$ rpki-client -vvf rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft File: k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft (raw, json) Hash identifier: 20QpJA/LDqaolshEv8a8xakKJ82iUDB637QSYoVX1aU= Subject key identifier: 4B:29:24:5C:FB:39:B8:A2:88:FF:75:1E:8B:E2:81:39:3D:59:85:75 Authority key identifier: 93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA Certificate issuer: /CN=A91E473F/serialNumber=9341F9B70F714F131C52E1FE4BE5E5AB8C26EBEA Certificate serial: 060D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft Manifest number: 0609 Signing time: Thu 24 Apr 2025 22:37:53 +0000 Manifest this update: Thu 24 Apr 2025 22:37:52 +0000 Manifest next update: Thu 01 May 2025 22:37:52 +0000 Files and hashes: 1: k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl (hash: 0YvEn+3HKbwAlVt7QEMOVP6SauNtQkSLD+tG112Xfqo=) 2: 4816D7F0327A11EEA132B74CC4F9AE02.roa (hash: vwAWNkOECPjjWatP7CXVkY05vRy7dP/taTedzApQJgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1549 (0x60d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E473F, serialNumber=9341F9B70F714F131C52E1FE4BE5E5AB8C26EBEA Validity Not Before: Apr 24 22:37:52 2025 GMT Not After : May 1 22:37:52 2025 GMT Subject: CN=680abd40-3f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:19:76:cc:46:5b:37:db:cb:44:62:22:66:d4: 2d:d5:4b:64:85:c4:0b:3c:5c:92:71:ce:42:7a:0a: b2:9f:10:e9:f5:d7:ea:87:e6:89:aa:e6:8f:05:86: 97:57:26:53:8c:f2:21:28:99:25:ba:08:72:3d:38: e7:e6:51:0f:ab:14:fc:d6:59:5e:5e:14:7b:1f:61: 42:ad:34:24:c2:ed:92:1e:2c:8e:44:12:ce:a0:a6: 04:91:9d:6f:fd:5e:30:8e:f7:ab:0f:af:68:b9:31: aa:b9:38:1b:33:26:3b:ff:f1:f1:e9:9e:1d:8c:80: a5:8c:a8:d4:87:95:15:69:d8:b1:d6:25:db:8f:d3: ef:bb:36:7e:9c:49:44:f3:98:8f:2d:67:33:1c:c2: 2c:81:63:93:66:7f:62:28:02:72:f6:84:a4:4e:c2: 06:49:fd:9a:22:48:44:a8:98:b0:56:aa:f4:db:f9: 8e:f4:7d:86:79:ea:c6:d5:e2:c9:0b:3f:e8:7c:1b: 26:4b:a5:0d:69:dc:ca:84:9f:af:65:a1:df:93:f7: c2:20:7f:29:fa:a0:a8:ce:11:3b:77:af:51:a9:d2: c2:fc:49:30:3d:30:a4:38:af:b0:14:2b:fe:72:4a: 8e:a8:5f:95:8c:3a:26:5a:a1:c9:f4:f3:3b:91:85: 74:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:29:24:5C:FB:39:B8:A2:88:FF:75:1E:8B:E2:81:39:3D:59:85:75 X509v3 Authority Key Identifier: keyid:93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:e9:da:99:e6:bd:40:2b:4d:b1:14:19:6a:f8:7b:5c:87:fb: 63:5c:3d:54:17:bb:74:48:fd:e2:9b:74:47:36:85:89:47:db: 4d:8a:fe:fc:66:d2:7d:c6:3c:5c:c9:81:b3:89:2b:a2:07:f6: 47:cb:db:db:ed:fe:e7:4d:66:a1:98:7f:40:2e:da:e2:c2:e4: 2d:24:b7:e8:42:85:70:85:b0:3e:1a:16:10:57:37:61:91:9f: d1:fa:de:77:27:49:af:90:c8:df:b4:46:28:fc:79:0f:1c:65: fe:5b:ce:b8:6e:9a:77:da:f3:e7:c3:2f:ca:52:ea:b6:78:be: 58:1a:9d:c8:1d:68:60:59:cf:18:c9:0a:f5:1e:77:e4:da:68: 20:ed:be:cd:9c:1d:0a:e6:2b:ca:3b:96:a6:7f:f6:f7:aa:5e: 44:4f:15:d6:40:59:7f:63:79:aa:b0:15:7e:21:27:2f:9a:fe: 37:f1:f9:69:2f:00:7a:ce:fa:a5:9e:76:9f:0a:d1:9f:a0:81: b7:17:02:f7:38:dc:98:d3:f8:8a:06:0c:87:c2:50:54:7a:0d: c2:86:6c:db:ae:00:ac:28:a8:4a:7c:96:ed:65:3a:65:90:40: 09:9c:92:72:c1:35:53:0c:61:48:4f:4f:a5:24:03:43:b6:a0: 2f:ce:f3:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ3M0YxMTAvBgNVBAUTKDkzNDFGOUI3MEY3MTRGMTMxQzUyRTFGRTRCRTVFNUFC OEMyNkVCRUEwHhcNMjUwNDI0MjIzNzUyWhcNMjUwNTAxMjIzNzUyWjAYMRYwFAYD VQQDEw02ODBhYmQ0MC0zZjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhl2zEZbN9vLRGIiZtQt1UtkhcQLPFyScc5CegqynxDp9dfqh+aJquaPBYaX VyZTjPIhKJklughyPTjn5lEPqxT81lleXhR7H2FCrTQkwu2SHiyORBLOoKYEkZ1v /V4wjverD69ouTGquTgbMyY7//Hx6Z4djICljKjUh5UVadix1iXbj9PvuzZ+nElE 85iPLWczHMIsgWOTZn9iKAJy9oSkTsIGSf2aIkhEqJiwVqr02/mO9H2GeerG1eLJ Cz/ofBsmS6UNadzKhJ+vZaHfk/fCIH8p+qCozhE7d69RqdLC/EkwPTCkOK+wFCv+ ckqOqF+VjDomWqHJ9PM7kYV0QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEspJFz7 ObiiiP91HovigTk9WYV1MB8GA1UdIwQYMBaAFJNB+bcPcU8THFLh/kvl5auMJuvq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDczRi9ENkU1NDAzODlE QjMxMUVCQjAzMkIwNENDNEY5QUUwMi9rMEg1dHc5eFR4TWNVdUgtUy1YbHE0d202 LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2swSDV0dzl4VHhNY1V1SC1TLVhscTR3bTYtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDczRi9ENkU1NDAzODlEQjMxMUVCQjAzMkIwNENDNEY5QUUwMi9rMEg1dHc5eFR4 TWNVdUgtUy1YbHE0d202LW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm6dqZ5r1AK02xFBlq+Htch/tjXD1UF7t0SP3im3RHNoWJR9tNiv78 ZtJ9xjxcyYGziSuiB/ZHy9vb7f7nTWahmH9ALtriwuQtJLfoQoVwhbA+GhYQVzdh kZ/R+t53J0mvkMjftEYo/HkPHGX+W864bpp32vPnwy/KUuq2eL5YGp3IHWhgWc8Y yQr1Hnfk2mgg7b7NnB0K5ivKO5amf/b3ql5ETxXWQFl/Y3mqsBV+IScvmv438flp LwB6zvqlnnafCtGfoIG3FwL3ONyY0/iKBgyHwlBUeg3ChmzbrgCsKKhKfJbtZTpl kEAJnJJywTVTDGFIT0+lJANDtqAvzvPP -----END CERTIFICATE-----Generated at Sat Apr 26 12:38:32 2025 by rpki-client