$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft File: V1pu0ww3OtQ00VpmXdoudk7Imso.mft (raw, json) Hash identifier: dHnszSIEuPjfYem+m5cvFt9/pO92WJuEfvEnSvpoU6w= Subject key identifier: 87:F4:62:01:B9:5D:B4:63:2C:F8:AF:07:E4:01:4F:DB:81:19:E9:BF Authority key identifier: 57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA Certificate issuer: /CN=A91827C5/serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft Manifest number: 68 Signing time: Fri 25 Apr 2025 05:59:12 +0000 Manifest this update: Fri 25 Apr 2025 05:59:11 +0000 Manifest next update: Fri 02 May 2025 05:59:11 +0000 Files and hashes: 1: V1pu0ww3OtQ00VpmXdoudk7Imso.crl (hash: ohQYpOh+vjmBSDLpVyCZVw/ZV9pB2X22xrGvju28oPs=) 2: CC5DED701ED011F087716517C4F9AE02.roa (hash: /r/z36JtiDDnCVXQeI6m7NOKWTwHjbV5JqKL9GGA5Gc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91827C5, serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA Validity Not Before: Apr 25 05:59:11 2025 GMT Not After : May 2 05:59:11 2025 GMT Subject: CN=680b24af-39e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e5:d6:12:64:36:14:14:52:2d:ba:51:f5:93: a7:e0:49:c6:72:03:8e:be:b6:a5:a9:90:62:9d:a5: 7b:9f:ae:6c:f4:d6:30:8c:1b:ed:6c:a3:e0:ed:72: 87:15:dd:19:d3:78:d1:a5:81:ab:57:83:3f:1e:59: 4c:5e:38:00:37:b0:4b:25:8c:50:7d:c6:4f:81:19: e8:2c:81:8b:50:ec:1b:01:19:0b:0f:b8:48:a3:aa: 5c:38:d0:8f:7c:c4:ec:7b:50:8a:54:f4:99:49:36: 33:7c:53:40:ed:a7:3f:16:c9:45:4a:59:46:82:c8: cf:c9:6a:3d:e9:75:73:8b:73:12:3e:eb:32:03:56: ed:85:7a:38:8b:61:89:c7:3c:c0:59:f7:91:6b:06: 42:e6:69:9f:47:cb:51:9e:0c:2c:5c:7b:7d:36:ef: 0e:87:43:56:65:f0:54:0c:25:13:f7:6f:f8:d2:3e: 80:3a:02:56:ac:35:63:67:df:4b:85:ad:c4:2e:10: 88:4e:50:aa:6e:6d:a6:4b:67:9c:e5:98:1c:7b:05: 76:9a:69:06:4a:c2:5a:6b:23:ff:b7:89:28:57:89: 45:15:f1:d3:36:54:8e:91:8e:42:95:3d:8b:5d:1d: 23:29:42:5f:1b:7d:ab:65:ec:9e:76:3c:4c:db:2b: 9c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F4:62:01:B9:5D:B4:63:2C:F8:AF:07:E4:01:4F:DB:81:19:E9:BF X509v3 Authority Key Identifier: keyid:57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:f9:02:38:57:b5:e6:c2:f7:e7:8a:f8:8d:3d:90:9c:a7:06: 76:de:53:06:ea:e5:fd:13:a3:c9:55:e4:a4:6b:76:e9:6c:99: da:aa:4f:ea:f5:5c:69:b7:66:c1:24:2e:ee:43:fb:3c:51:ec: 37:dd:8b:61:71:f9:c9:b1:61:8c:6d:aa:ed:01:43:b5:7c:fa: 2a:e7:ca:49:9a:68:2b:2a:38:f5:46:54:c6:47:fa:61:b2:68: a9:ae:c2:43:9b:32:6c:de:26:5b:73:44:3f:fc:01:e6:8d:2e: 99:18:57:b2:ee:fe:43:f7:83:bd:3d:64:f4:fd:9f:be:f8:29: 11:24:4d:04:c2:d7:0c:48:2c:d7:3a:8b:66:46:6c:2f:6f:e5: 9e:21:5a:09:53:88:3f:1f:4b:c8:39:71:00:f2:2c:ec:65:23: 5a:9b:b4:dd:b4:3c:84:a7:33:94:43:09:05:3a:19:86:97:c5: d7:58:d5:21:ee:52:5b:73:8e:e2:6c:dd:95:a1:31:5b:06:53: 43:c6:cb:a1:00:06:95:70:f1:7b:17:01:66:77:95:83:cf:f9: 12:e2:54:8e:5a:f7:81:bc:83:be:4b:2c:c0:b2:ba:e5:8c:0f: ac:6b:2e:20:87:23:5b:87:85:ee:f5:1e:f6:9d:b8:ba:74:91: 37:99:b1:11 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MjdDNTExMC8GA1UEBRMoNTc1QTZFRDMwQzM3M0FENDM0RDE1QTY2NUREQTJFNzY0 RUM4OUFDQTAeFw0yNTA0MjUwNTU5MTFaFw0yNTA1MDIwNTU5MTFaMBgxFjAUBgNV BAMTDTY4MGIyNGFmLTM5ZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+5dYSZDYUFFItulH1k6fgScZyA46+tqWpkGKdpXufrmz01jCMG+1so+DtcocV 3RnTeNGlgatXgz8eWUxeOAA3sEsljFB9xk+BGegsgYtQ7BsBGQsPuEijqlw40I98 xOx7UIpU9JlJNjN8U0Dtpz8WyUVKWUaCyM/Jaj3pdXOLcxI+6zIDVu2FejiLYYnH PMBZ95FrBkLmaZ9Hy1GeDCxce3027w6HQ1Zl8FQMJRP3b/jSPoA6AlasNWNn30uF rcQuEIhOUKpubaZLZ5zlmBx7BXaaaQZKwlprI/+3iShXiUUV8dM2VI6RjkKVPYtd HSMpQl8bfatl7J52PEzbK5xVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUh/RiAbld tGMs+K8H5AFP24EZ6b8wHwYDVR0jBBgwFoAUV1pu0ww3OtQ00VpmXdoudk7Imsow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyN0M1L0QwNjVBQkI0OEFE OTExRUY5ODFDODI4M0M0RjlBRTAyL1YxcHUwd3czT3RRMDBWcG1YZG91ZGs3SW1z by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVjFwdTB3dzNPdFEwMFZwbVhkb3VkazdJbXNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy N0M1L0QwNjVBQkI0OEFEOTExRUY5ODFDODI4M0M0RjlBRTAyL1YxcHUwd3czT3RR MDBWcG1YZG91ZGs3SW1zby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANP5AjhXtebC9+eK+I09kJynBnbeUwbq5f0To8lV5KRrdulsmdqqT+r1 XGm3ZsEkLu5D+zxR7Dfdi2Fx+cmxYYxtqu0BQ7V8+irnykmaaCsqOPVGVMZH+mGy aKmuwkObMmzeJltzRD/8AeaNLpkYV7Lu/kP3g709ZPT9n774KREkTQTC1wxILNc6 i2ZGbC9v5Z4hWglTiD8fS8g5cQDyLOxlI1qbtN20PISnM5RDCQU6GYaXxddY1SHu UltzjuJs3ZWhMVsGU0PGy6EABpVw8XsXAWZ3lYPP+RLiVI5a94G8g75LLMCyuuWM D6xrLiCHI1uHhe71HvaduLp0kTeZsRE= -----END CERTIFICATE-----Generated at Sat Apr 26 12:31:20 2025 by rpki-client