$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft File: M1KIaoOU86z15jXjxHVvTQpuRek.mft (raw, json) Hash identifier: WdSjHqS6QE2Pk9IdeG9NiLh+Nx1zxr2D4UfoJSUG4V0= Subject key identifier: 31:F8:E5:8E:7C:2E:CB:58:5B:9F:DE:B1:10:50:15:4C:9E:4F:6C:BF Authority key identifier: 33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9 Certificate issuer: /CN=A91B5AD4/serialNumber=3352886A8394F3ACF5E635E3C4756F4D0A6E45E9 Certificate serial: 097C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft Manifest number: 0973 Signing time: Thu 24 Apr 2025 19:30:42 +0000 Manifest this update: Thu 24 Apr 2025 19:30:41 +0000 Manifest next update: Thu 01 May 2025 19:30:41 +0000 Files and hashes: 1: M1KIaoOU86z15jXjxHVvTQpuRek.crl (hash: KVi8jtADIT4JAw7icp9B8lJLCXIjTBVoRzrQ3Z4a46U=) 2: 67A60C64441E11EB861F005AC4F9AE02.roa (hash: JcavRD/UkGMKefo40xrhCPb2PgEwMsvZQrFanuv4C9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.crl rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2428 (0x97c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5AD4, serialNumber=3352886A8394F3ACF5E635E3C4756F4D0A6E45E9 Validity Not Before: Apr 24 19:30:41 2025 GMT Not After : May 1 19:30:41 2025 GMT Subject: CN=680a9161-f1b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7b:90:da:73:ee:ba:25:b1:10:e9:e9:24:85: 64:af:63:f3:bf:a3:7d:a9:b1:af:de:cb:df:ac:00: 4b:69:9f:e2:57:36:1b:dd:3c:bd:2e:50:39:83:8b: 3e:28:fa:af:4a:ac:73:fb:cd:00:8f:9f:85:6a:d4: 0c:eb:2c:e4:70:7c:ed:69:76:d4:c0:55:b5:f4:c3: 9f:e2:12:4c:93:fe:ba:ba:50:2e:ba:28:10:a7:98: 80:40:96:d8:54:09:9b:31:46:55:b5:91:b6:c1:09: bf:6b:25:a0:d8:0c:f6:b1:88:e6:1b:de:27:b6:c9: 60:0a:17:52:b8:3a:b6:e9:a2:e3:b9:ee:a4:4c:f4: f0:e2:2c:ea:d3:ca:6b:c6:d1:08:b8:ba:e6:13:63: 17:e2:88:27:c0:ab:c8:b0:5c:6f:70:7b:2b:76:1e: 01:7b:33:85:58:80:40:81:87:52:44:c6:eb:72:23: 86:7d:12:77:18:1c:a0:ff:37:f9:ec:a0:70:d0:11: 17:2b:f9:50:0c:58:c6:3a:48:42:24:89:8b:3f:8e: bc:2d:20:ab:c1:89:6c:a6:e7:96:67:47:64:a0:a0: 2d:2d:a7:0a:6e:5e:5a:18:52:31:31:46:0b:b6:d3: 0a:8e:d3:26:08:63:1f:f9:f1:f5:34:66:f5:f7:c6: 09:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F8:E5:8E:7C:2E:CB:58:5B:9F:DE:B1:10:50:15:4C:9E:4F:6C:BF X509v3 Authority Key Identifier: keyid:33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:36:8f:6e:16:18:d4:6a:52:f4:5b:67:8d:d2:8b:fa:57:03: 