$ rpki-client -vvf rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft File: asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft (raw, json) Hash identifier: Mwtqh06l/SfHNWJ/wZmrj8TWL9Rt97a/kJVWigNNvPo= Subject key identifier: 14:8E:20:8F:1C:12:D2:C0:39:94:18:5D:6F:28:C6:C5:7F:CF:E1:41 Authority key identifier: 6A:C4:C1:B4:B6:91:BE:CF:12:DD:F7:26:5F:96:26:D5:9A:C7:66:CC Certificate issuer: /CN=A91D415B/serialNumber=6AC4C1B4B691BECF12DDF7265F9626D59AC766CC Certificate serial: 02B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft Manifest number: 02AE Signing time: Fri 25 Apr 2025 01:14:42 +0000 Manifest this update: Fri 25 Apr 2025 01:14:42 +0000 Manifest next update: Fri 02 May 2025 01:14:42 +0000 Files and hashes: 1: asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl (hash: 3S+M+mlzYSoUl8c4+b/cBkWRXKAKBgblxs+x0aiTfZ8=) 2: A98754E2F1D011ECA4B56760C4F9AE02.roa (hash: dMqJTsYzp1pmPIaM1/eJLOhl+l3EGAIHqHSSCk8rEN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:14:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 690 (0x2b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D415B, serialNumber=6AC4C1B4B691BECF12DDF7265F9626D59AC766CC Validity Not Before: Apr 25 01:14:42 2025 GMT Not After : May 2 01:14:42 2025 GMT Subject: CN=680ae202-70b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:71:18:e0:04:2c:1e:21:e8:21:dc:6c:21:e5: 4c:01:e4:6d:1a:96:ea:e0:b8:0b:23:49:05:4e:0a: 93:2e:72:c7:4b:16:c0:4d:2a:d8:53:0b:9a:c6:14: 99:c8:67:4a:09:3a:08:03:4c:ff:2a:ff:f3:1e:2e: 74:e8:03:2c:de:c7:64:66:79:e9:82:09:50:fb:27: a3:00:e5:0c:51:62:4c:0f:8e:07:59:0b:7c:90:a8: d7:a2:85:e7:ba:fc:17:50:ea:a2:fd:a7:40:01:ab: 6e:da:10:d4:e4:16:47:b7:2a:a3:db:a8:54:fd:bb: aa:b5:f0:9c:fa:ef:08:28:4d:ad:88:b1:dc:d1:d2: 96:4c:0f:f3:10:c5:d4:f2:ca:ea:e5:88:1b:af:32: 01:b4:99:52:35:e2:65:6e:d3:6a:76:72:11:cc:3e: f0:b4:10:19:8d:3f:0f:b4:e8:07:4f:43:c5:96:32: 05:55:d8:11:ad:c8:36:e3:6c:33:e8:4b:d0:2c:f6: c4:fc:83:30:65:8b:a3:97:a7:c1:c7:12:47:91:cf: 7b:25:ac:40:e3:21:9c:d0:a6:5f:35:d2:27:74:46: f5:0a:e4:bf:4c:36:04:50:c6:8f:ce:7c:d4:a3:fd: 21:f0:fc:03:bb:8b:9c:e7:e3:5e:74:1d:59:41:44: 45:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8E:20:8F:1C:12:D2:C0:39:94:18:5D:6F:28:C6:C5:7F:CF:E1:41 X509v3 Authority Key Identifier: keyid:6A:C4:C1:B4:B6:91:BE:CF:12:DD:F7:26:5F:96:26:D5:9A:C7:66:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D415B/5C543684F1CD11EC9339B95FC4F9AE02/asTBtLaRvs8S3fcmX5Ym1ZrHZsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:a1:79:7d:b1:48:ed:b5:c4:76:29:65:39:64:ff:9b:b9:ec: 