$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft File: rC4NP0JyIX_vudMtzhozLelqOF4.mft (raw, json) Hash identifier: Q+xxwobbF4FO6yTIHItCG+ju+jmI8/yVfdjT58od+Ik= Subject key identifier: 36:72:3B:BF:FF:D5:4F:7E:E2:A5:D1:D7:98:1B:0C:10:FF:DE:9A:A6 Authority key identifier: AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E Certificate issuer: /CN=A91DD5E1/serialNumber=AC2E0D3F4272217FEFB9D32DCE1A332DE96A385E Certificate serial: 0890 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft Manifest number: 0888 Signing time: Thu 24 Apr 2025 20:28:51 +0000 Manifest this update: Thu 24 Apr 2025 20:28:51 +0000 Manifest next update: Thu 01 May 2025 20:28:51 +0000 Files and hashes: 1: rC4NP0JyIX_vudMtzhozLelqOF4.crl (hash: ur8vC+cz0pE2q5H6pHR8TQsfgymJHcDGS9WpTOLU6Rg=) 2: E034D1A6BC6F11EA8FE53280C4F9AE02.roa (hash: r0YFlYuIRf7Aj55A1t3w3hfTwFR/8iacpEclsozeKco=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.crl rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2192 (0x890) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD5E1, serialNumber=AC2E0D3F4272217FEFB9D32DCE1A332DE96A385E Validity Not Before: Apr 24 20:28:51 2025 GMT Not After : May 1 20:28:51 2025 GMT Subject: CN=680a9f03-1754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:77:28:2a:eb:67:0e:a6:32:4a:af:ca:79:f6: 59:d5:6c:02:84:31:8c:b8:78:be:f8:4a:a9:b6:fc: 93:9b:c3:83:eb:ee:7e:8e:c4:8c:6a:b0:ce:dd:0f: 7d:98:f7:03:ea:bd:cf:82:b9:8a:6e:50:a5:98:ab: 67:51:6d:1e:a4:63:98:c4:df:50:8b:cc:03:62:58: 09:dc:44:cb:c3:cd:1a:e8:4d:2a:e7:63:2e:4f:0a: 4f:8f:52:e7:d4:3d:39:9d:02:f4:91:3a:39:39:6d: 2e:60:be:8c:01:cf:fb:52:aa:db:f2:c4:95:c0:5d: dd:d3:ac:4e:57:f0:ad:d5:2a:78:66:5e:b7:14:a2: 49:f8:f9:12:e0:6c:22:fe:3a:15:c3:b4:31:35:6e: 67:61:00:8c:c6:11:14:c3:95:e4:c5:86:bf:0a:7f: 8c:d2:85:cc:ef:42:8d:06:d1:57:47:6a:ff:d9:cc: e4:0d:d5:8b:bc:47:e0:2c:7c:4e:61:e6:50:e3:a1: 90:e4:83:b6:81:6f:b6:64:62:af:d7:98:b9:b9:82: bf:3d:56:d0:76:e9:08:93:a5:7e:3f:88:d9:98:83: c7:41:48:66:2f:43:06:fe:3b:73:52:63:b3:25:fc: 7e:25:5d:df:6d:c7:ba:23:3e:82:1b:1f:c0:eb:cb: d6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:72:3B:BF:FF:D5:4F:7E:E2:A5:D1:D7:98:1B:0C:10:FF:DE:9A:A6 X509v3 Authority Key Identifier: keyid:AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:68:96:e2:a0:2e:e2:25:98:c6:aa:90:91:cf:72:98:c6:3e: 