$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft File: a-rAl7V48XydcRl3ez9RFPvglxs.mft (raw, json) Hash identifier: JEV5+wOTs8Jjh/WBLSqnkjZkxltSdLS0SQyH6NUfxew= Subject key identifier: 1B:1A:DE:16:8D:AA:D9:EA:3F:A6:AE:67:F7:72:3F:06:C3:B1:10:9B Authority key identifier: 6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B Certificate issuer: /CN=A91C5A9F/serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B Certificate serial: 0C9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft Manifest number: 0C85 Signing time: Thu 24 Apr 2025 18:12:11 +0000 Manifest this update: Thu 24 Apr 2025 18:12:11 +0000 Manifest next update: Thu 01 May 2025 18:12:11 +0000 Files and hashes: 1: a-rAl7V48XydcRl3ez9RFPvglxs.crl (hash: BIoK2sab6m3qyE9UI6k5LFfHNVNfQ7rlPNs9SUTHQpI=) 2: 498956B8FFC411EEB2369013C4F9AE02.roa (hash: w5Dpoxz9EcTss3nAI8ZMtrwKEHayowiUIHwPNhpEFMM=) 3: 48B3316EFFC411EEB2369013C4F9AE02.roa (hash: Fswv/F/vaivrwx2kQ/qe3AmxF+uS0o5WMUgISHj2Mxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:12:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3227 (0xc9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5A9F, serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B Validity Not Before: Apr 24 18:12:11 2025 GMT Not After : May 1 18:12:11 2025 GMT Subject: CN=680a7efb-bc62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:81:de:de:9e:22:cc:67:bb:c9:3d:91:98:59: 25:9c:ac:9c:b8:f1:bd:98:88:6b:8f:a5:03:84:cb: 5e:a8:9e:2c:7c:13:58:69:ad:7c:62:18:66:d0:37: bb:d5:a1:07:e2:91:c7:54:60:41:59:41:08:d4:91: ab:73:cb:f5:29:53:6a:da:28:2c:cc:f4:28:d1:25: eb:26:52:c5:3f:a7:5a:94:47:70:0e:9a:46:17:15: 0d:e8:27:d9:fd:77:ee:80:16:e5:79:ba:4c:3b:03: 4b:58:e2:6f:06:f7:a9:3f:3e:40:e1:dd:6b:2b:dd: 52:6a:59:70:e4:64:99:04:20:f2:78:11:0f:45:5d: 7d:c1:88:3d:25:47:c4:02:93:eb:b8:d8:90:e8:95: fa:9d:59:ec:c0:9f:79:24:d5:94:f5:a8:73:93:49: e1:78:12:b0:3f:af:cf:0c:73:c6:42:e8:6c:8b:7b: 55:7d:6d:e5:e2:92:72:23:49:eb:42:42:da:9a:26: 9b:84:80:fb:e6:90:a7:7d:0f:58:7d:28:8d:05:9a: c8:f5:36:91:d8:e6:62:0e:08:93:68:a8:24:fc:cb: 9f:d7:19:53:fe:20:65:07:bc:f2:2a:d6:03:c4:27: 39:24:23:16:a5:99:13:82:03:f0:73:97:bc:0f:47: 7d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1A:DE:16:8D:AA:D9:EA:3F:A6:AE:67:F7:72:3F:06:C3:B1:10:9B X509v3 Authority Key Identifier: keyid:6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:c1:e6:4e:e7:c5:82:26:cd:8b:df:7f:ae:4d:68:e1:60:29: 