$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft File: Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft (raw, json) Hash identifier: GEQ2XrXjsaTdyeVnZr2PSHy6Y9wI/1wuBRap2uCmwCg= Subject key identifier: 94:61:0A:30:30:E3:E9:80:01:F0:44:E2:B4:59:C1:F2:5C:7C:67:73 Authority key identifier: 56:8D:17:91:52:47:3C:80:9A:62:E5:85:E5:AD:C9:42:86:6B:E6:59 Certificate issuer: /CN=A91E0D8B/serialNumber=568D179152473C809A62E585E5ADC942866BE659 Certificate serial: 06A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft Manifest number: 069A Signing time: Thu 24 Apr 2025 22:01:32 +0000 Manifest this update: Thu 24 Apr 2025 22:01:31 +0000 Manifest next update: Thu 01 May 2025 22:01:31 +0000 Files and hashes: 1: Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl (hash: 86t3ijR0Bi+EGPbsRTr877TUgXyCQVWH/WAiq+TliEg=) 2: 146FD366653611EB99BE491DC4F9AE02.roa (hash: vDTtnYK0urRCnkWdVJaHunlHhYBCBiIEuZyHl4rL/x4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1696 (0x6a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0D8B, serialNumber=568D179152473C809A62E585E5ADC942866BE659 Validity Not Before: Apr 24 22:01:31 2025 GMT Not After : May 1 22:01:31 2025 GMT Subject: CN=680ab4bb-4613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:80:49:91:bb:f4:a1:a2:8a:07:67:d5:07:72: 03:8a:dd:87:a8:2c:2d:83:dd:cf:64:5f:c5:b3:06: 9c:70:24:70:f8:83:30:5b:19:b4:66:39:f5:3c:b6: f1:02:82:72:98:12:ca:06:77:cf:d3:31:7a:61:95: 46:6c:4a:5f:fa:91:d9:37:51:0d:8c:5c:f0:63:ea: f1:37:63:2d:13:48:d3:24:eb:84:3b:d9:10:36:7b: eb:52:e8:08:e8:ce:d7:17:17:30:4b:74:70:bb:88: 1d:03:0e:c5:05:ad:b0:93:ce:3f:43:33:eb:2f:2b: 3e:a6:62:43:f8:96:88:4a:5e:f0:30:84:c4:d3:26: c7:3e:a6:5b:c6:f5:5e:ca:0f:86:ef:27:4e:c4:f6: 0b:ef:da:e1:0e:15:92:71:66:2b:01:c3:cb:fe:42: b6:81:6e:ee:9c:05:5a:9a:39:57:bd:28:31:49:db: ae:ee:cf:ec:45:4b:58:bb:f2:c5:38:93:92:18:9b: 41:98:36:0e:74:8e:62:4d:a8:60:bd:57:a9:a5:2d: 1e:8b:9e:a7:2c:f7:d6:e1:6a:10:84:a4:3f:d4:1c: 5a:1e:7c:cc:f5:5c:23:42:35:ef:9f:d6:a3:ba:9c: d8:0d:4f:e3:8a:1d:5a:61:15:58:18:20:f7:37:82: ad:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:61:0A:30:30:E3:E9:80:01:F0:44:E2:B4:59:C1:F2:5C:7C:67:73 X509v3 Authority Key Identifier: keyid:56:8D:17:91:52:47:3C:80:9A:62:E5:85:E5:AD:C9:42:86:6B:E6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:c3:29:25:c7:c3:2b:94:86:6c:e3:4b:88:8f:a0:30:16:bf: