$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft File: _K1GEVffaBwFC9O-7qLqzfttUks.mft (raw, json) Hash identifier: G6AG+vqQp8WPSblDeVcyewStbJ0Qy1LCgljaUry3aro= Subject key identifier: 4F:2A:6D:B2:28:CD:D7:7D:BF:D7:8F:51:49:2B:26:68:F2:41:3F:7D Authority key identifier: FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B Certificate issuer: /CN=A91CE3C4/serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B Certificate serial: 068B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft Manifest number: 066E Signing time: Thu 24 Apr 2025 22:14:28 +0000 Manifest this update: Thu 24 Apr 2025 22:14:28 +0000 Manifest next update: Thu 01 May 2025 22:14:28 +0000 Files and hashes: 1: _K1GEVffaBwFC9O-7qLqzfttUks.crl (hash: OeMRjsYEuRFdg/1Se+TvVayS0nEtTjyKQH6SoDPQ+4g=) 2: D55D5DE2F07011EDAD0F5D62C4F9AE02.roa (hash: RSMVC0D0tBk2Fp59m5jA59HhRZpxrqk4YRYpw+Pzr0g=) 3: BC582AA44FEA11EFBFC72970C4F9AE02.roa (hash: aE8ILqsqa75udSkv7yAA18S8PO5yG42/7QwpuX3oUy8=) 4: 26F87D4A272711EC88E40644C4F9AE02.roa (hash: /9xJi3PLMQkKlzkomr7AvtnsuMXJh+Vt8LpT6XO4pUs=) 5: 50D705A87FA911EBA8C11D63C4F9AE02.roa (hash: ooqccoiogCkkJFxNvgTBDRvRTl072blE1cY1UXNoB0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:14:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1675 (0x68b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3C4, serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B Validity Not Before: Apr 24 22:14:28 2025 GMT Not After : May 1 22:14:28 2025 GMT Subject: CN=680ab7c4-56a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6d:75:6d:70:b1:02:e2:5f:42:1b:27:e7:43: 75:2e:28:91:7f:51:36:47:00:4f:88:9d:f1:b2:6b: c5:66:0f:f4:c3:90:7c:3a:c0:d9:df:5e:6d:0f:87: 7e:8e:be:e3:6a:40:fe:cd:29:be:bc:c6:40:55:9d: 24:d0:62:e9:15:19:98:1a:e7:44:80:9e:ff:36:75: fe:16:14:60:c9:2d:75:f1:4d:d4:f9:a4:8c:40:0a: 7c:b4:0a:96:55:69:b5:ce:de:1f:0b:2b:90:e3:0b: 8a:f5:30:88:0f:5c:cf:a4:e1:f3:33:4a:32:39:53: 11:cb:ac:fa:2f:3c:e2:8c:c9:61:cc:2a:fb:02:f5: 9f:43:8b:1a:be:c1:69:17:c5:3b:b6:06:3c:85:6a: 99:8d:77:6a:2a:a5:46:de:94:e9:ef:1f:52:00:43: d6:96:ff:3e:6e:d8:0b:96:0c:55:5a:40:14:22:c2: a6:73:ca:9b:e1:49:1f:99:16:44:f0:d2:31:f8:ca: 38:6c:d4:e3:8c:30:e8:29:2b:6a:e9:93:fa:7b:71: 3d:0d:a2:90:4d:28:ef:5f:64:9a:67:d1:5a:dc:69: 6a:fc:25:c3:01:52:b5:e5:3b:af:3c:82:cc:2e:5d: 99:1f:5d:df:71:56:ae:84:b7:0f:e7:72:ce:6f:a4: 87:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2A:6D:B2:28:CD:D7:7D:BF:D7:8F:51:49:2B:26:68:F2:41:3F:7D