$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft File: _CT1OQdHh-zqsAwkJgbCvWiBmg0.mft (raw, json) Hash identifier: F4Ogw7TPMgl3QKp1Dz1PpmvKhse6I9QVOBVJstzJSuQ= Subject key identifier: E9:0D:CF:80:B0:D0:9F:47:71:0C:8A:8C:9C:68:93:C7:45:A0:78:46 Authority key identifier: FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D Certificate issuer: /CN=A91A9CBB/serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft Manifest number: 0B Signing time: Fri 25 Apr 2025 07:08:08 +0000 Manifest this update: Fri 25 Apr 2025 07:08:07 +0000 Manifest next update: Fri 02 May 2025 07:08:07 +0000 Files and hashes: 1: _CT1OQdHh-zqsAwkJgbCvWiBmg0.crl (hash: ZOJoRZNmAAD6F5ZRdywN5w66/z6VZoiUCDZm5IyJrUs=) 2: 2A8C8F02198E11F09D302145C4F9AE02.roa (hash: pkFF5f+Vaat+aJOayMibpTMU9Wp7Q864DQvUc24s624=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CBB, serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Validity Not Before: Apr 25 07:08:07 2025 GMT Not After : May 2 07:08:07 2025 GMT Subject: CN=680b34d8-0bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6d:23:09:41:a1:b9:6d:6f:2b:e7:70:da:08: da:07:fe:78:86:86:a9:89:87:10:e8:5d:09:8c:4b: d6:4b:3e:bd:59:b3:18:5e:a0:99:35:c4:ba:d8:38: fb:4c:1b:98:2d:61:4d:11:6e:32:35:5e:de:94:2e: 1d:5e:7c:db:e0:43:aa:46:f5:16:e3:fb:c1:fb:c2: a7:08:6e:32:55:0b:75:42:33:7d:cc:34:83:5e:c4: 91:bf:67:71:0f:00:7d:98:a6:ff:42:ce:be:80:cc: 71:39:29:98:c1:c5:2d:8c:21:a7:bd:d0:b4:e2:d5: 72:59:93:48:d4:41:ca:ee:b1:25:f0:8b:34:df:f2: f9:b5:e0:68:8f:e8:d1:0a:7c:ce:2f:30:b0:f5:b1: 4c:ed:7c:c2:ac:5e:6b:02:29:a0:16:cd:be:c8:2c: ac:55:b4:ee:d9:ad:5d:bc:84:f0:4d:ca:bc:be:f0: 13:a2:e9:12:f4:cc:2c:c8:87:3c:6b:a0:de:f9:92: 2e:10:09:fa:23:99:da:40:1f:bf:bd:79:a1:92:30: 1e:bb:90:61:03:0f:84:b0:12:56:cb:79:4d:1d:c5: b4:6f:ba:98:eb:95:a0:a3:04:0b:e8:dc:fe:a6:3f: b7:31:5a:38:f8:fc:7c:5d:db:a8:bb:7d:37:22:a8: 46:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:0D:CF:80:B0:D0:9F:47:71:0C:8A:8C:9C:68:93:C7:45:A0:78:46 X509v3 Authority Key Identifier: keyid:FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:5f:20:c3:fd:bd:3f:e6:7c:f8:3a:14:be:42:c1:d6:06:11: 07:b4:b4:02:2f:47:a9:4f:5c:93:b9:7d:c4:7f:6a:67:6a:3b: 55:b4:c6:be:fd:50:97:65:09:13:85:a1:cb:2d:ed:11:84:35: 9f:fe:95:12:6c:9e:c4:5c:9f:59:e8:02:e0:9f:d1:a4:6a:c7: 50:d4:26:25:2d:f2:3f:36:55:8c:73:87:95:ef:cf:11:46:81: 22:3e:72:1c:4a:a8:b8:bd:45:bc:52:1c:0d:12:e9:eb:59:37: 3b:b1:11:a5:b2:37:92:ca:f8:31:c7:b3:6e:ce:ad:32:36:5c: bb:91:e5:12:2b:62:a2:27:44:eb:74:51:23:83:ce:29:3e:08: 38:fb:d4:66:d4:a6:c3:0a:e1:3c:bc:b5:a6:e4:ad:6f:16:71: 77:37:59:2e:c5:b9:fc:64:43:1f:21:39:8c:57:f8:cd:67:13: aa:91:56:d5:f5:5a:cb:51:0b:f1:5c:93:a0:a1:10:65:2d:74: af:73:da:05:ab:fe:12:9c:f2:ce:66:cd:62:f5:8b:20:33:7a: b7:1b:5f:e8:a7:64:d1:4c:ac:d7:d5:7d:7f:10:53:76:4c:16: 27:23:51:24:52:b9:d4:c2:18:4e:a5:3a:f2:f5:43:00:f6:1e: 2e:98:ad:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUNCQjExMC8GA1UEBRMoRkMyNEY1MzkwNzQ3ODdFQ0VBQjAwQzI0MjYwNkMyQkQ2 ODgxOUEwRDAeFw0yNTA0MjUwNzA4MDdaFw0yNTA1MDIwNzA4MDdaMBgxFjAUBgNV BAMTDTY4MGIzNGQ4LTBiZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAbSMJQaG5bW8r53DaCNoH/niGhqmJhxDoXQmMS9ZLPr1ZsxheoJk1xLrYOPtM G5gtYU0RbjI1Xt6ULh1efNvgQ6pG9Rbj+8H7wqcIbjJVC3VCM33MNINexJG/Z3EP AH2Ypv9Czr6AzHE5KZjBxS2MIae90LTi1XJZk0jUQcrusSXwizTf8vm14GiP6NEK fM4vMLD1sUztfMKsXmsCKaAWzb7ILKxVtO7ZrV28hPBNyry+8BOi6RL0zCzIhzxr oN75ki4QCfojmdpAH7+9eaGSMB67kGEDD4SwElbLeU0dxbRvupjrlaCjBAvo3P6m P7cxWjj4/Hxd26i7fTciqEahAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6Q3PgLDQ n0dxDIqMnGiTx0WgeEYwHwYDVR0jBBgwFoAU/CT1OQdHh+zqsAwkJgbCvWiBmg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5Q0JCL0Q1M0JEMTQ2MTVC MTExRjBBMjc3NEEwOUM0RjlBRTAyL19DVDFPUWRIaC16cXNBd2tKZ2JDdldpQm1n MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX0NUMU9RZEhoLXpxc0F3a0pnYkN2V2lCbWcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 Q0JCL0Q1M0JEMTQ2MTVCMTExRjBBMjc3NEEwOUM0RjlBRTAyL19DVDFPUWRIaC16 cXNBd2tKZ2JDdldpQm1nMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGhfIMP9vT/mfPg6FL5CwdYGEQe0tAIvR6lPXJO5fcR/amdqO1W0xr79 UJdlCROFocst7RGENZ/+lRJsnsRcn1noAuCf0aRqx1DUJiUt8j82VYxzh5XvzxFG gSI+chxKqLi9RbxSHA0S6etZNzuxEaWyN5LK+DHHs27OrTI2XLuR5RIrYqInROt0 USODzik+CDj71GbUpsMK4Ty8tabkrW8WcXc3WS7FufxkQx8hOYxX+M1nE6qRVtX1 WstRC/Fck6ChEGUtdK9z2gWr/hKc8s5mzWL1iyAzercbX+inZNFMrNfVfX8QU3ZM FicjUSRSudTCGE6lOvL1QwD2Hi6YrdY= -----END CERTIFICATE-----Generated at Sat Apr 26 03:46:31 2025 by rpki-client