$ rpki-client -vvf rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft File: S630I4efFU256siNFgtOEW9mzak.mft (raw, json) Hash identifier: FTpenoUQc+E44FODL+pkrB8jG7x+dGXyvagwQdggw7E= Subject key identifier: DC:C6:A4:63:4A:34:CF:84:77:C0:73:80:65:88:8A:EE:C6:AD:5A:2F Authority key identifier: 4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9 Certificate issuer: /CN=A91B30E5/serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9 Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft Manifest number: 01B5 Signing time: Fri 25 Apr 2025 02:18:59 +0000 Manifest this update: Fri 25 Apr 2025 02:18:59 +0000 Manifest next update: Fri 02 May 2025 02:18:59 +0000 Files and hashes: 1: S630I4efFU256siNFgtOEW9mzak.crl (hash: uh462yoO/FoonbsaDzv/KKWEzoMCZR1fo1Q5iLVnObc=) 2: 0F1061D0868911EDA888A96CC4F9AE02.roa (hash: aGKXoopb0arb0ntbaAeX9hZshlxruOuTWjBQoFMqiCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:18:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B30E5, serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9 Validity Not Before: Apr 25 02:18:59 2025 GMT Not After : May 2 02:18:59 2025 GMT Subject: CN=680af113-2fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:54:dc:c6:e4:5c:3a:5c:4b:04:ab:d7:c9:2b: fe:e3:87:1d:05:a6:90:30:1a:4c:d0:31:cd:14:f0: 24:ce:4b:ec:bd:6f:68:28:b9:5f:3c:6a:81:47:56: bc:c6:a7:ef:bf:83:31:96:db:88:35:25:34:55:88: de:30:c9:f8:21:19:5a:c8:b3:3d:fc:ca:68:9d:d0: f4:0f:fc:9c:9f:47:50:f1:32:60:78:f2:48:67:d8: 86:d0:1a:60:9f:a0:75:c5:5d:00:b0:c0:f6:94:37: 81:44:36:75:67:89:20:a8:9f:8c:78:b5:7a:fe:9e: f1:25:d7:14:29:38:d6:70:66:72:37:12:9a:51:48: 1e:6d:41:b2:67:a4:ec:87:f3:6f:0f:75:a6:9a:4b: b9:ea:79:fc:42:34:c6:24:52:50:b7:ef:46:d9:05: d8:bd:28:e7:09:f6:e1:7f:f6:31:f8:a1:fc:2e:8c: 08:e9:1e:02:50:63:51:c4:d2:36:69:30:23:0b:27: ea:7d:36:2a:85:83:08:cb:2e:6c:b6:84:66:88:6c: ec:a0:9f:b7:85:de:ba:c7:1d:6c:e5:48:2e:92:a5: cc:50:d9:ff:b6:b4:18:81:9c:6f:ce:25:35:09:da: 62:bf:d8:e3:6b:38:53:dc:ba:da:43:f8:6c:cd:d8: 3f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C6:A4:63:4A:34:CF:84:77:C0:73:80:65:88:8A:EE:C6:AD:5A:2F X509v3 Authority Key Identifier: keyid:4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:4e:2e:19:d6:12:64:00:9d:df:0c:fc:cc:a0:5e:1f:fe:14: 39:c6:ea:60:99:68:14:58:c4:65:95:4f:28:be:f2:a8:41:97: a9:24:99:a8:d5:3c:bb:69:d8:36:4d:38:57:91:8d:81:26:ac: 0e:a9:5b:72:5f:45:eb:5b:f8:94:85:31:21:07:14:66:9d:18: 56:26:b8:de:35:60:9a:8a:ec:16:a2:51:6e:7e:aa:d3:3e:bd: 4d:5e:1a:aa:68:45:bc:65:ec:31:a5:ac:2d:22:f5:8b:e4:cf: 2c:22:9e:17:ef:9a:d6:12:a0:27:c3:f1:2c:da:d0:08:20:da: 27:c1:a7:8c:50:83:98:77:14:cf:23:07:77:20:12:49:7c:13: 85:aa:b1:17:35:5b:c3:13:ec:6d:45:99:93:fb:3c:b3:50:75: 94:56:15:e4:bb:c7:8d:05:1d:1e:7d:c9:dd:d2:15:19:fb:00: ad:3d:85:a3:05:45:88:6a:44:b2:e2:cd:73:01:65:13:58:c5: 91:0e:34:36:e8:36:bb:08:99:1e:50:7b:0d:95:73:29:20:48: 58:d9:15:ff:fa:8f:21:ac:c7:17:8c:92:25:61:78:c5:66:af: 7b:3e:65:ab:30:e0:4e:b7:70:70:b0:8a:a6:ca:0a:e0:ca:8e: df:e2:b9:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMwRTUxMTAvBgNVBAUTKDRCQURGNDIzODc5RjE1NERCOUVBQzg4RDE2MEI0RTEx NkY2NkNEQTkwHhcNMjUwNDI1MDIxODU5WhcNMjUwNTAyMDIxODU5WjAYMRYwFAYD VQQDEw02ODBhZjExMy0yZmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1VTcxuRcOlxLBKvXySv+44cdBaaQMBpM0DHNFPAkzkvsvW9oKLlfPGqBR1a8 xqfvv4MxltuINSU0VYjeMMn4IRlayLM9/MpondD0D/ycn0dQ8TJgePJIZ9iG0Bpg n6B1xV0AsMD2lDeBRDZ1Z4kgqJ+MeLV6/p7xJdcUKTjWcGZyNxKaUUgebUGyZ6Ts h/NvD3Wmmku56nn8QjTGJFJQt+9G2QXYvSjnCfbhf/Yx+KH8LowI6R4CUGNRxNI2 aTAjCyfqfTYqhYMIyy5stoRmiGzsoJ+3hd66xx1s5UgukqXMUNn/trQYgZxvziU1 Cdpiv9jjazhT3LraQ/hszdg/jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzGpGNK NM+Ed8BzgGWIiu7GrVovMB8GA1UdIwQYMBaAFEut9COHnxVNuerIjRYLThFvZs2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzBFNS83MjkzQzExNjg2 ODQxMUVEQjdCRkExNzFDNEY5QUUwMi9TNjMwSTRlZkZVMjU2c2lORmd0T0VXOW16 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M2MzBJNGVmRlUyNTZzaU5GZ3RPRVc5bXphay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzBFNS83MjkzQzExNjg2ODQxMUVEQjdCRkExNzFDNEY5QUUwMi9TNjMwSTRlZkZV MjU2c2lORmd0T0VXOW16YWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByTi4Z1hJkAJ3fDPzMoF4f/hQ5xupgmWgUWMRllU8ovvKoQZepJJmo 1Ty7adg2TThXkY2BJqwOqVtyX0XrW/iUhTEhBxRmnRhWJrjeNWCaiuwWolFufqrT Pr1NXhqqaEW8ZewxpawtIvWL5M8sIp4X75rWEqAnw/Es2tAIINonwaeMUIOYdxTP Iwd3IBJJfBOFqrEXNVvDE+xtRZmT+zyzUHWUVhXku8eNBR0efcnd0hUZ+wCtPYWj BUWIakSy4s1zAWUTWMWRDjQ26Da7CJkeUHsNlXMpIEhY2RX/+o8hrMcXjJIlYXjF Zq97PmWrMOBOt3BwsIqmygrgyo7f4rnV -----END CERTIFICATE-----Generated at Sat Apr 26 03:37:19 2025 by rpki-client