$ rpki-client -vvf rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft File: RisW0yeXLqdxImoBWItSBe_qRJY.mft (raw, json) Hash identifier: XPAK+krPZe8okrzLw5P2CRBDmlUmc3DwGuedPWN93cU= Subject key identifier: 55:D7:82:5D:DC:90:A7:C8:4D:0B:25:EF:EC:0F:3C:BE:A7:A9:F4:B2 Authority key identifier: 46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96 Certificate issuer: /CN=A91E268B/serialNumber=462B16D327972EA771226A01588B5205EFEA4496 Certificate serial: 0653 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft Manifest number: 0642 Signing time: Thu 24 Apr 2025 22:26:10 +0000 Manifest this update: Thu 24 Apr 2025 22:26:09 +0000 Manifest next update: Thu 01 May 2025 22:26:09 +0000 Files and hashes: 1: RisW0yeXLqdxImoBWItSBe_qRJY.crl (hash: Pwn3Qbphwy4afydgxBv84P9IaCh1YYNJJGJP7vadtf0=) 2: 7549B6D2744A11EDA8F69509C4F9AE02.roa (hash: Qanq6NRaIr7kIyU/FtT70GBfspNN2MElYD/z614Bqk8=) 3: 3F4ECBD2744D11EDB5D08682C4F9AE02.roa (hash: g6OgdDZKbwzC3zinj7MpaUKQ1NJe0hr5+U2aIYgw2E0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.crl rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1619 (0x653) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E268B, serialNumber=462B16D327972EA771226A01588B5205EFEA4496 Validity Not Before: Apr 24 22:26:09 2025 GMT Not After : May 1 22:26:09 2025 GMT Subject: CN=680aba82-7d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:dd:db:1c:b7:20:29:cd:c0:1d:6a:97:76:34: 31:7c:c4:52:14:42:9f:29:2f:b0:f8:e5:e0:5c:3e: 40:09:9b:e0:12:ba:65:94:cb:1f:b1:0e:4a:1a:8d: f8:c4:8d:57:99:d0:51:db:3a:d0:f9:01:ae:99:2f: bc:59:0b:41:0e:45:9a:9c:4e:c9:7d:5a:b0:ca:e6: 35:a7:13:69:c3:0d:ac:9d:df:f2:d9:d5:da:4c:9b: 69:f0:80:d2:28:0d:2a:64:d9:8e:0a:d8:dc:f8:d7: d2:10:ce:00:0d:22:10:de:5b:15:ee:3f:db:59:bc: 79:42:8a:9a:6f:13:49:cc:7a:75:fd:25:96:d8:5d: 94:48:55:2e:50:bb:85:95:b9:e6:e2:89:47:07:e0: 7d:fd:16:ec:20:ed:2c:46:e1:84:d9:7a:2d:33:b5: 61:11:e3:f9:53:d6:fb:34:91:a9:35:d0:40:a3:44: f7:1f:bb:42:ab:d0:69:52:8d:e1:90:c5:2b:11:79: f4:05:a8:6e:d4:93:d7:ea:5a:5b:bd:58:de:e1:fc: 15:7f:26:1b:57:ee:cd:74:0e:7b:ac:b9:2a:d8:1a: b7:0e:14:0f:a0:f0:ca:9e:1a:a7:79:54:ac:2e:bd: 5a:4e:61:75:21:82:07:e9:36:ba:27:1b:f7:c8:5b: 7d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D7:82:5D:DC:90:A7:C8:4D:0B:25:EF:EC:0F:3C:BE:A7:A9:F4:B2 X509v3 Authority Key Identifier: