$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft File: elBsIXoxB45CF4FgOA3SyDko2S4.mft (raw, json) Hash identifier: 7aCHzqtxgUYe9Vg7xpazMWugLm4mV2boyEu9OrAf8AI= Subject key identifier: CC:F8:7F:8B:15:07:C2:0B:46:23:35:DC:42:02:5D:0E:72:36:C2:75 Authority key identifier: 7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E Certificate issuer: /CN=A91A6DF8/serialNumber=7A506C217A31078E42178160380DD2C83928D92E Certificate serial: 0C92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft Manifest number: 0C8A Signing time: Thu 24 Apr 2025 18:09:07 +0000 Manifest this update: Thu 24 Apr 2025 18:09:07 +0000 Manifest next update: Thu 01 May 2025 18:09:07 +0000 Files and hashes: 1: elBsIXoxB45CF4FgOA3SyDko2S4.crl (hash: H/AMZopLd89pQ/EFV7qRT4SukDPiulEjUxs3VCrzRW8=) 2: 07B85890C29D11EBBAF29939C4F9AE02.roa (hash: Wbd4SNbG7n2IN5fFqW7xiw4LueCafFj4BsRNKFvE840=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3218 (0xc92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6DF8, serialNumber=7A506C217A31078E42178160380DD2C83928D92E Validity Not Before: Apr 24 18:09:07 2025 GMT Not After : May 1 18:09:07 2025 GMT Subject: CN=680a7e43-a4f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f5:72:5c:1a:a1:7b:5a:89:61:88:b0:57:72: fc:85:d1:59:b4:59:59:3b:a3:8f:b0:a5:1a:b4:50: b3:9f:1f:f4:af:d3:dd:60:41:e4:ec:3d:ea:0c:75: 6e:0b:50:99:ea:0f:c8:d7:5a:3e:f4:f2:76:80:f0: 05:c6:5d:04:5b:06:91:8f:e4:f3:b5:68:ce:ea:2b: 72:8a:64:89:3f:17:4d:c8:04:c1:9a:30:b9:0c:97: 90:7e:e3:26:a5:bf:5a:cf:11:e3:f2:5c:71:c1:3f: a1:3f:89:1b:71:17:f4:c5:f9:85:dd:e5:14:e3:38: 5e:1e:63:60:fc:a5:04:8b:36:95:0b:5b:c3:37:30: 5f:40:f8:f6:b0:c1:3a:a8:61:11:3c:b9:32:09:75: 19:65:cb:f2:23:99:e1:cc:a1:e1:49:86:80:89:b4: e4:3e:c5:8b:c2:2d:6d:c2:11:4b:0f:99:bf:cf:0f: 19:a5:5f:a5:49:50:ac:b4:f4:92:e4:08:f1:8c:21: c1:70:58:7a:5a:d4:e5:73:89:01:ea:bc:77:65:30: 68:8d:8b:b5:43:c4:ba:a8:25:f6:b4:13:34:62:57: 8d:88:26:c9:ec:b1:15:25:25:7e:ab:9c:0b:ee:b1: 0a:32:86:36:f0:c2:a2:d2:d8:ea:da:11:2c:ae:8d: 68:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F8:7F:8B:15:07:C2:0B:46:23:35:DC:42:02:5D:0E:72:36:C2:75 X509v3 Authority Key Identifier: keyid:7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:9c:37:e6:48:d1:d7:a6:9c:53:81:69:ac:52:06:ec:d0:88: 