$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft File: 75XL1Zg1JkDUKwqsYABBBltNxEI.mft (raw, json) Hash identifier: 7mc3vDBjusc0Chd5XzyIe2RNUR/M0DxOx+KAjF2Sk/o= Subject key identifier: A5:18:BD:4E:A3:1B:43:67:E0:E1:7D:93:73:3D:6C:A8:71:33:78:46 Authority key identifier: EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42 Certificate issuer: /CN=A91DE8C5/serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442 Certificate serial: 0C51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft Manifest number: 0C44 Signing time: Thu 24 Apr 2025 18:18:57 +0000 Manifest this update: Thu 24 Apr 2025 18:18:56 +0000 Manifest next update: Thu 01 May 2025 18:18:56 +0000 Files and hashes: 1: 75XL1Zg1JkDUKwqsYABBBltNxEI.crl (hash: tOy8gZWIEixvKdBa5pANev8iZ5CQwRp3/AHbQgwlxXQ=) 2: 44B3B572011611EA972FFC57C4F9AE02.roa (hash: piFKgRXnTnbtckt4LeKFN1ZClSmPRiBrS7xYW+uNn8I=) 3: 452DDFB4011611EA972FFC57C4F9AE02.roa (hash: rZ1tio+6QezB4AheRQ3p4ioAeh5nGSWbvjYyZdr2msE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:18:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3153 (0xc51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE8C5, serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442 Validity Not Before: Apr 24 18:18:56 2025 GMT Not After : May 1 18:18:56 2025 GMT Subject: CN=680a8091-7942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d5:64:d7:5f:69:9d:b2:f5:bf:bf:b9:f7:9b: cd:4c:43:78:94:4b:8a:f7:48:d3:b8:4c:b3:d1:ee: bb:67:28:3d:b5:f6:14:e0:6a:7d:fe:35:d9:f8:12: e4:fd:bb:04:b5:18:50:25:5f:43:38:37:4d:64:05: 12:ea:0f:9c:35:3c:8d:c1:c1:5c:ae:14:cf:91:37: 8a:dd:10:63:95:d4:ef:a9:48:f4:d0:9d:3d:a9:33: 63:51:5e:18:4a:11:3e:1b:76:3a:0c:de:b4:12:3a: 0a:12:04:96:63:c4:1e:f1:51:db:76:62:12:35:21: 22:1e:c1:da:ba:48:20:1a:83:0b:de:1a:82:da:f5: bb:14:cf:ff:46:4c:48:22:45:ab:a1:60:b0:94:68: 0a:e9:54:7b:43:dd:18:ab:d3:8a:10:91:f0:d8:da: 62:5f:cf:16:ee:f4:58:5e:d5:ff:3c:83:c7:dc:cb: a9:2e:9e:4a:09:d8:67:53:0d:fc:6d:04:43:91:8a: 1c:1c:7c:eb:cd:92:a6:69:9c:8f:1a:7e:75:eb:05: 42:ce:a5:ea:eb:c5:96:a8:6d:1a:91:6f:ac:5d:b5: ec:e2:b5:e9:84:c5:ac:05:b2:7e:03:13:51:7f:c0: 8f:78:cd:dd:40:dd:86:57:33:11:36:bf:3b:43:cd: 98:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:18:BD:4E:A3:1B:43:67:E0:E1:7D:93:73:3D:6C:A8:71:33:78:46 X509v3 Authority Key Identifier: keyid:EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:01:4c:f0:57:08:0d:19:b3:48:50:d2:6d:e3:37:3e:c8:b1: 28:87:6c:d0:58:99:ef:55:6d:21:8f:0b:f8:99:c8:d4:08:80: 08:c6:8a:80:a1:86:47:aa:3e:58:3d:c2:ff:57:4a:23:86:97: a4:20:5c:a3:6b:a0:2a:3e:e5:db:69:9d:f9:7a:e0:d3:d5:02: 82:1b:fb:24:24:6e:5f:e0:69:73:de:4f:fc:35:82:0f:e2:a3: b2:be:bf:3a:23:2a:2c:ae:f4:dd:ba:e9:4f:2c:6a:8a:32:ca: 6d:ad:4f:39:92:34:65:c2:5e:03:8e:84:ba:77:ca:cf:68:1d: 7b:40:b2:64:93:47:f3:9e:77:fe:93:5d:54:25:1e:83:32:e6: a7:73:5c:c3:df:76:16:9f:a5:0c:0b:35:26:21:9c:5c:20:7b: 81:98:3e:ea:5a:fc:87:72:c4:47:d3:4e:bd:1f:5c:bd:80:75: 52:d0:2d:0e:50:6f:36:d4:88:95:0c:56:75:2b:b4:fb:ab:db: ab:99:79:22:3b:10:ce:17:68:03:f4:47:cc:cb:09:d3:bf:da: e0:8b:cb:e2:b8:b8:c3:af:34:7b:c0:9d:9e:b2:c6:8c:99:06: 4f:ba:14:84:03:76:ac:b7:27:be:27:69:2d:82:f9:1e:b7:6e: 58:5e:8c:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU4QzUxMTAvBgNVBAUTKEVGOTVDQkQ1OTgzNTI2NDBENDJCMEFBQzYwMDA0MTA2 NUI0REM0NDIwHhcNMjUwNDI0MTgxODU2WhcNMjUwNTAxMTgxODU2WjAYMRYwFAYD VQQDEw02ODBhODA5MS03OTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytVk119pnbL1v7+595vNTEN4lEuK90jTuEyz0e67Zyg9tfYU4Gp9/jXZ+BLk /bsEtRhQJV9DODdNZAUS6g+cNTyNwcFcrhTPkTeK3RBjldTvqUj00J09qTNjUV4Y ShE+G3Y6DN60EjoKEgSWY8Qe8VHbdmISNSEiHsHaukggGoML3hqC2vW7FM//RkxI IkWroWCwlGgK6VR7Q90Yq9OKEJHw2NpiX88W7vRYXtX/PIPH3MupLp5KCdhnUw38 bQRDkYocHHzrzZKmaZyPGn516wVCzqXq68WWqG0akW+sXbXs4rXphMWsBbJ+AxNR f8CPeM3dQN2GVzMRNr87Q82YTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUYvU6j G0Nn4OF9k3M9bKhxM3hGMB8GA1UdIwQYMBaAFO+Vy9WYNSZA1CsKrGAAQQZbTcRC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERThDNS8wNTJDODRGQzAx MTUxMUVBQTk4QTYyNTVDNEY5QUUwMi83NVhMMVpnMUprRFVLd3FzWUFCQkJsdE54 RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1WEwxWmcxSmtEVUt3cXNZQUJCQmx0TnhFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RThDNS8wNTJDODRGQzAxMTUxMUVBQTk4QTYyNTVDNEY5QUUwMi83NVhMMVpnMUpr RFVLd3FzWUFCQkJsdE54RUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfAUzwVwgNGbNIUNJt4zc+yLEoh2zQWJnvVW0hjwv4mcjUCIAIxoqA oYZHqj5YPcL/V0ojhpekIFyja6AqPuXbaZ35euDT1QKCG/skJG5f4Glz3k/8NYIP 4qOyvr86IyosrvTduulPLGqKMsptrU85kjRlwl4DjoS6d8rPaB17QLJkk0fznnf+ k11UJR6DMuanc1zD33YWn6UMCzUmIZxcIHuBmD7qWvyHcsRH0069H1y9gHVS0C0O UG821IiVDFZ1K7T7q9urmXkiOxDOF2gD9EfMywnTv9rgi8viuLjDrzR7wJ2essaM mQZPuhSEA3astye+J2ktgvket25YXozd -----END CERTIFICATE-----Generated at Sat Apr 26 17:22:45 2025 by rpki-client