$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft File: 25K4P0wYeDkNakTmrtV6d1ImNRI.mft (raw, json) Hash identifier: VnIwuBM2Cmg0rSHqBObjp0wYESEuTkEkfo2xsjnzO14= Subject key identifier: 87:52:E3:F0:B3:98:2F:3C:CF:A7:7B:99:EA:F6:E5:C8:AD:CE:4B:98 Authority key identifier: DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12 Certificate issuer: /CN=A91BBD5B/serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512 Certificate serial: 1D01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft Manifest number: 1CF6 Signing time: Thu 24 Apr 2025 16:09:59 +0000 Manifest this update: Thu 24 Apr 2025 16:09:58 +0000 Manifest next update: Thu 01 May 2025 16:09:58 +0000 Files and hashes: 1: 25K4P0wYeDkNakTmrtV6d1ImNRI.crl (hash: YAFyMMvVLdB5htLG6ozAl+Xy693E679FcCkCdsVZxQc=) 2: AB9480A6BB6811E69E8D1212C4F9AE02.roa (hash: XU2BtSx1XPF+OETuBQTO4A3xSlkRLbVqfxk4yTT8ml4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7425 (0x1d01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBD5B, serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512 Validity Not Before: Apr 24 16:09:58 2025 GMT Not After : May 1 16:09:58 2025 GMT Subject: CN=680a6256-ac84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:4b:ac:65:20:97:31:5f:55:e4:bd:20:49:50: 0d:a5:aa:e9:40:40:04:c4:dd:cf:f4:fc:30:9e:08: da:85:23:cc:30:fa:48:a3:e7:34:80:b3:eb:3c:08: 0a:e6:90:e0:25:ac:10:fe:ba:5b:5e:38:1e:10:de: 4b:5f:b5:f2:b6:ea:80:2e:6d:ee:36:fb:6e:50:8f: f9:10:a5:ea:2a:14:a9:71:f0:5b:1b:4f:59:19:5b: dc:29:a9:a8:6a:23:7d:3d:e9:68:ed:fd:19:1b:76: fa:57:9d:f4:3c:3d:8f:4b:5b:fb:1f:55:f5:35:2c: d6:86:33:99:ae:d3:4e:00:6a:c7:8a:70:49:d9:5c: 25:5d:bd:8d:37:22:ce:b4:83:5b:b1:09:ee:4b:6f: 68:00:c2:ed:ab:c1:a9:d6:0f:aa:4f:fe:d8:78:88: b0:21:0b:09:98:92:5c:04:21:21:58:66:3c:1c:e5: 86:a5:a4:0a:4f:55:29:45:ac:57:2a:65:3d:61:e7: 86:aa:e0:75:8b:22:6b:c2:ee:de:43:d3:fb:c1:9d: d4:05:8a:de:26:2f:03:3a:81:45:33:2b:96:2a:8e: a6:c8:24:22:c9:b1:bf:13:e2:da:68:51:3b:05:72: 64:f1:e0:75:9c:31:f5:95:50:a2:a0:95:54:52:2e: 1a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:52:E3:F0:B3:98:2F:3C:CF:A7:7B:99:EA:F6:E5:C8:AD:CE:4B:98 X509v3 Authority Key Identifier: keyid:DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:e7:de:c4:ee:f5:6d:dc:43:4d:50:1e:e8:f0:43:30:bb:af: 