keyid:46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:08:16:52:dc:e9:c0:35:0b:53:1e:8f:21:d5:a4:08:66:63: ca:b1:89:f3:11:ab:45:5c:69:21:e7:23:f2:1d:f7:e3:79:69: ae:8f:6f:96:5c:c0:a3:25:5e:64:bf:4a:dc:a4:68:9b:33:3d: ad:34:76:08:62:07:70:88:21:ff:60:4b:fe:1b:ad:4f:a4:9a: 3d:22:8f:f6:75:ba:4a:1c:96:01:31:e2:d4:a5:14:3e:f8:6e: 26:9c:31:c7:d1:63:73:aa:7e:23:3e:19:a2:65:0e:9e:6c:33: ea:ac:df:f7:36:71:1b:77:e1:63:c6:10:a1:9b:da:e3:76:ff: 4c:3b:aa:3c:52:94:d1:4f:60:cb:f8:d2:35:67:ce:72:c6:d6: 5d:67:a1:0a:03:81:59:7a:22:d3:0a:5c:3b:0a:6d:e5:03:e2: 8e:f6:fb:7b:f2:6a:cc:75:aa:56:c6:b5:39:8c:16:4f:2d:1a: 07:a1:69:9b:0a:c5:4e:aa:22:55:f5:87:47:d5:fa:1e:c4:37: 65:d2:c8:cd:4e:51:ef:9a:24:0b:f3:2a:49:51:30:a2:94:ed: e9:7e:83:40:15:70:83:cf:9e:95:fd:fb:2a:a7:f2:2f:26:fe: 90:ba:56:f3:c5:32:ae:cb:46:62:bd:58:2d:b4:06:3b:a5:66: 64:96:f7:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI2OEIxMTAvBgNVBAUTKDQ2MkIxNkQzMjc5NzJFQTc3MTIyNkEwMTU4OEI1MjA1 RUZFQTQ0OTYwHhcNMjUwNDI0MjIyNjA5WhcNMjUwNTAxMjIyNjA5WjAYMRYwFAYD VQQDEw02ODBhYmE4Mi03ZDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyt3bHLcgKc3AHWqXdjQxfMRSFEKfKS+w+OXgXD5ACZvgErpllMsfsQ5KGo34 xI1XmdBR2zrQ+QGumS+8WQtBDkWanE7JfVqwyuY1pxNpww2snd/y2dXaTJtp8IDS KA0qZNmOCtjc+NfSEM4ADSIQ3lsV7j/bWbx5QoqabxNJzHp1/SWW2F2USFUuULuF lbnm4olHB+B9/RbsIO0sRuGE2XotM7VhEeP5U9b7NJGpNdBAo0T3H7tCq9BpUo3h kMUrEXn0Bahu1JPX6lpbvVje4fwVfyYbV+7NdA57rLkq2Bq3DhQPoPDKnhqneVSs Lr1aTmF1IYIH6Ta6Jxv3yFt9xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXXgl3c kKfITQsl7+wPPL6nqfSyMB8GA1UdIwQYMBaAFEYrFtMnly6ncSJqAViLUgXv6kSW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjY4Qi80MjZGNTdDMDhE MzkxMUVCQjlGNENCMTdDNEY5QUUwMi9SaXNXMHllWExxZHhJbW9CV0l0U0JlX3FS SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Jpc1cweWVYTHFkeEltb0JXSXRTQmVfcVJKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjY4Qi80MjZGNTdDMDhEMzkxMUVCQjlGNENCMTdDNEY5QUUwMi9SaXNXMHllWExx ZHhJbW9CV0l0U0JlX3FSSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBCBZS3OnANQtTHo8h1aQIZmPKsYnzEatFXGkh5yPyHffjeWmuj2+W XMCjJV5kv0rcpGibMz2tNHYIYgdwiCH/YEv+G61PpJo9Io/2dbpKHJYBMeLUpRQ+ +G4mnDHH0WNzqn4jPhmiZQ6ebDPqrN/3NnEbd+FjxhChm9rjdv9MO6o8UpTRT2DL +NI1Z85yxtZdZ6EKA4FZeiLTClw7Cm3lA+KO9vt78mrMdapWxrU5jBZPLRoHoWmb CsVOqiJV9YdH1foexDdl0sjNTlHvmiQL8ypJUTCilO3pfoNAFXCDz56V/fsqp/Iv Jv6QulbzxTKuy0ZivVgttAY7pWZklvfY -----END CERTIFICATE-----Generated at Sat Apr 26 17:06:38 2025 by rpki-client