$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft File: ak27o21Mdn1b1ytu6XCoAA_FSV4.mft (raw, json) Hash identifier: BONL3AIpePiLzJkGPlAR5hMpAlZ0NtgCbHCoRNKRSgo= Subject key identifier: 91:05:F3:99:9A:F9:A0:8B:AE:B1:0F:A8:C9:B9:0F:DA:6E:70:D4:DE Authority key identifier: 6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E Certificate issuer: /CN=A91BF8C3/serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E Certificate serial: 07BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft Manifest number: 07A9 Signing time: Thu 24 Apr 2025 21:06:19 +0000 Manifest this update: Thu 24 Apr 2025 21:06:18 +0000 Manifest next update: Thu 01 May 2025 21:06:18 +0000 Files and hashes: 1: ak27o21Mdn1b1ytu6XCoAA_FSV4.crl (hash: I2a3OCGnfVbCeQ32FsaanBrvRmmPDT6oA76+dy/F8uk=) 2: 0BD04D300F6D11EC8D9F1E13C4F9AE02.roa (hash: FfGvWbRgw7M2d0HlF6t0whQketZeGqrQDCwVLn5jEfk=) 3: A1D678CACD1D11EEBBCDB72BC4F9AE02.roa (hash: KUbdaIcIL3ANAib1/1yNdALhPqZywuDeLgdVE3tNncA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1982 (0x7be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8C3, serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E Validity Not Before: Apr 24 21:06:18 2025 GMT Not After : May 1 21:06:18 2025 GMT Subject: CN=680aa7cb-ed53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f0:e2:25:76:2f:74:34:ad:c8:57:ab:88:2b: da:8a:bf:bd:18:a9:ab:f0:4f:18:41:35:6f:eb:0f: 36:0e:84:88:0e:0d:5e:75:a0:c7:03:bd:77:99:c9: 6d:f9:0e:87:6d:a8:24:05:0a:33:59:83:86:54:71: f5:72:aa:57:8a:df:a4:01:fc:2e:02:68:92:95:e7: 36:63:8f:e8:cf:21:46:4c:34:e5:86:8f:b8:ac:55: 32:7f:a7:25:f2:10:96:88:aa:14:d8:99:ed:c3:1e: 87:81:4e:c5:88:a9:27:f9:a1:61:d1:06:4e:7c:f6: 95:76:c6:b0:c2:16:ce:b9:59:0a:c8:dc:1a:3a:21: ed:97:53:a2:b1:bc:fe:ed:98:bd:fc:a7:c0:53:f4: 77:1b:d3:e7:e7:ef:33:d9:43:b0:9c:33:97:f7:a6: 6b:ca:24:ec:22:f9:9a:e8:40:ab:db:7e:7b:ea:85: fd:e2:6b:c7:9e:67:44:3f:63:cb:39:61:37:79:9f: 56:fd:61:c6:b5:97:41:16:1b:4b:54:dd:81:74:f1: 01:95:1f:51:97:d9:e9:e8:42:c7:89:fb:3f:b0:6c: 7a:10:05:28:af:66:76:bd:ef:93:3b:1d:25:59:6f: d1:04:93:07:84:78:d0:26:d5:de:7b:b0:a9:05:01: d4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:05:F3:99:9A:F9:A0:8B:AE:B1:0F:A8:C9:B9:0F:DA:6E:70:D4:DE X509v3 Authority Key Identifier: keyid:6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:70:06:ae:0c:c3:01:9e:82:5a:4a:58:64:6a:d8:81:7d:d2: 