$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft File: a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft (raw, json) Hash identifier: ifvmv4PNStjcp/HE6NP/KVDvlVv8neUGzlWgykKbQMA= Subject key identifier: DA:77:31:A5:05:05:D0:55:7D:C3:2D:DA:A8:6C:31:D6:D3:EC:AC:56 Authority key identifier: 6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04 Certificate issuer: /CN=A91BDEEB/serialNumber=6B63A60E7D7F51D038728C6425906047016C9904 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft Manifest number: 37 Signing time: Fri 25 Apr 2025 06:43:44 +0000 Manifest this update: Fri 25 Apr 2025 06:43:44 +0000 Manifest next update: Fri 02 May 2025 06:43:44 +0000 Files and hashes: 1: a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl (hash: r1QuhfI1ILgtYBsvl5pZ8l7EjhdEu71pR1ajG8YScB0=) 2: 6667EA1E20F811F0A8A8B152C4F9AE02.roa (hash: eFg9WgMMTt/zgk8aNG8CeylwZgeE9riWVK14SWsVzc0=) 3: B05A01A220E911F08F444270C4F9AE02.roa (hash: 3pjVRdH3b1U8cI2gfYNTneHn035nUDTEHaorObkQiNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDEEB, serialNumber=6B63A60E7D7F51D038728C6425906047016C9904 Validity Not Before: Apr 25 06:43:44 2025 GMT Not After : May 2 06:43:44 2025 GMT Subject: CN=680b2f20-e6ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:56:d7:cf:05:e6:6d:c2:33:99:ed:61:0e:d5: d7:71:bb:77:06:a6:df:23:d9:9e:c5:a7:68:40:67: c3:7a:49:b6:c6:52:ef:06:c5:36:a1:73:b6:2b:b2: d3:10:40:15:39:82:af:3d:45:c8:4c:0c:b6:5c:2a: 2c:b0:9e:b5:0b:a7:ad:ac:23:ee:5d:3a:e9:32:42: 8b:10:a7:37:db:de:21:99:a4:f9:58:50:89:11:d0: 77:ef:d2:3b:93:11:67:22:4b:54:7c:d4:d0:ed:e0: d9:f4:29:73:05:ec:0d:60:39:39:dd:29:46:9e:35: ca:38:2a:c3:3b:67:d3:f1:b4:3f:5f:c2:ec:fb:f5: ad:7e:41:aa:e7:b4:0d:9b:cf:1d:02:2e:a7:93:f6: 84:06:6a:cb:9d:78:30:fe:73:2a:9a:5d:c4:fb:4d: bf:9b:21:4f:eb:78:db:31:9c:f1:ab:15:b7:1c:72: a7:75:b3:40:9d:18:0b:b1:25:0e:ed:c9:0c:5a:9b: f2:98:ae:93:73:4d:96:5d:37:fa:7b:0a:45:1a:f3: 25:ce:f3:e5:c4:7d:e2:b7:fd:71:79:2b:5c:cf:10: 63:80:b9:2e:64:1c:16:e0:93:77:86:70:52:84:1c: cc:94:f2:b0:96:ea:31:6e:f5:fb:ca:3e:ae:5e:a1: a7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:77:31:A5:05:05:D0:55:7D:C3:2D:DA:A8:6C:31:D6:D3:EC:AC:56 X509v3 Authority Key Identifier: keyid:6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:27:90:32:74:9a:3e:3c:9b:f6:03:34:fd:f6:b1:cd:78:1c: 