$ rpki-client -vvf rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft File: 0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft (raw, json) Hash identifier: o0qves9y+jAIC0J0D2cb1d3SJaSIJ2c8poRrUp+SXiM= Subject key identifier: BF:2D:23:D9:12:41:AC:61:F3:CD:0E:F9:48:6B:44:19:EF:F4:C7:A4 Authority key identifier: D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7 Certificate issuer: /CN=A91D26C6/serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7 Certificate serial: 06AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft Manifest number: 068D Signing time: Thu 24 Apr 2025 22:04:39 +0000 Manifest this update: Thu 24 Apr 2025 22:04:39 +0000 Manifest next update: Thu 01 May 2025 22:04:39 +0000 Files and hashes: 1: 0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl (hash: XsGe1FAf6vuDp/VUQkTzAE978BRok74QhZedTRT5aPE=) 2: 3B03239684CE11EF9D90A966C4F9AE02.roa (hash: 0+CvQqBA1GWK9uAje6YI9ltQjscAcIJ8/LtX4JAvJgQ=) 3: 6A8A22841DCE11EF85CAC83EC4F9AE02.roa (hash: BifS2RiKJAeyaao2xahiTEJyhWsX4uSdQw3ik4lZCoM=) 4: DD3C61621DCD11EF88E9EE3DC4F9AE02.roa (hash: qv769QTOuxRY2vZMEitP1PhQNGQQJL1+VWV0CsKcicw=) 5: 178E201EA51911EDB711B90AC4F9AE02.roa (hash: Fk3FD4AcHMukexgYcFy6H4xmHyHDGU1VOrgDQ2JaHQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:04:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1706 (0x6aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D26C6, serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7 Validity Not Before: Apr 24 22:04:39 2025 GMT Not After : May 1 22:04:39 2025 GMT Subject: CN=680ab577-34e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4b:9f:23:92:2f:46:61:04:2a:72:bb:f3:ea: 49:cc:d4:37:5f:b3:68:38:3b:54:cd:03:6e:c3:39: 7d:ce:a6:58:ad:fe:12:a2:e5:78:06:ba:42:55:62: c8:6a:f1:73:5d:0c:c8:43:c9:9c:18:38:4c:78:db: 8d:86:09:a6:d4:1e:8a:84:39:85:58:0f:55:c7:3d: fb:3e:cc:8d:48:75:31:c6:b9:8d:a4:7b:92:51:10: 11:78:cb:ba:e2:3a:e3:f8:17:9f:45:55:bb:4b:65: a2:50:7a:37:bb:4e:0f:c5:00:04:fd:ad:20:2f:3c: 7f:63:e3:fe:8e:04:a0:39:92:e2:6e:7f:a8:36:10: f6:a7:23:c1:51:80:8c:56:ea:83:83:20:6e:ee:b6: 19:33:28:43:e4:97:73:8a:b9:4f:49:e1:ce:ba:19: 46:2c:02:85:f9:57:3c:9e:de:11:99:7e:c8:d4:d4: 0f:5a:54:32:99:6e:41:d8:75:3c:3b:14:f2:43:d7: ed:6f:57:b7:7b:35:74:a7:c3:49:8d:71:26:2c:b0: 98:11:45:3c:ba:27:55:a9:66:ec:dd:ed:2e:77:7e: d5:33:3f:85:42:90:6f:2d:8b:1e:25:ac:a0:09:a6: 83:be:71:a5:25:40:e3:7d:0b:fa:cc:a0:d6:0f:82: 9a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:2D:23:D9:12:41:AC:61:F3:CD:0E:F9:48:6B:44:19:EF:F4:C7:A4 