$ rpki-client -vvf rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft File: g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft (raw, json) Hash identifier: SGaKWl+3wOmxOae0GvpZq0M9D8+MMOMEK0/u7AlDQbQ= Subject key identifier: 1F:4F:05:06:48:46:FF:0A:0E:59:FA:20:D2:30:E7:FC:D2:AA:C1:31 Authority key identifier: 83:AC:B5:0F:96:F6:44:3F:4B:83:D3:91:F8:57:BE:7C:B5:7E:34:C1 Certificate issuer: /CN=A91C705E/serialNumber=83ACB50F96F6443F4B83D391F857BE7CB57E34C1 Certificate serial: 02AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft Manifest number: 02A4 Signing time: Fri 25 Apr 2025 01:15:38 +0000 Manifest this update: Fri 25 Apr 2025 01:15:38 +0000 Manifest next update: Fri 02 May 2025 01:15:38 +0000 Files and hashes: 1: g6y1D5b2RD9Lg9OR-Fe-fLV-NME.crl (hash: nHR4sxhPgi9Wbr7fCyFJK4lwIGP3SnEm0A6tecJjgeU=) 2: CB5ED75AF62811EC9205771CC4F9AE02.roa (hash: NW6HBZRtebEmp/7i48MrWPcyNaPh4Ushzt7ufQ/dX6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.crl rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 682 (0x2aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C705E, serialNumber=83ACB50F96F6443F4B83D391F857BE7CB57E34C1 Validity Not Before: Apr 25 01:15:38 2025 GMT Not After : May 2 01:15:38 2025 GMT Subject: CN=680ae23a-8111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a8:3e:33:91:82:0d:86:82:84:34:fe:6a:89: 1c:c4:b7:f4:47:ef:6b:6f:59:96:ce:18:8a:19:fd: 44:0f:ae:9e:e0:eb:50:8a:18:1a:af:f2:49:58:0c: 13:d1:12:45:8c:a0:a9:0d:ae:25:ca:8c:21:94:71: 99:b7:5a:53:6a:b5:44:27:81:b9:f9:20:67:2f:55: 5a:e4:4d:7f:43:55:e4:2c:81:86:9a:1e:c3:14:32: 6f:e2:b8:90:f9:af:85:8d:d7:35:e6:b2:96:04:72: 6e:f5:dd:84:8e:0b:61:65:76:c5:64:ab:9f:05:e1: e5:16:be:30:38:b1:ab:c3:7a:0c:1d:00:1e:59:18: 0d:18:0c:25:ec:90:e3:b8:2c:c8:89:39:fe:55:06: 20:2c:31:2d:5c:df:cd:cf:c1:44:40:2b:00:89:c3: 9e:11:54:cd:2c:eb:aa:3e:7a:07:9e:b2:f2:03:0d: 6f:b1:a0:ab:fd:36:04:6e:5e:b4:ea:50:42:50:73: 45:10:50:d6:85:b9:5f:fe:0a:69:36:1d:ce:94:89: a3:97:57:25:c8:0b:bd:37:ef:1c:a8:bf:78:19:95: 08:1f:84:34:ea:ee:1d:b9:7b:a6:b2:3a:53:62:c8: ba:5d:eb:7e:09:aa:6c:ac:c5:f2:73:5d:90:87:e7: 62:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4F:05:06:48:46:FF:0A:0E:59:FA:20:D2:30:E7:FC:D2:AA:C1:31 X509v3 Authority Key Identifier: keyid:83:AC:B5:0F:96:F6:44:3F:4B:83:D3:91:F8:57:BE:7C:B5:7E:34:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ca:dd:b9:40:fa:15:83:ef:96:cf:09:c1:14:05:17:99:9a: