37:46:7e:c3:6e:bf:63:3a:12:ff:47:f7:65:75: fa:0f:96:45:34:55:7a:1a:62:5c:5f:79:05:06:36:eb:16:70: 16:70:8a:95:84:f2:8e:d1:50:f5:02:dc:84:e3:9b:a7:8c:36: 04:f1:4c:b5:02:ae:3e:c0:b9:a8:ea:ad:99:55:22:88:10:c4: 6f:32:df:65:4a:ff:ee:2f:af:25:03:67:8a:66:d9:77:d2:21: 76:c9:ff:84:ef:6a:be:c1:0a:f9:00:7e:c2:6b:95:9e:ad:5e: 9c:c1:29:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIwQUYxMTAvBgNVBAUTKEZFMkE0OTM5OEU2NTAwNkIwNkU5REZFQzI3MERFMkU5 NzZGOEFBRjYwHhcNMjUwNDI0MjIxNTU2WhcNMjUwNTAxMjIxNTU2WjAYMRYwFAYD VQQDEw02ODBhYjgxYy1kYWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WEpPyce2BrtnX/+boGI8KCK+VvOG2CwpDpUFy/KiH3VfH3M3tC51CNFlr1r pfoFRfqsCsgk/FQFufuu6UAORVBuaFkeNPzbSDVUAWyDvy6EZuIiXQS3ittkKjTF MWj4BzW7znq294/J1FZVOy3wV4o/AQaRgcnEqNyEDu+E2Yjs+eY1uY2IPm2rWoU4 vKlDahaMn//l/VjxnuPzPxx/dbSMM8m8eFba2aTDYIzW6UOlYaNdE8ANZalt8FYc 7f3eRMPTvglOR14APbMrB11IIffMjnF75NACrFtmfDptWY9rPZ8l+iVizqxyZFcT aHa64nTA8B3c6A0UBhFaVmvRbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL1umGF8 Iz6miHzyprLfgWvRvX9OMB8GA1UdIwQYMBaAFP4qSTmOZQBrBunf7CcN4ul2+Kr2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjBBRi8wRUYzREZBNDgw N0ExMUVCQkQwRThENThDNEY5QUUwMi9faXBKT1k1bEFHc0c2ZF9zSnczaTZYYjRx dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19pcEpPWTVsQUdzRzZkX3NKdzNpNlhiNHF2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjBBRi8wRUYzREZBNDgwN0ExMUVCQkQwRThENThDNEY5QUUwMi9faXBKT1k1bEFH c0c2ZF9zSnczaTZYYjRxdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM1wkRdsezF+3+6qP4UFlnpFop5iizOvzEHZ13oInfL/SrXTKObaaq S7n/jJHH1lnU46nPkQ0jTi0bgWY7tDyAOWGEnWyI5QzRYEFinGIeRfYLwyKLQYtH T19OO5AgbwPw86ATqJnpJKHTemyH7BAWSLsJczT8Xq7OYjwdTyyADOvpYj40vHDU +UczZaaDGiw+Nj5ZN0Z+w26/YzoS/0f3ZXX6D5ZFNFV6GmJcX3kFBjbrFnAWcIqV hPKO0VD1AtyE45unjDYE8Uy1Aq4+wLmo6q2ZVSKIEMRvMt9lSv/uL68lA2eKZtl3 0iF2yf+E72q+wQr5AH7Ca5WerV6cwSna -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:04 2025 by rpki-client