$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft File: reE11eBNSWNwmzymv8AQttD5fK8.mft (raw, json) Hash identifier: 26VsrKqhH+Ozzqqn4PahCYOWjxjO1na3Yt9Sn2IXv+E= Subject key identifier: 21:9B:AD:A6:6E:2E:0C:5B:60:65:AD:1F:65:84:FB:77:91:4F:8B:33 Authority key identifier: AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF Certificate issuer: /CN=A91B7A06/serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF Certificate serial: 1294 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft Manifest number: 1286 Signing time: Thu 24 Apr 2025 17:06:19 +0000 Manifest this update: Thu 24 Apr 2025 17:06:18 +0000 Manifest next update: Thu 01 May 2025 17:06:18 +0000 Files and hashes: 1: reE11eBNSWNwmzymv8AQttD5fK8.crl (hash: e8jNrORW+OdRkRGx6sPOWYdcZWGQQisIB7g+MMHeOao=) 2: F8E415E2987F11ED9E1F4D0FC4F9AE02.roa (hash: tYzlvKoaH6Iw/czt01Ia6uEcjkV7kohl/OzIkYhWPeY=) 3: F7B1497E987F11ED9E1F4D0FC4F9AE02.roa (hash: Gl4gKDf4aT96XGuS7DGEepsfpPgK8tonViSlMSSTaDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4756 (0x1294) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7A06, serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF Validity Not Before: Apr 24 17:06:18 2025 GMT Not After : May 1 17:06:18 2025 GMT Subject: CN=680a6f8a-6c26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:e7:1c:c2:71:66:bb:73:98:8a:50:8e:28:df: b4:a1:7f:6f:57:e0:75:dd:05:8f:ad:7b:d7:09:e0: 2a:3d:ce:94:4f:40:95:1d:39:ca:7e:27:fc:01:95: e0:94:90:40:46:b6:b5:19:53:36:20:ba:12:bc:0c: f5:6c:6b:bb:71:a0:f3:59:14:ec:20:0c:98:ba:44: 93:24:34:4c:1d:ca:45:34:52:c0:11:38:2d:29:49: 19:7b:cc:51:6e:77:d3:59:9d:ca:cd:ac:62:93:da: a0:a1:f1:10:3c:f3:44:48:4b:ff:6c:52:d9:4a:45: a3:cd:35:2e:44:3e:67:85:b2:24:f5:da:88:fe:12: 4c:12:49:54:78:85:eb:b6:7b:a7:92:88:09:07:ea: 3b:e6:4d:b2:85:d2:3a:c5:6e:87:1c:2d:91:07:35: 00:e2:35:5c:52:f8:e6:c3:51:a5:03:c6:db:26:72: ff:2f:2f:1d:b3:a6:84:32:b7:60:4f:a6:7f:9f:49: 2d:02:a1:46:b0:f4:e7:7e:85:d7:80:4a:f3:78:f7: 79:44:e7:3f:66:cd:18:59:5e:8d:bf:f8:1d:93:b6: 06:ce:cb:b4:c3:30:2e:54:51:c1:9b:94:64:cf:d1: 20:f8:8c:81:b7:db:05:60:5e:1e:ba:11:80:b3:70: 2e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9B:AD:A6:6E:2E:0C:5B:60:65:AD:1F:65:84:FB:77:91:4F:8B:33 X509v3 Authority Key Identifier: keyid:AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:8d:0c:27:8f:22:af:78:a5:e9:b9:85:0c:ba:6f:7f:4e:f9: 