2b:f7:da:70:2e:04:fa:08:be:ca:c8:0e:d4:46:f2:ed:77:25: 42:fe:c7:a8:ee:90:34:1f:50:75:7e:05:b2:7f:44:8a:1a:c1: 09:72:c1:2e:c5:91:ca:d2:e0:7a:c4:15:54:91:2d:ef:4f:7a: f4:1c:8c:f7:8c:fc:8c:7d:53:ca:05:c3:97:21:b8:4c:3a:8f: 7c:94:de:ca:3e:ad:d1:13:2b:d7:fd:e1:5b:bf:2f:37:cb:25: a2:53:a9:9e:95:14:08:24:d2:1c:c6:70:5d:9b:8c:56:14:40: 1e:10:41:7a:88:77:06:26:f1:4f:39:4b:e5:d0:88:a8:91:d7: 56:2a:a7:cf:ec:c1:0b:70:4f:63:5d:e4:32:10:ca:4f:97:9e: 7a:0e:4d:e4:a0:dc:8f:50:79:1b:0d:7d:63:37:7e:a3:c8:fb: c2:45:fa:18:81:3e:e1:f5:f0:02:17:52:31:6b:a3:4e:cc:80: 2d:23:42:be:91:1b:8b:c2:80:1e:f1:4e:27:e3:99:32:c8:73: 29:b0:00:bc:64:09:f3:aa:be:43:13:12:d2:77:de:0f:12:43: 8b:39:de:15:29:0b:6c:d2:84:8a:3f:78:ea:48:6c:02:9a:1b: 50:7e:ba:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQxNUIxMTAvBgNVBAUTKDZBQzRDMUI0QjY5MUJFQ0YxMkRERjcyNjVGOTYyNkQ1 OUFDNzY2Q0MwHhcNMjUwNDI1MDExNDQyWhcNMjUwNTAyMDExNDQyWjAYMRYwFAYD VQQDEw02ODBhZTIwMi03MGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3EY4AQsHiHoIdxsIeVMAeRtGpbq4LgLI0kFTgqTLnLHSxbATSrYUwuaxhSZ yGdKCToIA0z/Kv/zHi506AMs3sdkZnnpgglQ+yejAOUMUWJMD44HWQt8kKjXooXn uvwXUOqi/adAAatu2hDU5BZHtyqj26hU/buqtfCc+u8IKE2tiLHc0dKWTA/zEMXU 8srq5YgbrzIBtJlSNeJlbtNqdnIRzD7wtBAZjT8PtOgHT0PFljIFVdgRrcg242wz 6EvQLPbE/IMwZYujl6fBxxJHkc97JaxA4yGc0KZfNdIndEb1CuS/TDYEUMaPznzU o/0h8PwDu4uc5+NedB1ZQURFxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSOII8c EtLAOZQYXW8oxsV/z+FBMB8GA1UdIwQYMBaAFGrEwbS2kb7PEt33Jl+WJtWax2bM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDE1Qi81QzU0MzY4NEYx Q0QxMUVDOTMzOUI5NUZDNEY5QUUwMi9hc1RCdExhUnZzOFMzZmNtWDVZbTFackha c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FzVEJ0TGFSdnM4UzNmY21YNVltMVpySFpzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDE1Qi81QzU0MzY4NEYxQ0QxMUVDOTMzOUI5NUZDNEY5QUUwMi9hc1RCdExhUnZz OFMzZmNtWDVZbTFackhac3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAoXl9sUjttcR2KWU5ZP+buewr99pwLgT6CL7KyA7URvLtdyVC/seo 7pA0H1B1fgWyf0SKGsEJcsEuxZHK0uB6xBVUkS3vT3r0HIz3jPyMfVPKBcOXIbhM Oo98lN7KPq3REyvX/eFbvy83yyWiU6melRQIJNIcxnBdm4xWFEAeEEF6iHcGJvFP OUvl0IiokddWKqfP7MELcE9jXeQyEMpPl556Dk3koNyPUHkbDX1jN36jyPvCRfoY gT7h9fACF1Ixa6NOzIAtI0K+kRuLwoAe8U4n45kyyHMpsAC8ZAnzqr5DExLSd94P EkOLOd4VKQts0oSKP3jqSGwCmhtQfrqo -----END CERTIFICATE-----Generated at Sat Apr 26 12:59:41 2025 by rpki-client