$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft File: r_zmN5iBZebFG_v-vRKD1REkAZA.mft (raw, json) Hash identifier: yLvwxow9MQgiMqro1hI5xh9yYMaotoCsiy55IraYMww= Subject key identifier: 46:E8:9A:B1:CF:89:02:AE:CA:06:DE:42:4B:CD:F2:4B:F7:D3:69:59 Authority key identifier: AF:FC:E6:37:98:81:65:E6:C5:1B:FB:FE:BD:12:83:D5:11:24:01:90 Certificate issuer: /CN=A91E4468/serialNumber=AFFCE637988165E6C51BFBFEBD1283D511240190 Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft Manifest number: 0110 Signing time: Fri 25 Apr 2025 04:04:44 +0000 Manifest this update: Fri 25 Apr 2025 04:04:43 +0000 Manifest next update: Fri 02 May 2025 04:04:43 +0000 Files and hashes: 1: r_zmN5iBZebFG_v-vRKD1REkAZA.crl (hash: 6Spg879PqBSwnNJMzHGFU15iv6Nm6H1zAsGcfm16rPw=) 2: C531DD12226F11EF8D24AD63C4F9AE02.roa (hash: a2/vehSWDoff6mLTg7VEADcM0ey8iDfcQQZxJYEqkDM=) 3: C608133C226F11EF8D24AD63C4F9AE02.roa (hash: GATUqbNDhKaVb/i1ZjCIO1rgwevFVCyWk8Ts83izVL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.crl rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4468, serialNumber=AFFCE637988165E6C51BFBFEBD1283D511240190 Validity Not Before: Apr 25 04:04:43 2025 GMT Not After : May 2 04:04:43 2025 GMT Subject: CN=680b09dc-33aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0f:c6:86:96:86:3f:21:0a:58:12:ce:0b:1a: c8:14:7d:32:22:79:b6:53:e8:8e:94:25:d7:6b:6b: 26:85:f0:3d:0b:95:19:0b:e5:19:61:d7:68:e8:68: d6:c6:fb:b4:20:a8:4f:da:f5:61:97:d3:8c:e8:d3: 58:e9:3f:97:ab:fa:0f:f1:22:c7:f5:02:76:61:6e: 01:cb:a1:a3:7c:7b:49:f7:e4:48:40:b4:a0:f7:82: 58:8a:11:eb:a9:9b:f7:ce:d2:f2:da:ca:ff:23:ce: 0a:54:c7:0e:9b:01:77:9e:cc:13:0d:24:7d:c3:c4: 0a:89:dc:6c:46:21:c2:4f:a2:e2:73:54:d4:28:09: 30:d2:1d:98:4a:65:18:6c:f1:8b:96:da:ae:78:8d: 2d:19:17:a6:3f:77:d8:84:bb:c0:8c:03:fe:1f:03: c1:b7:29:13:1e:d8:86:5e:9b:43:f2:55:80:c5:7b: 0b:b6:fd:d1:66:46:31:0a:89:d6:c9:c4:fd:f6:c8: 41:c5:be:da:9c:06:32:c1:2c:82:12:ce:dc:05:d3: 66:5c:39:f0:63:9a:bf:48:b5:be:05:db:c5:bd:17: e6:d9:8d:e7:ea:17:7a:76:cc:30:76:be:9d:5e:e7: b9:be:75:fd:a2:8a:55:37:f8:0f:dd:bd:75:89:22: 5b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E8:9A:B1:CF:89:02:AE:CA:06:DE:42:4B:CD:F2:4B:F7:D3:69:59 X509v3 Authority Key Identifier: keyid:AF:FC:E6:37:98:81:65:E6:C5:1B:FB:FE:BD:12:83:D5:11:24:01:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:17:a6:d6:f1:b2:38:f5:32:10:72:0a:1b:20:f2:fc:c7:2a: 