$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft File: 2x93mMABF7IMbzvDKZSALPIJSDc.mft (raw, json) Hash identifier: UH9G0+GsWY9Ed0VD6zwj3oEYdfSPHi7GFwuaezOmjhI= Subject key identifier: E2:B5:A7:D9:EC:FA:8D:B6:5A:B3:43:E8:C1:48:8D:1E:DA:DE:7E:2A Authority key identifier: DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37 Certificate issuer: /CN=A91BA594/serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837 Certificate serial: 06EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft Manifest number: 06DE Signing time: Thu 24 Apr 2025 21:52:53 +0000 Manifest this update: Thu 24 Apr 2025 21:52:53 +0000 Manifest next update: Thu 01 May 2025 21:52:53 +0000 Files and hashes: 1: 2x93mMABF7IMbzvDKZSALPIJSDc.crl (hash: YDM4TLcPPxOJO0C/yyzZW9I7c39PEFyahwXl866BhJI=) 2: 1B713E1C554F11EB99946233C4F9AE02.roa (hash: px8vPMMaIW71viSZHvwgIDzN828jdKyVwys/IvDu8b8=) 3: D0EAEA3EB85811EF96935B81C4F9AE02.roa (hash: Nbyc9rPbEVQJKGo8N91eHTaOUJwwDIylew69dKgtqpM=) 4: 1AC0CFAA554F11EB99946233C4F9AE02.roa (hash: M4wskVyxngrHuY03UIwusYbtRWJWk73Kf7frzvsTsis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.crl rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:52:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1775 (0x6ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA594, serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837 Validity Not Before: Apr 24 21:52:53 2025 GMT Not After : May 1 21:52:53 2025 GMT Subject: CN=680ab2b5-ef0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9f:de:0e:24:d1:b1:af:14:ac:1c:a4:f4:94: f7:d5:85:3d:84:de:aa:06:4a:e7:e1:64:42:34:e3: f0:8c:2a:eb:13:6a:c4:59:60:53:cd:ad:57:29:cc: 42:dd:32:d2:63:da:b2:a5:5f:82:d5:d4:2a:65:3f: f2:9f:ad:19:ec:00:73:a8:9f:a0:83:1f:72:d0:ba: 58:30:7a:10:44:86:49:99:0d:fb:05:9f:81:84:32: 2f:4d:ce:63:43:d8:01:e4:78:22:ac:57:8a:39:de: 97:20:ed:a4:82:e1:da:9f:40:5e:72:52:5a:b2:25: 60:c7:34:da:4c:74:1a:5a:e8:e4:a1:18:90:bb:8d: 74:2f:c3:e3:e7:79:71:8f:cf:e0:f7:06:7b:50:c4: 6e:fe:b1:fe:6f:f5:18:ee:fe:b1:ac:99:a8:6b:87: a4:98:52:bf:2f:20:ce:f4:61:10:08:f1:14:ef:c8: c0:c1:2c:3d:6c:95:90:53:80:e4:b2:95:5c:9c:cd: 50:0a:07:d8:d8:3d:0b:53:90:d5:80:91:43:b2:3c: 81:21:e4:4d:5f:46:57:85:ed:35:9b:d4:fa:4c:46: cb:aa:dd:72:92:f8:ed:8e:43:f9:eb:42:04:8c:49: f3:58:32:2c:2a:67:63:ba:ac:30:ae:a8:16:6a:b1: 90:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B5:A7:D9:EC:FA:8D:B6:5A:B3:43:E8:C1:48:8D:1E:DA:DE:7E:2A X509v3 Authority