$ rpki-client -vvf rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft File: _vE6uFK4kquii39LJSVwiZZNdms.mft (raw, json) Hash identifier: 1hxu4P9XIIcF1Oydv8X77zvmcAEArVsLnbnPMlBfDE8= Subject key identifier: F3:98:93:28:B5:1F:44:A6:45:EE:6A:3C:BA:E1:40:17:61:14:28:7F Authority key identifier: FE:F1:3A:B8:52:B8:92:AB:A2:8B:7F:4B:25:25:70:89:96:4D:76:6B Certificate issuer: /CN=A91B66C5/serialNumber=FEF13AB852B892ABA28B7F4B25257089964D766B Certificate serial: 09F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft Manifest number: 09ED Signing time: Thu 24 Apr 2025 19:47:08 +0000 Manifest this update: Thu 24 Apr 2025 19:47:08 +0000 Manifest next update: Thu 01 May 2025 19:47:08 +0000 Files and hashes: 1: _vE6uFK4kquii39LJSVwiZZNdms.crl (hash: DlxdG+Wo1WGm7YzhpZUdlCT3Bk6kBx53xIJWeTysg8s=) 2: 503D2222018111EBB0502527C4F9AE02.roa (hash: LQT0TO6GObYdNEXY2zITFA+60OyJn4ApFTpeHBpwqn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.crl rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:47:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2551 (0x9f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B66C5, serialNumber=FEF13AB852B892ABA28B7F4B25257089964D766B Validity Not Before: Apr 24 19:47:08 2025 GMT Not After : May 1 19:47:08 2025 GMT Subject: CN=680a953c-54a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c8:a5:5c:7c:74:57:14:a3:f2:b6:82:df:72: 4d:af:60:a1:4f:2f:23:11:21:2b:13:11:04:4e:5e: 08:bc:b4:1a:c6:d7:a4:43:87:3e:cb:4e:38:28:be: 49:bf:d9:ea:f7:e2:52:cd:45:aa:0e:a8:be:0e:01: 9b:eb:16:c2:a8:99:28:c5:24:d6:79:b5:b1:2d:fb: 0c:d7:d9:17:6d:c2:e1:31:f8:10:b7:84:b1:96:19: 08:ab:aa:1b:d6:4f:9b:3a:5b:d4:24:79:c4:da:fc: 9f:bb:83:c5:6a:27:ac:78:1c:c1:a2:d9:9e:8a:1a: e5:0f:a2:a1:e7:fd:f8:8c:4d:89:56:db:25:d1:00: 6b:cd:87:74:62:24:ec:4d:67:58:7a:d0:72:f1:80: b9:ec:74:71:ed:20:ed:cf:a7:c6:56:75:2b:18:7a: cc:86:b1:8f:e5:67:e3:46:1d:0f:b1:5d:b7:82:e8: 7b:a1:55:ca:86:bc:45:26:a6:d3:43:9b:9f:92:8d: d3:5e:f5:60:20:3d:a4:3d:18:6b:9c:e0:b4:8d:ff: 27:de:1e:30:24:da:48:56:be:2b:f0:cd:db:26:16: 9c:6d:31:66:f6:72:4a:72:ca:11:11:36:df:97:4e: 87:2b:6a:90:84:0e:2f:6d:e7:20:59:ff:b9:2e:e8: 1f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:98:93:28:B5:1F:44:A6:45:EE:6A:3C:BA:E1:40:17:61:14:28:7F X509v3 Authority Key Identifier: keyid:FE:F1:3A:B8:52:B8:92:AB:A2:8B:7F:4B:25:25:70:89:96:4D:76:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:6c:66:c9:7a:69:79:d2:6e:5e:28:dd:4b:33:4d:50:9e:ad: 