$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft File: 1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft (raw, json) Hash identifier: sJ8PRvV40WNYn/ai/nazbGmZ1P6EuxBu91a8cGx0fQc= Subject key identifier: CF:00:7C:30:12:FC:0C:EF:1D:DD:D3:CB:8A:CD:8D:CA:F6:17:37:67 Authority key identifier: D5:0D:11:83:73:08:AB:1F:15:A7:5F:35:16:43:FB:7F:C0:14:85:4C Certificate issuer: /CN=A91DB916/serialNumber=D50D11837308AB1F15A75F351643FB7FC014854C Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft Manifest number: 0117 Signing time: Fri 25 Apr 2025 03:57:04 +0000 Manifest this update: Fri 25 Apr 2025 03:57:04 +0000 Manifest next update: Fri 02 May 2025 03:57:04 +0000 Files and hashes: 1: 1Q0Rg3MIqx8Vp181FkP7f8AUhUw.crl (hash: AYgTa7irSoYZ+i0PFrMPNocCzRtO9Ls3tz0KwWVLY0o=) 2: 18066BD682CD11EE82EA6452C4F9AE02.roa (hash: Qq2SAGpjgK4uluR309YS8e5suVCymWeDT3qQa1R/qak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.crl rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:57:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB916, serialNumber=D50D11837308AB1F15A75F351643FB7FC014854C Validity Not Before: Apr 25 03:57:04 2025 GMT Not After : May 2 03:57:04 2025 GMT Subject: CN=680b0810-1d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f1:e6:51:7d:3e:d2:16:21:30:ca:c8:8e:3b: 86:e7:f8:56:d4:cb:2f:86:03:83:13:78:bd:f1:bf: f8:ca:04:ad:a8:1d:a4:d9:0e:7a:04:11:b1:47:bb: ec:95:2b:6b:25:52:e5:ec:10:55:76:ff:48:9a:de: 12:8e:ab:f1:45:7b:0b:07:42:9a:ff:d1:3b:38:6c: a9:0a:d6:50:a3:e0:0e:16:1c:1b:78:3d:00:39:f9: 38:17:48:b9:79:59:a2:f8:02:68:5a:6c:d0:3e:fe: c3:d7:0f:0d:85:04:1d:bb:5c:3e:d2:10:a8:3e:dd: 9a:7d:ac:41:dc:18:f1:df:95:d0:4c:4b:f6:5f:04: 31:5d:f9:27:82:34:39:60:08:ab:68:2a:03:e2:23: 49:d4:b5:a7:79:16:0d:1b:83:48:6c:f9:be:8f:90: 5a:a7:01:f7:58:39:ce:c8:0a:04:ed:2b:f0:23:3c: 24:ad:b6:42:2a:2b:ec:f3:8f:eb:5e:c1:6d:1f:d1: 9a:76:d2:76:d5:51:19:f3:01:9f:1d:87:cd:8c:9f: 83:97:63:db:6a:83:ae:68:b8:d3:0b:d7:17:44:c6: 05:d9:88:75:e3:2e:d5:80:84:76:dc:32:23:ec:94: 27:ca:74:d7:32:59:b2:8e:9f:72:62:9d:35:56:c9: 97:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:00:7C:30:12:FC:0C:EF:1D:DD:D3:CB:8A:CD:8D:CA:F6:17:37:67 X509v3 Authority Key Identifier: keyid:D5:0D:11:83:73:08:AB:1F:15:A7:5F:35:16:43:FB:7F:C0:14:85:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:12:9e:e3:40:4e:f7:29:a5:05:c5:98:7f:55:04:86:a1:e0: 