X509v3 Authority Key Identifier: keyid:FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:f1:e6:a1:f1:85:b8:73:de:b0:73:93:5f:0f:7b:10:2c:f3: db:0a:32:16:f3:dc:ed:0f:0e:57:96:fa:a1:9c:54:63:24:56: 12:ed:9f:50:03:68:63:e5:fe:c7:d7:d5:4c:01:fe:84:f9:f2: 92:10:cf:98:a5:12:57:be:64:3b:a6:13:8b:f1:ee:b0:c4:6d: ee:f9:dd:55:a1:41:7b:2d:ba:59:79:8b:14:7e:f8:0d:9c:e5: e1:af:51:76:18:87:11:30:77:b8:f5:70:ab:03:9d:08:00:a9: 81:71:0f:1a:86:51:12:ff:93:d4:be:c3:22:d0:b6:23:5c:29: e0:e7:3d:b0:bb:59:5f:86:42:47:aa:2b:90:75:48:5c:0d:7f: 47:db:94:f6:1d:75:1e:08:05:d4:7c:2b:fe:5d:97:33:06:f6: af:29:07:c2:df:cf:36:7c:de:cc:e6:35:2e:7c:2b:46:65:a7: f1:2f:aa:74:c9:35:ca:c4:77:6c:05:35:9f:d6:c3:a3:60:bd: 23:84:38:b5:ab:19:70:66:b4:06:6e:4c:da:0f:b5:1b:96:0b: 6a:db:9c:9a:2b:33:b7:d0:86:f9:47:0d:7c:af:05:ed:14:70: 3c:fa:38:93:5e:27:e0:60:06:b8:3f:07:3a:ac:b8:6d:40:a7: e7:2a:69:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQzQxMTAvBgNVBAUTKEZDQUQ0NjExNTdERjY4MUMwNTBCRDNCRUVFQTJFQUNE RkI2RDUyNEIwHhcNMjUwNDI0MjIxNDI4WhcNMjUwNTAxMjIxNDI4WjAYMRYwFAYD VQQDEw02ODBhYjdjNC01NmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtW11bXCxAuJfQhsn50N1LiiRf1E2RwBPiJ3xsmvFZg/0w5B8OsDZ315tD4d+ jr7jakD+zSm+vMZAVZ0k0GLpFRmYGudEgJ7/NnX+FhRgyS118U3U+aSMQAp8tAqW VWm1zt4fCyuQ4wuK9TCID1zPpOHzM0oyOVMRy6z6LzzijMlhzCr7AvWfQ4savsFp F8U7tgY8hWqZjXdqKqVG3pTp7x9SAEPWlv8+btgLlgxVWkAUIsKmc8qb4UkfmRZE 8NIx+Mo4bNTjjDDoKStq6ZP6e3E9DaKQTSjvX2SaZ9Fa3Glq/CXDAVK15TuvPILM Ll2ZH13fcVauhLcP53LOb6SHrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8qbbIo zdd9v9ePUUkrJmjyQT99MB8GA1UdIwQYMBaAFPytRhFX32gcBQvTvu6i6s37bVJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNDNC83NjkyMjc4QTdG OTcxMUVCQUREQzVGMTVDNEY5QUUwMi9fSzFHRVZmZmFCd0ZDOU8tN3FMcXpmdHRV a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19LMUdFVmZmYUJ3RkM5Ty03cUxxemZ0dFVrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTNDNC83NjkyMjc4QTdGOTcxMUVCQUREQzVGMTVDNEY5QUUwMi9fSzFHRVZmZmFC d0ZDOU8tN3FMcXpmdHRVa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb8eah8YW4c96wc5NfD3sQLPPbCjIW89ztDw5XlvqhnFRjJFYS7Z9Q A2hj5f7H19VMAf6E+fKSEM+YpRJXvmQ7phOL8e6wxG3u+d1VoUF7LbpZeYsUfvgN nOXhr1F2GIcRMHe49XCrA50IAKmBcQ8ahlES/5PUvsMi0LYjXCng5z2wu1lfhkJH qiuQdUhcDX9H25T2HXUeCAXUfCv+XZczBvavKQfC3882fN7M5jUufCtGZafxL6p0 yTXKxHdsBTWf1sOjYL0jhDi1qxlwZrQGbkzaD7Ublgtq25yaKzO30Ib5Rw18rwXt FHA8+jiTXifgYAa4Pwc6rLhtQKfnKmki -----END CERTIFICATE-----Generated at Sat Apr 26 16:39:55 2025 by rpki-client