9d:f7:08:81:1c:04:a8:74:93:89:81:4c:e8:5e:8d:a5:83:0b: 2c:9d:7c:52:eb:c9:d6:1f:9e:f5:6a:1d:ac:5d:a9:36:47:1f: 9a:38:79:3f:e7:fb:23:c7:84:ab:dc:3c:ce:d6:dc:b6:31:ac: e1:a8:64:02:a2:08:95:80:75:b6:3e:b9:2c:c8:70:ff:79:64: 8c:7a:33:fe:61:60:d9:9c:52:7d:0d:72:03:29:47:0d:e1:f3: cc:5c:91:b8:a5:89:e8:c7:68:20:50:bd:e2:44:d5:36:1f:8d: 54:a6:06:04:c6:20:50:0e:f1:5b:de:dd:fd:fc:2e:67:6a:8c: 66:40:b7:a1:70:6c:02:ec:85:03:46:0f:35:3a:9b:16:9f:93: 00:3a:c4:bc:d9:50:ff:2a:1e:21:ab:4d:55:53:fe:41:b0:09: 0f:0a:75:be:98:90:5d:e6:6d:4f:79:9a:eb:cd:26:12:5e:c0: 22:f3:51:3d:9b:07:9b:84:01:4b:9b:1b:8d:7a:92:bb:92:b5: 74:a9:96:dc:56:80:33:d8:54:fb:16:5b:04:ed:0e:f7:67:00: f9:58:d0:f6:22:2e:68:f3:85:4c:50:7d:1b:99:56:17:67:d2: f7:b8:88:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVBRDQxMTAvBgNVBAUTKDMzNTI4ODZBODM5NEYzQUNGNUU2MzVFM0M0NzU2RjRE MEE2RTQ1RTkwHhcNMjUwNDI0MTkzMDQxWhcNMjUwNTAxMTkzMDQxWjAYMRYwFAYD VQQDEw02ODBhOTE2MS1mMWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03uQ2nPuuiWxEOnpJIVkr2Pzv6N9qbGv3svfrABLaZ/iVzYb3Ty9LlA5g4s+ KPqvSqxz+80Aj5+FatQM6yzkcHztaXbUwFW19MOf4hJMk/66ulAuuigQp5iAQJbY VAmbMUZVtZG2wQm/ayWg2Az2sYjmG94ntslgChdSuDq26aLjue6kTPTw4izq08pr xtEIuLrmE2MX4ognwKvIsFxvcHsrdh4BezOFWIBAgYdSRMbrciOGfRJ3GByg/zf5 7KBw0BEXK/lQDFjGOkhCJImLP468LSCrwYlspueWZ0dkoKAtLacKbl5aGFIxMUYL ttMKjtMmCGMf+fH1NGb198YJswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDH45Y58 LstYW5/esRBQFUyeT2y/MB8GA1UdIwQYMBaAFDNSiGqDlPOs9eY148R1b00KbkXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUFENC8xMTIyNkI3RThG OEExMUVBOTgyOEM2NURDNEY5QUUwMi9NMUtJYW9PVTg2ejE1alhqeEhWdlRRcHVS ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00xS0lhb09VODZ6MTVqWGp4SFZ2VFFwdVJlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUFENC8xMTIyNkI3RThGOEExMUVBOTgyOEM2NURDNEY5QUUwMi9NMUtJYW9PVTg2 ejE1alhqeEhWdlRRcHVSZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPNo9uFhjUalL0W2eN0ov6VwOd9wiBHASodJOJgUzoXo2lgwssnXxS 68nWH571ah2sXak2Rx+aOHk/5/sjx4Sr3DzO1ty2MazhqGQCogiVgHW2PrksyHD/ eWSMejP+YWDZnFJ9DXIDKUcN4fPMXJG4pYnox2ggUL3iRNU2H41UpgYExiBQDvFb 3t39/C5naoxmQLehcGwC7IUDRg81OpsWn5MAOsS82VD/Kh4hq01VU/5BsAkPCnW+ mJBd5m1PeZrrzSYSXsAi81E9mwebhAFLmxuNepK7krV0qZbcVoAz2FT7FlsE7Q73 ZwD5WND2Ii5o84VMUH0bmVYXZ9L3uIhC -----END CERTIFICATE-----Generated at Sat Apr 26 12:24:49 2025 by rpki-client