$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.mft File: b2FOWP6Tat901zb1OS3tX9FrdYc.mft (raw, json) Hash identifier: k72Wy+lG/RnVkosnfTzmDecx0M8G8QFE/vOnZl4pu4M= Subject key identifier: 79:FD:A2:7A:83:93:4D:1D:C1:B7:12:83:20:E2:CA:43:72:E9:4A:72 Authority key identifier: 6F:61:4E:58:FE:93:6A:DF:74:D7:36:F5:39:2D:ED:5F:D1:6B:75:87 Certificate issuer: /CN=A91A9B3C/serialNumber=6F614E58FE936ADF74D736F5392DED5FD16B7587 Certificate serial: 0649 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2FOWP6Tat901zb1OS3tX9FrdYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.mft Manifest number: 0644 Signing time: Thu 24 Apr 2025 22:22:10 +0000 Manifest this update: Thu 24 Apr 2025 22:22:10 +0000 Manifest next update: Thu 01 May 2025 22:22:10 +0000 Files and hashes: 1: b2FOWP6Tat901zb1OS3tX9FrdYc.crl (hash: ML65hPRFPzoOSJTH1AuvbIA18///S2UHsHSq5MK5tbY=) 2: 00D8BE5286FC11EB8A95642DC4F9AE02.roa (hash: k0J17sE1EdNCFMHPLLouV8rIaMP7CAywUqJdG5phE9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.crl rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2FOWP6Tat901zb1OS3tX9FrdYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:22:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1609 (0x649) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B3C, serialNumber=6F614E58FE936ADF74D736F5392DED5FD16B7587 Validity Not Before: Apr 24 22:22:10 2025 GMT Not After : May 1 22:22:10 2025 GMT Subject: CN=680ab992-1c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:28:c3:88:10:58:2b:4e:51:55:d8:8a:50:1c: 56:4e:dc:a9:c0:5a:2d:dd:68:1e:58:ac:1e:a9:ea: 27:9e:0e:60:84:17:e7:25:6b:13:28:33:ad:fc:2a: 3f:30:2c:f8:f4:6f:6f:a0:69:f3:0a:58:21:96:26: 13:8b:6b:e7:72:7d:2e:a0:b5:45:86:9d:2d:56:a3: 63:a5:90:f1:85:e2:35:13:bc:4d:65:b1:4d:e0:0a: e4:8c:84:04:81:a1:15:2a:d7:94:d5:4e:a6:d6:81: cf:94:e9:4e:9a:95:15:f6:f1:fc:b4:b1:81:1e:59: b2:e3:f4:f6:42:e7:71:cc:30:e3:62:24:c2:5b:28: 7e:4b:b5:44:36:6a:4a:04:f1:ff:50:03:fd:dd:f3: 70:50:63:ff:3b:2f:b6:92:5a:b5:e6:e6:a0:ea:71: c9:da:ee:81:a5:1c:f7:54:97:51:de:d7:ca:88:18: 55:d9:2a:94:1b:7a:7f:aa:e0:26:c5:f3:84:14:19: 95:4b:c2:66:76:f8:9e:e0:2f:fe:a6:12:03:5d:86: e6:d5:4b:3a:c6:1f:f9:9c:3e:23:e1:96:50:40:7e: 9f:8b:a7:3f:f2:15:18:db:92:f7:65:c5:ae:9c:18: 39:61:76:61:26:a9:38:0f:f4:9d:e0:b4:66:53:b2: 89:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:FD:A2:7A:83:93:4D:1D:C1:B7:12:83:20:E2:CA:43:72:E9:4A:72 X509v3 Authority Key Identifier: