$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft File: f_x8VcpIXDdqYe_sDlN3ZToEw70.mft (raw, json) Hash identifier: 6MWg7WX24DHfOwGternWL6fRnGk7u2HQ/cRq7IdLYV0= Subject key identifier: A9:95:43:15:B0:2D:B3:FE:10:E9:DA:F2:0C:C8:9E:39:EB:39:06:62 Authority key identifier: 7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD Certificate issuer: /CN=A91ABD25/serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft Manifest number: 01E2 Signing time: Fri 25 Apr 2025 01:57:03 +0000 Manifest this update: Fri 25 Apr 2025 01:57:02 +0000 Manifest next update: Fri 02 May 2025 01:57:02 +0000 Files and hashes: 1: f_x8VcpIXDdqYe_sDlN3ZToEw70.crl (hash: C5uO9ZnNlBWoRQtbDjai1t3yNzmr/MmuuI67u01dCjE=) 2: 9535628E5C0D11EDA7191A0AC4F9AE02.roa (hash: GEtYiWLknMjIUtasCLz3xO+Z9HJ/gkoudL4BFK8Uyb8=) 3: E7FC6A1A4EAE11EDBF0D8256C4F9AE02.roa (hash: JJtIODUU0vxeCd16MdkVxGe00rno7Fl7ALBMI2DvnXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABD25, serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Validity Not Before: Apr 25 01:57:02 2025 GMT Not After : May 2 01:57:02 2025 GMT Subject: CN=680aebef-0ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b4:89:73:66:61:11:a6:b1:6c:ce:fa:59:00: f9:70:18:72:ff:02:03:e8:d6:93:d1:84:0e:16:e2: 9c:ed:38:7b:23:c0:67:dc:bc:85:e2:a0:e6:12:03: 01:14:82:a8:45:7d:b2:4c:44:1c:03:53:35:0a:3e: 51:50:b8:f0:d9:78:e8:67:9d:5a:65:f8:56:90:9f: 77:4c:28:7a:0c:28:1f:9e:39:4f:88:53:59:c6:4a: ef:38:ae:6e:9b:5d:9a:56:94:10:06:7b:84:2c:2e: 8e:ef:13:ea:cb:a0:3e:44:d8:a5:90:eb:30:29:02: 8f:e9:1b:3e:5a:16:90:22:96:f6:12:33:87:96:42: 8e:ec:5f:59:93:95:7f:f1:fb:94:79:ca:e9:38:aa: 80:1a:c2:df:7f:8d:68:11:20:06:83:1f:8c:92:ed: 0e:95:b6:a0:04:d5:d7:69:af:50:36:68:28:de:8f: f2:e2:f8:1a:33:87:33:7b:a3:42:d1:75:0c:ed:f1: 0d:a4:03:75:04:c4:6d:3a:22:23:53:0f:2a:f6:db: f8:f4:a6:a9:b9:6e:b9:54:4f:03:96:23:ea:11:55: 0c:37:7e:18:5c:26:7c:91:37:68:29:7c:80:c8:30: 51:fe:08:93:d0:e9:c2:9a:00:be:19:98:f2:78:f3: 4e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:95:43:15:B0:2D:B3:FE:10:E9:DA:F2:0C:C8:9E:39:EB:39:06:62 X509v3 Authority Key Identifier: keyid:7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a6:e4:00:4a:50:9f:75:52:fb:f7:81:83:23:72:fc:fd:96: 0a:24:51:29:b2:d3:ee:97:68:26:27:0f:54:bd:da:45:82:31: 24:ee:ce:b8:bd:b9:ca:eb:ef:05:ec:c7:70:85:c0:36:66:d8: b0:00:e4:ee:cc:b1:20:7a:49:e5:4d:07:48:59:0f:b6:6e:b9: e1:37:70:19:f2:cb:6a:8c:78:4b:b7:a0:25:6e:cf:f2:e7:20: c6:34:90:11:d2:60:59:5e:92:23:d2:c5:c9:e3:c0:0f:54:73: b2:b8:34:24:7b:1c:d5:ba:96:88:e9:83:5e:af:9e:f2:61:46: c0:23:a7:6a:49:ed:78:a1:7b:af:e1:36:1d:cd:cb:12:23:0f: 37:32:7f:50:6d:84:4d:5e:dc:7c:e1:c8:a5:7a:67:5a:db:2e: 6d:81:f4:75:65:bf:69:b3:18:b4:dd:33:8e:56:59:85:72:46: 7e:d3:c5:db:7b:ea:cc:e1:b7:4d:11:ba:3d:34:1e:c1:b3:44: 3b:da:04:36:58:f0:e5:60:f3:9c:10:dc:45:17:6b:cd:e8:4f: 9c:ea:55:59:4b:49:c7:a8:7e:4f:00:0d:93:93:03:30:d6:d8: 42:1a:62:0c:36:22:94:da:37:eb:1e:a5:9e:39:72:eb:35:2f: 1c:3b:c1:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJEMjUxMTAvBgNVBAUTKDdGRkM3QzU1Q0E0ODVDMzc2QTYxRUZFQzBFNTM3NzY1 M0EwNEMzQkQwHhcNMjUwNDI1MDE1NzAyWhcNMjUwNTAyMDE1NzAyWjAYMRYwFAYD VQQDEw02ODBhZWJlZi0wYWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubSJc2ZhEaaxbM76WQD5cBhy/wID6NaT0YQOFuKc7Th7I8Bn3LyF4qDmEgMB FIKoRX2yTEQcA1M1Cj5RULjw2XjoZ51aZfhWkJ93TCh6DCgfnjlPiFNZxkrvOK5u m12aVpQQBnuELC6O7xPqy6A+RNilkOswKQKP6Rs+WhaQIpb2EjOHlkKO7F9Zk5V/ 8fuUecrpOKqAGsLff41oESAGgx+Mku0OlbagBNXXaa9QNmgo3o/y4vgaM4cze6NC 0XUM7fENpAN1BMRtOiIjUw8q9tv49KapuW65VE8DliPqEVUMN34YXCZ8kTdoKXyA yDBR/giT0OnCmgC+GZjyePNOqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmVQxWw LbP+EOna8gzInjnrOQZiMB8GA1UdIwQYMBaAFH/8fFXKSFw3amHv7A5Td2U6BMO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkQyNS81MjdERDI1QTRF QUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhEZHFZZV9zRGxOM1pUb0V3 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfeDhWY3BJWERkcVllX3NEbE4zWlRvRXc3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkQyNS81MjdERDI1QTRFQUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhE ZHFZZV9zRGxOM1pUb0V3NzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOpuQASlCfdVL794GDI3L8/ZYKJFEpstPul2gmJw9UvdpFgjEk7s64 vbnK6+8F7MdwhcA2ZtiwAOTuzLEgeknlTQdIWQ+2brnhN3AZ8stqjHhLt6Albs/y 5yDGNJAR0mBZXpIj0sXJ48APVHOyuDQkexzVupaI6YNer57yYUbAI6dqSe14oXuv 4TYdzcsSIw83Mn9QbYRNXtx84cilemda2y5tgfR1Zb9psxi03TOOVlmFckZ+08Xb e+rM4bdNEbo9NB7Bs0Q72gQ2WPDlYPOcENxFF2vN6E+c6lVZS0nHqH5PAA2TkwMw 1thCGmIMNiKU2jfrHqWeOXLrNS8cO8Fw -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:50 2025 by rpki-client