64:e4:44:4a:82:6f:17:6c:15:5c:72:c4:0b:4a:5e:70:ad:76: 8d:2f:4a:32:0e:f7:51:52:ba:fd:19:1c:3a:ce:68:dc:80:f7: 3b:ee:d5:a1:6c:8c:c1:1b:72:0b:a6:2d:76:34:70:c4:40:92: 7e:ea:64:76:23:5f:16:a2:bf:5e:3d:21:59:e0:64:e4:73:07: 6c:bf:d8:76:9b:4b:05:8b:86:e1:8b:0a:a6:f9:de:7b:b6:49: 67:1a:d9:4d:ae:99:fd:c7:0c:ca:c6:a2:ab:74:e5:1e:19:73: c2:c5:cb:0b:af:d9:8d:6c:53:fd:04:cd:03:1b:b2:62:b6:de: d2:2c:18:bc:ee:a1:14:38:f7:d6:d8:04:e2:6e:e3:09:e2:7e: 98:90:d4:7a:81:e3:81:ce:cd:fc:1c:f3:57:d9:12:2b:35:e0: e2:7a:c5:ac:99:e0:90:96:4d:4c:e8:a0:8d:b8:53:5e:76:b1: 61:c1:da:92:57:42:a2:6f:3f:64:dc:c2:63:01:06:81:68:ef: d4:22:9a:3f:38:61:eb:ec:57:4e:38:41:48:cc:1e:cc:f6:7a: 20:46:9a:96:0d:b3:3d:c3:44:62:1d:86:c0:ee:44:f1:e5:30: 4e:7a:a2:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJENUIxMTAvBgNVBAUTKERCOTJCODNGNEMxODc4MzkwRDZBNDRFNkFFRDU3QTc3 NTIyNjM1MTIwHhcNMjUwNDI0MTYwOTU4WhcNMjUwNTAxMTYwOTU4WjAYMRYwFAYD VQQDEw02ODBhNjI1Ni1hYzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+kusZSCXMV9V5L0gSVANparpQEAExN3P9PwwngjahSPMMPpIo+c0gLPrPAgK 5pDgJawQ/rpbXjgeEN5LX7XytuqALm3uNvtuUI/5EKXqKhSpcfBbG09ZGVvcKamo aiN9Pelo7f0ZG3b6V530PD2PS1v7H1X1NSzWhjOZrtNOAGrHinBJ2VwlXb2NNyLO tINbsQnuS29oAMLtq8Gp1g+qT/7YeIiwIQsJmJJcBCEhWGY8HOWGpaQKT1UpRaxX KmU9YeeGquB1iyJrwu7eQ9P7wZ3UBYreJi8DOoFFMyuWKo6myCQiybG/E+LaaFE7 BXJk8eB1nDH1lVCioJVUUi4aRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdS4/Cz mC88z6d7mer25citzkuYMB8GA1UdIwQYMBaAFNuSuD9MGHg5DWpE5q7VendSJjUS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ1Qi8xNzAyRkMzRUJC NjcxMUU2QUUyNDA0MEZDNEY5QUUwMi8yNUs0UDB3WWVEa05ha1RtcnRWNmQxSW1O UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI1SzRQMHdZZURrTmFrVG1ydFY2ZDFJbU5SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkQ1Qi8xNzAyRkMzRUJCNjcxMUU2QUUyNDA0MEZDNEY5QUUwMi8yNUs0UDB3WWVE a05ha1RtcnRWNmQxSW1OUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH597E7vVt3ENNUB7o8EMwu69k5ERKgm8XbBVccsQLSl5wrXaNL0oy DvdRUrr9GRw6zmjcgPc77tWhbIzBG3ILpi12NHDEQJJ+6mR2I18Wor9ePSFZ4GTk cwdsv9h2m0sFi4bhiwqm+d57tklnGtlNrpn9xwzKxqKrdOUeGXPCxcsLr9mNbFP9 BM0DG7Jitt7SLBi87qEUOPfW2ATibuMJ4n6YkNR6geOBzs38HPNX2RIrNeDiesWs meCQlk1M6KCNuFNedrFhwdqSV0Kibz9k3MJjAQaBaO/UIpo/OGHr7FdOOEFIzB7M 9nogRpqWDbM9w0RiHYbA7kTx5TBOeqKb -----END CERTIFICATE-----Generated at Sat Apr 26 05:46:06 2025 by rpki-client