$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft File: u5MlbmB9QutuNCDcxxN_ILhNDIo.mft (raw, json) Hash identifier: H2N0f7OvDefuD2o/nrpizG1s7SseoWIrToN34pYfDL8= Subject key identifier: FF:82:9C:E4:E7:C2:76:75:EF:54:26:0D:43:68:82:29:1B:0A:82:A2 Authority key identifier: BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A Certificate issuer: /CN=A91DF3CA/serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A Certificate serial: 17C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft Manifest number: 17B6 Signing time: Thu 24 Apr 2025 16:35:43 +0000 Manifest this update: Thu 24 Apr 2025 16:35:42 +0000 Manifest next update: Thu 01 May 2025 16:35:42 +0000 Files and hashes: 1: u5MlbmB9QutuNCDcxxN_ILhNDIo.crl (hash: gRTzCUHppNgC+RPU64DyzxnUc/s42SrS21kzxUG5rng=) 2: 7D4E6EDCC3A511E78971975FC4F9AE02.roa (hash: veiSAA57yRrgqocVJ9kM0ybPgWzL/JzbGINmTfwNHX8=) 3: 0EB22CD66BBE11EDBF717818C4F9AE02.roa (hash: zCpY8nx1qxvRAvrVO7S1BXfjXPbBU6CC+eJhv6+dkZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6082 (0x17c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF3CA, serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A Validity Not Before: Apr 24 16:35:42 2025 GMT Not After : May 1 16:35:42 2025 GMT Subject: CN=680a685f-57f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:44:7e:3d:09:2e:05:5e:1a:c0:80:ad:ae:e8: 67:66:b9:36:48:30:8f:49:b2:09:85:ca:8c:61:b8: 21:d2:62:46:b1:c7:97:e8:15:15:7c:7e:9e:81:04: 38:ea:34:7e:94:02:f7:b6:b3:2a:bb:6d:06:8c:d1: 93:5b:cb:a6:7e:2f:41:77:cc:c1:d2:60:f4:c3:ea: 90:bb:57:13:44:33:41:4c:4d:d3:12:cc:2f:6a:d9: 3a:f4:ae:c6:b1:a0:ee:bb:3f:c3:94:8c:32:21:2f: f2:1f:d5:d7:3b:1a:9e:ff:9b:d7:da:3d:ca:d1:74: e7:20:4e:db:fd:c2:60:7c:6a:33:ba:e1:39:23:9c: 00:48:4f:d7:04:b1:e3:49:58:24:f1:5c:ef:c7:8a: 4e:ba:56:ab:45:af:89:c6:63:b1:38:e2:35:2b:34: ea:63:16:54:58:49:4d:21:bb:2d:9b:ea:8e:7c:52: 81:14:35:e5:c9:0b:86:09:16:52:94:11:8d:8f:e7: dd:d2:b8:79:38:ea:5a:e5:5e:70:85:2f:e4:73:68: 2b:2a:5d:6a:f4:03:46:4f:76:5f:11:87:36:9f:8d: 69:43:d1:31:38:80:8c:34:cc:87:04:d1:8a:4f:87: 00:2f:a0:94:ed:50:bf:2c:e7:5a:8b:13:0b:43:de: 6d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:82:9C:E4:E7:C2:76:75:EF:54:26:0D:43:68:82:29:1B:0A:82:A2 X509v3 Authority Key Identifier: keyid:BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:fc:b1:d1:ad:7d:51:b6:5e:72:cf:de:ec:9f:3f:f6:ca:4e: 