Key Identifier: keyid:DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:06:d7:bf:53:af:03:60:59:07:77:f6:88:2a:dc:1c:34:03: f7:4b:2f:16:34:4e:66:ca:42:d2:e7:bb:1c:5e:f8:3f:1d:6c: 59:ea:43:37:e6:b3:7e:e5:1f:f4:0e:47:63:2a:56:3a:c6:7a: ee:be:ad:86:ee:b5:d3:e2:17:9e:bf:23:31:44:aa:3f:b8:87: df:44:ae:d0:2c:8f:53:b5:49:dd:31:d7:04:f4:25:3c:c2:e4: 96:f2:98:b4:fa:f5:1a:31:1f:cc:be:1b:73:c2:25:03:63:77: b2:32:84:87:fb:f1:96:bc:5f:59:d1:ab:69:11:38:e5:e5:a2: cd:94:b7:76:39:a1:ad:1d:ef:88:8b:61:16:f9:ad:02:43:c7: ad:d8:6b:3c:40:68:4c:93:13:d1:db:cd:f9:13:bc:aa:fa:e2: be:26:45:37:88:f9:9c:a4:59:4c:b9:64:7f:d5:e1:ad:00:e4: 13:46:4c:dc:61:93:c3:1e:e2:5a:86:0f:5c:9c:95:5d:cd:db: b6:dd:7c:aa:d6:6e:23:47:bb:8c:4a:0a:32:ac:bd:ef:56:5e: bc:62:44:5e:2c:18:a2:60:8d:89:39:c8:de:a9:3b:dd:7f:38: 33:c0:d6:58:97:d8:fe:95:40:b2:89:d9:84:c8:ab:ca:ff:c6: b1:b6:98:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1OTQxMTAvBgNVBAUTKERCMUY3Nzk4QzAwMTE3QjIwQzZGM0JDMzI5OTQ4MDJD RjIwOTQ4MzcwHhcNMjUwNDI0MjE1MjUzWhcNMjUwNTAxMjE1MjUzWjAYMRYwFAYD VQQDEw02ODBhYjJiNS1lZjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5/eDiTRsa8UrByk9JT31YU9hN6qBkrn4WRCNOPwjCrrE2rEWWBTza1XKcxC 3TLSY9qypV+C1dQqZT/yn60Z7ABzqJ+ggx9y0LpYMHoQRIZJmQ37BZ+BhDIvTc5j Q9gB5HgirFeKOd6XIO2kguHan0BeclJasiVgxzTaTHQaWujkoRiQu410L8Pj53lx j8/g9wZ7UMRu/rH+b/UY7v6xrJmoa4ekmFK/LyDO9GEQCPEU78jAwSw9bJWQU4Dk spVcnM1QCgfY2D0LU5DVgJFDsjyBIeRNX0ZXhe01m9T6TEbLqt1ykvjtjkP560IE jEnzWDIsKmdjuqwwrqgWarGQ7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOK1p9ns +o22WrND6MFIjR7a3n4qMB8GA1UdIwQYMBaAFNsfd5jAAReyDG87wymUgCzyCUg3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTU5NC81MjJCNkQ2RTU1 M0MxMUVCOEYwODVDNzFDNEY5QUUwMi8yeDkzbU1BQkY3SU1ienZES1pTQUxQSUpT RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4OTNtTUFCRjdJTWJ6dkRLWlNBTFBJSlNEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTU5NC81MjJCNkQ2RTU1M0MxMUVCOEYwODVDNzFDNEY5QUUwMi8yeDkzbU1BQkY3 SU1ienZES1pTQUxQSUpTRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEBte/U68DYFkHd/aIKtwcNAP3Sy8WNE5mykLS57scXvg/HWxZ6kM3 5rN+5R/0DkdjKlY6xnruvq2G7rXT4heevyMxRKo/uIffRK7QLI9TtUndMdcE9CU8 wuSW8pi0+vUaMR/MvhtzwiUDY3eyMoSH+/GWvF9Z0atpETjl5aLNlLd2OaGtHe+I i2EW+a0CQ8et2Gs8QGhMkxPR2835E7yq+uK+JkU3iPmcpFlMuWR/1eGtAOQTRkzc YZPDHuJahg9cnJVdzdu23Xyq1m4jR7uMSgoyrL3vVl68YkReLBiiYI2JOcjeqTvd fzgzwNZYl9j+lUCyidmEyKvK/8axtpiO -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:10 2025 by rpki-client