e8:77:17:23:19:fd:1a:87:cc:89:a8:02:81:40:cd:30:11:e9: 45:44:3a:91:e7:0b:72:20:7f:95:ca:a0:4b:e3:7d:95:f2:7c: 5c:1c:18:54:4f:a0:27:a5:e2:7b:22:54:23:ce:eb:a0:45:6a: 4e:90:22:17:9e:54:b2:ea:7d:7a:0c:51:50:1e:0b:6e:d3:8a: 39:de:c0:f4:fb:b7:74:e0:3b:96:df:f0:af:df:e9:14:1b:ad: 58:80:d0:27:0d:79:c6:73:72:61:e0:34:28:3d:3b:65:2c:fa: 01:fb:77:97:5d:99:fa:44:ff:1c:ec:a5:32:95:63:1c:27:67: ea:44:c5:a1:bc:b3:f2:bd:e2:97:f0:ef:03:7f:bd:f3:8c:1e: 28:c2:9b:1c:1e:9c:f4:47:a9:07:7c:01:51:3f:8e:27:a9:b9: ce:0f:98:39:ee:62:99:60:33:f6:9a:28:71:12:e8:b7:a0:cd: 1e:fb:16:ec:1e:66:6c:27:ca:91:29:71:7b:93:fb:69:9f:b7: 76:9d:d5:46:fa:c5:79:39:78:e8:74:39:83:73:e2:85:63:b0: cf:ab:71:cc:f8:9b:19:0d:65:09:d7:af:04:78:ce:e2:23:68: 0c:55:54:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBEOEIxMTAvBgNVBAUTKDU2OEQxNzkxNTI0NzNDODA5QTYyRTU4NUU1QURDOTQy ODY2QkU2NTkwHhcNMjUwNDI0MjIwMTMxWhcNMjUwNTAxMjIwMTMxWjAYMRYwFAYD VQQDEw02ODBhYjRiYi00NjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIBJkbv0oaKKB2fVB3IDit2HqCwtg93PZF/FswaccCRw+IMwWxm0Zjn1PLbx AoJymBLKBnfP0zF6YZVGbEpf+pHZN1ENjFzwY+rxN2MtE0jTJOuEO9kQNnvrUugI 6M7XFxcwS3Rwu4gdAw7FBa2wk84/QzPrLys+pmJD+JaISl7wMITE0ybHPqZbxvVe yg+G7ydOxPYL79rhDhWScWYrAcPL/kK2gW7unAVamjlXvSgxSduu7s/sRUtYu/LF OJOSGJtBmDYOdI5iTahgvVeppS0ei56nLPfW4WoQhKQ/1BxaHnzM9VwjQjXvn9aj upzYDU/jih1aYRVYGCD3N4Kt/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRhCjAw 4+mAAfBE4rRZwfJcfGdzMB8GA1UdIwQYMBaAFFaNF5FSRzyAmmLlheWtyUKGa+ZZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Qi80QTZENkMwQTY1 MzQxMUVCQjZCOEYwMTlDNEY5QUUwMi9WbzBYa1ZKSFBJQ2FZdVdGNWEzSlFvWnI1 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZvMFhrVkpIUElDYVl1V0Y1YTNKUW9acjVsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEQ4Qi80QTZENkMwQTY1MzQxMUVCQjZCOEYwMTlDNEY5QUUwMi9WbzBYa1ZKSFBJ Q2FZdVdGNWEzSlFvWnI1bGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0wyklx8MrlIZs40uIj6AwFr/odxcjGf0ah8yJqAKBQM0wEelFRDqR 5wtyIH+VyqBL432V8nxcHBhUT6AnpeJ7IlQjzuugRWpOkCIXnlSy6n16DFFQHgtu 04o53sD0+7d04DuW3/Cv3+kUG61YgNAnDXnGc3Jh4DQoPTtlLPoB+3eXXZn6RP8c 7KUylWMcJ2fqRMWhvLPyveKX8O8Df73zjB4owpscHpz0R6kHfAFRP44nqbnOD5g5 7mKZYDP2mihxEui3oM0e+xbsHmZsJ8qRKXF7k/tpn7d2ndVG+sV5OXjodDmDc+KF Y7DPq3HM+JsZDWUJ168EeM7iI2gMVVRV -----END CERTIFICATE-----Generated at Sat Apr 26 15:18:28 2025 by rpki-client