$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft File: pOaGeeZ7phon9Pib0JKu5cH3ITk.mft (raw, json) Hash identifier: pMnjLAesEq7u6g1CwdCMzyu7RmglQ3w55ZGSBvsiwUI= Subject key identifier: C5:16:12:5A:B9:CC:A6:8B:42:B2:E0:2B:90:CB:52:BA:ED:35:33:91 Authority key identifier: A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39 Certificate issuer: /CN=A91E1B48/serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft Manifest number: 5F Signing time: Fri 25 Apr 2025 06:04:43 +0000 Manifest this update: Fri 25 Apr 2025 06:04:42 +0000 Manifest next update: Fri 02 May 2025 06:04:42 +0000 Files and hashes: 1: pOaGeeZ7phon9Pib0JKu5cH3ITk.crl (hash: l94DD3WYjh/Qui2Z37e8QurUNGTLo/PKk6+mC7VLq94=) 2: FB03B42C927411EF870E655AC4F9AE02.roa (hash: u4w+Qp27Y9kvTk+tCZ+0s7VTT7TtAcdJXuu92GYJlRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1B48, serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139 Validity Not Before: Apr 25 06:04:42 2025 GMT Not After : May 2 06:04:42 2025 GMT Subject: CN=680b25fb-c764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ab:38:24:e9:bd:70:6b:62:d2:a6:4e:ea:ab: bf:c9:2a:fe:79:2d:f0:bc:0d:36:c4:0c:2d:63:d6: a3:bc:5f:3f:a8:7d:f5:9b:a9:ee:49:75:4d:2c:58: 3c:67:33:eb:80:90:42:49:13:4f:8d:0c:9f:c4:54: 6d:2f:70:4d:af:c3:34:10:41:87:3e:eb:cc:79:e2: 42:47:6c:f6:0a:73:33:d3:66:13:38:0d:c1:be:2d: 28:6c:c0:0d:be:02:75:36:22:a9:2e:1f:1d:c7:7a: 64:62:ac:50:3c:3e:87:cf:3a:9c:de:a5:62:a9:6c: e0:5c:75:50:94:9a:9b:64:36:a8:a7:d7:06:f6:1f: a6:00:b1:23:93:25:6b:43:7b:79:86:dd:32:af:e9: 37:3d:af:2b:f8:f9:a2:ba:49:eb:64:93:3d:b8:81: 50:1e:64:cf:9a:86:c6:db:d8:ad:d0:15:97:61:cd: c9:94:de:da:a9:48:4b:a0:9b:79:b4:4f:fb:2b:ed: 09:f8:ac:ba:a0:f0:4e:41:64:0a:2b:0b:86:ea:30: 90:93:a5:1e:43:e4:0f:e0:c8:cd:b4:65:06:8e:9e: 5e:89:36:01:50:ca:67:61:f5:4d:cb:5b:55:d5:91: 53:63:84:b6:6f:2b:f5:62:66:6a:86:02:cf:5d:f1: 4f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:16:12:5A:B9:CC:A6:8B:42:B2:E0:2B:90:CB:52:BA:ED:35:33:91 X509v3 Authority Key Identifier: keyid:A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:a9:05:ea:60:ce:66:77:80:8d:3d:5d:1a:ba:39:2c:7f:6b: 2d:25:aa:57:bf:09:7f:58:25:1f:31:d2:f8:23:07:11:df:67: 3c:10:96:aa:e1:95:96:78:99:77:4d:fc:bb:5a:0d:08:58:88: 3f:10:71:0a:31:12:5e:97:3e:64:a2:f3:db:ea:71:41:59:11: f6:30:69:29:0f:95:04:e1:77:b3:1c:8b:7d:28:82:39:1d:61: b4:ef:bf:c8:32:8c:96:94:7c:80:af:b9:fa:16:d8:d1:59:68: 4b:55:24:f4:66:f9:e0:10:10:a8:12:8e:7f:70:ef:3a:9a:09: 4e:e1:61:c9:32:32:13:3b:0b:40:b5:af:b9:1a:97:44:26:a1: 5b:d1:e3:44:c1:a3:1c:79:6d:6b:bc:5f:13:00:06:d3:79:2c: 7a:c9:dd:ef:63:e5:f0:75:96:37:fd:ad:9a:c5:df:a4:e9:6a: 72:64:9c:6e:b6:71:7d:12:da:3b:8d:21:6e:5b:c1:0f:dc:80: b3:f9:35:d7:3e:7f:01:e6:d6:ef:c8:ac:84:35:98:47:d9:8c: 45:8f:b6:20:d6:d3:04:55:fd:b1:5f:55:26:04:4c:81:a3:4e: 5f:78:33:8a:9c:dd:9d:55:0d:c6:1c:d2:cc:3d:ec:0e:f7:d8: cd:4d:87:c7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUI0ODExMC8GA1UEBRMoQTRFNjg2NzlFNjdCQTYxQTI3RjRGODlCRDA5MkFFRTVD MUY3MjEzOTAeFw0yNTA0MjUwNjA0NDJaFw0yNTA1MDIwNjA0NDJaMBgxFjAUBgNV BAMTDTY4MGIyNWZiLWM3NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaqzgk6b1wa2LSpk7qq7/JKv55LfC8DTbEDC1j1qO8Xz+offWbqe5JdU0sWDxn M+uAkEJJE0+NDJ/EVG0vcE2vwzQQQYc+68x54kJHbPYKczPTZhM4DcG+LShswA2+ AnU2IqkuHx3HemRirFA8PofPOpzepWKpbOBcdVCUmptkNqin1wb2H6YAsSOTJWtD e3mG3TKv6Tc9ryv4+aK6Setkkz24gVAeZM+ahsbb2K3QFZdhzcmU3tqpSEugm3m0 T/sr7Qn4rLqg8E5BZAorC4bqMJCTpR5D5A/gyM20ZQaOnl6JNgFQymdh9U3LW1XV kVNjhLZvK/ViZmqGAs9d8U9zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxRYSWrnM potCsuArkMtSuu01M5EwHwYDVR0jBBgwFoAUpOaGeeZ7phon9Pib0JKu5cH3ITkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxQjQ4LzY2RjU3NjQ0OTI3 NDExRUZCRjg2NEEzREM0RjlBRTAyL3BPYUdlZVo3cGhvbjlQaWIwSkt1NWNIM0lU ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcE9hR2VlWjdwaG9uOVBpYjBKS3U1Y0gzSVRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx QjQ4LzY2RjU3NjQ0OTI3NDExRUZCRjg2NEEzREM0RjlBRTAyL3BPYUdlZVo3cGhv bjlQaWIwSkt1NWNIM0lUay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALKpBepgzmZ3gI09XRq6OSx/ay0lqle/CX9YJR8x0vgjBxHfZzwQlqrh lZZ4mXdN/LtaDQhYiD8QcQoxEl6XPmSi89vqcUFZEfYwaSkPlQThd7Mci30ogjkd YbTvv8gyjJaUfICvufoW2NFZaEtVJPRm+eAQEKgSjn9w7zqaCU7hYckyMhM7C0C1 r7kal0QmoVvR40TBoxx5bWu8XxMABtN5LHrJ3e9j5fB1ljf9rZrF36TpanJknG62 cX0S2juNIW5bwQ/cgLP5Ndc+fwHm1u/IrIQ1mEfZjEWPtiDW0wRV/bFfVSYETIGj Tl94M4qc3Z1VDcYc0sw97A732M1Nh8c= -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:39 2025 by rpki-client