$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft File: cOo3wZMr00-ztIWaNIMaEOYR0PY.mft (raw, json) Hash identifier: o0eLI7afBp9VM8PIE/NccjIaC0X4axld5npcdjcwUgo= Subject key identifier: 1E:E8:A3:DF:6F:6C:40:3E:C4:9C:FD:3E:75:10:45:A1:E9:39:FC:D9 Authority key identifier: 70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 Certificate issuer: /CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft Manifest number: 011A Signing time: Fri 25 Apr 2025 03:53:10 +0000 Manifest this update: Fri 25 Apr 2025 03:53:10 +0000 Manifest next update: Fri 02 May 2025 03:53:10 +0000 Files and hashes: 1: cOo3wZMr00-ztIWaNIMaEOYR0PY.crl (hash: o0Zc4tEKYuRJKHuSh2s7MiINdUuATHk5NIe8/nBh5Xk=) 2: BC630BAE84FC11EE9887345FC4F9AE02.roa (hash: E3DVtUK4PKLNRTNWPdaED3S506iNVROikAhxbftKIaQ=) 3: 7C58D40872CD11EE81C60650C4F9AE02.roa (hash: hhVy8VlS8PQRYDzu0z2SFqVi4xOaWLt/VFPzg2LCqTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA1BF, serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Validity Not Before: Apr 25 03:53:10 2025 GMT Not After : May 2 03:53:10 2025 GMT Subject: CN=680b0726-4a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:47:71:79:08:4e:4e:1e:29:5d:23:3c:0d:1b: d0:31:7c:49:b6:43:db:f7:27:86:dc:2b:99:85:79: 75:ee:dc:28:df:e2:4a:20:a6:26:9b:63:91:56:42: f8:f4:44:d5:e8:20:82:c9:3d:45:15:be:f7:10:69: 2e:52:11:97:a9:21:a3:50:24:22:59:6d:89:3c:83: 5f:a3:bf:cc:e7:19:ac:1f:39:e6:f8:10:93:9c:58: 26:ab:3c:9a:7f:ef:ff:9c:d3:92:57:fc:1d:fa:73: 7b:8b:3b:0e:b1:0e:56:b2:09:77:60:bb:49:12:a2: d8:b9:4e:86:7f:41:05:de:84:b8:cb:0f:7a:30:59: 95:00:72:f7:04:95:90:7e:45:9d:9d:1e:2a:82:01: 80:74:0a:8e:b7:d9:dc:09:72:83:c2:58:be:a4:a4: 58:ce:2e:de:40:dd:45:bf:af:ff:c4:37:71:22:b0: 1e:15:19:cd:43:6a:41:15:f8:37:ce:cd:0b:f6:19: 7b:d0:2c:a4:ce:a4:c5:ce:e5:fd:5e:6f:55:be:b3: af:35:cd:bb:7a:3f:e7:95:2e:9e:e9:bf:ec:8c:e8: ab:5a:7a:dd:bf:8f:10:12:9c:c7:29:75:3b:68:e0: aa:ab:a9:a0:41:56:10:ba:9f:d7:ea:d0:e3:c6:a8: 07:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E8:A3:DF:6F:6C:40:3E:C4:9C:FD:3E:75:10:45:A1:E9:39:FC:D9 X509v3 Authority Key Identifier: keyid:70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:c2:6d:23:0f:d7:6f:9f:74:66:5a:5c:63:e0:77:d7:2d:08: fc:56:60:45:79:e6:7b:5f:fb:66:ee:51:a0:40:25:f4:03:bd: 02:46:4f:b8:b1:fe:8e:0f:a8:06:1d:ce:11:f9:57:14:4f:50: f1:51:77:12:89:89:82:f1:d0:d7:b0:3f:bc:38:97:f5:1f:40: ed:3d:c8:1c:e1:62:73:c3:14:b3:eb:37:45:7c:fb:ad:d2:96: 34:dc:35:34:f8:ad:47:d8:93:c4:c5:27:f3:ac:64:4f:1b:49: 98:d8:a9:3c:e6:c9:cc:fd:f2:32:43:3c:f5:9a:4c:5b:00:5e: 91:0a:3e:0c:65:ea:e4:b5:f8:05:2e:a7:5a:98:dc:03:04:88: 8d:05:43:a0:6f:36:96:a1:1b:c8:b3:a0:85:bd:f2:58:1a:25: 74:58:ce:e3:87:bd:d0:c3:07:dc:cb:d8:bf:50:a1:86:ff:b8: 10:d6:27:45:8b:6b:ae:9a:83:e5:84:98:84:6a:2c:4f:4d:3d: a0:ae:58:8f:da:94:1e:ad:e5:b7:f5:5a:d7:91:3d:a3:c6:a0: c4:f2:7c:b0:03:14:cd:34:5f:84:b0:6b:99:50:da:e8:3c:05: e2:83:02:7a:66:1c:3b:ba:d4:7f:7f:a2:dc:6c:d0:5f:77:4e: 5b:c9:20:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExQkYxMTAvBgNVBAUTKDcwRUEzN0MxOTMyQkQzNEZCM0I0ODU5QTM0ODMxQTEw RTYxMUQwRjYwHhcNMjUwNDI1MDM1MzEwWhcNMjUwNTAyMDM1MzEwWjAYMRYwFAYD VQQDEw02ODBiMDcyNi00YTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EdxeQhOTh4pXSM8DRvQMXxJtkPb9yeG3CuZhXl17two3+JKIKYmm2ORVkL4 9ETV6CCCyT1FFb73EGkuUhGXqSGjUCQiWW2JPINfo7/M5xmsHznm+BCTnFgmqzya f+//nNOSV/wd+nN7izsOsQ5Wsgl3YLtJEqLYuU6Gf0EF3oS4yw96MFmVAHL3BJWQ fkWdnR4qggGAdAqOt9ncCXKDwli+pKRYzi7eQN1Fv6//xDdxIrAeFRnNQ2pBFfg3 zs0L9hl70CykzqTFzuX9Xm9VvrOvNc27ej/nlS6e6b/sjOirWnrdv48QEpzHKXU7 aOCqq6mgQVYQup/X6tDjxqgHDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7oo99v bEA+xJz9PnUQRaHpOfzZMB8GA1UdIwQYMBaAFHDqN8GTK9NPs7SFmjSDGhDmEdD2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTFCRi84NEUxMEE0Mjcy Q0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAwLXp0SVdhTklNYUVPWVIw UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NPbzN3Wk1yMDAtenRJV2FOSU1hRU9ZUjBQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTFCRi84NEUxMEE0MjcyQ0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAw LXp0SVdhTklNYUVPWVIwUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4wm0jD9dvn3RmWlxj4HfXLQj8VmBFeeZ7X/tm7lGgQCX0A70CRk+4 sf6OD6gGHc4R+VcUT1DxUXcSiYmC8dDXsD+8OJf1H0DtPcgc4WJzwxSz6zdFfPut 0pY03DU0+K1H2JPExSfzrGRPG0mY2Kk85snM/fIyQzz1mkxbAF6RCj4MZerktfgF LqdamNwDBIiNBUOgbzaWoRvIs6CFvfJYGiV0WM7jh73Qwwfcy9i/UKGG/7gQ1idF i2uumoPlhJiEaixPTT2grliP2pQereW39VrXkT2jxqDE8nywAxTNNF+EsGuZUNro PAXigwJ6Zhw7utR/f6LcbNBfd05bySCG -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:01 2025 by rpki-client