c8:c5:16:e5:c6:da:71:04:98:c2:c1:bb:ac:6e:87:21:6b:e6: 94:f0:80:fa:31:8b:d7:9f:d4:02:04:1b:49:0f:f2:d6:e3:6b: 7e:ea:79:db:24:5e:9a:a3:25:e5:60:6c:a4:4d:bd:eb:c3:5a: 79:22:18:bb:3e:be:48:ed:84:7f:2a:29:18:e1:71:2c:9d:37: d5:43:93:26:fb:44:77:82:c3:13:69:e5:21:df:84:35:ff:c9: b5:8f:27:df:88:ba:36:8f:9f:74:96:3c:c5:b8:28:da:c8:2d: 39:d8:c3:a5:fa:74:26:bc:28:a9:f7:6c:c9:f7:d9:75:a9:07: 94:d1:e9:c8:8c:e7:42:9f:d6:ab:57:e1:29:c6:2a:f1:50:2a: c6:f9:e0:8b:b8:e1:6d:ac:f0:c8:fe:9a:40:02:14:b6:b1:3f: 83:a1:34:6e:f9:d1:20:3d:ce:86:f2:fe:47:ee:18:a1:61:26: 1d:16:74:76:83:91:d2:5a:be:76:14:0d:a2:40:8b:3a:30:c8: 6c:2d:12:9a:b3:3b:7b:f0:35:b0:93:21:9f:60:73:d4:eb:8a: 24:73:10:ff:69:2d:f2:c7:06:2b:d0:62:70:3d:1f:14:84:cd: 7f:18:84:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcwNUUxMTAvBgNVBAUTKDgzQUNCNTBGOTZGNjQ0M0Y0QjgzRDM5MUY4NTdCRTdD QjU3RTM0QzEwHhcNMjUwNDI1MDExNTM4WhcNMjUwNTAyMDExNTM4WjAYMRYwFAYD VQQDEw02ODBhZTIzYS04MTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ag+M5GCDYaChDT+aokcxLf0R+9rb1mWzhiKGf1ED66e4OtQihgar/JJWAwT 0RJFjKCpDa4lyowhlHGZt1pTarVEJ4G5+SBnL1Va5E1/Q1XkLIGGmh7DFDJv4riQ +a+Fjdc15rKWBHJu9d2EjgthZXbFZKufBeHlFr4wOLGrw3oMHQAeWRgNGAwl7JDj uCzIiTn+VQYgLDEtXN/Nz8FEQCsAicOeEVTNLOuqPnoHnrLyAw1vsaCr/TYEbl60 6lBCUHNFEFDWhblf/gppNh3OlImjl1clyAu9N+8cqL94GZUIH4Q06u4duXumsjpT Ysi6Xet+CapsrMXyc12Qh+di+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9PBQZI Rv8KDln6INIw5/zSqsExMB8GA1UdIwQYMBaAFIOstQ+W9kQ/S4PTkfhXvny1fjTB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzA1RS8zNERENEVFNkY2 MjQxMUVDOTcyMzQ4MTRDNEY5QUUwMi9nNnkxRDViMlJEOUxnOU9SLUZlLWZMVi1O TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c2eTFENWIyUkQ5TGc5T1ItRmUtZkxWLU5NRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzA1RS8zNERENEVFNkY2MjQxMUVDOTcyMzQ4MTRDNEY5QUUwMi9nNnkxRDViMlJE OUxnOU9SLUZlLWZMVi1OTUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCayt25QPoVg++WzwnBFAUXmZrIxRblxtpxBJjCwbusbocha+aU8ID6 MYvXn9QCBBtJD/LW42t+6nnbJF6aoyXlYGykTb3rw1p5Ihi7Pr5I7YR/KikY4XEs nTfVQ5Mm+0R3gsMTaeUh34Q1/8m1jyffiLo2j590ljzFuCjayC052MOl+nQmvCip 92zJ99l1qQeU0enIjOdCn9arV+EpxirxUCrG+eCLuOFtrPDI/ppAAhS2sT+DoTRu +dEgPc6G8v5H7hihYSYdFnR2g5HSWr52FA2iQIs6MMhsLRKaszt78DWwkyGfYHPU 64okcxD/aS3yxwYr0GJwPR8UhM1/GIRa -----END CERTIFICATE-----Generated at Sat Apr 26 05:05:22 2025 by rpki-client