83:50:3b:ed:da:9f:a1:30:67:39:13:02:62:38:27:d3:dc:f6: 87:78:2b:20:72:b7:dc:38:2e:3b:b0:ce:e2:3d:65:39:02:82: 98:f3:ee:4b:6c:75:42:44:09:13:d8:47:47:b6:49:38:1a:e7: db:29:b3:72:1a:43:7d:23:d2:3b:15:bf:76:98:08:98:b9:41: 6c:9d:39:be:7b:e6:d6:b5:c6:b8:63:52:d9:30:e3:08:d3:ae: 36:f5:8e:4e:ee:e1:1b:09:76:22:e4:f5:4a:89:9c:8c:9a:dd: 6b:38:b3:db:79:99:e7:f9:c9:6c:67:39:1a:f2:8a:4f:23:a3: 3d:21:39:68:1c:89:ad:11:2a:7d:c5:a7:ba:e7:52:9a:ea:f9: 12:bc:3c:69:16:7f:f2:60:35:56:dd:82:08:a5:4d:51:94:63: 15:2d:ef:4b:7a:a1:00:f1:18:b0:3a:c3:71:44:05:d6:b3:e2: 41:e4:d2:eb:3b:cd:36:4e:c7:1f:c0:3b:a1:3d:f0:f4:58:4c: fd:aa:8d:70:c0:9b:5f:8f:f1:ac:7c:ef:0a:d1:da:c4:a2:53: 6f:db:7a:af:af:01:02:46:3b:44:fc:6c:c1:f9:78:c9:11:78: 62:1c:3d:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYzQ0ExMTAvBgNVBAUTKEJCOTMyNTZFNjA3RDQyRUI2RTM0MjBEQ0M3MTM3RjIw Qjg0RDBDOEEwHhcNMjUwNDI0MTYzNTQyWhcNMjUwNTAxMTYzNTQyWjAYMRYwFAYD VQQDEw02ODBhNjg1Zi01N2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ER+PQkuBV4awICtruhnZrk2SDCPSbIJhcqMYbgh0mJGsceX6BUVfH6egQQ4 6jR+lAL3trMqu20GjNGTW8umfi9Bd8zB0mD0w+qQu1cTRDNBTE3TEswvatk69K7G saDuuz/DlIwyIS/yH9XXOxqe/5vX2j3K0XTnIE7b/cJgfGozuuE5I5wASE/XBLHj SVgk8Vzvx4pOularRa+JxmOxOOI1KzTqYxZUWElNIbstm+qOfFKBFDXlyQuGCRZS lBGNj+fd0rh5OOpa5V5whS/kc2grKl1q9ANGT3ZfEYc2n41pQ9ExOICMNMyHBNGK T4cAL6CU7VC/LOdaixMLQ95tQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+CnOTn wnZ171QmDUNogikbCoKiMB8GA1UdIwQYMBaAFLuTJW5gfULrbjQg3McTfyC4TQyK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjNDQS9FRjRGOTM3Q0Mz QTQxMUU3OTdCQkYxNUVDNEY5QUUwMi91NU1sYm1COVF1dHVOQ0RjeHhOX0lMaE5E SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U1TWxibUI5UXV0dU5DRGN4eE5fSUxoTkRJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjNDQS9FRjRGOTM3Q0MzQTQxMUU3OTdCQkYxNUVDNEY5QUUwMi91NU1sYm1COVF1 dHVOQ0RjeHhOX0lMaE5ESW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCE/LHRrX1Rtl5yz97snz/2yk6DUDvt2p+hMGc5EwJiOCfT3PaHeCsg crfcOC47sM7iPWU5AoKY8+5LbHVCRAkT2EdHtkk4GufbKbNyGkN9I9I7Fb92mAiY uUFsnTm+e+bWtca4Y1LZMOMI06429Y5O7uEbCXYi5PVKiZyMmt1rOLPbeZnn+cls Zzka8opPI6M9ITloHImtESp9xae651Ka6vkSvDxpFn/yYDVW3YIIpU1RlGMVLe9L eqEA8RiwOsNxRAXWs+JB5NLrO802TscfwDuhPfD0WEz9qo1wwJtfj/GsfO8K0drE olNv23qvrwECRjtE/GzB+XjJEXhiHD0P -----END CERTIFICATE-----Generated at Sat Apr 26 04:27:09 2025 by rpki-client