$ rpki-client -vvf rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft File: _IC0m1BzMv1MnJLdXiei38qAZNo.mft (raw, json) Hash identifier: ySjWi9YnEkiOSJEljirVQJr0Ulv5hEKd4xECw2H0jnA= Subject key identifier: 38:BE:B7:A1:4F:04:F6:F6:49:E5:81:E6:93:1D:76:A8:E0:05:9A:91 Authority key identifier: FC:80:B4:9B:50:73:32:FD:4C:9C:92:DD:5E:27:A2:DF:CA:80:64:DA Certificate issuer: /CN=A91E13D0/serialNumber=FC80B49B507332FD4C9C92DD5E27A2DFCA8064DA Certificate serial: 0510 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft Manifest number: 050A Signing time: Thu 24 Apr 2025 23:26:04 +0000 Manifest this update: Thu 24 Apr 2025 23:26:03 +0000 Manifest next update: Thu 01 May 2025 23:26:03 +0000 Files and hashes: 1: _IC0m1BzMv1MnJLdXiei38qAZNo.crl (hash: r9oIYbQvRMzu5xxGCMw1fwCUFge1NbWdwEY5z/87UIw=) 2: E86C4B1E04AE11EC92C8D079C4F9AE02.roa (hash: gNJTzz5gTRCi7TWu8OqobzQyrN+9OUDBMZ0c3PoKanY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.crl rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1296 (0x510) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E13D0, serialNumber=FC80B49B507332FD4C9C92DD5E27A2DFCA8064DA Validity Not Before: Apr 24 23:26:03 2025 GMT Not After : May 1 23:26:03 2025 GMT Subject: CN=680ac88c-ad57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fe:f7:83:52:08:7e:a7:ec:84:28:f0:bb:72: 51:e1:43:90:0f:ac:a3:4d:94:8b:5d:fe:65:1f:24: 11:b1:99:0e:a9:f2:92:bd:d2:bd:51:6d:d8:68:f6: c0:ef:3f:23:7d:48:db:a7:9a:b5:d0:93:17:e3:8b: f1:b8:8a:5d:03:7f:e0:7a:33:da:84:8a:ce:be:4b: dd:8e:f0:21:a6:a9:9a:a8:85:18:11:ee:62:cd:db: 43:54:52:0e:b7:85:2d:72:d5:b5:97:19:3b:98:e5: b9:a3:8d:45:ae:6d:f0:33:20:02:6d:f8:ef:69:1c: 42:df:f0:55:e1:38:b3:42:e5:f8:c0:94:6f:03:3b: 07:f1:59:9a:9e:b4:f6:72:60:65:ab:47:5a:85:59: 51:9b:55:82:f8:19:71:e0:79:dc:d5:80:3f:64:40: 81:67:b1:89:35:76:59:90:50:96:55:b9:97:4a:64: 39:1a:c2:38:d7:14:05:1a:f6:23:96:e9:cb:ef:3d: a0:32:9e:fc:e0:0b:e2:a3:aa:ee:d1:7b:f0:cc:3f: c2:7a:4d:84:a5:5c:bf:8f:5a:cc:c5:ba:41:5a:75: 9e:10:0e:8a:d2:1a:dd:5c:bf:52:95:9e:51:0e:14: c0:58:da:f2:01:39:04:45:25:e4:61:f1:93:42:c1: c5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:BE:B7:A1:4F:04:F6:F6:49:E5:81:E6:93:1D:76:A8:E0:05:9A:91 X509v3 Authority Key Identifier: keyid:FC:80:B4:9B:50:73:32:FD:4C:9C:92:DD:5E:27:A2:DF:CA:80:64:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:5e:95:fe:e3:f1:e3:92:2b:f7:2f:1b:f8:49:f4:24:44:cc: 