$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft File: 1xRtqd4o9btePeL_AMWfyFyZONo.mft (raw, json) Hash identifier: lbA/lT48m1Xf9V6D1EDSK+rRoNLHHt/JNd/7gzA8+Sk= Subject key identifier: 6D:E8:48:01:C8:6D:F0:B5:ED:7D:35:88:3B:6E:60:AC:CB:47:7B:79 Authority key identifier: D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA Certificate issuer: /CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Certificate serial: 087E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft Manifest number: 1364 Signing time: Thu 24 Apr 2025 19:13:14 +0000 Manifest this update: Thu 24 Apr 2025 19:13:13 +0000 Manifest next update: Thu 01 May 2025 19:13:13 +0000 Files and hashes: 1: 1xRtqd4o9btePeL_AMWfyFyZONo.crl (hash: KtOsq8KEIgQNdXajonjUrAEu4LqUJC2wnx9jgLLml+E=) 2: 4445E492F38311EFB9CFE778C4F9AE02.roa (hash: uvPQ2fp4ZTxv3siwTUo6cZQdguj/a94WO/NhdFvFn6M=) 3: 98DE3894CCE411EFA6203F26C4F9AE02.roa (hash: opp1b6SM1IxplVnDxWHP5Nnt6hlioVS0Y++1Phnrf9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2174 (0x87e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D560D, serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Validity Not Before: Apr 24 19:13:13 2025 GMT Not After : May 1 19:13:13 2025 GMT Subject: CN=680a8d4a-f377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:18:11:2a:77:e5:7b:ba:52:ba:00:37:48:08: 1f:74:eb:6b:16:9d:c0:5b:16:34:db:a8:cd:aa:2c: 12:7c:49:9c:0e:8b:a8:de:f5:ce:95:90:f2:26:87: b4:50:4f:26:4d:aa:28:e6:da:2f:24:2e:4a:b0:fd: d8:82:e2:3f:25:45:e7:98:7d:97:92:39:db:0f:03: be:a4:7a:ba:22:2a:33:e0:09:91:9b:f9:bc:83:8b: a2:3a:fa:bb:4d:82:dc:42:0c:8b:ae:14:e1:cb:53: 3a:85:db:06:49:5f:1e:11:aa:8a:16:52:dc:07:4b: a9:03:19:8e:22:14:b2:92:2e:07:ce:2e:3b:95:9e: eb:83:19:1b:d3:ee:f5:93:be:e1:3d:59:06:87:06: 9e:e3:28:5c:fa:73:39:39:4f:55:13:5f:c7:8d:26: 9e:db:1f:d6:bd:0d:a2:7c:5a:4c:ad:bf:3a:cf:80: 0f:29:fd:51:09:63:58:b7:dd:7b:7e:c2:78:60:fc: 2b:ca:8f:61:3e:d5:bb:87:d4:f5:0c:62:33:a7:63: 56:25:3b:5c:ec:d6:91:e8:ac:4b:f3:4c:00:8b:58: 40:f6:0a:ec:c2:a8:c7:04:45:d4:0b:8b:3f:77:3c: eb:f5:12:7c:3f:d8:ab:62:1a:d0:82:57:69:af:e0: 78:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E8:48:01:C8:6D:F0:B5:ED:7D:35:88:3B:6E:60:AC:CB:47:7B:79 X509v3 Authority Key Identifier: keyid:D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:ac:81:b9:c7:7a:8d:ad:ce:e1:93:95:b6:12:2c:6a:f8:12: 8e:33:e2:19:76:20:15:54:ea:23:a0:4e:d1:12:2a:59:a3:79: c7:06:c5:66:3f:9e:8f:39:7d:0b:dd:0a:cb:41:8c:bd:f3:49: 95:bf:0c:49:11:0a:86:f0:f2:ab:53:d9:21:ce:ee:7d:b8:ff: eb:bc:fb:94:12:86:11:52:5b:29:8e:c3:20:8c:d0:1a:42:06: 7c:30:c6:05:1d:e0:f3:81:47:da:d7:8a:15:40:07:82:f5:f9: a8:61:b2:dd:6e:e8:b9:45:b9:97:9a:eb:6b:76:bf:5e:e0:83: bc:ac:74:cc:45:a9:b0:08:23:b8:f3:73:43:96:de:f8:4e:71: 20:60:00:12:f1:82:05:e0:e7:1f:db:cc:90:91:fe:93:9e:05: 40:35:1a:20:f2:78:43:7b:ec:ef:d2:16:82:49:06:01:79:4a: 1b:d1:66:b3:55:a5:bd:17:0d:ca:3f:30:15:1c:e0:40:dd:c8: 82:44:78:6b:6c:f7:ba:9d:82:d4:72:45:b3:2d:38:30:fc:3a: 8d:7c:4b:b3:46:62:fd:79:6e:08:a4:91:a9:e6:f4:95:8e:9f: 7e:a7:c1:e6:ec:5c:26:8e:87:1d:b8:31:03:de:6b:b8:01:a6: fb:4e:d0:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2MEQxMTAvBgNVBAUTKEQ3MTQ2REE5REUyOEY1QkI1RTNERTJGRjAwQzU5RkM4 NUM5OTM4REEwHhcNMjUwNDI0MTkxMzEzWhcNMjUwNTAxMTkxMzEzWjAYMRYwFAYD VQQDEw02ODBhOGQ0YS1mMzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRgRKnfle7pSugA3SAgfdOtrFp3AWxY026jNqiwSfEmcDouo3vXOlZDyJoe0 UE8mTaoo5tovJC5KsP3YguI/JUXnmH2XkjnbDwO+pHq6Iioz4AmRm/m8g4uiOvq7 TYLcQgyLrhThy1M6hdsGSV8eEaqKFlLcB0upAxmOIhSyki4Hzi47lZ7rgxkb0+71 k77hPVkGhwae4yhc+nM5OU9VE1/HjSae2x/WvQ2ifFpMrb86z4APKf1RCWNYt917 fsJ4YPwryo9hPtW7h9T1DGIzp2NWJTtc7NaR6KxL80wAi1hA9grswqjHBEXUC4s/ dzzr9RJ8P9irYhrQgldpr+B4oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG3oSAHI bfC17X01iDtuYKzLR3t5MB8GA1UdIwQYMBaAFNcUbaneKPW7Xj3i/wDFn8hcmTja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwRC82OEMzRjQ5QTQx RUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzlidGVQZUxfQU1XZnlGeVpP Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4UnRxZDRvOWJ0ZVBlTF9BTVdmeUZ5Wk9Oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTYwRC82OEMzRjQ5QTQxRUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzli dGVQZUxfQU1XZnlGeVpPTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxrIG5x3qNrc7hk5W2Eixq+BKOM+IZdiAVVOojoE7REipZo3nHBsVm P56POX0L3QrLQYy980mVvwxJEQqG8PKrU9khzu59uP/rvPuUEoYRUlspjsMgjNAa QgZ8MMYFHeDzgUfa14oVQAeC9fmoYbLdbui5RbmXmutrdr9e4IO8rHTMRamwCCO4 83NDlt74TnEgYAAS8YIF4Ocf28yQkf6TngVANRog8nhDe+zv0haCSQYBeUob0Waz VaW9Fw3KPzAVHOBA3ciCRHhrbPe6nYLUckWzLTgw/DqNfEuzRmL9eW4IpJGp5vSV jp9+p8Hm7FwmjocduDED3mu4Aab7TtBi -----END CERTIFICATE-----Generated at Sat Apr 26 08:04:04 2025 by rpki-client