$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft File: AXCw4NBuMUc8rBZOSwttIb300jc.mft (raw, json) Hash identifier: cl5A9cgPROZFLEUflbVNhLwPyft+Tvqzohhm3Q0YFMw= Subject key identifier: 0B:1D:36:05:95:3F:5C:7F:30:04:AB:91:F4:2A:8F:15:AD:45:47:EA Authority key identifier: 01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 Certificate issuer: /CN=A91AE9F7/serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Certificate serial: 0FCB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft Manifest number: 0FBF Signing time: Thu 24 Apr 2025 17:29:58 +0000 Manifest this update: Thu 24 Apr 2025 17:29:57 +0000 Manifest next update: Thu 01 May 2025 17:29:57 +0000 Files and hashes: 1: AXCw4NBuMUc8rBZOSwttIb300jc.crl (hash: vuzalxNlNFCg2riEw/PJ8wsYXnX7xDKgvLswy2coipQ=) 2: 1585570A544C11E9BDFF2B2DC4F9AE02.roa (hash: jZa47LQUiVvIxoLDSyE/2t1CJaYFtRO42+/jeT3MONo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4043 (0xfcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE9F7, serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Validity Not Before: Apr 24 17:29:57 2025 GMT Not After : May 1 17:29:57 2025 GMT Subject: CN=680a7515-1466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:23:a7:ca:d9:2e:52:73:64:fb:5b:4f:8d:30: 27:88:22:90:cb:eb:ee:ce:0b:0d:1f:b2:de:26:81: de:4c:b6:a5:b6:08:45:17:b7:66:5f:ea:62:63:77: 2f:29:b7:92:66:2d:99:cb:dc:1a:3f:dc:9c:ab:c1: 60:7b:4b:83:2b:c3:df:a9:ba:dc:0a:d5:d9:04:09: 03:3e:20:a2:4d:e0:78:e3:e4:eb:bd:60:f8:b5:4c: 1b:51:5c:fa:ff:b8:bb:33:ee:b7:f6:7d:92:1e:bc: ba:23:a9:3a:c0:8e:7e:d8:72:98:f5:56:c6:21:f2: 6c:84:c4:62:01:56:11:bc:3a:77:bb:dc:21:45:54: c7:e8:97:ce:9d:51:ec:f1:bf:60:e8:c8:a9:70:26: 47:c7:ab:1d:4b:dd:3c:bc:c1:68:a6:9b:0e:3e:41: 48:83:13:b1:69:d2:71:6b:45:d0:32:d8:03:7f:f2: d8:0f:1f:33:83:d0:b1:21:e2:0c:64:c0:4c:13:77: 69:b0:f5:ad:2f:9f:11:cb:f4:0c:54:36:9e:8e:fc: 36:dc:ba:ca:ad:c9:f7:01:7d:3b:1b:d3:0f:a5:cf: 98:b6:1c:8a:4c:d4:74:d5:20:5c:56:05:9c:be:20: db:4f:fe:5f:ef:c5:ff:8c:5c:3c:0c:24:bb:6b:5e: 6c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1D:36:05:95:3F:5C:7F:30:04:AB:91:F4:2A:8F:15:AD:45:47:EA X509v3 Authority Key Identifier: keyid:01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:53:9e:a2:cb:df:84:1b:88:c8:ce:6f:40:b4:9c:cd:74:e9: 29:57:e1:ac:e5:c5:9a:31:50:c4:3c:ec:71:de:38:90:24:23: 47:d7:ac:3a:21:7d:a1:49:ad:ba:b4:c2:7a:08:0d:ec:5b:5c: e6:fd:c9:51:8a:76:9c:72:9d:37:23:22:20:9d:d4:c9:f7:6a: ed:0b:33:02:ee:61:c9:cf:2a:a6:e5:a8:8e:db:92:5a:ef:39: f9:a0:f9:8c:27:64:67:a4:72:c0:76:6b:c0:95:fe:71:33:91: 9a:93:08:e6:b6:d2:7b:97:bc:b6:fc:a8:77:61:71:d0:4d:e8: 15:10:92:55:ec:a9:c0:fb:a3:ff:76:8a:d0:b2:54:a7:18:2f: 3b:0a:63:28:70:0e:46:93:19:48:b0:d6:74:ee:f0:c8:c1:fc: 32:0f:4b:26:ee:8e:54:65:1d:aa:62:fb:6c:b1:c7:5e:89:e3: f5:ba:ac:87:92:86:52:89:0d:d5:1c:71:fa:52:6f:99:0b:1e: ac:e6:be:e3:f2:59:c1:70:d4:ab:fc:48:38:f8:47:64:d3:22: 4d:36:7c:a1:32:8c:65:10:48:c0:5d:d7:0a:41:cd:9d:c1:d1: 80:b3:b1:87:99:78:e4:9d:59:d2:1a:58:66:4c:63:35:20:a6: 6f:79:1e:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5RjcxMTAvBgNVBAUTKDAxNzBCMEUwRDA2RTMxNDczQ0FDMTY0RTRCMEI2RDIx QkRGNEQyMzcwHhcNMjUwNDI0MTcyOTU3WhcNMjUwNTAxMTcyOTU3WjAYMRYwFAYD VQQDEw02ODBhNzUxNS0xNDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCOnytkuUnNk+1tPjTAniCKQy+vuzgsNH7LeJoHeTLaltghFF7dmX+piY3cv KbeSZi2Zy9waP9ycq8Fge0uDK8PfqbrcCtXZBAkDPiCiTeB44+TrvWD4tUwbUVz6 /7i7M+639n2SHry6I6k6wI5+2HKY9VbGIfJshMRiAVYRvDp3u9whRVTH6JfOnVHs 8b9g6MipcCZHx6sdS908vMFoppsOPkFIgxOxadJxa0XQMtgDf/LYDx8zg9CxIeIM ZMBME3dpsPWtL58Ry/QMVDaejvw23LrKrcn3AX07G9MPpc+YthyKTNR01SBcVgWc viDbT/5f78X/jFw8DCS7a15sswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAsdNgWV P1x/MASrkfQqjxWtRUfqMB8GA1UdIwQYMBaAFAFwsODQbjFHPKwWTksLbSG99NI3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlGNy8zNzlFQzc0MjU0 NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1VYzhyQlpPU3d0dEliMzAw amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FYQ3c0TkJ1TVVjOHJCWk9Td3R0SWIzMDBqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTlGNy8zNzlFQzc0MjU0NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1V YzhyQlpPU3d0dEliMzAwamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVU56iy9+EG4jIzm9AtJzNdOkpV+Gs5cWaMVDEPOxx3jiQJCNH16w6 IX2hSa26tMJ6CA3sW1zm/clRinaccp03IyIgndTJ92rtCzMC7mHJzyqm5aiO25Ja 7zn5oPmMJ2RnpHLAdmvAlf5xM5GakwjmttJ7l7y2/Kh3YXHQTegVEJJV7KnA+6P/ dorQslSnGC87CmMocA5GkxlIsNZ07vDIwfwyD0sm7o5UZR2qYvtsscdeieP1uqyH koZSiQ3VHHH6Um+ZCx6s5r7j8lnBcNSr/Eg4+Edk0yJNNnyhMoxlEEjAXdcKQc2d wdGAs7GHmXjknVnSGlhmTGM1IKZveR7x -----END CERTIFICATE-----Generated at Sat Apr 26 12:59:32 2025 by rpki-client