$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft File: _k_aOWcBbBE6yAe4STQKxlIPCAI.mft (raw, json) Hash identifier: xXvXXLIZX/HcE41JloPwy4xobXCZ4wUy9t+6AZT2Y0U= Subject key identifier: 79:5F:00:06:0E:8E:CA:97:31:E3:38:65:C1:E7:79:F8:F1:13:A0:55 Authority key identifier: FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02 Certificate issuer: /CN=A91E9580/serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802 Certificate serial: 09EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft Manifest number: 09C7 Signing time: Thu 24 Apr 2025 19:51:55 +0000 Manifest this update: Thu 24 Apr 2025 19:51:55 +0000 Manifest next update: Thu 01 May 2025 19:51:55 +0000 Files and hashes: 1: _k_aOWcBbBE6yAe4STQKxlIPCAI.crl (hash: qcMDtoST9lYp+WzLzLAj6JB3eJ5HGKYZD+MAgNkRSss=) 2: 699CD772C2B911EBBB4C8928C4F9AE02.roa (hash: yfdf5Mv/GJ9tUDZNlDnmM6hHiINUq2OvlkNbS0rVles=) 3: DE76B04EC2BA11EB99E5E36FC4F9AE02.roa (hash: qU5SgxuYfj9EbloGsgp5NlU+LGZow7QsAYGZSye/EIM=) 4: 91F5867070B811EDB6E1F81BC4F9AE02.roa (hash: PgZPVHxtNUmnyrhnnwVcg3kijll4dZA2GpurrS7x078=) 5: 1E9514207F9311EA8177A82DC4F9AE02.roa (hash: mCrr4AsBoN0UqBzrLZ/+kB+0BpCUxnU7wJAUdq4LZdc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2538 (0x9ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9580, serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802 Validity Not Before: Apr 24 19:51:55 2025 GMT Not After : May 1 19:51:55 2025 GMT Subject: CN=680a965b-6367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7f:9a:5a:6f:ee:2a:da:9d:ea:3c:bb:16:7f: 37:fa:fe:a3:9e:33:d6:52:2e:4b:ae:41:0d:6f:97: 71:e7:79:9a:80:51:23:5c:2a:d1:ac:4f:9b:67:b0: 58:3e:c7:82:8a:6c:f2:68:0e:af:52:ff:3a:e2:88: 09:21:5b:6f:6f:1e:36:bf:9d:5e:12:3e:d9:58:3d: 57:a8:5d:8f:c2:3c:f2:58:94:4d:f6:3a:93:1b:c5: 65:97:59:70:91:f4:83:af:e0:e4:86:74:f9:6d:58: 22:81:a2:4c:d5:85:03:68:8b:4e:6b:ee:f4:f7:0b: 80:0e:e8:69:27:21:7d:b4:05:86:dc:f9:54:cb:e3: 54:a0:a2:ed:35:55:04:cc:c1:2a:a5:32:80:c4:13: 6f:30:63:f6:88:b9:09:3c:38:0e:25:e9:e0:e6:c2: ed:d3:ea:17:b0:0d:9a:e0:3e:c9:f3:10:ed:e8:68: 0f:86:48:16:6e:2c:4f:9e:dd:c4:17:f7:01:a2:85: 39:60:f6:2e:45:e9:22:91:d8:a1:28:4d:14:70:8f: 4e:98:17:36:dd:13:03:ac:1b:bc:ad:f9:8f:8b:4d: 7a:58:f2:d0:c4:2c:7d:48:26:c5:d6:ea:69:77:d9: d0:84:b5:d9:a8:e4:a8:11:2f:63:e3:b1:40:14:d1: d0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5F:00:06:0E:8E:CA:97:31:E3:38:65:C1:E7:79:F8:F1:13:A0:55 X509v3 Authority Key