$ rpki-client -vvf rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft File: vUxEHwLHrdQvpiQugzHZP1nlGDo.mft (raw, json) Hash identifier: gJDUhD3wes/8aaEZpsO3FRSXGLvNWU5r0w5od4Zrvlo= Subject key identifier: 99:32:BB:F1:E8:A5:FE:9B:FB:5B:B4:B2:6C:35:17:D6:48:A5:64:A6 Authority key identifier: BD:4C:44:1F:02:C7:AD:D4:2F:A6:24:2E:83:31:D9:3F:59:E5:18:3A Certificate issuer: /CN=A91C67F9/serialNumber=BD4C441F02C7ADD42FA6242E8331D93F59E5183A Certificate serial: 01BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft Manifest number: 01B5 Signing time: Fri 25 Apr 2025 02:22:00 +0000 Manifest this update: Fri 25 Apr 2025 02:21:59 +0000 Manifest next update: Fri 02 May 2025 02:21:59 +0000 Files and hashes: 1: vUxEHwLHrdQvpiQugzHZP1nlGDo.crl (hash: L/juJkbJ5HQ50UZWjA/ZRPbsZJBOl+BGfld8EQpdypI=) 2: 079523028DB211ED910C330CC4F9AE02.roa (hash: W9Hoie4kNxclHpEMWbcvds2qMQa9C1Hni+pmtAE5bWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.crl rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C67F9, serialNumber=BD4C441F02C7ADD42FA6242E8331D93F59E5183A Validity Not Before: Apr 25 02:21:59 2025 GMT Not After : May 2 02:21:59 2025 GMT Subject: CN=680af1c7-c0a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dd:b7:4f:7a:d4:00:72:4c:ff:c7:ef:e4:67: 38:dd:6a:94:06:8a:fc:22:52:f8:aa:2a:2f:a0:29: 7e:7a:18:20:72:13:da:3b:11:58:bb:0c:75:b8:ed: fc:7a:f0:e5:66:d8:3e:e0:d8:f1:28:08:e5:0f:0a: 6c:4c:b3:d2:2d:56:93:02:5d:fa:95:47:ae:8a:4c: dc:45:f7:78:2f:90:d6:bd:f6:aa:cd:68:a8:a5:26: 37:6f:d2:0f:27:a8:26:f0:5c:b9:16:3d:d1:de:a3: bf:d7:80:dc:fd:e9:1b:79:b4:bd:25:59:7e:8e:8a: 0d:6c:b9:24:4b:66:65:b1:f3:ca:c3:6a:00:4b:39: 61:5f:05:e2:f3:0c:e0:be:f0:2f:1b:2e:c8:fb:9f: 82:4e:bd:42:43:c1:51:f5:ac:85:f8:20:10:8c:3f: 20:0c:9f:74:d3:a0:40:c5:32:67:a7:ee:50:67:e9: a1:08:9e:be:45:05:73:9a:58:c4:13:f6:bc:46:c7: ee:d1:b4:58:76:a3:b0:cc:90:18:c5:bf:10:46:f5: 8f:e5:6a:d1:71:d9:85:93:10:13:6c:dc:f7:db:0d: 09:ff:38:07:b7:f8:9f:84:2a:bf:57:5f:cf:60:97: bd:ef:6a:50:fa:51:70:9f:e1:d2:48:88:a9:4c:a1: 4e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:32:BB:F1:E8:A5:FE:9B:FB:5B:B4:B2:6C:35:17:D6:48:A5:64:A6 X509v3 Authority Key Identifier: keyid:BD:4C:44:1F:02:C7:AD:D4:2F:A6:24:2E:83:31:D9:3F:59:E5:18:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:cb:48:4b:6e:cb:83:1c:41:e2:ee:f7:1c:d2:ed:98:17:83: ad:10:20:54:23:b4:38:db:17:77:62:f7:f2:65:4e:ad:1f:25: 0c:1f:ad:34:0e:8d:c8:ee:75:d4:f7:a1:00:06:68:3d:9d:b2: 1d:82:f3:15:14:c7:5c:91:26:b9:99:be:d9:44:8f:ff:84:ee: e9:54:0d:23:82:1b:26:30:b3:53:b0:d2:53:ae:89:76:e3:a4: 90:04:a1:2f:d1:f0:1c:a2:e6:bb:77:04:98:7d:2b:09:ba:6c: dd:b5:32:87:f1:10:ba:2b:89:bc:00:dd:9a:09:f5:f6:d9:ea: ae:48:31:34:26:a4:b5:1c:7f:3d:c4:f9:5a:0d:d7:40:24:7a: c9:22:dd:01:ae:7c:8f:7a:09:28:71:64:90:11:90:3b:35:87: bb:77:29:73:42:8d:5c:e8:9b:0f:8e:f0:10:96:9d:d0:6f:e2: cc:71:73:70:f6:26:ec:1d:d7:f7:78:1b:1a:a3:b3:c9:b9:18: 7c:e4:64:cd:64:50:9e:62:9e:0d:39:99:a9:85:47:a1:3a:dc: 75:df:33:77:35:27:f0:3e:bb:f4:be:ae:51:ee:df:b3:44:ff: 52:47:fb:6e:21:cc:b7:0d:8d:da:14:e2:45:b9:ca:fd:89:33: ef:ee:3b:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY3RjkxMTAvBgNVBAUTKEJENEM0NDFGMDJDN0FERDQyRkE2MjQyRTgzMzFEOTNG NTlFNTE4M0EwHhcNMjUwNDI1MDIyMTU5WhcNMjUwNTAyMDIyMTU5WjAYMRYwFAYD VQQDEw02ODBhZjFjNy1jMGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvt23T3rUAHJM/8fv5Gc43WqUBor8IlL4qiovoCl+ehggchPaOxFYuwx1uO38 evDlZtg+4NjxKAjlDwpsTLPSLVaTAl36lUeuikzcRfd4L5DWvfaqzWiopSY3b9IP J6gm8Fy5Fj3R3qO/14Dc/ekbebS9JVl+jooNbLkkS2ZlsfPKw2oASzlhXwXi8wzg vvAvGy7I+5+CTr1CQ8FR9ayF+CAQjD8gDJ9006BAxTJnp+5QZ+mhCJ6+RQVzmljE E/a8Rsfu0bRYdqOwzJAYxb8QRvWP5WrRcdmFkxATbNz32w0J/zgHt/ifhCq/V1/P YJe972pQ+lFwn+HSSIipTKFO2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkyu/Ho pf6b+1u0smw1F9ZIpWSmMB8GA1UdIwQYMBaAFL1MRB8Cx63UL6YkLoMx2T9Z5Rg6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjdGOS9FQUUxMkU0NDhE QUQxMUVEQjJEQ0M0ODdDNEY5QUUwMi92VXhFSHdMSHJkUXZwaVF1Z3pIWlAxbmxH RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZVeEVId0xIcmRRdnBpUXVnekhaUDFubEdEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjdGOS9FQUUxMkU0NDhEQUQxMUVEQjJEQ0M0ODdDNEY5QUUwMi92VXhFSHdMSHJk UXZwaVF1Z3pIWlAxbmxHRG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2y0hLbsuDHEHi7vcc0u2YF4OtECBUI7Q42xd3YvfyZU6tHyUMH600 Do3I7nXU96EABmg9nbIdgvMVFMdckSa5mb7ZRI//hO7pVA0jghsmMLNTsNJTrol2 46SQBKEv0fAcoua7dwSYfSsJumzdtTKH8RC6K4m8AN2aCfX22equSDE0JqS1HH89 xPlaDddAJHrJIt0BrnyPegkocWSQEZA7NYe7dylzQo1c6JsPjvAQlp3Qb+LMcXNw 9ibsHdf3eBsao7PJuRh85GTNZFCeYp4NOZmphUehOtx13zN3NSfwPrv0vq5R7t+z RP9SR/tuIcy3DY3aFOJFucr9iTPv7juw -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:49 2025 by rpki-client