$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft File: raez5kKEQOUk2gaDhqHt8yH4gR4.mft (raw, json) Hash identifier: H1hn9zttlON1dXCCYMUfhkb4j3HHyc+xhnwArcmR1yE= Subject key identifier: 9A:30:1C:C6:38:3E:53:5D:1E:7D:92:A1:FB:11:C9:CE:07:84:9E:8E Authority key identifier: AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E Certificate issuer: /CN=A91D7103/serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft Manifest number: 013A Signing time: Fri 25 Apr 2025 03:30:54 +0000 Manifest this update: Fri 25 Apr 2025 03:30:53 +0000 Manifest next update: Fri 02 May 2025 03:30:53 +0000 Files and hashes: 1: raez5kKEQOUk2gaDhqHt8yH4gR4.crl (hash: qzc2qDMGExLSnVvoEUuq5xvNUqfvLQSe+z0/B0HTPks=) 2: EFB54FEC42D211EE9D8A0832C4F9AE02.roa (hash: tNlqnTYXK/FVcXJJVdKao/xTVsvmNPHSSjgb9yu5e3k=) 3: 1E35039C42D511EEAE5F803AC4F9AE02.roa (hash: hdZa/uU6R1KyL95TVJPIwe+LkDp1/9Z9cxgyNi7o3uo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:30:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7103, serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E Validity Not Before: Apr 25 03:30:53 2025 GMT Not After : May 2 03:30:53 2025 GMT Subject: CN=680b01ee-600b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:52:51:29:f6:9e:6e:df:44:60:73:0f:b0:3b: 27:1f:12:64:29:ed:72:e5:e4:f1:e8:70:e2:e5:8d: 2c:97:8d:91:b6:97:7c:7b:af:19:39:aa:63:cc:82: 68:7d:e3:a6:e2:5a:c8:9d:61:42:37:36:45:ee:f0: 3c:c9:95:16:d4:31:c9:99:8e:9b:95:f5:38:d4:d9: 4b:50:14:85:66:98:46:df:ca:2e:ed:32:a1:cf:38: dd:9f:cd:94:5f:af:1d:81:35:97:46:1b:9c:d8:1b: f3:b7:c0:b4:f0:5e:eb:fb:5b:73:1c:27:52:7c:48: 6c:6c:cb:1a:6d:9f:d1:80:05:c3:38:98:4b:f3:de: b3:b8:a0:ee:81:79:00:83:a6:9b:fe:c2:1c:1f:92: 63:4f:25:4d:b5:de:b1:65:1d:34:86:ff:75:b6:1c: 63:13:0e:1d:30:67:96:7d:e5:d0:75:f2:81:af:19: 20:dd:6f:94:26:19:c3:ae:30:3e:e4:c1:fd:ff:b9: ee:82:4c:4f:89:89:46:3f:62:76:cc:0b:5d:62:e7: 4d:cf:39:cf:e5:b6:4a:f7:8d:9d:5b:94:98:da:22: 47:70:4b:f4:38:43:d1:86:6a:b2:e8:d7:92:48:29: e4:af:33:a5:58:7f:a5:57:84:9f:ed:8e:58:d4:09: d5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:30:1C:C6:38:3E:53:5D:1E:7D:92:A1:FB:11:C9:CE:07:84:9E:8E X509v3 Authority Key Identifier: keyid:AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:31:72:f0:b0:49:e3:fd:76:79:f5:8b:9c:f9:9e:de:7e:c7: b3:25:4d:76:7c:32:87:fe:e9:bf:15:29:53:5b:41:56:8c:04: e2:77:25:5b:45:27:d3:8f:56:51:1d:a1:ca:78:e1:a5:71:06: 57:6c:e4:63:b0:94:46:2e:dd:c9:d9:8f:43:fb:64:af:10:99: 0b:f1:7b:04:78:c7:c7:ce:03:14:a0:aa:a3:b6:d7:b6:ac:68: 4d:f1:7c:ad:36:30:47:c8:62:39:5c:66:85:a5:bb:a3:c8:66: dc:a1:70:14:8f:4f:f5:b8:64:0c:af:47:7f:6d:a6:24:7e:fe: ba:d0:db:1e:05:70:15:3d:4e:f0:d0:7a:81:87:9c:93:8b:b2: 0a:8a:8f:18:7b:52:2f:73:9f:ec:67:63:19:6f:79:f2:5e:4a: 06:e4:bb:0a:60:11:5d:9f:53:be:b0:17:7e:e2:ee:37:fc:f2: d4:11:75:a1:18:ff:1f:a1:2d:e6:ea:e3:36:a5:48:3a:bd:cf: c9:d0:d7:ef:7f:13:88:93:d4:52:12:bc:4f:14:f8:03:99:41: 07:4d:29:5a:52:80:0d:a0:97:d3:f8:1e:54:f4:5d:69:ac:2c: 0b:e8:85:30:9e:52:09:1c:03:ec:8f:6b:41:23:1d:d3:27:50: 2f:e1:10:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcxMDMxMTAvBgNVBAUTKEFEQTdCM0U2NDI4NDQwRTUyNERBMDY4Mzg2QTFFREYz MjFGODgxMUUwHhcNMjUwNDI1MDMzMDUzWhcNMjUwNTAyMDMzMDUzWjAYMRYwFAYD VQQDEw02ODBiMDFlZS02MDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVJRKfaebt9EYHMPsDsnHxJkKe1y5eTx6HDi5Y0sl42Rtpd8e68ZOapjzIJo feOm4lrInWFCNzZF7vA8yZUW1DHJmY6blfU41NlLUBSFZphG38ou7TKhzzjdn82U X68dgTWXRhuc2Bvzt8C08F7r+1tzHCdSfEhsbMsabZ/RgAXDOJhL896zuKDugXkA g6ab/sIcH5JjTyVNtd6xZR00hv91thxjEw4dMGeWfeXQdfKBrxkg3W+UJhnDrjA+ 5MH9/7nugkxPiYlGP2J2zAtdYudNzznP5bZK942dW5SY2iJHcEv0OEPRhmqy6NeS SCnkrzOlWH+lV4Sf7Y5Y1AnVPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJowHMY4 PlNdHn2SofsRyc4HhJ6OMB8GA1UdIwQYMBaAFK2ns+ZChEDlJNoGg4ah7fMh+IEe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzEwMy83QUI4MTEyQTQy RDIxMUVFQjdDNEQwMUVDNEY5QUUwMi9yYWV6NWtLRVFPVWsyZ2FEaHFIdDh5SDRn UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JhZXo1a0tFUU9VazJnYURocUh0OHlINGdSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzEwMy83QUI4MTEyQTQyRDIxMUVFQjdDNEQwMUVDNEY5QUUwMi9yYWV6NWtLRVFP VWsyZ2FEaHFIdDh5SDRnUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWMXLwsEnj/XZ59Yuc+Z7efsezJU12fDKH/um/FSlTW0FWjATidyVb RSfTj1ZRHaHKeOGlcQZXbORjsJRGLt3J2Y9D+2SvEJkL8XsEeMfHzgMUoKqjtte2 rGhN8XytNjBHyGI5XGaFpbujyGbcoXAUj0/1uGQMr0d/baYkfv660NseBXAVPU7w 0HqBh5yTi7IKio8Ye1Ivc5/sZ2MZb3nyXkoG5LsKYBFdn1O+sBd+4u43/PLUEXWh GP8foS3m6uM2pUg6vc/J0NfvfxOIk9RSErxPFPgDmUEHTSlaUoANoJfT+B5U9F1p rCwL6IUwnlIJHAPsj2tBIx3TJ1Av4RDG -----END CERTIFICATE-----Generated at Sat Apr 26 03:46:29 2025 by rpki-client