$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft File: t0bN0xcqIBHwIYn_La14fSnAEek.mft (raw, json) Hash identifier: E4XxMmPu//Bm5DL59nf0onvHSRNXLuBnqIpcdGZtNZg= Subject key identifier: 89:0F:60:86:57:40:86:FD:5E:7B:7C:92:40:C9:57:56:C5:6B:2A:01 Authority key identifier: B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9 Certificate issuer: /CN=A91C1B92/serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9 Certificate serial: 0DA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft Manifest number: 0D9E Signing time: Thu 24 Apr 2025 17:53:57 +0000 Manifest this update: Thu 24 Apr 2025 17:53:57 +0000 Manifest next update: Thu 01 May 2025 17:53:57 +0000 Files and hashes: 1: t0bN0xcqIBHwIYn_La14fSnAEek.crl (hash: 63CwM0X1Ag1Or2sXP7vVYwt/4JhEinGnK/JS1NKdGdo=) 2: F8AC3DD8DB9111E9B70EDD2EC4F9AE02.roa (hash: Ik/3X8YIb0qhd0Fqkle1gmGuYbSdF2VymS/D7TZSlFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:53:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3494 (0xda6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1B92, serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9 Validity Not Before: Apr 24 17:53:57 2025 GMT Not After : May 1 17:53:57 2025 GMT Subject: CN=680a7ab5-fd39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8e:9d:b8:9d:97:46:90:bf:84:c3:46:f0:8a: ea:23:82:f8:42:37:eb:f5:7f:46:8d:e8:c8:1e:33: 6f:d6:12:e8:dd:53:2b:26:46:c4:1e:72:a4:52:b1: b4:f3:a7:d8:70:dc:41:1b:6c:cb:0a:7f:14:c4:4b: d5:d5:c7:ef:b9:c6:ac:c4:ad:6e:5d:44:89:fc:4c: 90:cb:ad:3e:e8:c9:c3:c1:f3:4b:5d:66:c2:75:70: d8:f7:21:47:05:38:5a:d8:da:01:61:a9:05:5f:b0: d2:55:d5:1b:ca:70:3f:8a:b7:ad:e1:83:33:63:c8: db:01:b9:2a:5a:8c:58:e5:49:2a:30:19:0c:a4:65: a1:7b:03:98:cf:09:c0:84:d5:b0:a6:1a:fd:ef:f2: 25:5c:1a:c7:0f:c3:6a:1d:f6:4c:0e:7a:3f:db:8d: 03:9b:b9:1c:9e:16:7e:99:66:10:de:16:03:f2:e4: 96:0e:0b:ea:9a:e6:51:c3:04:ce:f5:83:54:13:4f: 84:95:dd:ac:a1:07:19:90:08:46:24:3a:db:ac:ed: 0d:a5:f6:52:6f:a8:2e:3b:88:d9:87:c6:fb:65:ab: ff:2c:ea:7b:93:20:fe:10:23:7c:19:46:f2:c7:91: 31:1e:fa:a9:58:31:1e:c8:d3:c4:48:d6:54:b8:84: 95:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:0F:60:86:57:40:86:FD:5E:7B:7C:92:40:C9:57:56:C5:6B:2A:01 X509v3 Authority Key Identifier: keyid:B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:f4:3f:37:0e:6a:8b:6f:02:80:9c:50:2e:f5:63:36:b3:eb: 7b:55:99:7f:df:e8:c3:e4:a3:ad:5d:58:f9:e0:2b:e9:25:82: c6:4e:54:d6:96:f5:97:46:f7:3b:1b:69:58:60:b6:53:40:01: fb:b9:9b:a7:97:3f:bb:1d:f3:7d:5a:5d:97:99:85:8a:0c:82: 3f:29:de:33:4f:31:c8:90:ef:8e:73:15:49:5c:88:ea:14:99: ab:11:7d:55:84:27:86:8b:5d:ef:73:91:26:fe:34:2f:d3:e1: 03:e7:4b:a9:c3:32:dc:99:3e:b3:56:64:31:58:2a:c6:4f:ed: f9:39:a2:19:6c:32:48:1e:22:e2:72:59:36:45:14:13:03:d8: b6:7f:e0:4a:66:76:a4:d1:99:a4:6b:02:cd:4f:b1:6f:79:63: 93:30:67:44:12:60:40:34:cc:9b:9c:93:b6:c1:8c:83:49:48: e5:0c:0b:59:09:ca:c3:db:cb:dd:aa:87:bd:e1:f0:0c:92:ab: f6:d6:9d:02:10:da:e2:a1:c2:68:a5:84:5e:5d:46:18:89:8a: 55:00:22:94:2c:3d:b1:72:55:7e:9e:85:27:31:1f:53:52:4f: ce:1e:3f:fb:95:76:94:56:8b:cf:ee:d9:fc:1f:af:3e:e3:cb: 0f:36:79:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFCOTIxMTAvBgNVBAUTKEI3NDZDREQzMTcyQTIwMTFGMDIxODlGRjJEQUQ3ODdE MjlDMDExRTkwHhcNMjUwNDI0MTc1MzU3WhcNMjUwNTAxMTc1MzU3WjAYMRYwFAYD VQQDEw02ODBhN2FiNS1mZDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsI6duJ2XRpC/hMNG8IrqI4L4Qjfr9X9GjejIHjNv1hLo3VMrJkbEHnKkUrG0 86fYcNxBG2zLCn8UxEvV1cfvucasxK1uXUSJ/EyQy60+6MnDwfNLXWbCdXDY9yFH BTha2NoBYakFX7DSVdUbynA/iret4YMzY8jbAbkqWoxY5UkqMBkMpGWhewOYzwnA hNWwphr97/IlXBrHD8NqHfZMDno/240Dm7kcnhZ+mWYQ3hYD8uSWDgvqmuZRwwTO 9YNUE0+Eld2soQcZkAhGJDrbrO0NpfZSb6guO4jZh8b7Zav/LOp7kyD+ECN8GUby x5ExHvqpWDEeyNPESNZUuISVkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIkPYIZX QIb9Xnt8kkDJV1bFayoBMB8GA1UdIwQYMBaAFLdGzdMXKiAR8CGJ/y2teH0pwBHp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUI5Mi9BQUJGQzQ5QUJE NjAxMUU5OTU2QTBGMTlDNEY5QUUwMi90MGJOMHhjcUlCSHdJWW5fTGExNGZTbkFF ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QwYk4weGNxSUJId0lZbl9MYTE0ZlNuQUVlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUI5Mi9BQUJGQzQ5QUJENjAxMUU5OTU2QTBGMTlDNEY5QUUwMi90MGJOMHhjcUlC SHdJWW5fTGExNGZTbkFFZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB9D83DmqLbwKAnFAu9WM2s+t7VZl/3+jD5KOtXVj54CvpJYLGTlTW lvWXRvc7G2lYYLZTQAH7uZunlz+7HfN9Wl2XmYWKDII/Kd4zTzHIkO+OcxVJXIjq FJmrEX1VhCeGi13vc5Em/jQv0+ED50upwzLcmT6zVmQxWCrGT+35OaIZbDJIHiLi clk2RRQTA9i2f+BKZnak0ZmkawLNT7FveWOTMGdEEmBANMybnJO2wYyDSUjlDAtZ CcrD28vdqoe94fAMkqv21p0CENriocJopYReXUYYiYpVACKULD2xclV+noUnMR9T Uk/OHj/7lXaUVovP7tn8H68+48sPNnk6 -----END CERTIFICATE-----Generated at Sat Apr 26 03:46:31 2025 by rpki-client