$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft File: 0VLfcuXWwcb-QrZCN3w7CIEobec.mft (raw, json) Hash identifier: 2EapCNTMngySdjFI14KR4vbOZRP3rwiK0RbgGYR75ew= Subject key identifier: 52:D9:25:E9:E3:48:B0:11:2B:29:EE:98:43:11:45:F2:A0:29:E4:48 Authority key identifier: D1:52:DF:72:E5:D6:C1:C6:FE:42:B6:42:37:7C:3B:08:81:28:6D:E7 Certificate issuer: /CN=A91C0FAC/serialNumber=D152DF72E5D6C1C6FE42B642377C3B0881286DE7 Certificate serial: 0509 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft Manifest number: 0505 Signing time: Thu 24 Apr 2025 23:25:57 +0000 Manifest this update: Thu 24 Apr 2025 23:25:56 +0000 Manifest next update: Thu 01 May 2025 23:25:56 +0000 Files and hashes: 1: 0VLfcuXWwcb-QrZCN3w7CIEobec.crl (hash: 326Va3dzii5O+e4RiIs1Cch2diw+L2H8rBORYbNJFOM=) 2: 4C2E7A3C049B11ECAC7E5D0DC4F9AE02.roa (hash: RRDCzU53SK4RYR2DdbmwE16o06HoY4GRJ9TEKW1rm3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.crl rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:25:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1289 (0x509) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0FAC, serialNumber=D152DF72E5D6C1C6FE42B642377C3B0881286DE7 Validity Not Before: Apr 24 23:25:56 2025 GMT Not After : May 1 23:25:56 2025 GMT Subject: CN=680ac885-281e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:36:6e:80:f7:1d:a5:49:04:4d:f9:70:24:fc: 51:8b:26:a1:13:49:2c:e4:25:15:d9:14:6d:0b:d0: 27:6a:b8:8b:2e:48:42:10:03:0e:30:c8:b3:31:8c: 7b:fe:a4:b0:2b:55:eb:bf:6c:d0:e9:bc:c7:d6:31: 8a:61:55:3d:b3:4a:74:6d:93:b7:bd:3d:51:51:2b: 1e:f4:f7:07:8c:0e:71:1d:f4:28:3c:eb:40:92:71: c6:72:5b:76:bf:47:2a:74:69:df:df:b5:53:0f:97: 41:50:1e:55:eb:17:c9:85:89:06:26:b9:8b:f7:2c: c1:28:f2:86:ff:7c:be:78:04:11:52:a0:2a:70:76: ac:8b:2d:8c:5e:21:f5:d3:87:61:3e:fe:6d:45:e0: d1:2c:18:af:80:71:c6:e0:02:96:f2:23:60:06:7a: d0:d4:07:7c:12:a5:b9:c7:43:b9:0d:9e:5b:ef:a2: 14:b3:39:0f:6b:00:1a:78:4b:fb:48:2d:8c:d7:7e: e7:eb:36:d1:9e:0a:34:e2:c4:17:b7:a8:d7:44:c0: 0d:62:dc:c2:79:67:1a:c3:d8:4a:26:d9:8d:12:bb: e2:11:41:83:44:7c:09:e8:5d:83:77:95:40:1c:30: 47:b8:6f:b0:47:1a:14:8b:fe:68:87:79:78:5e:70: 22:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D9:25:E9:E3:48:B0:11:2B:29:EE:98:43:11:45:F2:A0:29:E4:48 X509v3 Authority Key Identifier: keyid:D1:52:DF:72:E5:D6:C1:C6:FE:42:B6:42:37:7C:3B:08:81:28:6D:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b2:90:b3:38:96:41:cd:bc:fe:0f:ba:55:71:79:dd:46:b2: