$ rpki-client -vvf rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft File: oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft (raw, json) Hash identifier: aKYwhAlTTLSg9KWZ0b/CSOdb5pNT8pyn89WtFeynPDk= Subject key identifier: F8:5C:C6:AD:DB:B6:6D:45:C0:45:DE:D1:B4:66:3C:A7:2B:4B:20:D2 Authority key identifier: A2:24:36:84:22:3D:2C:25:C6:AF:17:6A:5F:02:FA:02:B2:4F:68:0B Certificate issuer: /CN=A91E953B/serialNumber=A2243684223D2C25C6AF176A5F02FA02B24F680B Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft Manifest number: 011E Signing time: Fri 25 Apr 2025 03:49:18 +0000 Manifest this update: Fri 25 Apr 2025 03:49:17 +0000 Manifest next update: Fri 02 May 2025 03:49:17 +0000 Files and hashes: 1: oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl (hash: j1DCUJM+10lHH468/ffH1+egzeW5l2svSJVzpIplUDc=) 2: 12E1FD886C9C11EE9F3C5653C4F9AE02.roa (hash: QQ5QrwGTURdTMG/7o8+lIRwrf/ztbEh4ekM9cA/bz/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E953B, serialNumber=A2243684223D2C25C6AF176A5F02FA02B24F680B Validity Not Before: Apr 25 03:49:17 2025 GMT Not After : May 2 03:49:17 2025 GMT Subject: CN=680b063d-549c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:32:b0:2c:f2:a7:52:02:50:05:2b:6c:16:83: c9:87:a2:06:d8:60:76:a0:d2:26:79:7f:c6:94:2f: ab:f2:05:81:70:ed:d2:07:35:94:87:42:c7:4e:bb: 91:4b:18:57:c9:8c:fd:61:10:94:2c:ec:88:b0:7d: 0c:54:d7:4a:35:00:6a:37:db:96:9c:30:25:9f:12: 30:2e:d9:22:40:23:7e:8f:43:d3:06:f8:a7:92:01: 65:bd:01:95:11:17:61:be:ec:2f:f1:b6:18:14:ae: e3:9f:33:e8:b6:2c:18:f7:82:da:51:dc:53:be:ce: 64:bc:2f:7c:4a:ca:6c:61:39:39:6d:82:06:d3:c7: ae:a3:bc:99:25:b5:da:9b:2d:0a:98:e8:6b:29:24: 04:3e:98:c8:66:f6:60:af:8f:c4:9c:f4:34:1d:6e: 28:f5:5a:ac:25:fa:85:60:cf:77:a3:75:38:64:d1: 2d:24:b6:a8:bd:39:dd:80:36:24:03:cd:9c:35:68: 70:42:85:3f:04:25:e9:c2:4d:6f:f2:2e:91:db:c5: 9a:f6:5a:41:5f:64:93:93:8d:15:19:7a:91:9e:02: b1:78:cd:5f:a3:c1:1e:64:03:c0:88:6f:f0:4d:07: 6e:41:7e:cc:b0:32:67:45:ed:f4:72:dd:4c:7f:b1: ef:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5C:C6:AD:DB:B6:6D:45:C0:45:DE:D1:B4:66:3C:A7:2B:4B:20:D2 X509v3 Authority Key Identifier: keyid:A2:24:36:84:22:3D:2C:25:C6:AF:17:6A:5F:02:FA:02:B2:4F:68:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:b4:da:34:82:b1:b0:45:78:6c:24:d5:2a:53:bd:86:0c:e6: ed:a2:b3:d6:48:f9:42:6d:a5:2b:3f:b0:d0:12:59:32:7b:66: 25:06:30:fd:f3:ec:fa:df:7a:38:91:b7:80:be:52:a7:ad:12: 5e:b1:5b:c5:6a:77:f9:8e:43:5a:7d:be:52:65:01:b0:3a:88: b5:13:74:31:eb:3e:2f:03:c1:d6:fc:95:12:0a:1c:a7:c5:c3: 9e:f2:6f:5e:2b:b9:de:bf:bb:9d:24:b0:a0:b6:19:96:f3:ab: 18:46:28:15:bc:cf:b3:73:06:54:38:a8:ca:a0:bb:65:b7:60: 55:79:78:d3:32:90:ac:9b:94:cc:e3:b6:70:06:9c:ef:6d:b9: a5:d6:0f:6a:f4:df:ad:17:01:4d:04:60:f3:06:90:0a:11:e5: 0e:58:8c:10:d9:a7:86:5b:e9:5d:93:1d:35:dd:3a:cd:a8:ae: 19:28:43:62:74:24:14:42:05:d2:44:8d:e0:fa:2b:0e:6e:a7: 3a:38:8b:2b:b2:bc:6a:7f:b9:7c:f0:2a:f8:23:7e:f1:3a:95: c2:6f:07:6a:35:b2:0f:f9:70:74:97:90:72:62:e5:1e:ee:cf: d8:29:08:1a:cd:93:c3:97:b6:7d:76:9b:02:1f:40:57:ef:a1: 08:80:7a:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk1M0IxMTAvBgNVBAUTKEEyMjQzNjg0MjIzRDJDMjVDNkFGMTc2QTVGMDJGQTAy QjI0RjY4MEIwHhcNMjUwNDI1MDM0OTE3WhcNMjUwNTAyMDM0OTE3WjAYMRYwFAYD VQQDEw02ODBiMDYzZC01NDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzKwLPKnUgJQBStsFoPJh6IG2GB2oNImeX/GlC+r8gWBcO3SBzWUh0LHTruR SxhXyYz9YRCULOyIsH0MVNdKNQBqN9uWnDAlnxIwLtkiQCN+j0PTBvinkgFlvQGV ERdhvuwv8bYYFK7jnzPotiwY94LaUdxTvs5kvC98SspsYTk5bYIG08euo7yZJbXa my0KmOhrKSQEPpjIZvZgr4/EnPQ0HW4o9VqsJfqFYM93o3U4ZNEtJLaovTndgDYk A82cNWhwQoU/BCXpwk1v8i6R28Wa9lpBX2STk40VGXqRngKxeM1fo8EeZAPAiG/w TQduQX7MsDJnRe30ct1Mf7HvHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhcxq3b tm1FwEXe0bRmPKcrSyDSMB8GA1UdIwQYMBaAFKIkNoQiPSwlxq8Xal8C+gKyT2gL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTUzQi9DOEQwMzkyMjZD OUExMUVFODVCRkRGNEZDNEY5QUUwMi9vaVEyaENJOUxDWEdyeGRxWHdMNkFySlBh QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29pUTJoQ0k5TENYR3J4ZHFYd0w2QXJKUGFBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTUzQi9DOEQwMzkyMjZDOUExMUVFODVCRkRGNEZDNEY5QUUwMi9vaVEyaENJOUxD WEdyeGRxWHdMNkFySlBhQXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAltNo0grGwRXhsJNUqU72GDObtorPWSPlCbaUrP7DQElkye2YlBjD9 8+z633o4kbeAvlKnrRJesVvFanf5jkNafb5SZQGwOoi1E3Qx6z4vA8HW/JUSChyn xcOe8m9eK7nev7udJLCgthmW86sYRigVvM+zcwZUOKjKoLtlt2BVeXjTMpCsm5TM 47ZwBpzvbbml1g9q9N+tFwFNBGDzBpAKEeUOWIwQ2aeGW+ldkx013TrNqK4ZKENi dCQUQgXSRI3g+isObqc6OIsrsrxqf7l88Cr4I37xOpXCbwdqNbIP+XB0l5ByYuUe 7s/YKQgazZPDl7Z9dpsCH0BX76EIgHq2 -----END CERTIFICATE-----Generated at Sat Apr 26 05:10:10 2025 by rpki-client