19:4f:14:11:ef:cd:41:39:e2:00:17:a3:51:8a:df:a0:4f:59: e7:48:f4:bb:20:35:28:2f:19:d0:18:b7:cd:d0:7b:d1:c8:39: a5:02:eb:dc:f4:9a:3a:22:f7:a9:d2:88:35:14:c4:cd:ba:93: 58:dc:d4:64:23:a7:76:35:72:19:8b:02:1d:e9:99:63:4c:e6: dc:b6:c7:71:d4:7c:4c:cf:ac:37:af:e6:76:e2:84:6d:58:52: f5:c5:5f:7f:12:32:73:4e:15:55:5d:1f:c8:93:ce:01:b3:12: 1b:48:d3:f8:a5:bb:f1:58:47:32:81:74:33:6b:0f:c4:22:30: 79:b0:4f:d2:8c:05:d2:e3:ca:b7:ce:4e:2a:cf:8c:9b:78:c3: 65:9f:aa:c5:81:4a:36:7e:2e:3e:6b:3c:2a:90:99:3f:92:9b: d6:e4:bf:2e:a8:0a:c7:15:03:6f:0a:02:42:20:05:c0:05:d5: 47:8c:02:8d:0b:25:1c:3c:1e:dd:3e:42:b2:a4:e5:45:66:9b: 2c:24:f7:9c:97:16:b6:22:31:2c:80:f6:f5:63:2a:c8:e6:88: db:9b:f8:df:23:8e:46:fb:38:78:db:a6:de:1f:df:b8:60:98: cd:62:67:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI5MTYxMTAvBgNVBAUTKEQ1MEQxMTgzNzMwOEFCMUYxNUE3NUYzNTE2NDNGQjdG QzAxNDg1NEMwHhcNMjUwNDI1MDM1NzA0WhcNMjUwNTAyMDM1NzA0WjAYMRYwFAYD VQQDEw02ODBiMDgxMC0xZDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfHmUX0+0hYhMMrIjjuG5/hW1MsvhgODE3i98b/4ygStqB2k2Q56BBGxR7vs lStrJVLl7BBVdv9Imt4SjqvxRXsLB0Ka/9E7OGypCtZQo+AOFhwbeD0AOfk4F0i5 eVmi+AJoWmzQPv7D1w8NhQQdu1w+0hCoPt2afaxB3Bjx35XQTEv2XwQxXfkngjQ5 YAiraCoD4iNJ1LWneRYNG4NIbPm+j5BapwH3WDnOyAoE7SvwIzwkrbZCKivs84/r XsFtH9GadtJ21VEZ8wGfHYfNjJ+Dl2PbaoOuaLjTC9cXRMYF2Yh14y7VgIR23DIj 7JQnynTXMlmyjp9yYp01VsmXRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8AfDAS /AzvHd3Ty4rNjcr2FzdnMB8GA1UdIwQYMBaAFNUNEYNzCKsfFadfNRZD+3/AFIVM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjkxNi83NEVDMzk3RTdE M0QxMUVFOUFGNzM5MUFDNEY5QUUwMi8xUTBSZzNNSXF4OFZwMTgxRmtQN2Y4QVVo VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRMFJnM01JcXg4VnAxODFGa1A3ZjhBVWhVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjkxNi83NEVDMzk3RTdEM0QxMUVFOUFGNzM5MUFDNEY5QUUwMi8xUTBSZzNNSXF4 OFZwMTgxRmtQN2Y4QVVoVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrEp7jQE73KaUFxZh/VQSGoeAZTxQR781BOeIAF6NRit+gT1nnSPS7 IDUoLxnQGLfN0HvRyDmlAuvc9Jo6Ivep0og1FMTNupNY3NRkI6d2NXIZiwId6Zlj TObctsdx1HxMz6w3r+Z24oRtWFL1xV9/EjJzThVVXR/Ik84BsxIbSNP4pbvxWEcy gXQzaw/EIjB5sE/SjAXS48q3zk4qz4ybeMNln6rFgUo2fi4+azwqkJk/kpvW5L8u qArHFQNvCgJCIAXABdVHjAKNCyUcPB7dPkKypOVFZpssJPeclxa2IjEsgPb1YyrI 5ojbm/jfI45G+zh426beH9+4YJjNYmcP -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:20 2025 by rpki-client