$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft File: 1fbdY8A4EGCv-8nSDtMPB_veiOo.mft (raw, json) Hash identifier: wHeOqmYlJ1+rUA05YZ2xC0Ws1A0HvkJ01/ofCebOBKc= Subject key identifier: 13:80:F5:66:3E:0B:7D:33:D4:65:0A:AD:B4:9D:06:2F:D4:BC:18:E2 Authority key identifier: D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA Certificate issuer: /CN=A91BBF7F/serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA Certificate serial: 0ED2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft Manifest number: 0EBC Signing time: Thu 24 Apr 2025 17:39:53 +0000 Manifest this update: Thu 24 Apr 2025 17:39:52 +0000 Manifest next update: Thu 01 May 2025 17:39:52 +0000 Files and hashes: 1: 1fbdY8A4EGCv-8nSDtMPB_veiOo.crl (hash: drCRyRggpCTYbcQhUVvm32xoAo3gAS1dHjMHnZt553c=) 2: 656CB24EC9F611ED9853C583C4F9AE02.roa (hash: dWOEO8pwtx9hi9faa2fgwj2lHG7eHOgZT5KAz1c3Ctk=) 3: 64554290C9F611ED9853C583C4F9AE02.roa (hash: TcpjWImJ/6OMJ2cd8RP+FJqzHMIXrQ0AmNStUKst97g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:39:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3794 (0xed2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBF7F, serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA Validity Not Before: Apr 24 17:39:52 2025 GMT Not After : May 1 17:39:52 2025 GMT Subject: CN=680a7768-7c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:6e:ae:5d:36:96:f7:65:14:18:c7:03:a3:f0: 01:4d:7b:17:d0:e3:09:bb:0a:2a:54:03:38:e6:dd: ae:bb:01:b2:d8:85:93:2a:bb:6d:ea:86:3a:3d:07: 94:8d:be:f2:16:2e:ae:f1:8e:1e:3c:eb:60:58:a6: 1a:de:8d:8b:a2:da:db:15:00:69:b8:2f:49:cc:7b: 79:d6:a1:c9:f3:80:c0:e0:a9:28:9e:ba:f9:52:dc: a7:3e:11:a7:5b:47:ca:f9:82:0f:37:55:4d:64:36: 91:2e:7d:00:fe:4a:ae:3a:df:6f:09:c5:b0:26:44: 3c:16:d7:d3:74:51:75:26:e2:8d:aa:ba:dc:0e:77: e9:12:ec:f7:e7:d7:6f:04:81:b9:11:ce:56:f3:f9: 2a:93:d8:35:ea:5e:ac:4a:48:91:47:e5:4c:52:7e: 2a:12:19:78:54:bb:61:47:27:4b:2a:b4:63:89:51: 55:9b:c0:ae:5e:07:67:47:7b:da:18:6e:da:e8:a0: f5:5a:9f:5e:23:17:db:f8:36:a2:b9:42:3a:12:30: 3e:36:ab:d8:20:34:58:25:14:b2:06:42:83:54:19: 66:f5:bc:ef:48:a4:13:c6:1c:65:41:23:0a:1f:d2: 89:78:23:4b:f8:2f:8b:b7:8e:4d:e3:fa:3a:f9:63: 04:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:80:F5:66:3E:0B:7D:33:D4:65:0A:AD:B4:9D:06:2F:D4:BC:18:E2 X509v3 Authority Key Identifier: keyid:D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d5:aa:a0:f1:0d:f8:16:5b:94:cc:15:d0:49:85:76:52:2a: 