$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft File: 97sXL8rsr7-evvJQihVCZDOuyd4.mft (raw, json) Hash identifier: W6dZ9/sZ9rY2EfxdoktkMWSmmYxoQDw9TdSqgHh6lR8= Subject key identifier: 45:1D:14:B2:9B:CF:3F:E7:32:76:0D:15:D7:2F:63:50:55:F8:4B:8D Authority key identifier: F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE Certificate issuer: /CN=A91CEDD3/serialNumber=F7BB172FCAECAFBF9EBEF2508A15426433AEC9DE Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft Manifest number: 01C8 Signing time: Sun 27 Apr 2025 02:01:23 +0000 Manifest this update: Sun 27 Apr 2025 02:01:23 +0000 Manifest next update: Sun 04 May 2025 02:01:23 +0000 Files and hashes: 1: 97sXL8rsr7-evvJQihVCZDOuyd4.crl (hash: ZSEm9cq0fQ7OwqXjkyddchK8TT1RO1GAbO/3TzoI8l0=) 2: C714C5A6706211EDA9CCDB76C4F9AE02.roa (hash: AIFISpe4UUSb102JMnJULUVmkKzdqcMZuRuO6tOo8G0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.crl rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEDD3, serialNumber=F7BB172FCAECAFBF9EBEF2508A15426433AEC9DE Validity Not Before: Apr 27 02:01:23 2025 GMT Not After : May 4 02:01:23 2025 GMT Subject: CN=680d8ff3-8e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:14:18:7e:66:01:b7:c3:ca:0a:63:ac:eb:2c: d5:38:03:5c:d5:fd:ed:42:f3:76:9a:c5:9b:1f:e2: 9b:d4:50:5b:96:c5:81:5a:8a:ae:f4:f3:dd:73:b3: 14:76:e5:0d:c7:14:06:b0:84:88:2d:58:61:a4:df: 15:1f:c2:be:1a:2c:6f:98:76:f1:88:73:63:af:54: f2:0c:8c:04:5d:ae:a5:e6:cf:e3:9d:77:2a:da:6e: 0f:0f:4b:9e:09:53:63:6c:db:3b:8f:0b:60:03:0d: fa:37:1f:aa:5c:bc:58:4c:df:5f:84:db:5e:54:b4: 03:3b:9d:5d:a9:ce:cc:e7:f4:d4:b3:64:17:79:50: 6e:69:2f:b1:66:9b:41:58:1a:1b:1e:22:b2:3a:aa: c7:f8:ed:29:04:a3:84:70:25:d1:b7:6f:f0:fb:03: 48:65:a9:41:44:71:d4:a8:35:83:c6:f3:92:29:31: 8a:1d:11:26:5f:08:29:f6:5a:21:15:7b:b3:18:5f: 87:87:7f:b1:f3:74:cc:2f:2b:5e:93:2c:ff:6b:58: 5b:bb:8a:d5:bd:7d:d0:ba:9f:15:23:bd:fd:50:95: d1:0c:df:3f:89:bc:2c:aa:fd:cb:9c:a9:02:06:fd: 0e:8b:63:6a:dd:8e:b4:05:a0:2b:ab:88:af:51:4d: 48:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:1D:14:B2:9B:CF:3F:E7:32:76:0D:15:D7:2F:63:50:55:F8:4B:8D X509v3 Authority Key Identifier: keyid:F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c1:1d:6e:76:4f:4c:5e:07:6d:6c:43:7b:fc:ea:43:1a:fd: 2d:d8:e3:50:98:37:8a:14:fb:33:65:37:5a:ef:62:51:28:d3: 