5d:74:35:98:27:c0:66:af:97:b1:a3:46:9b:24:04:2f:3b:a5: 58:45:06:0f:05:ed:91:d4:a1:b8:64:5b:0d:74:32:7a:a1:2c: a8:8d:05:2d:65:6c:1e:bf:27:9f:a8:75:2c:d3:da:57:7f:ef: 83:19:79:1d:36:18:a3:06:bb:0a:a0:84:71:32:df:44:d7:0b: cf:0b:75:af:2f:00:f8:8a:1c:b6:21:d3:d5:ab:d3:33:3d:b9: 53:a1:9d:cf:59:ff:bc:1a:83:02:9f:26:79:96:66:b1:a7:fd: fb:5a:13:8f:9c:1c:46:52:45:19:d9:c6:9b:98:3d:44:aa:1f: 81:b6:d6:60:25:6e:08:c9:0e:c8:02:88:4a:15:87:09:84:39: c1:d1:0a:d5:f4:87:aa:1d:e7:96:01:67:cf:50:86:0f:c8:2f: ed:af:b7:d5:e7:45:55:4e:30:05:8e:e1:47:cb:71:e7:8c:fa: 69:2e:e5:94:49:5e:97:50:8f:8a:dd:5b:2a:5d:16:60:80:38: da:f1:29:9e:38:6c:d2:f2:50:6d:3f:c3:c4:82:32:db:2c:6f: cb:ab:a5:41:1b:4c:d0:a4:30:3b:8b:95:0e:04:21:c9:af:33: 25:9d:28:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4QzMxMTAvBgNVBAUTKDZBNERCQkEzNkQ0Qzc2N0Q1QkQ3MkI2RUU5NzBBODAw MEZDNTQ5NUUwHhcNMjUwNDI0MjEwNjE4WhcNMjUwNTAxMjEwNjE4WjAYMRYwFAYD VQQDEw02ODBhYTdjYi1lZDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvDiJXYvdDStyFeriCvair+9GKmr8E8YQTVv6w82DoSIDg1edaDHA713mclt +Q6HbagkBQozWYOGVHH1cqpXit+kAfwuAmiSlec2Y4/ozyFGTDTlho+4rFUyf6cl 8hCWiKoU2Jntwx6HgU7FiKkn+aFh0QZOfPaVdsawwhbOuVkKyNwaOiHtl1Oisbz+ 7Zi9/KfAU/R3G9Pn5+8z2UOwnDOX96ZryiTsIvma6ECr23576oX94mvHnmdEP2PL OWE3eZ9W/WHGtZdBFhtLVN2BdPEBlR9Rl9np6ELHifs/sGx6EAUor2Z2ve+TOx0l WW/RBJMHhHjQJtXee7CpBQHU8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJEF85ma +aCLrrEPqMm5D9pucNTeMB8GA1UdIwQYMBaAFGpNu6NtTHZ9W9crbulwqAAPxUle MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhDMy9EMEUzM0ZBNDAy QzMxMUVCOEFEQzMyMzhDNEY5QUUwMi9hazI3bzIxTWRuMWIxeXR1NlhDb0FBX0ZT VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrMjdvMjFNZG4xYjF5dHU2WENvQUFfRlNWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjhDMy9EMEUzM0ZBNDAyQzMxMUVCOEFEQzMyMzhDNEY5QUUwMi9hazI3bzIxTWRu MWIxeXR1NlhDb0FBX0ZTVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOcAauDMMBnoJaSlhkatiBfdJddDWYJ8Bmr5exo0abJAQvO6VYRQYP Be2R1KG4ZFsNdDJ6oSyojQUtZWwevyefqHUs09pXf++DGXkdNhijBrsKoIRxMt9E 1wvPC3WvLwD4ihy2IdPVq9MzPblToZ3PWf+8GoMCnyZ5lmaxp/37WhOPnBxGUkUZ 2cabmD1Eqh+BttZgJW4IyQ7IAohKFYcJhDnB0QrV9IeqHeeWAWfPUIYPyC/tr7fV 50VVTjAFjuFHy3HnjPppLuWUSV6XUI+K3VsqXRZggDja8SmeOGzS8lBtP8PEgjLb LG/Lq6VBG0zQpDA7i5UOBCHJrzMlnSgi -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:43 2025 by rpki-client