$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft File: -J0aOgEq7dJ69ICrnjbpKOaPiUI.mft (raw, json) Hash identifier: XWAl09/7868ggHmWCptW1kML63T86qvPCz1LJpBFO5E= Subject key identifier: 1A:58:0B:8E:1D:50:1F:41:38:DA:DD:AE:A8:68:B8:6A:62:67:FB:38 Authority key identifier: F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 Certificate issuer: /CN=A91DBC93/serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Certificate serial: 1EFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft Manifest number: 1EFC Signing time: Thu 24 Apr 2025 16:02:08 +0000 Manifest this update: Thu 24 Apr 2025 16:02:08 +0000 Manifest next update: Thu 01 May 2025 16:02:08 +0000 Files and hashes: 1: -J0aOgEq7dJ69ICrnjbpKOaPiUI.crl (hash: KvRsUwKYqvQeQ8PVtLtgSWBqTbX+Uvj0YzUFFtxEdWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7932 (0x1efc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBC93, serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Validity Not Before: Apr 24 16:02:08 2025 GMT Not After : May 1 16:02:08 2025 GMT Subject: CN=680a6080-09fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a0:0e:85:a2:10:73:ae:20:71:54:74:08:b4: 69:ef:52:30:3f:f3:2a:e9:f0:6e:af:15:6e:96:ec: 14:91:55:d9:c7:42:d6:4b:03:d2:3a:e4:42:3d:a1: 5b:0c:eb:5a:0d:55:b6:94:4b:d4:ba:b8:d4:09:c6: 3c:34:dc:bb:0d:30:60:fc:98:52:9c:5b:60:56:94: 25:67:a4:5f:5f:dd:f1:53:15:6e:bf:16:56:d1:9c: 9f:ae:4d:cf:42:8c:ff:5c:f7:e1:0d:4b:f5:05:d6: 72:67:29:44:ff:7e:45:08:25:b5:e5:de:e5:2b:76: 89:64:0b:95:83:51:ab:fb:f9:06:89:64:3b:c3:30: fe:81:b0:3e:55:f1:c5:a5:4c:bc:b7:49:f1:8d:2e: e2:8d:d8:72:b2:e2:ba:ae:2a:08:5b:3b:86:c0:90: 34:b0:d5:ee:3d:d2:14:75:c9:3c:df:71:af:06:80: 4f:8c:6e:bf:a5:8b:ca:48:25:a7:35:56:c2:10:8f: 3c:b5:71:dd:6a:6b:2d:0b:e4:93:b4:8b:71:60:f9: 3e:7a:8d:86:18:6b:43:fa:d5:34:9b:47:e9:dc:b9: 70:54:d0:87:01:43:5b:7f:de:72:75:f6:d5:23:ba: 8a:6c:51:ca:1a:bd:dc:8e:66:3a:bd:14:3b:e3:e7: be:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:58:0B:8E:1D:50:1F:41:38:DA:DD:AE:A8:68:B8:6A:62:67:FB:38 X509v3 Authority Key Identifier: keyid:F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:df:2a:7e:93:8f:b5:c2:6b:2d:6f:0d:38:d2:29:42:8d:fc: c2:39:72:c3:c7:b2:e7:31:64:08:03:f2:73:01:74:29:8f:4e: cb:2b:70:91:b8:1d:70:b9:37:ac:49:16:8a:5a:ee:3b:a9:0e: d9:ec:58:f3:18:7f:91:6b:4f:cf:6f:71:32:87:48:9a:7c:4f: e1:63:c6:c9:64:0a:01:43:e0:9e:28:f5:f1:5e:7a:6a:50:96: 21:eb:2d:a9:bd:bd:6a:d2:7b:62:1f:f4:85:72:c7:1a:c0:66: b0:85:af:52:03:7d:66:df:ff:8b:90:7b:b9:ed:03:50:7b:a2: 7d:c8:05:07:c0:fb:88:df:f9:4a:13:4b:f5:c6:d1:89:57:ae: 86:f6:fe:7f:fe:40:5c:ad:c0:41:43:d4:a6:8b:e6:3a:67:62: dc:f6:c7:fe:d8:7a:e0:e7:2d:2b:1a:b2:8d:47:90:fc:f6:f8: ec:81:6a:32:b3:49:c1:3d:8b:1c:44:75:d3:52:f2:1a:0d:9d: 0a:e1:04:5a:c5:f3:48:e3:c9:bb:d6:7b:4c:b9:5b:2e:80:00: e1:3d:3b:42:79:ce:e2:46:a4:1e:00:55:cc:f6:fe:0b:aa:2c: 87:a3:b8:74:8e:3f:02:ac:ea:7c:e4:e7:da:96:10:18:38:51: f6:bd:95:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJDOTMxMTAvBgNVBAUTKEY4OUQxQTNBMDEyQUVERDI3QUY0ODBBQjlFMzZFOTI4 RTY4Rjg5NDIwHhcNMjUwNDI0MTYwMjA4WhcNMjUwNTAxMTYwMjA4WjAYMRYwFAYD VQQDEw02ODBhNjA4MC0wOWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqAOhaIQc64gcVR0CLRp71IwP/Mq6fBurxVuluwUkVXZx0LWSwPSOuRCPaFb DOtaDVW2lEvUurjUCcY8NNy7DTBg/JhSnFtgVpQlZ6RfX93xUxVuvxZW0Zyfrk3P Qoz/XPfhDUv1BdZyZylE/35FCCW15d7lK3aJZAuVg1Gr+/kGiWQ7wzD+gbA+VfHF pUy8t0nxjS7ijdhysuK6rioIWzuGwJA0sNXuPdIUdck833GvBoBPjG6/pYvKSCWn NVbCEI88tXHdamstC+STtItxYPk+eo2GGGtD+tU0m0fp3LlwVNCHAUNbf95ydfbV I7qKbFHKGr3cjmY6vRQ74+e+XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpYC44d UB9BONrdrqhouGpiZ/s4MB8GA1UdIwQYMBaAFPidGjoBKu3SevSAq5426Sjmj4lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkM5My84RkI0OEJCNjUz NzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdkSjY5SUNybmpicEtPYVBp VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KMGFPZ0VxN2RKNjlJQ3JuamJwS09hUGlVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkM5My84RkI0OEJCNjUzNzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdk SjY5SUNybmpicEtPYVBpVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs3yp+k4+1wmstbw040ilCjfzCOXLDx7LnMWQIA/JzAXQpj07LK3CR uB1wuTesSRaKWu47qQ7Z7FjzGH+Ra0/Pb3Eyh0iafE/hY8bJZAoBQ+CeKPXxXnpq UJYh6y2pvb1q0ntiH/SFcscawGawha9SA31m3/+LkHu57QNQe6J9yAUHwPuI3/lK E0v1xtGJV66G9v5//kBcrcBBQ9Smi+Y6Z2Lc9sf+2Hrg5y0rGrKNR5D89vjsgWoy s0nBPYscRHXTUvIaDZ0K4QRaxfNI48m71ntMuVsugADhPTtCec7iRqQeAFXM9v4L qiyHo7h0jj8CrOp85OfalhAYOFH2vZXm -----END CERTIFICATE-----Generated at Sat Apr 26 16:57:16 2025 by rpki-client