82:09:1d:65:c6:6b:1e:ec:15:f0:b8:90:98:d6:e8:6c:d1:81: e6:c9:b4:e5:61:4d:b0:ec:c5:78:07:11:b8:45:36:8d:1e:d2: 7e:d2:63:f2:a7:0d:c9:bd:c8:7c:54:19:64:b8:1c:07:4c:86: 31:44:a6:f8:bb:08:82:b9:9b:2a:fa:a2:bb:07:06:27:88:53: d7:0f:d6:1d:d1:fc:03:1a:24:7a:37:b2:36:e3:ad:18:a0:aa: c9:c5:72:6a:c6:c6:43:eb:6c:3a:30:89:4a:f3:14:fa:d1:8a: 5f:1e:47:d0:95:7e:d1:9d:10:65:8e:9e:5e:22:e7:f5:5d:8f: c1:56:af:b5:ad:e1:71:73:96:f9:de:ec:bf:3f:46:28:bc:b0: 3c:90:1d:bc:34:b8:62:26:89:ae:62:51:ca:22:55:49:36:7c: 98:22:ed:f8:7c:db:f7:a1:84:4f:7a:93:00:9f:d4:c8:66:f1: 5a:16:6d:ea:d7:0d:3e:fc:c7:3b:9c:36:4e:bd:36:f9:b5:3b: 6c:2a:42:8b:95:a8:46:b5:4b:22:2c:16:07:e7:40:e4:5f:5a: 43:3c:73:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VERDMxMTAvBgNVBAUTKEY3QkIxNzJGQ0FFQ0FGQkY5RUJFRjI1MDhBMTU0MjY0 MzNBRUM5REUwHhcNMjUwNDI3MDIwMTIzWhcNMjUwNTA0MDIwMTIzWjAYMRYwFAYD VQQDEw02ODBkOGZmMy04ZTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBQYfmYBt8PKCmOs6yzVOANc1f3tQvN2msWbH+Kb1FBblsWBWoqu9PPdc7MU duUNxxQGsISILVhhpN8VH8K+GixvmHbxiHNjr1TyDIwEXa6l5s/jnXcq2m4PD0ue CVNjbNs7jwtgAw36Nx+qXLxYTN9fhNteVLQDO51dqc7M5/TUs2QXeVBuaS+xZptB WBobHiKyOqrH+O0pBKOEcCXRt2/w+wNIZalBRHHUqDWDxvOSKTGKHREmXwgp9loh FXuzGF+Hh3+x83TMLytekyz/a1hbu4rVvX3Qup8VI739UJXRDN8/ibwsqv3LnKkC Bv0Oi2Nq3Y60BaArq4ivUU1IZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEUdFLKb zz/nMnYNFdcvY1BV+EuNMB8GA1UdIwQYMBaAFPe7Fy/K7K+/nr7yUIoVQmQzrsne MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUREMy9EMDY2MzMyODcw NUUxMUVEQUNBRDg4NUJDNEY5QUUwMi85N3NYTDhyc3I3LWV2dkpRaWhWQ1pET3V5 ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk3c1hMOHJzcjctZXZ2SlFpaFZDWkRPdXlkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUREMy9EMDY2MzMyODcwNUUxMUVEQUNBRDg4NUJDNEY5QUUwMi85N3NYTDhyc3I3 LWV2dkpRaWhWQ1pET3V5ZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqwR1udk9MXgdtbEN7/OpDGv0t2ONQmDeKFPszZTda72JRKNOCCR1l xmse7BXwuJCY1uhs0YHmybTlYU2w7MV4BxG4RTaNHtJ+0mPypw3Jvch8VBlkuBwH TIYxRKb4uwiCuZsq+qK7BwYniFPXD9Yd0fwDGiR6N7I2460YoKrJxXJqxsZD62w6 MIlK8xT60YpfHkfQlX7RnRBljp5eIuf1XY/BVq+1reFxc5b53uy/P0YovLA8kB28 NLhiJomuYlHKIlVJNnyYIu34fNv3oYRPepMAn9TIZvFaFm3q1w0+/Mc7nDZOvTb5 tTtsKkKLlahGtUsiLBYH50DkX1pDPHNi -----END CERTIFICATE-----Generated at Mon Apr 28 07:27:09 2025 by rpki-client