$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft File: fToi3tGr8M05CSgLibI3bFRfbwc.mft (raw, json) Hash identifier: 8BTuM4LVe+5RnQ2JCbmYdO4d/yu0hvaRoPko9R67USQ= Subject key identifier: 7F:33:C6:2E:A4:B8:90:73:1F:7C:87:84:57:68:EA:8B:07:08:53:15 Authority key identifier: 7D:3A:22:DE:D1:AB:F0:CD:39:09:28:0B:89:B2:37:6C:54:5F:6F:07 Certificate issuer: /CN=A91AC232/serialNumber=7D3A22DED1ABF0CD3909280B89B2376C545F6F07 Certificate serial: 06C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft Manifest number: 06BA Signing time: Thu 24 Apr 2025 21:55:58 +0000 Manifest this update: Thu 24 Apr 2025 21:55:57 +0000 Manifest next update: Thu 01 May 2025 21:55:57 +0000 Files and hashes: 1: fToi3tGr8M05CSgLibI3bFRfbwc.crl (hash: TsYE5AFKYFLMxyccGndNTNInvCAd41faqcsPm60RSAQ=) 2: D93244BAF2EF11ED91F08A4FC4F9AE02.roa (hash: hUqHFifGF2RTMr5P0bZj3vJ6RCASWQ9bPokCmECeKBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.crl rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1729 (0x6c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC232, serialNumber=7D3A22DED1ABF0CD3909280B89B2376C545F6F07 Validity Not Before: Apr 24 21:55:57 2025 GMT Not After : May 1 21:55:57 2025 GMT Subject: CN=680ab36d-7d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9b:0b:20:1e:24:c1:d8:5e:98:f1:de:54:31: 9d:f8:bf:ce:0c:4e:dc:75:72:3b:5f:95:36:52:e8: bf:71:2b:aa:2f:15:86:26:59:af:fb:cb:b8:4c:df: 5e:ce:69:41:c7:ec:b2:66:6b:e8:21:e7:8d:a6:83: 5c:f5:d3:8a:1e:db:ed:08:45:a8:3f:58:6e:90:b4: bd:3a:cb:86:37:ab:b8:f0:28:a5:0a:e6:7a:2b:42: e2:3e:2a:23:65:0f:cf:d0:5d:62:0a:e4:24:a4:4d: ee:ba:7c:3a:ee:fc:26:e4:1f:64:d7:65:4e:91:68: f5:0e:75:15:ac:be:13:c9:df:38:56:c5:75:e8:d7: 89:f7:d1:39:8a:d3:4f:70:ea:df:66:cb:c3:f7:c3: ec:7b:08:69:3c:cf:bf:fb:25:35:59:56:f3:03:f3: 06:cc:ff:32:71:39:95:ee:08:79:2d:32:27:27:0e: bb:32:a7:c3:8f:be:df:52:bc:e7:90:e5:68:7f:6b: 07:28:fb:00:5d:10:cd:d9:98:9c:f9:f6:cf:01:41: 44:50:7f:3e:9c:81:72:7a:39:40:c9:e3:ed:ff:ea: f4:42:58:a2:b3:80:05:e4:37:f0:5f:f1:be:ad:99: 56:03:5f:c2:f3:f3:d6:ca:26:1d:5b:6c:29:ec:d4: ab:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:33:C6:2E:A4:B8:90:73:1F:7C:87:84:57:68:EA:8B:07:08:53:15 X509v3 Authority Key Identifier: keyid:7D:3A:22:DE:D1:AB:F0:CD:39:09:28:0B:89:B2:37:6C:54:5F:6F:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:9b:41:23:ae:77:73:23:15:7f:0b:71:39:6e:97:58:1b:b6: fc:77:07:a4:be:4b:82:2e:ce:7e:f2:55:61:24:11:91:f3:c9: 06:28:7b:56:d6:af:9c:fe:5d:b2:3b:79:90:70:f2:98:57:a0: 5b:d4:12:05:0e:5f:d2:d5:e2:ec:d4:9f:b5:96:6b:59:d9:bb: 77:88:c4:59:0a:94:1c:c2:70:79:15:5c:f4:69:ab:c1:58:d3: 17:ee:e2:c2:a6:9b:54:c7:dc:70:46:23:bf:2e:a8:6d:d9:b5: d4:56:f2:1f:cd:73:04:4f:8e:4a:38:43:3a:06:54:b5:fa:3e: 5e:55:23:48:c5:44:a0:2d:72:ac:ab:65:a5:fb:0b:cd:70:93: 08:11:8c:f7:cc:bf:d7:6b:2c:d4:a7:0d:f6:3b:6b:2a:e6:c7: 16:03:0b:78:ac:91:54:37:bd:47:d1:bc:63:43:e5:2f:1b:88: ff:87:fa:30:50:ce:9b:8e:f1:a4:a5:6d:29:cd:b6:34:a9:08: 42:a7:b8:f5:29:c2:d7:13:04:b8:63:c8:92:3f:e4:93:9e:19: 7f:92:50:21:50:aa:ff:56:68:3f:9a:a0:a0:76:46:84:a6:bf: 5d:69:a0:00:ad:e3:ff:33:92:ad:ef:e0:e4:f0:f2:ff:5c:5e: 91:7c:e7:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUMyMzIxMTAvBgNVBAUTKDdEM0EyMkRFRDFBQkYwQ0QzOTA5MjgwQjg5QjIzNzZD NTQ1RjZGMDcwHhcNMjUwNDI0MjE1NTU3WhcNMjUwNTAxMjE1NTU3WjAYMRYwFAYD VQQDEw02ODBhYjM2ZC03ZDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJsLIB4kwdhemPHeVDGd+L/ODE7cdXI7X5U2Uui/cSuqLxWGJlmv+8u4TN9e zmlBx+yyZmvoIeeNpoNc9dOKHtvtCEWoP1hukLS9OsuGN6u48CilCuZ6K0LiPioj ZQ/P0F1iCuQkpE3uunw67vwm5B9k12VOkWj1DnUVrL4Tyd84VsV16NeJ99E5itNP cOrfZsvD98PsewhpPM+/+yU1WVbzA/MGzP8ycTmV7gh5LTInJw67MqfDj77fUrzn kOVof2sHKPsAXRDN2Zic+fbPAUFEUH8+nIFyejlAyePt/+r0Qliis4AF5DfwX/G+ rZlWA1/C8/PWyiYdW2wp7NSr5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH8zxi6k uJBzH3yHhFdo6osHCFMVMB8GA1UdIwQYMBaAFH06It7Rq/DNOQkoC4myN2xUX28H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzIzMi80MTczMDA4NjU5 OEQxMUVCQUVDQzgzMjFDNEY5QUUwMi9mVG9pM3RHcjhNMDVDU2dMaWJJM2JGUmZi d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZUb2kzdEdyOE0wNUNTZ0xpYkkzYkZSZmJ3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzIzMi80MTczMDA4NjU5OEQxMUVCQUVDQzgzMjFDNEY5QUUwMi9mVG9pM3RHcjhN MDVDU2dMaWJJM2JGUmZid2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDm0EjrndzIxV/C3E5bpdYG7b8dwekvkuCLs5+8lVhJBGR88kGKHtW 1q+c/l2yO3mQcPKYV6Bb1BIFDl/S1eLs1J+1lmtZ2bt3iMRZCpQcwnB5FVz0aavB WNMX7uLCpptUx9xwRiO/Lqht2bXUVvIfzXMET45KOEM6BlS1+j5eVSNIxUSgLXKs q2Wl+wvNcJMIEYz3zL/XayzUpw32O2sq5scWAwt4rJFUN71H0bxjQ+UvG4j/h/ow UM6bjvGkpW0pzbY0qQhCp7j1KcLXEwS4Y8iSP+STnhl/klAhUKr/Vmg/mqCgdkaE pr9daaAAreP/M5Kt7+Dk8PL/XF6RfOdr -----END CERTIFICATE-----Generated at Sat Apr 26 12:18:30 2025 by rpki-client