Identifier: keyid:FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:e8:15:0f:34:6d:da:af:6a:37:ce:b9:cf:d8:66:1f:35:c1: b4:ca:51:fe:b5:2e:0d:2e:6a:bc:08:9c:d1:9c:0f:7c:f1:bf: 72:c0:42:8b:29:56:db:fd:12:f4:c2:ff:f9:a4:f9:bb:3f:34: 8b:d5:d8:ba:a4:5a:78:a2:07:db:28:01:da:d5:da:a9:fe:ae: 01:54:1c:94:98:14:5c:fb:5c:e3:eb:83:fb:a2:42:4c:d0:f3: ed:e7:da:8c:4a:b6:74:77:7a:6a:ed:27:e8:ee:3d:48:f5:23: ca:06:d6:34:a3:00:04:95:de:9c:83:07:56:ae:93:a9:80:2b: 3d:7a:79:13:35:50:45:03:92:44:5f:ce:e3:c5:73:47:fd:44: bb:79:c0:bd:b7:4d:33:0b:0b:d5:df:cf:f2:83:f2:e4:f1:96: fd:e7:c4:ab:26:97:d8:36:ec:d2:18:a4:58:88:87:05:c1:15: 92:ca:12:04:fc:fa:3e:79:9b:13:03:80:c2:b9:8b:00:60:8b: e2:02:6e:6d:c0:5d:d6:70:27:64:4c:de:51:64:dc:87:07:93: 88:86:bb:db:46:e4:11:bf:d9:85:ef:d4:e5:34:c7:02:da:a3: 59:c7:0d:bd:c0:48:4c:79:26:7f:48:b9:7c:c3:f2:ae:95:bd: b4:04:e2:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk1ODAxMTAvBgNVBAUTKEZFNEZEQTM5NjcwMTZDMTEzQUM4MDdCODQ5MzQwQUM2 NTIwRjA4MDIwHhcNMjUwNDI0MTk1MTU1WhcNMjUwNTAxMTk1MTU1WjAYMRYwFAYD VQQDEw02ODBhOTY1Yi02MzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxX+aWm/uKtqd6jy7Fn83+v6jnjPWUi5LrkENb5dx53magFEjXCrRrE+bZ7BY PseCimzyaA6vUv864ogJIVtvbx42v51eEj7ZWD1XqF2PwjzyWJRN9jqTG8Vll1lw kfSDr+DkhnT5bVgigaJM1YUDaItOa+709wuADuhpJyF9tAWG3PlUy+NUoKLtNVUE zMEqpTKAxBNvMGP2iLkJPDgOJeng5sLt0+oXsA2a4D7J8xDt6GgPhkgWbixPnt3E F/cBooU5YPYuRekikdihKE0UcI9OmBc23RMDrBu8rfmPi016WPLQxCx9SCbF1upp d9nQhLXZqOSoES9j47FAFNHQbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlfAAYO jsqXMeM4ZcHnefjxE6BVMB8GA1UdIwQYMBaAFP5P2jlnAWwROsgHuEk0CsZSDwgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTU4MC9DN0NFMkUxMDdG OEQxMUVBQUQ4Q0Q1MUVDNEY5QUUwMi9fa19hT1djQmJCRTZ5QWU0U1RRS3hsSVBD QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rX2FPV2NCYkJFNnlBZTRTVFFLeGxJUENBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTU4MC9DN0NFMkUxMDdGOEQxMUVBQUQ4Q0Q1MUVDNEY5QUUwMi9fa19hT1djQmJC RTZ5QWU0U1RRS3hsSVBDQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA06BUPNG3ar2o3zrnP2GYfNcG0ylH+tS4NLmq8CJzRnA988b9ywEKL KVbb/RL0wv/5pPm7PzSL1di6pFp4ogfbKAHa1dqp/q4BVByUmBRc+1zj64P7okJM 0PPt59qMSrZ0d3pq7Sfo7j1I9SPKBtY0owAEld6cgwdWrpOpgCs9enkTNVBFA5JE X87jxXNH/US7ecC9t00zCwvV38/yg/Lk8Zb958SrJpfYNuzSGKRYiIcFwRWSyhIE /Po+eZsTA4DCuYsAYIviAm5twF3WcCdkTN5RZNyHB5OIhrvbRuQRv9mF79TlNMcC 2qNZxw29wEhMeSZ/SLl8w/Kulb20BOIl -----END CERTIFICATE-----Generated at Sat Apr 26 12:51:12 2025 by rpki-client