keyid:6F:61:4E:58:FE:93:6A:DF:74:D7:36:F5:39:2D:ED:5F:D1:6B:75:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2FOWP6Tat901zb1OS3tX9FrdYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:56:79:1e:e2:78:e9:c5:27:62:da:d7:b2:d2:a3:79:04:a0: 9a:98:7f:22:2a:14:1d:5d:3b:92:fb:11:ac:d5:c7:fe:bc:15: 7a:c7:f3:17:42:bb:7e:d3:bf:2b:e7:8b:52:65:6c:c0:01:6b: 04:a3:8e:5c:ea:eb:aa:92:95:21:43:09:41:aa:a4:4a:4e:18: 51:d9:45:0a:00:7e:49:87:a5:69:20:9b:f8:c1:fe:0a:e2:69: 70:08:1a:0b:a3:d0:0a:10:7b:8c:c2:52:49:b8:3e:ff:0d:48: 2f:5d:9a:15:26:c5:a4:14:4d:92:a9:dc:36:f0:dd:4b:87:1e: b9:6f:27:bf:9b:b5:e1:b6:c4:e8:3c:14:d5:fa:a4:b1:c9:55: e5:53:3f:87:1c:35:82:fa:7b:9d:3e:e7:8c:33:c1:5f:01:a7: 73:b1:fe:b3:b4:38:bc:d9:e6:23:d4:b1:96:ec:a6:df:2f:28: 2b:f9:b6:ee:39:07:26:36:db:3b:2b:32:f7:3b:90:20:d6:5e: 19:6f:42:a2:5a:9b:38:9c:be:9d:b7:e6:a2:ea:5c:9a:75:36: 11:0f:e5:11:af:5e:ed:c4:3a:82:d6:cf:24:ca:96:fb:0f:1a: a2:30:65:dc:dc:d5:7d:89:0f:17:45:f0:42:f9:a5:26:9e:42: 7b:fa:e7:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCM0MxMTAvBgNVBAUTKDZGNjE0RTU4RkU5MzZBREY3NEQ3MzZGNTM5MkRFRDVG RDE2Qjc1ODcwHhcNMjUwNDI0MjIyMjEwWhcNMjUwNTAxMjIyMjEwWjAYMRYwFAYD VQQDEw02ODBhYjk5Mi0xYzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApSjDiBBYK05RVdiKUBxWTtypwFot3WgeWKweqeonng5ghBfnJWsTKDOt/Co/ MCz49G9voGnzClghliYTi2vncn0uoLVFhp0tVqNjpZDxheI1E7xNZbFN4ArkjIQE gaEVKteU1U6m1oHPlOlOmpUV9vH8tLGBHlmy4/T2QudxzDDjYiTCWyh+S7VENmpK BPH/UAP93fNwUGP/Oy+2klq15uag6nHJ2u6BpRz3VJdR3tfKiBhV2SqUG3p/quAm xfOEFBmVS8Jmdvie4C/+phIDXYbm1Us6xh/5nD4j4ZZQQH6fi6c/8hUY25L3ZcWu nBg5YXZhJqk4D/Sd4LRmU7KJtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHn9onqD k00dwbcSgyDiykNy6UpyMB8GA1UdIwQYMBaAFG9hTlj+k2rfdNc29Tkt7V/Ra3WH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIzQy8zRjMzNjJEQTg2 RkExMUVCQjNDN0JCMjlDNEY5QUUwMi9iMkZPV1A2VGF0OTAxemIxT1MzdFg5RnJk WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2IyRk9XUDZUYXQ5MDF6YjFPUzN0WDlGcmRZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIzQy8zRjMzNjJEQTg2RkExMUVCQjNDN0JCMjlDNEY5QUUwMi9iMkZPV1A2VGF0 OTAxemIxT1MzdFg5RnJkWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBVnke4njpxSdi2tey0qN5BKCamH8iKhQdXTuS+xGs1cf+vBV6x/MX Qrt+078r54tSZWzAAWsEo45c6uuqkpUhQwlBqqRKThhR2UUKAH5Jh6VpIJv4wf4K 4mlwCBoLo9AKEHuMwlJJuD7/DUgvXZoVJsWkFE2Sqdw28N1Lhx65bye/m7XhtsTo PBTV+qSxyVXlUz+HHDWC+nudPueMM8FfAadzsf6ztDi82eYj1LGW7KbfLygr+bbu OQcmNts7KzL3O5Ag1l4Zb0KiWps4nL6dt+ai6lyadTYRD+URr17txDqC1s8kypb7 DxqiMGXc3NV9iQ8XRfBC+aUmnkJ7+ud7 -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:40 2025 by rpki-client