$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft File: _oJu6bwS2q07GXRxsEE_HrIIJjU.mft (raw, json) Hash identifier: QKMl9+MAXJ3pdeJjfccOfqv6cH798REoW2nl5kZPtik= Subject key identifier: A0:F1:B5:E4:24:07:38:EC:D4:90:79:BE:56:4B:69:95:80:3D:63:22 Authority key identifier: FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 Certificate issuer: /CN=A91CEBCA/serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Certificate serial: 3499 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft Manifest number: 3489 Signing time: Thu 24 Apr 2025 14:30:09 +0000 Manifest this update: Thu 24 Apr 2025 14:30:08 +0000 Manifest next update: Thu 01 May 2025 14:30:08 +0000 Files and hashes: 1: _oJu6bwS2q07GXRxsEE_HrIIJjU.crl (hash: 1tPR/BH8TegwCv3aB9qFy1fQzRNhvrm5CMiBP2h2ViU=) 2: 9954B962F02D11EFBA26B94FC4F9AE02.roa (hash: RnZPWsP3pFbLAskD17dhi3cAiJf7pCQ+1pJMd+7uFJQ=) 3: 5CB880EA0B9B11F09EBD312DC4F9AE02.roa (hash: Ec2NCnrqSRluhVLEClrhexd6/1RfxYvDUeGABixh+Cc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13465 (0x3499) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBCA, serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Validity Not Before: Apr 24 14:30:08 2025 GMT Not After : May 1 14:30:08 2025 GMT Subject: CN=680a4af0-f27a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:37:86:30:2a:a7:18:02:30:a4:43:50:31:ac: 07:e0:c3:c9:29:d0:8c:80:eb:78:27:70:b0:aa:f1: 2f:06:34:b5:2f:6e:07:11:6d:bb:28:11:19:3c:f9: c4:50:39:c5:34:fe:8d:9e:2b:d0:3c:8e:61:cc:08: 18:ad:57:f1:2d:ef:1c:79:65:30:de:83:28:b2:21: 86:90:a9:f1:af:58:85:1b:17:a7:d7:1e:ff:8e:f4: 44:25:44:91:f2:22:cc:6a:02:cd:20:88:a0:cb:17: 4c:c5:a5:b1:9f:f7:0f:6d:d6:8c:03:fd:38:51:72: 41:1f:39:af:09:5a:e3:23:8f:3d:b3:4b:dd:75:0e: 8b:f7:bd:cc:57:fa:c6:8f:f1:0f:04:cb:9e:9d:9e: ae:51:03:1c:2f:50:d4:6f:b7:67:31:d6:31:bd:c9: b1:1f:af:92:63:9c:ab:48:39:55:58:31:17:4c:8d: 59:59:9f:6a:38:44:e1:73:b1:10:c4:6f:62:47:cb: d6:bd:22:45:7c:1c:97:19:c4:6a:6d:3d:f5:d6:55: 48:e3:7b:74:5b:74:e2:77:09:80:00:b7:13:f0:ce: cd:fa:0b:6a:66:e3:7c:be:9e:0e:b5:94:95:bd:e0: 69:11:dc:ad:09:ea:fe:72:5c:fe:73:c7:46:25:ab: 19:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F1:B5:E4:24:07:38:EC:D4:90:79:BE:56:4B:69:95:80:3D:63:22 X509v3 Authority Key Identifier: keyid:FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:8d:8c:39:bf:5b:fe:27:4f:1d:05:74:fd:f4:1d:2c:4f:9d: 29:71:9b:7e:f1:bf:b3:f2:35:48:3d:c4:75:0a:bd:3f:ca:cf: 0c:a7:1c:a1:49:07:8f:0e:a3:74:0f:d7:a0:29:08:b1:58:1d: 7f:9c:54:6a:44:1d:46:aa:7a:bd:2a:f9:b9:b5:ef:e3:f4:94: 46:fa:92:99:2a:5b:46:be:27:41:de:33:4d:f8:36:2c:59:7a: b4:07:2d:1a:f9:a6:58:64:57:71:5c:f3:5a:78:ce:00:75:84: b1:cc:17:22:e5:e6:16:0e:56:c2:0a:82:ae:9b:da:6e:6d:65: af:9f:7f:db:fe:00:88:8b:4b:15:08:c3:22:f3:d0:5b:bd:db: 49:31:82:25:64:b6:b7:18:a2:42:74:cc:7f:cb:1d:33:99:4e: 08:68:f4:84:30:e7:28:ad:d3:cb:7f:c5:c3:14:4a:b9:96:a3: 1c:b8:7a:74:96:7f:e3:62:2b:2a:d2:9f:48:c7:ca:24:3a:20: 91:c9:c1:d1:31:57:1a:16:88:17:87:0e:13:bc:46:0e:09:74: 7a:be:57:b8:8e:91:30:be:01:80:ee:3a:e4:97:97:15:10:91: bc:f4:c5:63:0f:8f:37:e1:f3:f8:74:15:4b:b0:45:1f:95:2c: 9c:d8:8f:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQ0ExMTAvBgNVBAUTKEZFODI2RUU5QkMxMkRBQUQzQjE5NzQ3MUIwNDEzRjFF QjIwODI2MzUwHhcNMjUwNDI0MTQzMDA4WhcNMjUwNTAxMTQzMDA4WjAYMRYwFAYD VQQDEw02ODBhNGFmMC1mMjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jeGMCqnGAIwpENQMawH4MPJKdCMgOt4J3CwqvEvBjS1L24HEW27KBEZPPnE UDnFNP6NnivQPI5hzAgYrVfxLe8ceWUw3oMosiGGkKnxr1iFGxen1x7/jvREJUSR 8iLMagLNIIigyxdMxaWxn/cPbdaMA/04UXJBHzmvCVrjI489s0vddQ6L973MV/rG j/EPBMuenZ6uUQMcL1DUb7dnMdYxvcmxH6+SY5yrSDlVWDEXTI1ZWZ9qOEThc7EQ xG9iR8vWvSJFfByXGcRqbT311lVI43t0W3TidwmAALcT8M7N+gtqZuN8vp4OtZSV veBpEdytCer+clz+c8dGJasZrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKDxteQk Bzjs1JB5vlZLaZWAPWMiMB8GA1UdIwQYMBaAFP6Cbum8EtqtOxl0cbBBPx6yCCY1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJDQS9CNTg4QjRBNjFE ODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJxMDdHWFJ4c0VFX0hySUlK alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19vSnU2YndTMnEwN0dYUnhzRUVfSHJJSUpqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUJDQS9CNTg4QjRBNjFEODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJx MDdHWFJ4c0VFX0hySUlKalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBojYw5v1v+J08dBXT99B0sT50pcZt+8b+z8jVIPcR1Cr0/ys8Mpxyh SQePDqN0D9egKQixWB1/nFRqRB1Gqnq9Kvm5te/j9JRG+pKZKltGvidB3jNN+DYs WXq0By0a+aZYZFdxXPNaeM4AdYSxzBci5eYWDlbCCoKum9pubWWvn3/b/gCIi0sV CMMi89BbvdtJMYIlZLa3GKJCdMx/yx0zmU4IaPSEMOcordPLf8XDFEq5lqMcuHp0 ln/jYisq0p9Ix8okOiCRycHRMVcaFogXhw4TvEYOCXR6vle4jpEwvgGA7jrkl5cV EJG89MVjD4834fP4dBVLsEUflSyc2I+A -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:53 2025 by rpki-client