24:bb:5f:7e:21:27:8b:08:f0:a2:72:b5:49:bc:c6:2b:0d:69: 80:e6:b3:9b:15:63:6e:98:6c:01:66:3e:56:5d:71:fe:80:26: 92:10:07:0f:44:af:fc:fa:43:62:6b:e9:dc:2f:33:aa:ce:a4: 2b:3e:21:04:ed:9f:28:6d:6b:24:5c:12:04:81:bd:81:ad:b1: fb:4a:54:01:ac:53:6c:13:fe:e9:c8:0b:51:c0:44:7d:89:db: 67:ca:7b:e1:a2:d5:44:60:6a:7b:c6:c3:f7:e2:4a:3c:23:56: 52:0e:f2:6e:bd:b1:17:30:24:0c:f3:4a:43:b7:2c:dd:14:5a: 54:f5:80:6c:17:12:e3:05:67:8e:30:61:19:74:43:89:bf:3d: 01:d6:e8:c0:c5:80:a7:6a:21:58:bf:04:17:e7:3b:6b:4c:b8: 5f:d1:49:ca:4c:f7:6a:67:ac:cd:af:ad:34:41:75:da:76:f1: 4f:7a:f6:a8:af:85:9a:33:67:46:65:ba:41:53:fc:2e:01:e3: 1a:c5:64:bf:56:5c:39:2b:8f:b1:91:cb:38:a3:08:6e:70:2b: b3:ae:fc:23:80:f5:a1:9e:b9:eb:16:4c:cc:b8:a8:ee:d1:39: 48:d5:0f:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ0NjgxMTAvBgNVBAUTKEFGRkNFNjM3OTg4MTY1RTZDNTFCRkJGRUJEMTI4M0Q1 MTEyNDAxOTAwHhcNMjUwNDI1MDQwNDQzWhcNMjUwNTAyMDQwNDQzWjAYMRYwFAYD VQQDEw02ODBiMDlkYy0zM2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxA/GhpaGPyEKWBLOCxrIFH0yInm2U+iOlCXXa2smhfA9C5UZC+UZYddo6GjW xvu0IKhP2vVhl9OM6NNY6T+Xq/oP8SLH9QJ2YW4By6GjfHtJ9+RIQLSg94JYihHr qZv3ztLy2sr/I84KVMcOmwF3nswTDSR9w8QKidxsRiHCT6Lic1TUKAkw0h2YSmUY bPGLltqueI0tGRemP3fYhLvAjAP+HwPBtykTHtiGXptD8lWAxXsLtv3RZkYxConW ycT99shBxb7anAYywSyCEs7cBdNmXDnwY5q/SLW+BdvFvRfm2Y3n6hd6dswwdr6d Xue5vnX9oopVN/gP3b11iSJbFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbomrHP iQKuygbeQkvN8kv302lZMB8GA1UdIwQYMBaAFK/85jeYgWXmxRv7/r0Sg9URJAGQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDQ2OC84Mjc1MjRFODhF RTUxMUVFQTJFRUREMTJDNEY5QUUwMi9yX3ptTjVpQlplYkZHX3YtdlJLRDFSRWtB WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jfem1ONWlCWmViRkdfdi12UktEMVJFa0FaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDQ2OC84Mjc1MjRFODhFRTUxMUVFQTJFRUREMTJDNEY5QUUwMi9yX3ptTjVpQlpl YkZHX3YtdlJLRDFSRWtBWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCF6bW8bI49TIQcgobIPL8xyoku19+ISeLCPCicrVJvMYrDWmA5rOb FWNumGwBZj5WXXH+gCaSEAcPRK/8+kNia+ncLzOqzqQrPiEE7Z8obWskXBIEgb2B rbH7SlQBrFNsE/7pyAtRwER9idtnynvhotVEYGp7xsP34ko8I1ZSDvJuvbEXMCQM 80pDtyzdFFpU9YBsFxLjBWeOMGEZdEOJvz0B1ujAxYCnaiFYvwQX5ztrTLhf0UnK TPdqZ6zNr600QXXadvFPevaor4WaM2dGZbpBU/wuAeMaxWS/Vlw5K4+xkcs4owhu cCuzrvwjgPWhnrnrFkzMuKju0TlI1Q/3 -----END CERTIFICATE-----Generated at Sat Apr 26 04:27:26 2025 by rpki-client