36:2c:64:7b:23:e7:b1:62:39:32:52:c8:c9:6a:07:c8:be:4d: 61:2b:d7:b0:db:19:09:30:9f:14:93:68:54:70:16:2f:5e:33: df:a0:ff:c3:b9:a8:20:f4:e4:5f:44:96:27:58:07:7d:9a:3b: 20:22:66:aa:02:5e:84:fa:33:91:32:5d:e0:e2:ed:8e:cf:0e: 6c:16:d8:01:91:05:e3:17:15:d2:9e:ac:9a:70:21:01:a2:30: 5a:e2:ae:e5:0e:33:ed:34:8d:b5:f6:a9:40:0d:bb:c8:73:f8: 47:a9:4e:f0:9b:3e:da:8e:6b:40:ae:27:c0:5e:88:6d:7e:5c: 67:d1:b4:45:15:d9:50:9d:da:ab:d1:be:a9:c4:f5:3f:1a:19: 04:1d:c0:6f:52:75:6f:ee:12:67:a7:3b:71:6b:47:12:b0:89: 70:53:8f:83:8f:2a:11:76:50:2c:b1:6f:6d:d0:e2:12:fb:e9: 61:f2:bd:7b:95:e6:f2:98:47:4c:21:8b:b3:65:33:96:76:a6: 78:62:c9:e5:1a:78:b8:05:7b:d1:e7:64:65:5e:57:e0:b5:b8: e7:89:ef:1a:b7:ee:6e:7b:0c:0f:ee:56:7a:48:a5:62:36:f9: f6:7c:cd:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ1RTExMTAvBgNVBAUTKEFDMkUwRDNGNDI3MjIxN0ZFRkI5RDMyRENFMUEzMzJE RTk2QTM4NUUwHhcNMjUwNDI0MjAyODUxWhcNMjUwNTAxMjAyODUxWjAYMRYwFAYD VQQDEw02ODBhOWYwMy0xNzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ncoKutnDqYySq/KefZZ1WwChDGMuHi++EqptvyTm8OD6+5+jsSMarDO3Q99 mPcD6r3PgrmKblClmKtnUW0epGOYxN9Qi8wDYlgJ3ETLw80a6E0q52MuTwpPj1Ln 1D05nQL0kTo5OW0uYL6MAc/7Uqrb8sSVwF3d06xOV/Ct1Sp4Zl63FKJJ+PkS4Gwi /joVw7QxNW5nYQCMxhEUw5XkxYa/Cn+M0oXM70KNBtFXR2r/2czkDdWLvEfgLHxO YeZQ46GQ5IO2gW+2ZGKv15i5uYK/PVbQdukIk6V+P4jZmIPHQUhmL0MG/jtzUmOz Jfx+JV3fbce6Iz6CGx/A68vWaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZyO7// 1U9+4qXR15gbDBD/3pqmMB8GA1UdIwQYMBaAFKwuDT9CciF/77nTLc4aMy3pajhe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDVFMS8xNjVCN0JGNkJD NkUxMUVBQTVDQjAzN0RDNEY5QUUwMi9yQzROUDBKeUlYX3Z1ZE10emhvekxlbHFP RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JDNE5QMEp5SVhfdnVkTXR6aG96TGVscU9GNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDVFMS8xNjVCN0JGNkJDNkUxMUVBQTVDQjAzN0RDNEY5QUUwMi9yQzROUDBKeUlY X3Z1ZE10emhvekxlbHFPRjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEaJbioC7iJZjGqpCRz3KYxj42LGR7I+exYjkyUsjJagfIvk1hK9ew 2xkJMJ8Uk2hUcBYvXjPfoP/Duagg9ORfRJYnWAd9mjsgImaqAl6E+jORMl3g4u2O zw5sFtgBkQXjFxXSnqyacCEBojBa4q7lDjPtNI219qlADbvIc/hHqU7wmz7ajmtA rifAXohtflxn0bRFFdlQndqr0b6pxPU/GhkEHcBvUnVv7hJnpztxa0cSsIlwU4+D jyoRdlAssW9t0OIS++lh8r17lebymEdMIYuzZTOWdqZ4YsnlGni4BXvR52RlXlfg tbjnie8at+5uewwP7lZ6SKViNvn2fM1A -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:18 2025 by rpki-client