$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft File: 29u3f7gUXp1EhgdPtz74TVSOpiI.mft (raw, json) Hash identifier: 4Grh9V6oGZ0hzr41958f0YCghFjh/JA7igyn403vvOE= Subject key identifier: C7:C5:69:37:B8:EB:2B:A9:BC:4D:69:27:66:5E:03:35:5B:9F:80:0E Authority key identifier: DB:DB:B7:7F:B8:14:5E:9D:44:86:07:4F:B7:3E:F8:4D:54:8E:A6:22 Certificate issuer: /CN=A91E1511/serialNumber=DBDBB77FB8145E9D4486074FB73EF84D548EA622 Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft Manifest number: B1 Signing time: Fri 25 Apr 2025 05:02:23 +0000 Manifest this update: Fri 25 Apr 2025 05:02:23 +0000 Manifest next update: Fri 02 May 2025 05:02:23 +0000 Files and hashes: 1: 29u3f7gUXp1EhgdPtz74TVSOpiI.crl (hash: csv61WW39Qo8G8WbPmvM7PxOcqGYTNCDZB+OPWEya18=) 2: 5741EB0A159311EFA0CC790BC4F9AE02.roa (hash: jE4GzHd14AerZws/zq+eZy5XQS34aDVO012G4f0K8Tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.crl rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1511, serialNumber=DBDBB77FB8145E9D4486074FB73EF84D548EA622 Validity Not Before: Apr 25 05:02:23 2025 GMT Not After : May 2 05:02:23 2025 GMT Subject: CN=680b175f-dc61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:32:1c:bf:35:6a:c3:4b:fc:09:ba:8c:b3:d8: 45:bb:2e:c3:3b:ba:9f:7c:a8:8a:ab:2a:7e:58:e8: 9a:1e:5c:bb:60:51:64:8c:29:be:a6:a0:79:ff:62: 01:ed:36:22:30:1e:9f:cc:28:8f:b7:cc:50:32:cb: d9:85:41:06:e9:1c:99:02:b1:f9:d2:c0:e3:b1:08: a0:b8:d6:22:b3:f8:21:10:85:29:62:7f:96:90:3a: d3:69:49:b4:a4:2c:25:07:7d:45:59:86:33:ec:94: dd:1e:71:79:8a:88:31:af:5e:04:6d:73:4a:20:b0: 8e:86:7c:08:b1:30:dd:ec:0f:5b:53:52:fc:a6:c9: af:3e:d1:5e:9e:17:db:8b:10:f4:19:54:1e:35:29: 51:12:5f:50:a0:87:12:0a:55:63:33:d8:46:f1:37: 1c:72:1d:ea:23:8a:7f:cb:47:07:bb:0d:83:c2:c1: 78:ad:5d:20:aa:8a:c5:80:0e:01:f0:b7:8f:42:9d: d0:64:6c:4e:d6:99:30:44:34:32:28:48:e2:b0:4d: dc:fc:4d:49:d8:b4:2f:46:61:a9:e5:46:4f:54:4d: fe:02:bc:e7:df:8b:76:5b:fd:d4:76:f3:ec:41:fd: 5e:6e:d7:d2:03:f1:7b:70:84:6e:e8:18:af:c9:5d: a3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C5:69:37:B8:EB:2B:A9:BC:4D:69:27:66:5E:03:35:5B:9F:80:0E X509v3 Authority Key Identifier: keyid:DB:DB:B7:7F:B8:14:5E:9D:44:86:07:4F:B7:3E:F8:4D:54:8E:A6:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:59:7b:45:21:84:73:f7:96:70:af:dd:98:1d:3f:c8:b3:3f: b2:30:53:1f:bd:7e:d1:55:aa:81:de:36:b7:a0:55:6e:b8:52: 3d:0e:b5:08:72:e4:aa:b2:41:c9:ba:35:44:a6:c3:36:28:4b: 88:8c:0c:5d:a4:29:f6:ee:bc:b5:56:80:c7:37:60:b7:f2:37: 80:a6:0f:58:cf:1b:ae:e1:fa:d2:f0:68:d6:db:d4:07:5a:00: f7:75:f3:73:f7:34:1a:77:34:a5:0a:9b:a1:8f:8b:b4:65:9b: 6b:06:90:12:4a:e3:e7:20:19:64:2b:61:48:e2:c3:31:74:68: 83:c0:ff:ae:45:66:81:ac:a3:ba:7b:0f:75:4e:28:11:5a:e2: 0b:38:71:fd:06:d2:5c:3a:04:08:b0:62:43:53:58:17:bd:0b: a7:fd:d1:46:ea:56:2d:6a:09:7f:94:1c:f6:46:57:16:25:49: bf:21:33:a9:e6:d0:f0:69:30:2e:c4:73:5b:9f:e5:9d:24:af: 75:d9:49:ef:89:2c:39:95:91:75:91:f9:c2:d7:bc:53:44:e9: 5f:b5:24:c1:5b:af:f9:e9:77:6a:ca:7d:97:c4:46:c7:48:52: bb:bc:6a:03:e4:f9:e9:fe:9e:8a:7b:db:63:cc:de:c5:12:e5: df:3b:69:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE1MTExMTAvBgNVBAUTKERCREJCNzdGQjgxNDVFOUQ0NDg2MDc0RkI3M0VGODRE NTQ4RUE2MjIwHhcNMjUwNDI1MDUwMjIzWhcNMjUwNTAyMDUwMjIzWjAYMRYwFAYD VQQDEw02ODBiMTc1Zi1kYzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDIcvzVqw0v8CbqMs9hFuy7DO7qffKiKqyp+WOiaHly7YFFkjCm+pqB5/2IB 7TYiMB6fzCiPt8xQMsvZhUEG6RyZArH50sDjsQiguNYis/ghEIUpYn+WkDrTaUm0 pCwlB31FWYYz7JTdHnF5iogxr14EbXNKILCOhnwIsTDd7A9bU1L8psmvPtFenhfb ixD0GVQeNSlREl9QoIcSClVjM9hG8Tccch3qI4p/y0cHuw2DwsF4rV0gqorFgA4B 8LePQp3QZGxO1pkwRDQyKEjisE3c/E1J2LQvRmGp5UZPVE3+Arzn34t2W/3UdvPs Qf1ebtfSA/F7cIRu6BivyV2j/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfFaTe4 6yupvE1pJ2ZeAzVbn4AOMB8GA1UdIwQYMBaAFNvbt3+4FF6dRIYHT7c++E1UjqYi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTUxMS84RDM0MzIzQzEz RjgxMUVGQTM4NENFMjNDNEY5QUUwMi8yOXUzZjdnVVhwMUVoZ2RQdHo3NFRWU09w aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI5dTNmN2dVWHAxRWhnZFB0ejc0VFZTT3BpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTUxMS84RDM0MzIzQzEzRjgxMUVGQTM4NENFMjNDNEY5QUUwMi8yOXUzZjdnVVhw MUVoZ2RQdHo3NFRWU09waUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrWXtFIYRz95Zwr92YHT/Isz+yMFMfvX7RVaqB3ja3oFVuuFI9DrUI cuSqskHJujVEpsM2KEuIjAxdpCn27ry1VoDHN2C38jeApg9Yzxuu4frS8GjW29QH WgD3dfNz9zQadzSlCpuhj4u0ZZtrBpASSuPnIBlkK2FI4sMxdGiDwP+uRWaBrKO6 ew91TigRWuILOHH9BtJcOgQIsGJDU1gXvQun/dFG6lYtagl/lBz2RlcWJUm/ITOp 5tDwaTAuxHNbn+WdJK912UnviSw5lZF1kfnC17xTROlftSTBW6/56Xdqyn2XxEbH SFK7vGoD5Pnp/p6Ke9tjzN7FEuXfO2mF -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:51 2025 by rpki-client