76:a2:0f:b6:00:b0:3a:d9:df:21:4d:58:6d:4a:78:dd:a2:e5: 36:89:5e:1b:7e:b0:0f:4e:38:8d:35:2b:af:b9:60:bc:06:f7: dc:34:0e:ed:5a:96:3e:75:e7:b6:a4:58:4b:30:60:62:35:f1: 7c:8a:33:74:d1:cc:ee:48:22:bd:03:22:ee:cc:2d:58:24:dc: 7f:23:ef:a4:25:80:1b:f9:bf:60:db:9f:7c:90:71:63:78:af: 97:12:c5:15:38:0f:cb:88:71:1f:d6:0e:5c:34:7a:fc:0b:11: ce:c4:93:8d:b4:af:c1:cb:b0:cb:60:06:dc:c4:67:2b:4a:19: 76:76:22:a5:a8:be:63:d8:57:94:7f:be:22:be:df:a3:87:26: 29:6d:d9:59:49:f4:ff:27:0f:c9:e5:de:bf:8e:f1:fc:b1:a1: b1:97:2a:a2:dc:a0:78:22:39:86:1f:32:99:71:2b:bc:ea:7c: 26:55:03:7b:9e:fc:4b:c8:5b:17:88:65:7d:c8:ce:07:98:4b: 7b:a2:86:a2:59:f2:b8:4f:cf:cf:1d:99:6e:8a:a0:d7:68:64: e7:d2:a5:61:2e:62:d1:57:52:64:77:52:22:e9:d7:83:c9:d3: ad:7d:fb:cc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC REVFQjExMC8GA1UEBRMoNkI2M0E2MEU3RDdGNTFEMDM4NzI4QzY0MjU5MDYwNDcw MTZDOTkwNDAeFw0yNTA0MjUwNjQzNDRaFw0yNTA1MDIwNjQzNDRaMBgxFjAUBgNV BAMTDTY4MGIyZjIwLWU2YmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChVtfPBeZtwjOZ7WEO1ddxu3cGpt8j2Z7Fp2hAZ8N6SbbGUu8GxTahc7YrstMQ QBU5gq89RchMDLZcKiywnrULp62sI+5dOukyQosQpzfb3iGZpPlYUIkR0Hfv0juT EWciS1R81NDt4Nn0KXMF7A1gOTndKUaeNco4KsM7Z9PxtD9fwuz79a1+QarntA2b zx0CLqeT9oQGasudeDD+cyqaXcT7Tb+bIU/reNsxnPGrFbcccqd1s0CdGAuxJQ7t yQxam/KYrpNzTZZdN/p7CkUa8yXO8+XEfeK3/XF5K1zPEGOAuS5kHBbgk3eGcFKE HMyU8rCW6jFu9fvKPq5eoafhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2ncxpQUF 0FV9wy3aqGwx1tPsrFYwHwYDVR0jBBgwFoAUa2OmDn1/UdA4coxkJZBgRwFsmQQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJERUVCLzFFRTdGQTYwRTVG NDExRUZBQkQzOUQ3RUM0RjlBRTAyL2EyT21EbjFfVWRBNGNveGtKWkJnUndGc21R US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYTJPbURuMV9VZEE0Y294a0paQmdSd0ZzbVFRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE RUVCLzFFRTdGQTYwRTVGNDExRUZBQkQzOUQ3RUM0RjlBRTAyL2EyT21EbjFfVWRB NGNveGtKWkJnUndGc21RUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA4nkDJ0mj48m/YDNP32sc14HHaiD7YAsDrZ3yFNWG1KeN2i5TaJXht+ sA9OOI01K6+5YLwG99w0Du1alj5157akWEswYGI18XyKM3TRzO5IIr0DIu7MLVgk 3H8j76QlgBv5v2Dbn3yQcWN4r5cSxRU4D8uIcR/WDlw0evwLEc7Ek420r8HLsMtg BtzEZytKGXZ2IqWovmPYV5R/viK+36OHJilt2VlJ9P8nD8nl3r+O8fyxobGXKqLc oHgiOYYfMplxK7zqfCZVA3ue/EvIWxeIZX3IzgeYS3uihqJZ8rhPz88dmW6KoNdo ZOfSpWEuYtFXUmR3UiLp14PJ0619+8w= -----END CERTIFICATE-----Generated at Sat Apr 26 05:02:56 2025 by rpki-client