$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft File: -c1w52K-aV9LpJAqoguUD3cKBjg.mft (raw, json) Hash identifier: 9Ml72w73Zc/IGx7JO65pwsLK+JpqOINmzZnfJISaC1M= Subject key identifier: 98:1A:D7:92:EA:40:55:F8:EC:3C:DF:EC:6C:BF:A5:B8:17:7E:1E:94 Authority key identifier: F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38 Certificate issuer: /CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft Manifest number: 76 Signing time: Fri 25 Apr 2025 05:45:55 +0000 Manifest this update: Fri 25 Apr 2025 05:45:55 +0000 Manifest next update: Fri 02 May 2025 05:45:55 +0000 Files and hashes: 1: -c1w52K-aV9LpJAqoguUD3cKBjg.crl (hash: ZhWdOvOn6cVkxArwRgLL05UTVkY0mWzpxGN5LWRLpMU=) 2: 723EACFE6E8511EF83048D43C4F9AE02.roa (hash: SORlAdQ9FssMHlMIfPwfvKAJ6kXMG+aUvNMZPsDTNq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:45:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9AB9, serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638 Validity Not Before: Apr 25 05:45:55 2025 GMT Not After : May 2 05:45:55 2025 GMT Subject: CN=680b2193-18f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d1:e0:c9:bb:31:b1:fd:9b:82:79:46:10:89: e1:1b:44:66:a3:33:a2:2f:c7:23:ac:6f:8b:c8:3f: a9:3d:cc:86:99:82:e7:88:9d:65:09:5c:bd:24:15: c6:b4:4b:98:53:1d:18:38:69:c2:e5:b2:a8:5e:f1: 2e:31:02:3e:45:ca:47:85:2e:00:e3:0b:38:5d:06: 44:8e:7c:ae:b0:b5:0e:35:07:6d:8d:06:c2:0a:43: aa:c1:b3:6c:d1:9e:8a:e2:d9:e5:73:61:e1:67:70: 1c:af:64:c1:aa:a1:1f:a2:4a:31:ea:f1:0f:a3:cd: f5:40:ac:a9:c2:70:82:31:ba:de:c9:92:fd:7c:80: 50:dd:6b:aa:f5:22:53:e0:f4:f0:b6:d1:25:3e:ce: 03:2f:49:87:7a:e0:27:5b:04:34:c7:73:f6:a9:68: dd:95:f6:91:75:55:a6:5f:50:aa:82:cc:94:d8:ce: b7:74:50:a0:78:4d:56:5c:89:90:38:8d:2b:40:55: ed:cd:30:91:45:dc:54:6f:52:15:fd:b6:9f:3e:0b: 33:1c:1f:44:9c:53:36:6e:8e:21:89:5f:72:60:01: 29:91:12:ab:7e:f5:a2:fe:fe:6c:d8:3d:b3:4c:0e: 17:53:fb:19:87:01:03:84:ae:8e:5f:0a:71:7d:03: 49:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:1A:D7:92:EA:40:55:F8:EC:3C:DF:EC:6C:BF:A5:B8:17:7E:1E:94 X509v3 Authority Key Identifier: keyid:F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:25:de:c3:a8:c5:a0:97:d6:62:74:49:53:35:b2:76:f8:af: 85:24:9c:28:45:dd:ce:fc:b2:e5:ad:e2:c3:d2:09:75:48:20: cc:0b:b3:4f:1a:43:2c:e2:59:e7:20:24:e7:71:ad:23:5d:b4: 6a:9a:9f:d5:e4:f3:11:28:88:08:f1:1b:27:06:eb:34:17:9f: 8e:ad:be:88:63:53:87:46:6c:1b:7a:64:8d:16:eb:58:15:d9: 63:85:cb:f6:6e:51:e8:cb:52:ba:7e:c8:16:4a:df:57:d3:db: 23:80:d7:1a:a2:0c:82:29:a6:8b:dc:51:27:c5:dc:54:ce:bd: 2b:15:d3:de:48:ab:e9:b5:28:ba:56:48:f2:32:8e:ee:08:8b: af:cc:d1:37:2c:6b:4a:c1:d0:e9:d5:46:e0:84:00:ca:eb:ee: 37:a7:d5:f3:f5:bf:bf:55:a7:f5:85:33:fd:95:81:dc:6c:45: 58:48:f8:ff:ab:b6:3f:f5:94:0b:3f:50:b1:79:d7:ac:12:4e: b8:8b:23:6e:a8:73:33:ff:d2:84:e9:b9:29:ac:55:eb:01:23: a2:df:88:4f:ae:be:5a:b1:f9:6c:88:a8:73:2c:9b:4e:6a:5e: 6c:65:5e:2e:aa:02:f8:af:94:05:87:04:68:b3:1e:d7:54:df: 93:cb:62:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OUFCOTExMC8GA1UEBRMoRjlDRDcwRTc2MkJFNjk1RjRCQTQ5MDJBQTIwQjk0MEY3 NzBBMDYzODAeFw0yNTA0MjUwNTQ1NTVaFw0yNTA1MDIwNTQ1NTVaMBgxFjAUBgNV BAMTDTY4MGIyMTkzLTE4ZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCw0eDJuzGx/ZuCeUYQieEbRGajM6IvxyOsb4vIP6k9zIaZgueInWUJXL0kFca0 S5hTHRg4acLlsqhe8S4xAj5FykeFLgDjCzhdBkSOfK6wtQ41B22NBsIKQ6rBs2zR nori2eVzYeFncByvZMGqoR+iSjHq8Q+jzfVArKnCcIIxut7Jkv18gFDda6r1IlPg 9PC20SU+zgMvSYd64CdbBDTHc/apaN2V9pF1VaZfUKqCzJTYzrd0UKB4TVZciZA4 jStAVe3NMJFF3FRvUhX9tp8+CzMcH0ScUzZujiGJX3JgASmREqt+9aL+/mzYPbNM DhdT+xmHAQOEro5fCnF9A0lPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmBrXkupA VfjsPN/sbL+luBd+HpQwHwYDVR0jBBgwFoAU+c1w52K+aV9LpJAqoguUD3cKBjgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5QUI5L0M3NkY5MkMwNkU4 NDExRUZBM0NEOTgzRkM0RjlBRTAyLy1jMXc1MkstYVY5THBKQXFvZ3VVRDNjS0Jq Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLWMxdzUySy1hVjlMcEpBcW9ndVVEM2NLQmpnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5 QUI5L0M3NkY5MkMwNkU4NDExRUZBM0NEOTgzRkM0RjlBRTAyLy1jMXc1MkstYVY5 THBKQXFvZ3VVRDNjS0JqZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH4l3sOoxaCX1mJ0SVM1snb4r4UknChF3c78suWt4sPSCXVIIMwLs08a QyziWecgJOdxrSNdtGqan9Xk8xEoiAjxGycG6zQXn46tvohjU4dGbBt6ZI0W61gV 2WOFy/ZuUejLUrp+yBZK31fT2yOA1xqiDIIppovcUSfF3FTOvSsV095Iq+m1KLpW SPIyju4Ii6/M0Tcsa0rB0OnVRuCEAMrr7jen1fP1v79Vp/WFM/2VgdxsRVhI+P+r tj/1lAs/ULF516wSTriLI26oczP/0oTpuSmsVesBI6LfiE+uvlqx+WyIqHMsm05q XmxlXi6qAvivlAWHBGizHtdU35PLYuI= -----END CERTIFICATE-----Generated at Sat Apr 26 12:25:35 2025 by rpki-client