$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft File: a81u0JpBbl_k7lre97FQ8syr6To.mft (raw, json) Hash identifier: 4Vyzbj5nKOxdzIX1UzLmppxAHsDPAzr5CIefIv8R6LA= Subject key identifier: 5A:F0:94:0B:3D:71:DE:D1:BE:61:D2:97:2F:82:E8:3A:D0:86:46:A1 Authority key identifier: 6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A Certificate issuer: /CN=A91ADF12/serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A Certificate serial: 0B8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft Manifest number: 0B7F Signing time: Thu 24 Apr 2025 18:57:16 +0000 Manifest this update: Thu 24 Apr 2025 18:57:15 +0000 Manifest next update: Thu 01 May 2025 18:57:15 +0000 Files and hashes: 1: a81u0JpBbl_k7lre97FQ8syr6To.crl (hash: Wl4+U0PwEFUANHiACSDU/DdzR9AdyoEtDXpK+mZVAUw=) 2: 84B6E12A312911EEBE440C7FC4F9AE02.roa (hash: i5Nf027GIvkDTNfygplCNBH1Tfi56MOYYL7UyT8iFDw=) 3: 777A546212E511EFB071A31CC4F9AE02.roa (hash: yxZWVQX9GhcgWV+yYaDkt3bP+W4v1/S4wiH9fdwmAXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2957 (0xb8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADF12, serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A Validity Not Before: Apr 24 18:57:15 2025 GMT Not After : May 1 18:57:15 2025 GMT Subject: CN=680a898c-af11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:91:65:f9:b5:c2:30:3c:87:14:06:2f:07:0e: b0:5c:37:c1:31:84:28:18:90:04:32:2b:3d:cd:4e: d6:35:de:de:aa:5f:6a:78:fb:66:a6:a8:4e:c2:20: 6d:70:d1:0c:8e:0c:b6:e4:ff:47:17:aa:1a:45:3e: cb:c5:f8:f3:5b:74:93:fa:10:a8:d3:06:00:9c:6d: e2:33:f4:58:ae:4d:4c:d0:13:84:76:25:08:f9:6e: be:d5:68:e1:fd:3d:ba:39:61:f3:d2:88:b6:4d:e2: 7f:09:f0:a1:94:a1:84:b0:34:24:07:f7:56:a3:60: b3:71:ae:f5:62:73:ee:70:d4:b2:8b:ae:58:fb:ea: b2:25:0a:ed:5f:c1:3c:8a:81:86:a0:f6:17:e2:af: 3c:d9:1b:6c:18:4b:f8:fe:67:3f:4c:2c:0e:54:90: 46:42:20:ff:cc:2d:7b:0e:74:8a:1e:f7:01:92:de: 97:79:de:00:9e:21:da:97:73:a4:4b:6f:c1:b7:fd: 2f:60:0d:1e:d4:0f:f5:1b:3a:6f:9b:1f:04:c3:3b: 65:e3:e6:5b:18:7b:51:d4:e0:d6:69:43:1b:b1:c2: 44:2c:b5:00:0e:0c:94:f4:b7:04:52:25:49:6c:64: 4d:9b:13:e3:d4:8a:b2:72:26:02:88:1a:ae:55:a0: 13:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F0:94:0B:3D:71:DE:D1:BE:61:D2:97:2F:82:E8:3A:D0:86:46:A1 X509v3 Authority Key Identifier: keyid:6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:f4:6f:21:7b:fb:87:f7:11:03:b7:91:eb:36:4d:b1:6f:9d: 