X509v3 Authority Key Identifier: keyid:D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:fc:49:d1:11:ad:19:1e:cd:53:1b:88:eb:b2:47:1b:c7:7e: 28:dc:a6:df:56:3c:da:9d:d9:9a:ad:ad:33:c5:3c:00:2a:cd: 9f:40:a7:6e:3d:ae:e0:fb:38:d9:47:05:ac:b8:a3:99:86:c1: 11:23:82:bd:bd:fc:4a:c0:e4:ac:31:7a:25:19:fe:48:a6:35: 30:cc:64:ee:55:25:81:e2:9b:d1:a2:b2:62:b6:b5:e9:25:4d: 6c:37:1e:c1:b5:dc:06:a3:fd:1d:43:10:30:cf:95:27:f4:2a: 3c:81:34:27:e9:d8:60:0f:4a:7f:59:02:71:ef:d0:3c:9b:eb: 8e:38:c3:3b:6d:02:06:30:42:0a:9b:bb:e8:a9:e5:2d:41:40: e0:63:56:d1:5b:7a:7c:08:ed:0d:7f:0e:33:b7:eb:ac:8d:b4: e1:f4:72:54:4a:31:f2:19:7e:35:cc:25:36:4c:91:26:e2:c0: ee:b1:4c:b2:ba:30:9f:c4:d3:ba:48:ad:fa:8a:10:bb:59:d7: 44:a2:d2:4c:96:fc:26:b7:f7:38:84:0c:a8:6f:db:a4:34:96: 53:00:77:f6:75:45:5c:b6:e0:c8:9b:bb:6b:a4:19:cd:91:46: 8a:98:59:f6:5c:95:66:74:ad:df:46:5b:a1:f2:18:2b:03:84: 4c:b2:d7:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2QzYxMTAvBgNVBAUTKEQyOUI2NEU2MzQ0NjVBQjQxMzIwNTRCQjdFODNDOUQ1 RjE4MzQ5RjcwHhcNMjUwNDI0MjIwNDM5WhcNMjUwNTAxMjIwNDM5WjAYMRYwFAYD VQQDEw02ODBhYjU3Ny0zNGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnEufI5IvRmEEKnK78+pJzNQ3X7NoODtUzQNuwzl9zqZYrf4SouV4BrpCVWLI avFzXQzIQ8mcGDhMeNuNhgmm1B6KhDmFWA9Vxz37PsyNSHUxxrmNpHuSURAReMu6 4jrj+BefRVW7S2WiUHo3u04PxQAE/a0gLzx/Y+P+jgSgOZLibn+oNhD2pyPBUYCM VuqDgyBu7rYZMyhD5JdzirlPSeHOuhlGLAKF+Vc8nt4RmX7I1NQPWlQymW5B2HU8 OxTyQ9ftb1e3ezV0p8NJjXEmLLCYEUU8uidVqWbs3e0ud37VMz+FQpBvLYseJayg CaaDvnGlJUDjfQv6zKDWD4KayQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8tI9kS Qaxh880O+UhrRBnv9MekMB8GA1UdIwQYMBaAFNKbZOY0Rlq0EyBUu36DydXxg0n3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjZDNi81OEU5OUU5NDZG NzkxMUVCQTREMjIyODdDNEY5QUUwMi8wcHRrNWpSR1dyUVRJRlM3Zm9QSjFmR0RT ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBwdGs1alJHV3JRVElGUzdmb1BKMWZHRFNmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjZDNi81OEU5OUU5NDZGNzkxMUVCQTREMjIyODdDNEY5QUUwMi8wcHRrNWpSR1dy UVRJRlM3Zm9QSjFmR0RTZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0/EnREa0ZHs1TG4jrskcbx34o3KbfVjzandmara0zxTwAKs2fQKdu Pa7g+zjZRwWsuKOZhsERI4K9vfxKwOSsMXolGf5IpjUwzGTuVSWB4pvRorJitrXp JU1sNx7BtdwGo/0dQxAwz5Un9Co8gTQn6dhgD0p/WQJx79A8m+uOOMM7bQIGMEIK m7voqeUtQUDgY1bRW3p8CO0Nfw4zt+usjbTh9HJUSjHyGX41zCU2TJEm4sDusUyy ujCfxNO6SK36ihC7WddEotJMlvwmt/c4hAyob9ukNJZTAHf2dUVctuDIm7trpBnN kUaKmFn2XJVmdK3fRluh8hgrA4RMste1 -----END CERTIFICATE-----Generated at Sat Apr 26 16:44:15 2025 by rpki-client