$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft File: 3obmXuoeCzDk_Y2SRYft9XI9UH0.mft (raw, json) Hash identifier: BXsi6GbSDqXCVrwbpXSQGGJqiG6uu6vqn0uv1Y2Ho20= Subject key identifier: A0:92:29:D1:82:39:B7:6C:6A:FF:D9:9D:64:18:FF:FB:C8:9A:EF:01 Authority key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D Certificate issuer: /CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft Manifest number: 70 Signing time: Fri 25 Apr 2025 05:50:35 +0000 Manifest this update: Fri 25 Apr 2025 05:50:34 +0000 Manifest next update: Fri 02 May 2025 05:50:34 +0000 Files and hashes: 1: 3obmXuoeCzDk_Y2SRYft9XI9UH0.crl (hash: LIC0CQFdJgiakiSL3V06rfDzXKjLyfvqn3VYyxsGhfM=) 2: 1F63E4347ABC11EF9E53E753C4F9AE02.roa (hash: HKA4VosuvqKj93QksjNsBERDuKRgYc9/Nd6hWkYBCUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:50:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00A5, serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Validity Not Before: Apr 25 05:50:34 2025 GMT Not After : May 2 05:50:34 2025 GMT Subject: CN=680b22aa-e65a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b9:d2:5c:fb:10:08:41:d9:97:16:b5:eb:9f: 47:8b:f3:f3:a1:1e:fb:59:d4:56:68:4a:80:d4:50: 93:91:80:20:7d:c7:01:e6:81:15:3e:6e:33:9b:10: 50:87:25:ec:01:95:52:10:1f:7e:53:d5:52:99:bf: eb:a0:f6:4d:b4:91:7e:61:87:df:a0:5d:c7:fe:10: 9b:52:2e:6b:d2:0d:21:fc:d5:18:46:0f:77:03:7e: e6:c3:1c:fb:d7:c9:0f:f3:46:49:28:c3:50:c8:d7: 09:5f:ad:1e:84:09:3b:7d:8e:09:7b:35:b2:0a:dc: 37:b3:82:24:a3:3b:c9:a5:49:db:af:0d:0a:c9:0a: d0:41:9d:81:63:f3:e7:03:0b:bd:f7:c5:52:70:f1: 39:09:f7:06:10:cf:7d:c4:7e:4a:14:1a:5d:1b:8b: 1c:95:f7:8a:42:42:94:b6:88:fa:ea:b5:1c:9a:e3: b7:d2:2d:2f:bd:f0:69:bf:b2:90:17:1a:f7:38:1a: 47:86:7a:2a:77:5e:e0:53:9c:7f:59:a8:3c:66:0c: ae:30:b4:a5:2b:19:9c:51:3c:9f:ac:89:2c:c4:a1: 5e:f0:52:48:ec:ea:65:5a:d3:10:89:55:74:ae:72: 26:8f:fa:84:a3:5f:5a:a4:8b:a5:e7:a5:04:e4:8b: a9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:92:29:D1:82:39:B7:6C:6A:FF:D9:9D:64:18:FF:FB:C8:9A:EF:01 X509v3 Authority Key Identifier: keyid:DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:00:cf:c5:0a:44:23:6a:4e:98:d1:e2:ed:d2:28:a5:08:ae: 07:d3:62:a6:18:c8:68:b9:6f:0b:35:83:c4:e5:23:cd:49:e6: a7:55:a5:7b:7c:ae:07:cc:7a:5f:00:3f:ad:e3:73:72:77:36: d7:e5:29:c7:5a:1e:6f:39:6f:96:05:37:32:3d:50:a8:33:45: 60:6f:98:83:2c:d9:a0:c7:ea:13:8b:d8:90:3a:54:e8:c5:e3: 0a:67:0d:9c:fa:3a:cd:d7:c8:31:12:db:6a:c8:3b:c8:9b:52: cf:5d:ad:0e:e2:d8:2c:fd:70:97:ac:13:7b:e0:3a:24:bb:a8: 91:69:ba:13:1d:e5:ef:04:03:9f:0f:73:5f:a7:67:0a:00:6d: 2a:15:e0:0a:d1:a0:11:f9:9d:ac:67:28:2d:86:69:1b:5e:65: e7:5f:0c:c0:4f:f9:f2:9d:4e:73:8a:f0:ee:5e:78:a0:e5:f4: 15:4a:66:d2:cb:28:a1:90:6c:b9:90:ae:af:80:29:fe:f5:57: 2a:e9:62:33:7e:1b:9e:72:ba:2a:4f:13:0b:a4:50:2b:20:01: 1b:fa:eb:ab:9c:76:21:29:1b:dc:53:a1:5b:13:3b:7d:38:35: 2b:28:07:8b:e2:af:7c:41:22:ff:5c:81:5f:3c:3f:7c:b8:f6: 8c:00:8f:a6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDBBNTExMC8GA1UEBRMoREU4NkU2NUVFQTFFMEIzMEU0RkQ4RDkyNDU4N0VERjU3 MjNENTA3RDAeFw0yNTA0MjUwNTUwMzRaFw0yNTA1MDIwNTUwMzRaMBgxFjAUBgNV BAMTDTY4MGIyMmFhLWU2NWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeudJc+xAIQdmXFrXrn0eL8/OhHvtZ1FZoSoDUUJORgCB9xwHmgRU+bjObEFCH JewBlVIQH35T1VKZv+ug9k20kX5hh9+gXcf+EJtSLmvSDSH81RhGD3cDfubDHPvX yQ/zRkkow1DI1wlfrR6ECTt9jgl7NbIK3DezgiSjO8mlSduvDQrJCtBBnYFj8+cD C733xVJw8TkJ9wYQz33EfkoUGl0bixyV94pCQpS2iPrqtRya47fSLS+98Gm/spAX Gvc4GkeGeip3XuBTnH9ZqDxmDK4wtKUrGZxRPJ+siSzEoV7wUkjs6mVa0xCJVXSu ciaP+oSjX1qki6XnpQTki6kpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoJIp0YI5 t2xq/9mdZBj/+8ia7wEwHwYDVR0jBBgwFoAU3obmXuoeCzDk/Y2SRYft9XI9UH0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwMEE1L0E2NDgzQTNDN0FC QjExRUY5Mzc5QUU1MkM0RjlBRTAyLzNvYm1YdW9lQ3pEa19ZMlNSWWZ0OVhJOVVI MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM29ibVh1b2VDekRrX1kyU1JZZnQ5WEk5VUgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw MEE1L0E2NDgzQTNDN0FCQjExRUY5Mzc5QUU1MkM0RjlBRTAyLzNvYm1YdW9lQ3pE a19ZMlNSWWZ0OVhJOVVIMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL0Az8UKRCNqTpjR4u3SKKUIrgfTYqYYyGi5bws1g8TlI81J5qdVpXt8 rgfMel8AP63jc3J3NtflKcdaHm85b5YFNzI9UKgzRWBvmIMs2aDH6hOL2JA6VOjF 4wpnDZz6Os3XyDES22rIO8ibUs9drQ7i2Cz9cJesE3vgOiS7qJFpuhMd5e8EA58P c1+nZwoAbSoV4ArRoBH5naxnKC2GaRteZedfDMBP+fKdTnOK8O5eeKDl9BVKZtLL KKGQbLmQrq+AKf71VyrpYjN+G55yuipPEwukUCsgARv666ucdiEpG9xToVsTO304 NSsoB4vir3xBIv9cgV88P3y49owAj6Y= -----END CERTIFICATE-----Generated at Sat Apr 26 04:21:59 2025 by rpki-client