2b:3b:53:6f:d0:60:b3:d2:fd:5e:3c:74:25:c3:ea:1e:9e:50: e5:90:c5:04:0b:6c:94:8c:6c:9f:1a:f4:03:de:c3:86:b6:8b: 9e:28:a2:b6:2b:3a:65:7d:6b:ca:4f:1c:f1:22:30:d5:d3:bd: 7a:d9:f4:8d:1a:4f:d7:18:80:ec:2e:a7:78:f4:5b:b4:f9:99: 78:ad:fd:b4:ca:ae:ca:18:36:4a:ad:cd:fb:a7:3f:c4:15:4f: 03:02:7e:6f:50:c0:e1:41:be:4c:89:47:10:fe:ba:35:1f:b8: 8c:49:0d:51:03:d9:5b:e8:d2:e2:3b:24:fc:ed:45:5b:51:b8: a0:4e:fd:ad:86:dc:43:08:13:ad:1d:d9:3a:00:50:c1:ce:4c: e6:65:8d:78:2b:53:77:3b:1c:31:8f:97:69:b5:fc:e3:73:32: 6d:76:8b:08:b0:54:f2:d7:1d:79:ff:79:71:41:7b:ed:ab:ad: 2b:e7:91:86:6f:6c:66:db:7b:52:de:87:a3:27:10:35:a6:d1: 91:91:6f:96:e4:8c:fe:53:1a:14:ca:91:19:f8:bc:5f:80:66: 5a:5a:28:5f:14:d7:f2:3f:5e:b3:81:1c:9a:4e:73:03:1c:cc: cb:b0:47:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVBOUYxMTAvBgNVBAUTKDZCRUFDMDk3QjU3OEYxN0M5RDcxMTk3NzdCM0Y1MTE0 RkJFMDk3MUIwHhcNMjUwNDI0MTgxMjExWhcNMjUwNTAxMTgxMjExWjAYMRYwFAYD VQQDEw02ODBhN2VmYi1iYzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYHe3p4izGe7yT2RmFklnKycuPG9mIhrj6UDhMteqJ4sfBNYaa18Yhhm0De7 1aEH4pHHVGBBWUEI1JGrc8v1KVNq2igszPQo0SXrJlLFP6dalEdwDppGFxUN6CfZ /XfugBblebpMOwNLWOJvBvepPz5A4d1rK91Sallw5GSZBCDyeBEPRV19wYg9JUfE ApPruNiQ6JX6nVnswJ95JNWU9ahzk0nheBKwP6/PDHPGQuhsi3tVfW3l4pJyI0nr QkLamiabhID75pCnfQ9YfSiNBZrI9TaR2OZiDgiTaKgk/Muf1xlT/iBlB7zyKtYD xCc5JCMWpZkTggPwc5e8D0d9nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsa3haN qtnqP6auZ/dyPwbDsRCbMB8GA1UdIwQYMBaAFGvqwJe1ePF8nXEZd3s/URT74Jcb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUE5Ri8wMjFBOTYwQ0Y2 NzgxMUU5QjUyMDk2MjVDNEY5QUUwMi9hLXJBbDdWNDhYeWRjUmwzZXo5UkZQdmds eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EtckFsN1Y0OFh5ZGNSbDNlejlSRlB2Z2x4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUE5Ri8wMjFBOTYwQ0Y2NzgxMUU5QjUyMDk2MjVDNEY5QUUwMi9hLXJBbDdWNDhY eWRjUmwzZXo5UkZQdmdseHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1weZO58WCJs2L33+uTWjhYCkrO1Nv0GCz0v1ePHQlw+oenlDlkMUE C2yUjGyfGvQD3sOGtoueKKK2KzplfWvKTxzxIjDV07162fSNGk/XGIDsLqd49Fu0 +Zl4rf20yq7KGDZKrc37pz/EFU8DAn5vUMDhQb5MiUcQ/ro1H7iMSQ1RA9lb6NLi OyT87UVbUbigTv2thtxDCBOtHdk6AFDBzkzmZY14K1N3Oxwxj5dptfzjczJtdosI sFTy1x15/3lxQXvtq60r55GGb2xm23tS3oejJxA1ptGRkW+W5Iz+UxoUypEZ+Lxf gGZaWihfFNfyP16zgRyaTnMDHMzLsEd7 -----END CERTIFICATE-----Generated at Sat Apr 26 12:39:54 2025 by rpki-client