7c:3d:0a:aa:bf:fa:65:44:dc:44:db:31:dc:08:4c:38:b3:16: 15:b2:3c:aa:0d:f0:62:ca:32:8d:26:3f:29:14:ee:62:9e:a0: f1:7a:87:2f:d1:29:0f:11:62:28:3f:fe:4b:c9:18:76:d7:47: 26:61:2f:ad:0f:e9:37:7e:4f:9a:76:49:67:98:f1:b7:db:a2: c9:db:f0:08:9e:70:ee:95:0b:b3:c8:72:bd:80:6a:07:cf:eb: 92:02:bd:40:3d:28:89:80:28:15:41:4d:58:77:c9:e5:30:5a: 15:3a:9e:47:78:61:a7:e3:3d:09:70:b6:1c:d1:f9:41:fa:7d: 1f:13:8c:13:75:f8:85:ac:dd:3c:e3:dd:0a:7e:63:71:f9:f1: d0:f7:99:8e:7d:a9:80:e3:2b:94:e4:37:e9:03:1f:8d:06:be: 5a:d9:a5:55:d4:c3:92:fd:df:e3:8b:56:4a:74:5a:b4:e0:83: 29:37:49:21:4a:cc:7e:48:88:0b:43:89:b8:42:6d:9d:e7:26: 76:99:a4:41:d3:28:b8:3d:c1:70:e3:32:ea:ea:0e:eb:5f:86: f9:48:29:c6:61:81:cd:c9:9a:b2:58:f3:2d:0c:3e:69:31:e8: b0:7d:a1:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJGN0YxMTAvBgNVBAUTKEQ1RjZERDYzQzAzODEwNjBBRkZCQzlEMjBFRDMwRjA3 RkJERTg4RUEwHhcNMjUwNDI0MTczOTUyWhcNMjUwNTAxMTczOTUyWjAYMRYwFAYD VQQDEw02ODBhNzc2OC03YzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8G6uXTaW92UUGMcDo/ABTXsX0OMJuwoqVAM45t2uuwGy2IWTKrtt6oY6PQeU jb7yFi6u8Y4ePOtgWKYa3o2LotrbFQBpuC9JzHt51qHJ84DA4Kkonrr5UtynPhGn W0fK+YIPN1VNZDaRLn0A/kquOt9vCcWwJkQ8FtfTdFF1JuKNqrrcDnfpEuz359dv BIG5Ec5W8/kqk9g16l6sSkiRR+VMUn4qEhl4VLthRydLKrRjiVFVm8CuXgdnR3va GG7a6KD1Wp9eIxfb+DaiuUI6EjA+NqvYIDRYJRSyBkKDVBlm9bzvSKQTxhxlQSMK H9KJeCNL+C+Lt45N4/o6+WMEHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOA9WY+ C30z1GUKrbSdBi/UvBjiMB8GA1UdIwQYMBaAFNX23WPAOBBgr/vJ0g7TDwf73ojq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkY3Ri80NTNFQjZGNDg3 NDUxMUU5QkY4NjQ0NUNDNEY5QUUwMi8xZmJkWThBNEVHQ3YtOG5TRHRNUEJfdmVp T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFmYmRZOEE0RUdDdi04blNEdE1QQl92ZWlPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkY3Ri80NTNFQjZGNDg3NDUxMUU5QkY4NjQ0NUNDNEY5QUUwMi8xZmJkWThBNEVH Q3YtOG5TRHRNUEJfdmVpT28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu1aqg8Q34FluUzBXQSYV2Uip8PQqqv/plRNxE2zHcCEw4sxYVsjyq DfBiyjKNJj8pFO5inqDxeocv0SkPEWIoP/5LyRh210cmYS+tD+k3fk+adklnmPG3 26LJ2/AInnDulQuzyHK9gGoHz+uSAr1APSiJgCgVQU1Yd8nlMFoVOp5HeGGn4z0J cLYc0flB+n0fE4wTdfiFrN08490KfmNx+fHQ95mOfamA4yuU5DfpAx+NBr5a2aVV 1MOS/d/ji1ZKdFq04IMpN0khSsx+SIgLQ4m4Qm2d5yZ2maRB0yi4PcFw4zLq6g7r X4b5SCnGYYHNyZqyWPMtDD5pMeiwfaEJ -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:08 2025 by rpki-client