$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft File: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft (raw, json) Hash identifier: p0Q89hIDgsXJTAgicxPkRJMJVqaTZUyf0EjYgjcpl54= Subject key identifier: 84:7A:49:53:23:E4:78:2B:40:C8:DC:CD:52:12:52:17:7C:53:AD:DD Authority key identifier: B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 Certificate issuer: /CN=A91CAE04/serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft Manifest number: 0130 Signing time: Fri 25 Apr 2025 03:44:01 +0000 Manifest this update: Fri 25 Apr 2025 03:44:01 +0000 Manifest next update: Fri 02 May 2025 03:44:01 +0000 Files and hashes: 1: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl (hash: R+Lb8ljdYinofKOp/BP/YCes5JV6R/d2Ku9Ub/S4VdI=) 2: ABA6DCF0030F11EFB12D8A18C4F9AE02.roa (hash: HE0CwiBUoR42Ac8HkzfJLJ/ETIx9kfwRBCLdGKiPhXc=) 3: 7E40FBBA09EF11EFAA24237EC4F9AE02.roa (hash: OKWZlml7xUzPeJ1MZszk7oG4XbhbR85w9J1Q8mg/N3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAE04, serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Validity Not Before: Apr 25 03:44:01 2025 GMT Not After : May 2 03:44:01 2025 GMT Subject: CN=680b0501-fe20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:18:9b:28:98:50:51:25:7d:56:9a:7b:bd:59: 0b:3d:51:87:ad:7a:7b:ba:d4:12:df:d0:ed:b3:fa: 2f:c8:43:76:f0:cd:f3:26:77:ca:09:5e:ae:c1:1e: 3a:6e:df:73:33:b5:25:cf:6d:b3:d6:84:a5:27:f7: 68:37:01:82:b9:cd:2c:de:99:4b:d4:b2:10:f2:bd: c8:4d:dd:71:cf:42:a1:fd:68:69:0b:71:04:bd:aa: 4a:65:62:db:93:00:3d:ec:5d:5e:14:95:b9:b7:ab: 85:aa:48:01:23:49:49:4e:b2:23:96:f6:d7:3c:2e: 0c:fe:71:b2:42:18:e6:27:15:cd:b2:36:71:0a:7a: 45:17:e6:46:f3:f9:f4:41:a3:e0:fe:e8:dd:c1:f0: 3f:19:8c:00:b0:68:0c:08:43:de:47:3a:12:d4:eb: d8:cd:48:07:73:4b:71:7a:78:d3:17:54:fc:ce:0f: 4b:c5:e9:7f:9a:fc:44:90:e8:39:08:0b:07:8a:6d: 95:35:e3:6a:76:80:63:d2:87:34:5b:4a:48:02:d2: c7:ad:f7:10:7c:06:2e:97:df:53:f0:d2:66:3a:7c: 41:8c:3e:d3:05:39:3b:34:bf:5d:fd:75:f8:87:7b: a7:91:33:b8:01:c1:95:02:f4:a9:8c:49:0b:94:1e: ce:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7A:49:53:23:E4:78:2B:40:C8:DC:CD:52:12:52:17:7C:53:AD:DD X509v3 Authority Key Identifier: keyid:B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:cf:9f:38:57:cb:46:67:91:bf:56:c9:f6:22:07:1c:16:b6: b4:6f:f3:e9:44:f5:f7:11:8c:f4:c1:64:57:c7:a7:dd:ce:1b: db:85:d4:0c:9b:7d:09:d8:a0:c1:2e:9b:5f:55:13:6b:12:58: 36:96:58:96:83:fb:89:96:c9:c8:eb:b5:6a:80:fb:cf:4e:61: a6:38:80:45:c6:dc:e8:4f:56:27:51:ab:40:dc:fa:08:f5:9a: 80:d6:d8:5a:3d:d4:03:c7:e3:50:68:05:0f:59:fa:ad:cf:6f: 7b:2c:13:f5:3a:ab:29:31:10:c9:ac:7c:b8:f5:9a:31:0e:cb: 20:ee:f9:da:0f:99:e3:ba:51:46:e6:98:d2:34:e5:54:c2:83: af:0b:77:e0:5a:2a:46:8a:8b:f3:75:53:af:6a:d2:2c:ee:fa: f8:9c:d2:7b:7c:b5:ab:61:52:f5:dd:24:28:35:e0:2a:d6:c6: 41:c2:b2:5d:51:cc:61:cc:ab:0e:48:72:32:d3:b4:93:5a:ca: 78:38:0d:15:84:b2:82:88:f0:bc:97:88:c5:3f:e9:67:1b:27: 2f:40:59:49:f5:b5:94:11:21:35:8f:29:3a:e3:a6:5a:6f:a7: cf:a2:b3:cc:c5:be:b0:48:1c:d0:0f:6a:6d:34:40:cc:15:7b: 40:e4:79:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FFMDQxMTAvBgNVBAUTKEIzNjI0MzdBQjY3RDI5MEM1Q0RGRUYyRjYyQjc3RURE OEE5RkZBNDQwHhcNMjUwNDI1MDM0NDAxWhcNMjUwNTAyMDM0NDAxWjAYMRYwFAYD VQQDEw02ODBiMDUwMS1mZTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshibKJhQUSV9Vpp7vVkLPVGHrXp7utQS39Dts/ovyEN28M3zJnfKCV6uwR46 bt9zM7Ulz22z1oSlJ/doNwGCuc0s3plL1LIQ8r3ITd1xz0Kh/WhpC3EEvapKZWLb kwA97F1eFJW5t6uFqkgBI0lJTrIjlvbXPC4M/nGyQhjmJxXNsjZxCnpFF+ZG8/n0 QaPg/ujdwfA/GYwAsGgMCEPeRzoS1OvYzUgHc0txenjTF1T8zg9Lxel/mvxEkOg5 CAsHim2VNeNqdoBj0oc0W0pIAtLHrfcQfAYul99T8NJmOnxBjD7TBTk7NL9d/XX4 h3unkTO4AcGVAvSpjEkLlB7OdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIR6SVMj 5HgrQMjczVISUhd8U63dMB8GA1UdIwQYMBaAFLNiQ3q2fSkMXN/vL2K3ft2Kn/pE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUUwNC85RDhGNzcyQTVG OTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtReGMzLTh2WXJkLTNZcWYt a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MySkRlclo5S1F4YzMtOHZZcmQtM1lxZi1rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUUwNC85RDhGNzcyQTVGOTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtR eGMzLTh2WXJkLTNZcWYta1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqz584V8tGZ5G/Vsn2IgccFra0b/PpRPX3EYz0wWRXx6fdzhvbhdQM m30J2KDBLptfVRNrElg2lliWg/uJlsnI67VqgPvPTmGmOIBFxtzoT1YnUatA3PoI 9ZqA1thaPdQDx+NQaAUPWfqtz297LBP1OqspMRDJrHy49ZoxDssg7vnaD5njulFG 5pjSNOVUwoOvC3fgWipGiovzdVOvatIs7vr4nNJ7fLWrYVL13SQoNeAq1sZBwrJd UcxhzKsOSHIy07STWsp4OA0VhLKCiPC8l4jFP+lnGycvQFlJ9bWUESE1jyk646Za b6fPorPMxb6wSBzQD2ptNEDMFXtA5HnP -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:54 2025 by rpki-client