$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft File: A1Tb4e09meGUXicnS6L2A-tqF4E.mft (raw, json) Hash identifier: AL7sNiFgwlyuHJDXTnt8DovsOnjA8gMHep+oavHf79o= Subject key identifier: 21:13:00:B8:DE:86:5B:94:E4:81:33:47:DB:04:2F:3A:F6:70:FA:A7 Authority key identifier: 03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81 Certificate issuer: /CN=A91D8A67/serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781 Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft Manifest number: F3 Signing time: Fri 25 Apr 2025 04:20:20 +0000 Manifest this update: Fri 25 Apr 2025 04:20:19 +0000 Manifest next update: Fri 02 May 2025 04:20:19 +0000 Files and hashes: 1: A1Tb4e09meGUXicnS6L2A-tqF4E.crl (hash: UNsH3ASllevGQj6TAilV+bQR0pExselzckZnNWTQvFo=) 2: DDCCD058B35111EE96186E1EC4F9AE02.roa (hash: uxPFrv/qJkuVD9/YdePXL9+7rk2TcQQl1VlKRTfOD/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:20:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8A67, serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781 Validity Not Before: Apr 25 04:20:19 2025 GMT Not After : May 2 04:20:19 2025 GMT Subject: CN=680b0d84-6614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c7:03:a3:70:be:2b:c9:15:60:a1:77:c2:8e: dd:a0:b8:40:6a:a6:01:13:9a:b8:e5:1d:e5:7e:2b: 49:e4:88:78:ea:c2:c2:9f:76:08:eb:eb:23:15:01: 9a:5f:10:5f:c4:1b:7f:4c:c2:fa:ba:ac:8f:59:11: 17:fe:71:0e:be:73:a2:fe:ae:ab:01:97:24:a6:cb: d3:db:dc:a5:54:08:6b:6c:a2:cc:3d:38:8f:1c:3e: f9:04:f2:5e:b7:95:00:13:0c:84:e3:17:51:d7:ae: 1f:12:4d:a4:44:b6:72:8e:73:65:23:64:81:30:e9: ae:00:ef:75:58:cb:12:82:07:a1:2f:26:30:be:3b: fd:28:30:0e:0e:c2:06:6e:ac:00:e4:86:76:1c:c1: de:2f:43:e9:8c:e1:3c:72:2c:ae:bd:49:08:9f:fb: 09:3f:f5:55:05:50:65:2b:6d:56:b5:c2:4b:ce:f9: 55:6f:36:d7:98:90:95:39:86:79:ba:73:0e:b5:2d: b5:4e:b5:bb:3e:89:21:e5:ad:78:bc:d8:83:20:91: f9:cc:3a:e7:0c:86:f6:66:56:b0:94:d1:9b:65:58: 2d:f0:c4:bc:dc:0c:fd:f9:73:6e:b8:d8:8c:f8:f1: 07:92:11:e1:1f:40:17:e3:c3:93:fd:a1:30:9d:6a: 99:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:13:00:B8:DE:86:5B:94:E4:81:33:47:DB:04:2F:3A:F6:70:FA:A7 X509v3 Authority Key Identifier: keyid:03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:90:a5:4d:3d:c6:b0:9d:db:e4:ad:18:ab:d3:96:fb:e8:a3: 5c:60:d3:59:38:6c:2e:5c:f5:ea:51:f5:03:8d:68:7a:1a:73: e5:02:70:3f:2d:e3:17:c6:e7:d3:b2:9e:19:46:ae:08:9a:ef: 15:f4:c0:0a:d9:08:c7:1a:b4:30:af:9f:c9:13:09:e2:a7:a1: 96:03:dc:37:13:99:db:b2:30:d4:48:0c:71:e7:71:3c:7a:73: cc:31:f5:f6:82:bb:b5:a8:44:59:a5:f9:67:c0:c4:4d:69:06: b6:9d:27:8d:c2:98:1f:db:62:15:b2:b1:5e:af:95:b0:79:b8: fc:f1:04:ef:7f:92:d9:ac:96:54:a6:d8:75:25:32:c6:62:e9: 4b:18:7d:6a:2a:ae:3d:da:63:e2:75:f2:6b:0b:1d:d8:62:45: d2:ff:c7:13:74:89:95:a1:63:7a:fc:72:14:aa:94:61:af:67: 32:2f:f5:cd:93:fc:d3:1f:0f:00:59:61:76:4b:53:55:14:e4: 82:8d:8d:4b:ed:3d:1d:e4:c0:2c:2f:b4:91:1b:d0:7e:46:87: 51:6a:72:bf:a4:09:f9:5f:e6:06:9c:69:25:83:06:b0:6d:96: d0:a8:05:4e:d7:a6:e5:80:96:ad:36:72:75:71:28:1c:55:00: 09:e6:44:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhBNjcxMTAvBgNVBAUTKDAzNTREQkUxRUQzRDk5RTE5NDVFMjcyNzRCQTJGNjAz RUI2QTE3ODEwHhcNMjUwNDI1MDQyMDE5WhcNMjUwNTAyMDQyMDE5WjAYMRYwFAYD VQQDEw02ODBiMGQ4NC02NjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8cDo3C+K8kVYKF3wo7doLhAaqYBE5q45R3lfitJ5Ih46sLCn3YI6+sjFQGa XxBfxBt/TML6uqyPWREX/nEOvnOi/q6rAZckpsvT29ylVAhrbKLMPTiPHD75BPJe t5UAEwyE4xdR164fEk2kRLZyjnNlI2SBMOmuAO91WMsSggehLyYwvjv9KDAODsIG bqwA5IZ2HMHeL0PpjOE8ciyuvUkIn/sJP/VVBVBlK21WtcJLzvlVbzbXmJCVOYZ5 unMOtS21TrW7Pokh5a14vNiDIJH5zDrnDIb2ZlawlNGbZVgt8MS83Az9+XNuuNiM +PEHkhHhH0AX48OT/aEwnWqZMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCETALje hluU5IEzR9sELzr2cPqnMB8GA1UdIwQYMBaAFANU2+HtPZnhlF4nJ0ui9gPraheB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEE2Ny81NTExQUY2OEIz NTExMUVFOThCQTAyMURDNEY5QUUwMi9BMVRiNGUwOW1lR1VYaWNuUzZMMkEtdHFG NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ExVGI0ZTA5bWVHVVhpY25TNkwyQS10cUY0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEE2Ny81NTExQUY2OEIzNTExMUVFOThCQTAyMURDNEY5QUUwMi9BMVRiNGUwOW1l R1VYaWNuUzZMMkEtdHFGNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRkKVNPcawndvkrRir05b76KNcYNNZOGwuXPXqUfUDjWh6GnPlAnA/ LeMXxufTsp4ZRq4Imu8V9MAK2QjHGrQwr5/JEwnip6GWA9w3E5nbsjDUSAxx53E8 enPMMfX2gru1qERZpflnwMRNaQa2nSeNwpgf22IVsrFer5Wwebj88QTvf5LZrJZU pth1JTLGYulLGH1qKq492mPidfJrCx3YYkXS/8cTdImVoWN6/HIUqpRhr2cyL/XN k/zTHw8AWWF2S1NVFOSCjY1L7T0d5MAsL7SRG9B+RodRanK/pAn5X+YGnGklgwaw bZbQqAVO16blgJatNnJ1cSgcVQAJ5kTO -----END CERTIFICATE-----Generated at Sat Apr 26 13:57:49 2025 by rpki-client