$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft File: A7x0msFoLEtG2iWat-tmKqIlsO4.mft (raw, json) Hash identifier: NzII67cyJb478/7gnY/ixG8rF/W0I3uTfxM9dkfC0JY= Subject key identifier: 8D:8D:E9:A9:8B:02:2B:D4:4C:05:6E:AB:E9:11:87:BE:25:90:5E:0A Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE Certificate issuer: /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Certificate serial: 0287 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft Manifest number: 027B Signing time: Fri 25 Apr 2025 01:27:14 +0000 Manifest this update: Fri 25 Apr 2025 01:27:14 +0000 Manifest next update: Fri 02 May 2025 01:27:14 +0000 Files and hashes: 1: A7x0msFoLEtG2iWat-tmKqIlsO4.crl (hash: oyNp0RBCKD9xagrxtOYJLDTeK3TV7wEX5sWmkx1Lp4s=) 2: 0D3B0894B55611EFB91FFB17C4F9AE02.roa (hash: s5ttZ68NNtBBfg0lzH3ft8+w2I44cPtM3zNbD4FDDUQ=) 3: 810DCA288C6511EF813EB90EC4F9AE02.roa (hash: uXjCh7TkzA4xr6P8TlTEkjQ53fF7fy/5V3MP61ICuDM=) 4: CFB6C2ECB55511EFB8F19317C4F9AE02.roa (hash: 7DH9XNSCd4jWFH0/wUCfAwXyA4TmJu5U8XhIJRlq9bc=) 5: 0A9DA996655311EF8D61E41CC4F9AE02.roa (hash: LJgcF5ukT6mBdzEM26be8zREGTvnZs0KmOcJarcZEy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BB2, serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Validity Not Before: Apr 25 01:27:14 2025 GMT Not After : May 2 01:27:14 2025 GMT Subject: CN=680ae4f2-5ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:22:92:2e:f7:b5:52:2c:f0:49:2c:da:11:85: 34:c3:37:f6:0b:b9:6a:b8:3c:47:0e:01:84:1a:d7: 00:50:67:ee:a9:34:44:97:22:85:24:9e:b4:81:fe: bb:b0:51:27:39:4b:86:86:a7:34:50:47:35:10:36: ef:58:aa:8a:89:b5:29:c7:4d:2c:0f:81:76:8f:02: 9e:cf:2f:e5:58:10:49:54:ae:d6:ca:b5:d3:72:6b: 07:c0:e5:25:ba:34:7e:48:c4:7f:28:12:59:40:4c: 55:dc:da:75:11:c2:a4:87:a7:d1:7c:89:c2:87:59: d7:c2:a6:3e:a4:75:19:61:eb:c2:46:b6:ab:99:ab: be:17:9f:19:d0:3e:e8:75:c0:de:b7:32:aa:45:4a: 50:00:1f:d3:14:a5:70:5a:6d:7f:6c:b8:4d:83:b2: 3f:16:0e:9b:7c:74:43:7f:9a:62:23:a4:f4:23:df: e8:e0:84:84:b7:8d:fb:9b:07:2a:fd:28:10:18:97: f6:85:78:5d:96:5f:d0:bb:f4:51:3f:50:7f:9f:42: a5:88:87:9d:2e:42:4d:2c:88:bf:c0:51:35:34:64: ab:9a:c3:46:a6:13:d5:3e:a8:15:77:f7:58:77:1d: 66:f5:e6:be:cc:37:c4:5c:c1:58:75:63:28:f6:d5: 43:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:8D:E9:A9:8B:02:2B:D4:4C:05:6E:AB:E9:11:87:BE:25:90:5E:0A X509v3 Authority Key Identifier: keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c5:a9:59:1f:9f:e9:6d:d8:ef:c0:c0:85:ae:f1:0f:f0:26: 