15:6b:ca:48:4b:a8:d1:36:f5:1f:2f:5d:42:e3:61:1d:e1:00: e9:41:1a:f4:54:50:6c:d9:ed:8b:b4:11:da:47:57:e3:14:e3: 3a:8e:49:33:6d:b7:a6:42:9f:64:b8:9b:ac:02:db:4e:d8:04: dc:ec:69:5f:63:9d:e9:ed:45:6a:02:9d:78:f9:51:cd:d7:65: 86:9b:96:f1:81:da:0a:c8:27:b9:71:14:18:c2:85:d7:01:63: cd:05:54:90:2f:11:c7:72:26:52:e5:5b:9d:de:04:11:81:ef: a9:f1:26:07:8a:e7:18:cb:b4:8c:b2:bd:d7:eb:03:6a:1e:09: 8d:15:30:b5:81:a2:23:79:43:36:d5:34:c5:c3:00:45:66:37: 95:53:d2:19:61:e0:b2:78:69:c6:02:55:a1:f2:ee:7c:1a:c5: 4d:6d:6b:12:54:71:8e:e9:b3:bb:98:a9:25:0c:f8:f1:19:40: da:d3:9c:f9:ca:31:e1:7e:e6:20:bd:27:ae:89:2a:ab:ab:a6: 9c:a2:5a:fc:3c:fb:77:8e:6a:cf:f8:fc:5f:77:e8:49:e8:64: 0d:c6:df:1d:0f:9e:06:83:41:ad:09:50:20:7b:4a:99:06:8f: d1:63:bc:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZERjgxMTAvBgNVBAUTKDdBNTA2QzIxN0EzMTA3OEU0MjE3ODE2MDM4MEREMkM4 MzkyOEQ5MkUwHhcNMjUwNDI0MTgwOTA3WhcNMjUwNTAxMTgwOTA3WjAYMRYwFAYD VQQDEw02ODBhN2U0My1hNGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7PVyXBqhe1qJYYiwV3L8hdFZtFlZO6OPsKUatFCznx/0r9PdYEHk7D3qDHVu C1CZ6g/I11o+9PJ2gPAFxl0EWwaRj+TztWjO6ityimSJPxdNyATBmjC5DJeQfuMm pb9azxHj8lxxwT+hP4kbcRf0xfmF3eUU4zheHmNg/KUEizaVC1vDNzBfQPj2sME6 qGERPLkyCXUZZcvyI5nhzKHhSYaAibTkPsWLwi1twhFLD5m/zw8ZpV+lSVCstPSS 5AjxjCHBcFh6WtTlc4kB6rx3ZTBojYu1Q8S6qCX2tBM0YleNiCbJ7LEVJSV+q5wL 7rEKMoY28MKi0tjq2hEsro1owwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMz4f4sV B8ILRiM13EICXQ5yNsJ1MB8GA1UdIwQYMBaAFHpQbCF6MQeOQheBYDgN0sg5KNku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkRGOC83Njc2RjVEQ0Yz Q0ExMUU5QUFCQTUzN0ZDNEY5QUUwMi9lbEJzSVhveEI0NUNGNEZnT0EzU3lEa28y UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VsQnNJWG94QjQ1Q0Y0RmdPQTNTeURrbzJTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkRGOC83Njc2RjVEQ0YzQ0ExMUU5QUFCQTUzN0ZDNEY5QUUwMi9lbEJzSVhveEI0 NUNGNEZnT0EzU3lEa28yUzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXnDfmSNHXppxTgWmsUgbs0IgVa8pIS6jRNvUfL11C42Ed4QDpQRr0 VFBs2e2LtBHaR1fjFOM6jkkzbbemQp9kuJusAttO2ATc7GlfY53p7UVqAp14+VHN 12WGm5bxgdoKyCe5cRQYwoXXAWPNBVSQLxHHciZS5Vud3gQRge+p8SYHiucYy7SM sr3X6wNqHgmNFTC1gaIjeUM21TTFwwBFZjeVU9IZYeCyeGnGAlWh8u58GsVNbWsS VHGO6bO7mKklDPjxGUDa05z5yjHhfuYgvSeuiSqrq6acolr8PPt3jmrP+Pxfd+hJ 6GQNxt8dD54Gg0GtCVAge0qZBo/RY7wt -----END CERTIFICATE-----Generated at Sat Apr 26 05:51:03 2025 by rpki-client