28:25:d6:b7:f6:f4:4a:03:e7:4b:12:4c:c8:15:06:30:4e:93: 96:8f:f9:cd:dd:3e:1d:51:56:cf:16:83:ce:35:cf:29:48:3d: da:1e:04:44:39:3e:25:8b:a9:85:c9:1f:29:cb:b7:fb:0d:32: 72:67:c0:39:27:35:79:97:98:48:8a:da:ca:db:af:8b:cf:7b: 7b:ac:78:74:72:d0:59:3c:14:2e:58:cf:2c:b6:79:7f:3f:65: f5:15:dc:11:e7:4f:12:b4:a2:34:78:fc:51:7b:cc:db:6a:72: 80:59:22:f5:68:46:0b:a5:1f:72:83:6f:cb:4b:fa:4e:08:00: 26:7f:ef:e6:95:86:fe:d3:2a:23:73:e6:d8:08:09:90:83:e2: 9e:e3:c5:c4:a3:3b:1d:7e:cf:74:db:f1:91:2d:bd:7a:8c:92: 67:8e:4e:fb:8a:d6:8a:f5:f2:00:f8:ff:e5:a2:16:18:72:ce: 3b:c5:a4:44:36:5c:c2:b8:70:46:21:70:08:9a:5b:fb:3b:b9: 80:3c:e1:d9:61:08:a1:59:ae:b8:b1:cd:6d:10:5e:73:59:1a: 1c:e6:b4:ed:e0:ba:28:2a:97:84:b4:4b:20:81:e2:78:c8:54: a5:bd:6e:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY2QzUxMTAvBgNVBAUTKEZFRjEzQUI4NTJCODkyQUJBMjhCN0Y0QjI1MjU3MDg5 OTY0RDc2NkIwHhcNMjUwNDI0MTk0NzA4WhcNMjUwNTAxMTk0NzA4WjAYMRYwFAYD VQQDEw02ODBhOTUzYy01NGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssilXHx0VxSj8raC33JNr2ChTy8jESErExEETl4IvLQaxtekQ4c+y044KL5J v9nq9+JSzUWqDqi+DgGb6xbCqJkoxSTWebWxLfsM19kXbcLhMfgQt4SxlhkIq6ob 1k+bOlvUJHnE2vyfu4PFaieseBzBotmeihrlD6Kh5/34jE2JVtsl0QBrzYd0YiTs TWdYetBy8YC57HRx7SDtz6fGVnUrGHrMhrGP5WfjRh0PsV23guh7oVXKhrxFJqbT Q5ufko3TXvVgID2kPRhrnOC0jf8n3h4wJNpIVr4r8M3bJhacbTFm9nJKcsoRETbf l06HK2qQhA4vbecgWf+5Lugf8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPOYkyi1 H0SmRe5qPLrhQBdhFCh/MB8GA1UdIwQYMBaAFP7xOrhSuJKroot/SyUlcImWTXZr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjZDNS9BMkNEMzU0RTc3 RUUxMUVBQTVEMDBDMjhDNEY5QUUwMi9fdkU2dUZLNGtxdWlpMzlMSlNWd2laWk5k bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL192RTZ1Rks0a3F1aWkzOUxKU1Z3aVpaTmRtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjZDNS9BMkNEMzU0RTc3RUUxMUVBQTVEMDBDMjhDNEY5QUUwMi9fdkU2dUZLNGtx dWlpMzlMSlNWd2laWk5kbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdbGbJeml50m5eKN1LM01Qnq0oJda39vRKA+dLEkzIFQYwTpOWj/nN 3T4dUVbPFoPONc8pSD3aHgREOT4li6mFyR8py7f7DTJyZ8A5JzV5l5hIitrK26+L z3t7rHh0ctBZPBQuWM8stnl/P2X1FdwR508StKI0ePxRe8zbanKAWSL1aEYLpR9y g2/LS/pOCAAmf+/mlYb+0yojc+bYCAmQg+Ke48XEozsdfs902/GRLb16jJJnjk77 itaK9fIA+P/lohYYcs47xaRENlzCuHBGIXAImlv7O7mAPOHZYQihWa64sc1tEF5z WRoc5rTt4LooKpeEtEsggeJ4yFSlvW7h -----END CERTIFICATE-----Generated at Sat Apr 26 05:15:12 2025 by rpki-client