$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft File: fBlP7bilyMl2697IST3zw_CMyOI.mft (raw, json) Hash identifier: rYLSfmOWK7MuV81knlR7yfihtPbguDUr3goGLk5Wp3g= Subject key identifier: AC:47:62:F0:E5:7C:53:92:9B:39:FC:B8:C5:81:8E:E2:8B:A1:E6:E7 Authority key identifier: 7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2 Certificate issuer: /CN=A91BE056/serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2 Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft Manifest number: E2 Signing time: Thu 24 Apr 2025 23:20:34 +0000 Manifest this update: Thu 24 Apr 2025 23:20:34 +0000 Manifest next update: Thu 01 May 2025 23:20:34 +0000 Files and hashes: 1: fBlP7bilyMl2697IST3zw_CMyOI.crl (hash: w+EOzGAwbHZPpFND6oJW/usdKCLilFEyaCMfz3lC17g=) 2: C7AAEA76637311EF97465324C4F9AE02.roa (hash: 7qAgqeHaZPQYvPPHuv1+My9lZgN4hj2uJJ26C3QxuHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE056, serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2 Validity Not Before: Apr 24 23:20:34 2025 GMT Not After : May 1 23:20:34 2025 GMT Subject: CN=680ac742-d3d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:18:26:1b:9c:5e:dc:c0:2f:66:4e:6e:ae:e0: 9c:8e:d8:38:24:cc:38:e4:33:63:1e:c1:f7:ef:e4: 98:89:18:24:bc:6f:fb:73:dc:61:2d:d2:8d:a7:27: 6d:62:87:d3:dd:d6:20:29:b0:71:4b:6b:6b:f2:08: d3:36:10:c8:88:da:ab:78:b9:58:34:10:ef:26:a6: b5:41:4c:bf:fc:6d:44:62:ff:a5:2a:7a:a8:68:e0: f6:f0:09:3d:dc:5c:4b:d9:a5:26:b5:87:71:4b:d8: 25:41:59:b8:1e:e2:d3:08:8e:1d:a2:f0:bb:3d:85: d0:32:c5:08:29:02:89:1e:5c:cc:76:d0:4e:9f:de: 36:61:d5:e3:17:bd:7c:f8:4e:02:83:96:f4:26:7e: 57:b2:a5:b5:b2:47:a4:19:81:e5:fb:ac:8e:5f:ca: bd:36:aa:7c:a3:75:3e:f6:06:c7:bb:61:ec:69:19: 05:4e:93:08:8b:19:ff:d4:fc:8a:9b:de:8e:37:53: 29:a9:cf:d5:5f:f6:6a:50:9f:59:b6:52:e6:7a:34: 56:58:b9:6e:64:5c:7f:e6:ca:47:0d:4c:2d:f3:d0: 57:16:25:18:19:a3:97:4a:dd:f5:f9:3d:45:98:ea: a9:77:d4:23:68:6b:f6:a8:f7:3d:fb:11:69:be:c6: 88:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:47:62:F0:E5:7C:53:92:9B:39:FC:B8:C5:81:8E:E2:8B:A1:E6:E7 X509v3 Authority Key Identifier: keyid:7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a1:a2:96:38:cf:5b:aa:59:ae:30:fc:80:6b:e9:9c:2d:ea: f9:08:83:26:80:3a:26:ca:14:c1:3f:19:23:b6:77:95:bb:0b: 1e:de:1c:4f:78:34:c2:47:5c:b7:5a:57:c6:7b:a0:56:0f:cb: f1:68:cc:36:54:1b:3f:98:e6:bf:44:34:f2:a4:62:43:1c:94: d7:68:85:33:dd:e2:cb:3c:f3:d0:ae:c0:06:d8:ea:29:aa:73: bb:6d:74:31:09:2c:0c:08:cc:6f:52:cd:3a:d3:10:fc:34:a3: 03:5e:6e:f5:9e:82:e6:ad:b6:c2:6c:58:d9:e9:f3:e6:bc:48: f1:89:30:2a:8d:36:d0:55:60:6f:ce:89:d1:ac:16:e4:a5:5e: 66:60:25:a1:b5:92:e9:fd:63:ef:0d:04:e2:d0:4b:21:5f:82: 99:c9:24:22:1e:e4:00:cc:40:f6:2e:b7:5a:a6:0a:d8:ab:1f: ec:4d:7e:a1:e6:d3:1e:60:8b:70:aa:72:cb:e3:4d:25:fb:cc: 1d:04:b4:09:c5:e5:3d:34:a6:14:7e:80:5c:e3:b0:ba:ed:68: 27:af:0c:af:68:0c:f1:42:ff:3b:d3:ef:59:ae:2c:cf:9c:25: ec:6a:9b:79:29:90:f7:2a:a8:6b:29:24:cb:a7:a4:49:26:42: 05:83:c0:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUwNTYxMTAvBgNVBAUTKDdDMTk0RkVEQjhBNUM4Qzk3NkVCREVDODQ5M0RGM0Mz RjA4Q0M4RTIwHhcNMjUwNDI0MjMyMDM0WhcNMjUwNTAxMjMyMDM0WjAYMRYwFAYD VQQDEw02ODBhYzc0Mi1kM2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRgmG5xe3MAvZk5uruCcjtg4JMw45DNjHsH37+SYiRgkvG/7c9xhLdKNpydt YofT3dYgKbBxS2tr8gjTNhDIiNqreLlYNBDvJqa1QUy//G1EYv+lKnqoaOD28Ak9 3FxL2aUmtYdxS9glQVm4HuLTCI4dovC7PYXQMsUIKQKJHlzMdtBOn942YdXjF718 +E4Cg5b0Jn5XsqW1skekGYHl+6yOX8q9Nqp8o3U+9gbHu2HsaRkFTpMIixn/1PyK m96ON1Mpqc/VX/ZqUJ9ZtlLmejRWWLluZFx/5spHDUwt89BXFiUYGaOXSt31+T1F mOqpd9QjaGv2qPc9+xFpvsaIoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxHYvDl fFOSmzn8uMWBjuKLoebnMB8GA1UdIwQYMBaAFHwZT+24pcjJduveyEk988PwjMji MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTA1Ni8wMDNFMTE1OEQ3 OEIxMUVFQTJFQkQ3MTJDNEY5QUUwMi9mQmxQN2JpbHlNbDI2OTdJU1QzendfQ015 T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZCbFA3YmlseU1sMjY5N0lTVDN6d19DTXlPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTA1Ni8wMDNFMTE1OEQ3OEIxMUVFQTJFQkQ3MTJDNEY5QUUwMi9mQmxQN2JpbHlN bDI2OTdJU1QzendfQ015T0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsoaKWOM9bqlmuMPyAa+mcLer5CIMmgDomyhTBPxkjtneVuwse3hxP eDTCR1y3WlfGe6BWD8vxaMw2VBs/mOa/RDTypGJDHJTXaIUz3eLLPPPQrsAG2Oop qnO7bXQxCSwMCMxvUs060xD8NKMDXm71noLmrbbCbFjZ6fPmvEjxiTAqjTbQVWBv zonRrBbkpV5mYCWhtZLp/WPvDQTi0EshX4KZySQiHuQAzED2LrdapgrYqx/sTX6h 5tMeYItwqnLL400l+8wdBLQJxeU9NKYUfoBc47C67WgnrwyvaAzxQv870+9ZrizP nCXsapt5KZD3KqhrKSTLp6RJJkIFg8DF -----END CERTIFICATE-----Generated at Sat Apr 26 12:33:49 2025 by rpki-client