25:db:f5:ae:12:4d:80:58:d4:2d:53:13:2d:30:01:11:95:0f: c4:71:5a:f8:42:6e:20:82:d6:06:3d:a4:9f:9d:8d:d0:68:c4: 93:00:22:c2:c8:51:e8:38:19:8a:07:40:94:f5:e9:61:2f:26: 6a:0f:45:29:32:ca:fc:67:52:da:ff:18:a8:e3:ff:3f:98:14: 1a:de:39:07:8b:97:13:36:f0:de:7d:aa:11:4b:88:d7:5a:29: 27:27:0d:f1:d9:2c:52:17:ad:0c:e0:90:b4:ab:66:da:71:5f: 8c:c5:f0:52:9f:51:eb:d7:05:8c:2f:80:10:83:2b:df:d4:03: ba:4d:b2:60:e5:45:c2:a1:38:4b:11:15:c7:47:d5:a6:5b:e9: 92:a1:e0:1a:b0:44:59:d7:56:c7:b3:db:05:c3:6f:64:f6:ff: 54:25:47:f5:5a:c4:c3:16:76:68:41:53:8b:da:54:eb:52:91: f4:64:9c:45:b2:24:0f:86:1a:55:41:2f:90:d8:99:1d:76:06: 77:05:e2:3c:19:4a:cd:ea:3b:b4:5f:85:8a:83:79:b4:96:e6: ad:bb:80:5a:93:05:ef:19:52:02:18:47:28:70:e9:2c:39:3f: eb:eb:cd:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURGMTIxMTAvBgNVBAUTKDZCQ0Q2RUQwOUE0MTZFNUZFNEVFNUFERUY3QjE1MEYy Q0NBQkU5M0EwHhcNMjUwNDI0MTg1NzE1WhcNMjUwNTAxMTg1NzE1WjAYMRYwFAYD VQQDEw02ODBhODk4Yy1hZjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZFl+bXCMDyHFAYvBw6wXDfBMYQoGJAEMis9zU7WNd7eql9qePtmpqhOwiBt cNEMjgy25P9HF6oaRT7LxfjzW3ST+hCo0wYAnG3iM/RYrk1M0BOEdiUI+W6+1Wjh /T26OWHz0oi2TeJ/CfChlKGEsDQkB/dWo2Czca71YnPucNSyi65Y++qyJQrtX8E8 ioGGoPYX4q882RtsGEv4/mc/TCwOVJBGQiD/zC17DnSKHvcBkt6Xed4AniHal3Ok S2/Bt/0vYA0e1A/1Gzpvmx8Ewztl4+ZbGHtR1ODWaUMbscJELLUADgyU9LcEUiVJ bGRNmxPj1IqyciYCiBquVaATKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrwlAs9 cd7RvmHSly+C6DrQhkahMB8GA1UdIwQYMBaAFGvNbtCaQW5f5O5a3vexUPLMq+k6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREYxMi9DRkE1MjU5QTI4 QzAxMUVBQUFFMjRFNDhDNEY5QUUwMi9hODF1MEpwQmJsX2s3bHJlOTdGUThzeXI2 VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E4MXUwSnBCYmxfazdscmU5N0ZROHN5cjZUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REYxMi9DRkE1MjU5QTI4QzAxMUVBQUFFMjRFNDhDNEY5QUUwMi9hODF1MEpwQmJs X2s3bHJlOTdGUThzeXI2VG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDB9G8he/uH9xEDt5HrNk2xb50l2/WuEk2AWNQtUxMtMAERlQ/EcVr4 Qm4ggtYGPaSfnY3QaMSTACLCyFHoOBmKB0CU9elhLyZqD0UpMsr8Z1La/xio4/8/ mBQa3jkHi5cTNvDefaoRS4jXWiknJw3x2SxSF60M4JC0q2bacV+MxfBSn1Hr1wWM L4AQgyvf1AO6TbJg5UXCoThLERXHR9WmW+mSoeAasERZ11bHs9sFw29k9v9UJUf1 WsTDFnZoQVOL2lTrUpH0ZJxFsiQPhhpVQS+Q2JkddgZ3BeI8GUrN6ju0X4WKg3m0 luatu4BakwXvGVICGEcocOksOT/r682X -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:41 2025 by rpki-client