08:06:72:52:45:b9:1e:53:c9:73:1a:74:32:6d:3e:6c:cf:89: cc:d6:c1:da:31:ab:f6:6c:66:1a:83:a6:3a:8c:5c:ef:4a:67: 3a:4f:62:4a:7f:4c:76:b5:e1:bf:b0:af:62:3f:55:1d:ac:c9: 9f:d9:83:53:d6:61:49:94:04:a7:78:6b:0c:17:64:e0:b9:1e: e2:00:8f:6c:81:5d:37:32:6a:e8:09:c0:3f:d6:03:1d:60:25: 15:d9:c5:ff:60:63:05:f8:14:60:b4:3f:51:fe:1a:c7:89:05: cf:66:a4:a4:bf:31:8d:0a:ec:4c:46:37:26:e9:74:49:ee:85: 57:ae:f8:d5:f8:25:81:31:29:49:73:17:16:17:8e:40:b4:6d: ae:a1:13:c4:59:a1:bb:c0:36:34:8f:b7:c7:51:22:7f:b9:69: 33:a8:59:b6:3f:5a:6b:79:1a:e7:02:15:41:54:23:56:2f:3c: 10:79:ca:90:52:aa:b4:11:af:60:56:3d:60:c1:9e:02:20:9d: d0:28:54:77:c9:7f:c1:eb:4f:f5:35:d6:11:61:c2:f8:ba:66: 49:1e:6c:2a:f4:1c:8c:17:72:3a:ba:37:0e:72:44:c7:ec:1e: 3a:be:62:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdBMDYxMTAvBgNVBAUTKEFERTEzNUQ1RTA0RDQ5NjM3MDlCM0NBNkJGQzAxMEI2 RDBGOTdDQUYwHhcNMjUwNDI0MTcwNjE4WhcNMjUwNTAxMTcwNjE4WjAYMRYwFAYD VQQDEw02ODBhNmY4YS02YzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+uccwnFmu3OYilCOKN+0oX9vV+B13QWPrXvXCeAqPc6UT0CVHTnKfif8AZXg lJBARra1GVM2ILoSvAz1bGu7caDzWRTsIAyYukSTJDRMHcpFNFLAETgtKUkZe8xR bnfTWZ3Kzaxik9qgofEQPPNESEv/bFLZSkWjzTUuRD5nhbIk9dqI/hJMEklUeIXr tnunkogJB+o75k2yhdI6xW6HHC2RBzUA4jVcUvjmw1GlA8bbJnL/Ly8ds6aEMrdg T6Z/n0ktAqFGsPTnfoXXgErzePd5ROc/Zs0YWV6Nv/gdk7YGzsu0wzAuVFHBm5Rk z9Eg+IyBt9sFYF4euhGAs3AuiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGbraZu LgxbYGWtH2WE+3eRT4szMB8GA1UdIwQYMBaAFK3hNdXgTUljcJs8pr/AELbQ+Xyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0EwNi80OEY0RENEQUM2 QzMxMUU4OEY3MUNDNTZDNEY5QUUwMi9yZUUxMWVCTlNXTndtenltdjhBUXR0RDVm SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JlRTExZUJOU1dOd216eW12OEFRdHRENWZLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0EwNi80OEY0RENEQUM2QzMxMUU4OEY3MUNDNTZDNEY5QUUwMi9yZUUxMWVCTlNX TndtenltdjhBUXR0RDVmSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYjQwnjyKveKXpuYUMum9/TvkIBnJSRbkeU8lzGnQybT5sz4nM1sHa Mav2bGYag6Y6jFzvSmc6T2JKf0x2teG/sK9iP1UdrMmf2YNT1mFJlASneGsMF2Tg uR7iAI9sgV03MmroCcA/1gMdYCUV2cX/YGMF+BRgtD9R/hrHiQXPZqSkvzGNCuxM Rjcm6XRJ7oVXrvjV+CWBMSlJcxcWF45AtG2uoRPEWaG7wDY0j7fHUSJ/uWkzqFm2 P1preRrnAhVBVCNWLzwQecqQUqq0Ea9gVj1gwZ4CIJ3QKFR3yX/B60/1NdYRYcL4 umZJHmwq9ByMF3I6ujcOckTH7B46vmLI -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:24 2025 by rpki-client