a5:db:fc:e4:44:f7:4b:6e:8d:f1:c1:be:92:fa:24:f1:db:61: fe:9b:09:71:dc:23:2b:d9:35:ee:b9:8c:e7:01:3e:c7:59:a4: 33:66:18:57:2b:90:6f:60:d4:58:b5:cb:c0:6a:99:a8:5b:49: c2:97:47:81:90:6b:e7:1b:d4:3e:9a:ff:67:8a:e4:cb:96:ec: a7:5f:0d:a9:e8:5b:f9:db:72:59:0c:e9:54:40:52:63:2b:7c: 75:51:a5:45:09:99:eb:ef:3f:e4:d9:32:8b:8d:74:f7:0f:36: 26:a9:10:e4:ca:fc:41:d9:e1:2e:1f:11:29:41:2d:9b:e9:c3: fb:6e:0c:bf:25:04:4e:0f:6c:36:be:9e:f7:f8:45:b1:49:d8: 7e:02:cd:76:06:77:a7:0d:a7:1f:03:07:a0:ce:5e:de:29:1c: 04:52:a5:b9:8a:47:49:a9:98:e0:9b:6d:e2:93:16:0b:41:e4: d6:d8:5f:83:a5:52:64:f5:df:84:77:15:69:38:a3:7d:39:d6: 26:a1:37:b5:81:7f:3d:59:72:e8:dc:7b:73:37:30:bd:fe:b8: 3e:af:3b:11:a8:a6:bb:5e:e9:d2:ea:67:ca:ee:13:14:02:3a: 7b:8a:6d:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBGQUMxMTAvBgNVBAUTKEQxNTJERjcyRTVENkMxQzZGRTQyQjY0MjM3N0MzQjA4 ODEyODZERTcwHhcNMjUwNDI0MjMyNTU2WhcNMjUwNTAxMjMyNTU2WjAYMRYwFAYD VQQDEw02ODBhYzg4NS0yODFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujZugPcdpUkETflwJPxRiyahE0ks5CUV2RRtC9AnariLLkhCEAMOMMizMYx7 /qSwK1Xrv2zQ6bzH1jGKYVU9s0p0bZO3vT1RUSse9PcHjA5xHfQoPOtAknHGclt2 v0cqdGnf37VTD5dBUB5V6xfJhYkGJrmL9yzBKPKG/3y+eAQRUqAqcHasiy2MXiH1 04dhPv5tReDRLBivgHHG4AKW8iNgBnrQ1Ad8EqW5x0O5DZ5b76IUszkPawAaeEv7 SC2M137n6zbRngo04sQXt6jXRMANYtzCeWcaw9hKJtmNErviEUGDRHwJ6F2Dd5VA HDBHuG+wRxoUi/5oh3l4XnAiUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLZJenj SLARKynumEMRRfKgKeRIMB8GA1UdIwQYMBaAFNFS33Ll1sHG/kK2Qjd8OwiBKG3n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZBQy8zQ0Y3OThFMDA0 OTcxMUVDQTUzRDRCM0NDNEY5QUUwMi8wVkxmY3VYV3djYi1RclpDTjN3N0NJRW9i ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBWTGZjdVhXd2NiLVFyWkNOM3c3Q0lFb2JlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEZBQy8zQ0Y3OThFMDA0OTcxMUVDQTUzRDRCM0NDNEY5QUUwMi8wVkxmY3VYV3dj Yi1RclpDTjN3N0NJRW9iZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAespCzOJZBzbz+D7pVcXndRrKl2/zkRPdLbo3xwb6S+iTx22H+mwlx 3CMr2TXuuYznAT7HWaQzZhhXK5BvYNRYtcvAapmoW0nCl0eBkGvnG9Q+mv9niuTL luynXw2p6Fv523JZDOlUQFJjK3x1UaVFCZnr7z/k2TKLjXT3DzYmqRDkyvxB2eEu HxEpQS2b6cP7bgy/JQROD2w2vp73+EWxSdh+As12BnenDacfAwegzl7eKRwEUqW5 ikdJqZjgm23ikxYLQeTW2F+DpVJk9d+EdxVpOKN9OdYmoTe1gX89WXLo3HtzNzC9 /rg+rzsRqKa7XunS6mfK7hMUAjp7im3V -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:03 2025 by rpki-client