49:32:06:6e:b8:00:18:ca:48:81:29:ea:13:bf:f5:b3:90:7a: 5b:17:df:9e:b7:e0:5b:3b:79:4d:33:d1:db:3a:6d:44:7a:08: 0d:76:9b:7c:26:51:e1:d0:fd:17:af:8e:8c:fc:50:83:d7:05: 3c:d1:b7:b4:8e:73:ad:23:77:7f:86:49:04:7f:83:7f:84:34: 4b:16:38:ef:44:72:02:7a:10:ee:51:4b:e7:7c:f2:88:af:0d: 53:7b:94:ee:ff:02:cb:4f:a1:0a:ab:a2:7d:fe:b4:8c:66:5e: d7:69:a1:21:0e:17:18:11:96:4d:b7:b7:78:b9:a2:83:33:bc: d6:e4:bc:a2:5d:ac:fe:1a:8a:6e:fc:93:be:5e:76:b4:07:00: 03:67:9b:48:da:0d:ba:02:ab:28:eb:23:43:21:ae:da:02:9d: ab:b7:6f:00:9e:ef:a2:1a:e4:8a:d3:a1:fc:39:5c:03:99:c3: c1:de:03:6e:fa:58:6d:f0:bc:1b:61:dd:d7:15:84:b9:fe:e1: 67:1c:54:9d:21:eb:5b:03:78:a7:1e:a7:31:15:4c:56:96:fc: e5:c1:62:cc:e2:46:3e:57:a1:b9:cd:75:a3:0f:9d:d3:60:48: 0d:fc:d6:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCQjIxMTAvBgNVBAUTKDAzQkM3NDlBQzE2ODJDNEI0NkRBMjU5QUI3RUI2NjJB QTIyNUIwRUUwHhcNMjUwNDI1MDEyNzE0WhcNMjUwNTAyMDEyNzE0WjAYMRYwFAYD VQQDEw02ODBhZTRmMi01YmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyiKSLve1UizwSSzaEYU0wzf2C7lquDxHDgGEGtcAUGfuqTRElyKFJJ60gf67 sFEnOUuGhqc0UEc1EDbvWKqKibUpx00sD4F2jwKezy/lWBBJVK7WyrXTcmsHwOUl ujR+SMR/KBJZQExV3Np1EcKkh6fRfInCh1nXwqY+pHUZYevCRrarmau+F58Z0D7o dcDetzKqRUpQAB/TFKVwWm1/bLhNg7I/Fg6bfHRDf5piI6T0I9/o4ISEt437mwcq /SgQGJf2hXhdll/Qu/RRP1B/n0KliIedLkJNLIi/wFE1NGSrmsNGphPVPqgVd/dY dx1m9ea+zDfEXMFYdWMo9tVDRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2N6amL AivUTAVuq+kRh74lkF4KMB8GA1UdIwQYMBaAFAO8dJrBaCxLRtolmrfrZiqiJbDu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJCMi81RDRDQzJGNjA4 QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xFdEcyaVdhdC10bUtxSWxz TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E3eDBtc0ZvTEV0RzJpV2F0LXRtS3FJbHNPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkJCMi81RDRDQzJGNjA4QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xF dEcyaVdhdC10bUtxSWxzTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOxalZH5/pbdjvwMCFrvEP8CZJMgZuuAAYykiBKeoTv/WzkHpbF9+e t+BbO3lNM9HbOm1EeggNdpt8JlHh0P0Xr46M/FCD1wU80be0jnOtI3d/hkkEf4N/ hDRLFjjvRHICehDuUUvnfPKIrw1Te5Tu/wLLT6EKq6J9/rSMZl7XaaEhDhcYEZZN t7d4uaKDM7zW5LyiXaz+Gopu/JO+Xna0BwADZ5tI2g26Aqso6yNDIa7aAp2rt28A nu+iGuSK06H8OVwDmcPB3gNu+lht8LwbYd3XFYS5/uFnHFSdIetbA3inHqcxFUxW lvzlwWLM4kY+V6G5zXWjD53TYEgN/NaG -----END CERTIFICATE-----Generated at Sat Apr 26 05:19:30 2025 by rpki-client