$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft File: o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft (raw, json) Hash identifier: SFyrJI8peWXk+eJWTITEQqz4yf/VcMYIkcv+dnUzJXE= Subject key identifier: 6A:31:4A:B1:82:96:BA:43:6A:3C:95:E9:63:90:1C:C2:C5:41:1E:B0 Authority key identifier: A3:55:61:DA:45:A9:55:F0:2D:12:2A:0D:88:E8:C7:62:39:ED:F9:20 Certificate issuer: /CN=A91AFB4B/serialNumber=A35561DA45A955F02D122A0D88E8C76239EDF920 Certificate serial: 031D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft Manifest number: 0319 Signing time: Fri 25 Apr 2025 00:56:43 +0000 Manifest this update: Fri 25 Apr 2025 00:56:42 +0000 Manifest next update: Fri 02 May 2025 00:56:42 +0000 Files and hashes: 1: o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl (hash: XFSLTGgizimGcHtMMM9if35LlYfZOZWGfxy3VkN7JbE=) 2: E2F2A470C76411EC85896F5EC4F9AE02.roa (hash: hSEOk4wSvcqkKWJUmunbhE8NC6T2P49jnE2eWh8/b4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 797 (0x31d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFB4B, serialNumber=A35561DA45A955F02D122A0D88E8C76239EDF920 Validity Not Before: Apr 25 00:56:42 2025 GMT Not After : May 2 00:56:42 2025 GMT Subject: CN=680addca-a1b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c5:bf:40:b4:04:d2:67:82:2a:dc:ed:70:80: ac:99:a6:ae:93:1c:4e:9b:0b:45:91:c7:48:f8:95: 41:1c:88:93:b6:19:93:30:ca:8a:23:90:da:97:0e: 98:8a:4a:91:01:32:24:f3:d2:3e:7c:d5:33:8d:51: 19:e4:46:52:2f:9d:a6:eb:3d:08:d3:3d:f8:ce:20: 1f:f8:87:05:20:d5:b2:90:a7:94:57:44:48:59:0b: ca:86:c5:f0:2a:7b:23:7c:9d:db:18:7e:b7:57:b1: 5d:af:de:fc:ed:f7:a3:a0:8e:e8:db:60:a4:26:07: 3f:6b:b9:cd:a6:ac:67:51:cd:95:83:fe:fe:93:84: c8:15:26:e9:2f:2c:f7:a9:82:dc:7c:56:dd:7d:72: 69:ad:63:da:55:90:b0:ce:63:db:61:4f:a8:7c:33: 7c:7d:15:76:93:7a:c7:9b:fb:37:77:f4:2f:27:a6: 5d:df:b3:39:ed:92:84:ad:84:4f:06:9e:40:c7:7d: 2d:4d:3e:37:98:bf:a9:b1:87:07:a9:a6:e0:c7:9a: 12:a6:fe:d8:c9:4f:2f:2d:ae:0b:0f:49:14:1d:49: 95:c4:64:7e:e7:9d:4b:e3:6e:2d:63:1d:89:66:3c: 50:4e:2b:99:74:e9:de:fd:65:62:d2:15:55:1c:e6: 2d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:31:4A:B1:82:96:BA:43:6A:3C:95:E9:63:90:1C:C2:C5:41:1E:B0 X509v3 Authority Key Identifier: keyid:A3:55:61:DA:45:A9:55:F0:2D:12:2A:0D:88:E8:C7:62:39:ED:F9:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:a6:d3:f7:c8:30:59:9b:80:40:a8:26:ef:ef:e3:96:5a:06: f5:8f:7e:cd:b1:89:dd:7f:67:cc:c5:44:43:cb:70:02:5a:83: 9c:9c:fc:e8:57:da:a8:bb:27:d2:d2:5f:13:83:f8:52:a0:9d: 70:c3:88:62:4c:a4:e7:8b:3c:ab:9a:fe:16:dc:00:d6:d3:9b: b0:83:e3:46:2e:04:46:25:73:e1:3f:ff:9e:01:34:dd:b2:f5: 27:ac:7d:fe:7a:e6:59:c6:e5:8c:ec:fb:d7:fa:7c:25:79:3c: dd:54:d9:43:29:02:08:07:b1:b6:36:a3:2a:14:1e:cb:7e:14: dd:ac:f8:4c:6b:a1:e9:0b:45:d1:e4:74:bd:f8:ff:9f:ab:69: 57:40:ee:6f:6f:48:49:5d:b9:5c:bb:e3:f2:8a:57:3a:e7:47: 3f:cc:e3:a8:63:86:bc:12:9b:5b:d9:ac:97:a8:9b:9a:71:31: 81:a4:f1:66:96:8b:6c:93:b6:97:71:52:34:a3:2f:0b:e5:6d: e8:03:e6:41:97:68:8f:e9:69:5c:6e:72:1d:5a:5a:08:0d:b9: 44:0b:f7:25:b1:a6:07:1d:c6:70:55:a4:10:63:fb:14:ac:de: 77:4c:b4:5a:82:da:0b:9a:81:66:ae:94:3c:6d:3d:0d:da:c4: ea:1e:c3:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZCNEIxMTAvBgNVBAUTKEEzNTU2MURBNDVBOTU1RjAyRDEyMkEwRDg4RThDNzYy MzlFREY5MjAwHhcNMjUwNDI1MDA1NjQyWhcNMjUwNTAyMDA1NjQyWjAYMRYwFAYD VQQDEw02ODBhZGRjYS1hMWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycW/QLQE0meCKtztcICsmaaukxxOmwtFkcdI+JVBHIiTthmTMMqKI5Dalw6Y ikqRATIk89I+fNUzjVEZ5EZSL52m6z0I0z34ziAf+IcFINWykKeUV0RIWQvKhsXw KnsjfJ3bGH63V7Fdr9787fejoI7o22CkJgc/a7nNpqxnUc2Vg/7+k4TIFSbpLyz3 qYLcfFbdfXJprWPaVZCwzmPbYU+ofDN8fRV2k3rHm/s3d/QvJ6Zd37M57ZKErYRP Bp5Ax30tTT43mL+psYcHqabgx5oSpv7YyU8vLa4LD0kUHUmVxGR+551L424tYx2J ZjxQTiuZdOne/WVi0hVVHOYtWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGoxSrGC lrpDajyV6WOQHMLFQR6wMB8GA1UdIwQYMBaAFKNVYdpFqVXwLRIqDYjox2I57fkg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkI0Qi84RTE2MjQzMEM3 NjAxMUVDOEU3RDk2MjlDNEY5QUUwMi9vMVZoMmtXcFZmQXRFaW9OaU9qSFlqbnQt U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28xVmgya1dwVmZBdEVpb05pT2pIWWpudC1TQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkI0Qi84RTE2MjQzMEM3NjAxMUVDOEU3RDk2MjlDNEY5QUUwMi9vMVZoMmtXcFZm QXRFaW9OaU9qSFlqbnQtU0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQptP3yDBZm4BAqCbv7+OWWgb1j37NsYndf2fMxURDy3ACWoOcnPzo V9qouyfS0l8Tg/hSoJ1ww4hiTKTnizyrmv4W3ADW05uwg+NGLgRGJXPhP/+eATTd svUnrH3+euZZxuWM7PvX+nwleTzdVNlDKQIIB7G2NqMqFB7LfhTdrPhMa6HpC0XR 5HS9+P+fq2lXQO5vb0hJXblcu+Pyilc650c/zOOoY4a8Eptb2ayXqJuacTGBpPFm lotsk7aXcVI0oy8L5W3oA+ZBl2iP6WlcbnIdWloIDblEC/clsaYHHcZwVaQQY/sU rN53TLRagtoLmoFmrpQ8bT0N2sTqHsNE -----END CERTIFICATE-----Generated at Sat Apr 26 04:32:24 2025 by rpki-client