$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft File: 1BN478zNyo5lN-lfJ6o7NTdYCvM.mft (raw, json) Hash identifier: z5onOpr+UfNtsSaKxsEpO+EUK6N1wfTWgPY/MDqrito= Subject key identifier: 87:87:99:3A:EF:8B:26:6D:E8:A9:EB:73:F7:23:E5:D0:D1:CB:6E:EE Authority key identifier: D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3 Certificate issuer: /CN=A91F2E76/serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3 Certificate serial: 077D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft Manifest number: 0778 Signing time: Thu 24 Apr 2025 21:14:50 +0000 Manifest this update: Thu 24 Apr 2025 21:14:49 +0000 Manifest next update: Thu 01 May 2025 21:14:49 +0000 Files and hashes: 1: 1BN478zNyo5lN-lfJ6o7NTdYCvM.crl (hash: w8uNSDaWT4PmlA2YJLi4vbUOOQC7TecoH0nl81JKkJY=) 2: 86AE60140D7A11EB9D346C48C4F9AE02.roa (hash: EnKj89o4/2sutrwYpg7UxwXHFBOFSGJviP9dKcMIsAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1917 (0x77d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2E76, serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3 Validity Not Before: Apr 24 21:14:49 2025 GMT Not After : May 1 21:14:49 2025 GMT Subject: CN=680aa9c9-39cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b2:49:c4:77:8e:a1:83:f8:f6:0c:d7:e6:3b: 23:2e:90:48:15:5f:17:e3:c1:c9:64:76:4e:ab:ae: fc:09:c9:e4:d6:a8:23:96:3d:a6:a2:ae:9c:d8:40: cc:0f:9b:aa:bb:49:7a:22:70:7b:a7:54:07:c3:15: b8:98:d1:79:7f:9f:7f:25:c0:55:60:7d:d8:a1:b7: 86:90:19:21:ef:5a:cb:d4:96:90:74:22:5b:14:11: 45:d3:20:58:5b:aa:7d:d1:44:e8:c0:87:ea:6f:3d: 37:64:7b:90:53:79:b6:e7:31:a6:fe:f9:68:e7:ad: e0:c3:2d:46:c9:28:a7:0a:42:55:24:9b:66:0c:60: 2b:2e:16:eb:0c:7a:1d:ae:cb:fc:18:d1:df:cf:55: 45:19:65:34:77:da:ce:89:ce:af:1e:c7:0a:44:45: e5:f3:20:97:e3:e1:6a:35:42:8c:dd:d9:1a:5e:38: 3d:ce:c7:5f:8b:85:c3:14:2d:7f:7c:14:4a:a3:9a: 48:ff:a4:f4:21:ed:0d:3d:b5:cb:3e:7e:10:cf:8c: 15:fa:91:8b:3c:1e:f1:30:42:d4:68:a0:0b:28:cd: 9c:67:4f:58:e1:ed:88:64:fe:b3:69:de:fa:1a:e3: 86:79:13:68:39:4f:06:9b:99:dd:18:07:47:db:d4: 80:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:87:99:3A:EF:8B:26:6D:E8:A9:EB:73:F7:23:E5:D0:D1:CB:6E:EE X509v3 Authority Key Identifier: keyid:D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:fb:90:53:24:7f:8c:c9:b0:c0:45:87:07:a5:ed:07:c7:df: 92:3b:0c:ea:a9:f4:49:0e:f8:63:65:79:91:77:56:e8:30:9f: e5:0c:0d:39:92:b0:65:38:da:6c:ef:c9:65:26:d0:5b:93:d3: b9:bb:83:05:66:ff:a8:13:17:7f:42:ee:30:4e:40:7f:c3:12: d0:fd:df:29:81:d4:ef:ec:fc:61:f8:1d:1e:42:54:fe:d5:06: 1d:21:1c:09:57:5f:bf:74:4e:c3:96:b8:47:55:93:02:0c:96: 4c:8d:0e:11:fb:d5:c3:fc:5a:a9:94:1a:dd:d1:d0:36:a3:85: 54:e4:87:68:a2:b3:94:4c:fc:ca:72:d8:09:b4:7f:2a:bb:0a: c1:80:30:cc:e5:06:48:86:29:61:37:b9:be:52:99:66:91:c1: 27:92:78:0b:18:84:43:4f:be:f8:b9:01:08:d3:e6:cb:39:04: cb:cd:d9:c5:b1:a9:d9:6f:1d:bf:60:98:3c:d4:9b:25:9f:b0: 90:61:bf:dd:6a:17:0a:5c:e9:e0:74:0f:5a:2d:3c:42:d6:ed: ce:51:88:3c:c7:69:09:39:35:c8:6b:3c:48:6c:56:86:a1:c2: e7:54:c7:5b:a6:5f:81:83:ee:e3:ab:e2:19:a5:71:fd:e9:3f: 2c:20:0e:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJFNzYxMTAvBgNVBAUTKEQ0MTM3OEVGQ0NDRENBOEU2NTM3RTk1RjI3QUEzQjM1 Mzc1ODBBRjMwHhcNMjUwNDI0MjExNDQ5WhcNMjUwNTAxMjExNDQ5WjAYMRYwFAYD VQQDEw02ODBhYTljOS0zOWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbJJxHeOoYP49gzX5jsjLpBIFV8X48HJZHZOq678Ccnk1qgjlj2moq6c2EDM D5uqu0l6InB7p1QHwxW4mNF5f59/JcBVYH3YobeGkBkh71rL1JaQdCJbFBFF0yBY W6p90UTowIfqbz03ZHuQU3m25zGm/vlo563gwy1GySinCkJVJJtmDGArLhbrDHod rsv8GNHfz1VFGWU0d9rOic6vHscKREXl8yCX4+FqNUKM3dkaXjg9zsdfi4XDFC1/ fBRKo5pI/6T0Ie0NPbXLPn4Qz4wV+pGLPB7xMELUaKALKM2cZ09Y4e2IZP6zad76 GuOGeRNoOU8Gm5ndGAdH29SAAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIeHmTrv iyZt6Knrc/cj5dDRy27uMB8GA1UdIwQYMBaAFNQTeO/MzcqOZTfpXyeqOzU3WArz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkU3Ni84RjNDOUU2QTBE NzcxMUVCQkJBRTM0NDBDNEY5QUUwMi8xQk40Nzh6TnlvNWxOLWxmSjZvN05UZFlD dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFCTjQ3OHpOeW81bE4tbGZKNm83TlRkWUN2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkU3Ni84RjNDOUU2QTBENzcxMUVCQkJBRTM0NDBDNEY5QUUwMi8xQk40Nzh6Tnlv NWxOLWxmSjZvN05UZFlDdk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR+5BTJH+MybDARYcHpe0Hx9+SOwzqqfRJDvhjZXmRd1boMJ/lDA05 krBlONps78llJtBbk9O5u4MFZv+oExd/Qu4wTkB/wxLQ/d8pgdTv7Pxh+B0eQlT+ 1QYdIRwJV1+/dE7DlrhHVZMCDJZMjQ4R+9XD/FqplBrd0dA2o4VU5IdoorOUTPzK ctgJtH8quwrBgDDM5QZIhilhN7m+UplmkcEnkngLGIRDT774uQEI0+bLOQTLzdnF sanZbx2/YJg81Jsln7CQYb/dahcKXOngdA9aLTxC1u3OUYg8x2kJOTXIazxIbFaG ocLnVMdbpl+Bg+7jq+IZpXH96T8sIA60 -----END CERTIFICATE-----Generated at Sat Apr 26 13:09:43 2025 by rpki-client