$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft File: De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json) Hash identifier: cSxui6PnvYZ/FHj/FgN2qLhEmUIbmf4CYPbecI+OUWQ= Subject key identifier: AD:43:DF:48:E4:E6:FC:F9:44:98:C5:3D:DD:5D:92:8D:6E:6D:24:AA Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Certificate serial: 1327 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft Manifest number: 1311 Signing time: Thu 24 Apr 2025 17:03:46 +0000 Manifest this update: Thu 24 Apr 2025 17:03:45 +0000 Manifest next update: Thu 01 May 2025 17:03:45 +0000 Files and hashes: 1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: RwC31JPKLNhuiM5sCPMUFW8T2MrOpgrHwkiwLrZ/+54=) 2: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: 4U+E+SOSNCeOPAvIwzXbeqTBl70zy1co24nPCsNKCHs=) 3: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: vee2Trog0A8Sa455ioxH/3gGtre4yzjbz6bH8ySXmH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4903 (0x1327) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8, serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Validity Not Before: Apr 24 17:03:45 2025 GMT Not After : May 1 17:03:45 2025 GMT Subject: CN=680a6ef2-2777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:af:01:a5:e5:4d:35:78:7a:ae:84:43:1a:91: a1:4d:06:c0:bb:02:d0:63:50:af:6a:1a:a4:de:56: df:06:c1:f8:e9:bb:8c:f5:bb:0c:8f:8a:01:84:7c: c7:e3:f6:6c:7f:38:aa:2f:2f:ad:93:e3:f0:08:e3: 72:a2:19:96:22:80:c8:9a:13:08:6f:91:87:f6:3b: dc:11:3b:b0:d0:56:97:50:bc:b2:23:ed:a4:b3:39: 9b:db:cc:2a:9b:c7:89:f2:7b:22:eb:58:2b:99:9b: 86:70:fd:f5:55:7a:38:53:86:03:e5:bc:0e:68:03: a5:47:fe:24:93:c8:a8:71:c8:62:6c:36:2c:5c:b3: a3:22:9b:32:1b:fd:d8:54:3d:de:2e:08:a0:0b:df: bc:17:3f:ac:64:9f:c8:be:56:ba:e6:a5:9c:f0:f5: 6a:20:ac:8c:55:28:d6:4e:96:34:d9:af:f0:15:11: 5e:c3:c4:aa:b9:b6:64:2d:71:f8:cd:69:35:b2:88: c6:60:4d:d5:aa:8d:81:a1:52:c0:36:2c:0b:0e:d7: 9d:3a:db:37:67:33:b6:2b:a0:10:3c:97:a6:5a:69: f8:e8:4d:a0:a1:0c:e9:7e:8f:c9:87:2c:c4:20:0f: 0d:db:8b:5c:60:f8:ac:37:4d:70:61:fb:72:e4:b4: 61:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:43:DF:48:E4:E6:FC:F9:44:98:C5:3D:DD:5D:92:8D:6E:6D:24:AA X509v3 Authority Key Identifier: keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:35:38:95:d5:eb:95:9a:42:f3:49:c7:a7:25:29:9a:a6:19: 53:0c:a0:e9:e7:d4:df:37:cf:93:8a:d9:05:8f:9a:5c:a7:b2: 51:fd:ae:b2:e8:a0:e3:9a:d1:df:3f:b1:ba:33:4c:0a:a9:88: d1:6a:b2:86:60:81:7d:8f:ec:fd:7a:cf:9b:7d:54:ed:07:ca: 4c:4c:aa:22:79:6f:9a:9b:6f:e8:be:a7:16:35:ca:cd:28:c4: 67:ed:48:19:ea:9f:fd:9a:51:8c:62:3a:28:e8:59:5c:52:1e: 79:a1:64:c4:5c:53:d3:ee:94:67:a0:d6:22:f9:ef:b9:90:3a: 79:81:4c:12:29:80:43:ef:d5:62:07:1f:5e:6b:5b:f7:2a:c0: 08:4c:5d:64:21:42:c0:72:ce:17:9d:35:c6:07:d7:a5:a0:f6: 0b:58:f5:87:1d:c4:74:75:56:8e:2f:6c:5b:73:05:7c:b5:6c: f0:fc:b7:37:b9:43:a6:80:13:53:61:31:13:0d:4e:df:43:ec: c3:71:b6:44:a2:92:65:13:be:cd:5e:5e:d0:2a:d1:9e:39:ed: ec:02:09:55:c8:eb:39:93:1e:5f:b4:3f:a3:58:58:5f:b6:e6: 00:33:cf:4d:1a:e4:01:c1:eb:ab:86:ff:8f:bc:47:b7:bb:61: 9d:bd:35:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDBERUVFRDEzNjIxNDNDMzYyRjI0Rjk3QzY3QzhFNEVD RTJDN0E1NjEwHhcNMjUwNDI0MTcwMzQ1WhcNMjUwNTAxMTcwMzQ1WjAYMRYwFAYD VQQDEw02ODBhNmVmMi0yNzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzq8BpeVNNXh6roRDGpGhTQbAuwLQY1Cvahqk3lbfBsH46buM9bsMj4oBhHzH 4/ZsfziqLy+tk+PwCONyohmWIoDImhMIb5GH9jvcETuw0FaXULyyI+2kszmb28wq m8eJ8nsi61grmZuGcP31VXo4U4YD5bwOaAOlR/4kk8iocchibDYsXLOjIpsyG/3Y VD3eLgigC9+8Fz+sZJ/Ivla65qWc8PVqIKyMVSjWTpY02a/wFRFew8SqubZkLXH4 zWk1sojGYE3Vqo2BoVLANiwLDtedOts3ZzO2K6AQPJemWmn46E2goQzpfo/JhyzE IA8N24tcYPisN01wYfty5LRhEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1D30jk 5vz5RJjFPd1dko1ubSSqMB8GA1UdIwQYMBaAFA3u7RNiFDw2LyT5fGfI5Ozix6Vh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9ERjQ3MDkwMkFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBEWXZKUGw4WjhqazdPTEhw V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RlN3RFMklVUERZdkpQbDhaOGprN09MSHBXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUZBOC9ERjQ3MDkwMkFGRDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBE WXZKUGw4WjhqazdPTEhwV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCNTiV1euVmkLzScenJSmaphlTDKDp59TfN8+TitkFj5pcp7JR/a6y 6KDjmtHfP7G6M0wKqYjRarKGYIF9j+z9es+bfVTtB8pMTKoieW+am2/ovqcWNcrN KMRn7UgZ6p/9mlGMYjoo6FlcUh55oWTEXFPT7pRnoNYi+e+5kDp5gUwSKYBD79Vi Bx9ea1v3KsAITF1kIULAcs4XnTXGB9eloPYLWPWHHcR0dVaOL2xbcwV8tWzw/Lc3 uUOmgBNTYTETDU7fQ+zDcbZEopJlE77NXl7QKtGeOe3sAglVyOs5kx5ftD+jWFhf tuYAM89NGuQBweurhv+PvEe3u2GdvTX6 -----END CERTIFICATE-----Generated at Sat Apr 26 16:50:10 2025 by rpki-client