45:eb:4c:d2:4c:ac:14:76:68:26:d9:3c:63:2e:75:c4:eb:74: fe:8a:3f:1d:10:c8:42:16:b5:fb:a7:a8:4a:c8:8f:c7:be:be: c0:c7:c2:ec:85:76:4b:c0:86:5a:e0:5b:4a:fa:07:ea:22:c2: 76:7e:48:f9:35:57:3f:f5:5a:de:3c:4a:89:50:02:df:f0:95: 95:71:3e:82:33:f0:91:50:3c:aa:06:ef:c4:d8:ee:23:8e:6f: c8:1f:8c:33:eb:45:ec:d4:91:e8:8b:f2:47:82:a0:f1:56:bf: e1:9a:ea:07:03:5d:58:a9:02:ee:57:ef:62:65:a3:7c:2b:14: 51:d3:90:d5:f0:aa:24:3c:27:a0:94:76:8e:b0:c3:80:98:ea: 50:49:0f:6c:41:4d:39:3e:e8:bb:c8:24:fe:88:9c:8d:87:87: 09:fd:aa:69:5f:32:8e:f8:83:7c:44:5b:2c:8d:bd:23:d4:06: ec:71:17:95:8c:35:73:56:3f:bd:0d:c8:c9:d0:26:36:73:a7: 5e:9d:5a:60:ee:4e:b4:fe:03:a6:70:13:23:52:44:8f:d4:71: a2:0c:6f:62:0b:9b:0e:57:ff:e8:68:c1:c1:9e:c9:81:47:44: 04:ed:9c:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTEzRDAxMTAvBgNVBAUTKEZDODBCNDlCNTA3MzMyRkQ0QzlDOTJERDVFMjdBMkRG Q0E4MDY0REEwHhcNMjUwNDI0MjMyNjAzWhcNMjUwNTAxMjMyNjAzWjAYMRYwFAYD VQQDEw02ODBhYzg4Yy1hZDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvv73g1IIfqfshCjwu3JR4UOQD6yjTZSLXf5lHyQRsZkOqfKSvdK9UW3YaPbA 7z8jfUjbp5q10JMX44vxuIpdA3/gejPahIrOvkvdjvAhpqmaqIUYEe5izdtDVFIO t4UtctW1lxk7mOW5o41Frm3wMyACbfjvaRxC3/BV4TizQuX4wJRvAzsH8VmanrT2 cmBlq0dahVlRm1WC+Blx4Hnc1YA/ZECBZ7GJNXZZkFCWVbmXSmQ5GsI41xQFGvYj lunL7z2gMp784Avio6ru0XvwzD/Cek2EpVy/j1rMxbpBWnWeEA6K0hrdXL9SlZ5R DhTAWNryATkERSXkYfGTQsHFBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDi+t6FP BPb2SeWB5pMddqjgBZqRMB8GA1UdIwQYMBaAFPyAtJtQczL9TJyS3V4not/KgGTa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTNEMC9EN0E0QkI1NjA0 QUMxMUVDQkVCNTBDNzlDNEY5QUUwMi9fSUMwbTFCek12MU1uSkxkWGllaTM4cUFa Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JQzBtMUJ6TXYxTW5KTGRYaWVpMzhxQVpOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTNEMC9EN0E0QkI1NjA0QUMxMUVDQkVCNTBDNzlDNEY5QUUwMi9fSUMwbTFCek12 MU1uSkxkWGllaTM4cUFaTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYXpX+4/Hjkiv3Lxv4SfQkRMxF60zSTKwUdmgm2TxjLnXE63T+ij8d EMhCFrX7p6hKyI/Hvr7Ax8LshXZLwIZa4FtK+gfqIsJ2fkj5NVc/9VrePEqJUALf 8JWVcT6CM/CRUDyqBu/E2O4jjm/IH4wz60Xs1JHoi/JHgqDxVr/hmuoHA11YqQLu V+9iZaN8KxRR05DV8KokPCeglHaOsMOAmOpQSQ9sQU05Pui7yCT+iJyNh4cJ/app XzKO+IN8RFssjb0j1AbscReVjDVzVj+9DcjJ0CY2c6denVpg7k60/gOmcBMjUkSP 1HGiDG9iC5sOV//oaMHBnsmBR0QE7Zze -----END CERTIFICATE-----Generated at Sat Apr 26 13:33:34 2025 by rpki-client