$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft File: 1xhrKGW4YA1mKCKv65AVcAbg9BA.mft (raw, json) Hash identifier: 0J2XwUWbVMb1CchEZoUOWlmxxQdl4VFRPvf/3fpKU8o= Subject key identifier: 86:CE:79:06:E7:9F:47:C3:E0:07:7F:74:75:94:F8:DF:AF:DC:78:48 Authority key identifier: D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 Certificate issuer: /CN=A91F428C/serialNumber=D7186B2865B8600D662822AFEB90157006E0F410 Certificate serial: 347A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft Manifest number: 3476 Signing time: Thu 24 Apr 2025 15:03:59 +0000 Manifest this update: Thu 24 Apr 2025 15:03:58 +0000 Manifest next update: Thu 01 May 2025 15:03:58 +0000 Files and hashes: 1: 1xhrKGW4YA1mKCKv65AVcAbg9BA.crl (hash: 9V/Bv7by+of8sB5Zk7MNrN7uFNuP8ab2OMkfk5F7Pn4=) 2: B8201598BED111EC93B74C4FC4F9AE02.roa (hash: bZ78zYHCnstuVWjSxrFde4CQb6MOUeIvruPUliQa2hQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:03:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13434 (0x347a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F428C, serialNumber=D7186B2865B8600D662822AFEB90157006E0F410 Validity Not Before: Apr 24 15:03:58 2025 GMT Not After : May 1 15:03:58 2025 GMT Subject: CN=680a52df-bf64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f5:1b:76:da:1c:e3:82:37:dd:11:1c:f3:95: 1d:10:3a:27:6b:1d:58:16:0f:ec:4d:7a:bf:20:81: af:70:bb:bb:32:f8:d9:8e:6e:04:eb:d2:a3:05:83: e7:55:32:51:53:dc:c3:9f:ae:fa:2e:3f:9d:5d:07: cd:d5:9d:0f:96:e5:c1:ec:65:e3:25:95:e0:11:50: 1b:a2:02:42:30:26:07:08:9b:9a:bb:44:1f:35:77: fb:c1:63:35:6d:69:f3:e6:32:52:7c:38:0f:c9:8b: 8c:a6:a1:90:ed:36:ef:b3:85:51:47:f8:4e:3c:a4: b2:8e:ca:e0:74:9e:17:dd:67:90:9d:7c:80:02:92: 51:f2:ee:36:6c:cf:08:b8:7b:70:cc:ac:ae:f6:b1: da:f5:da:35:98:62:8d:82:00:7b:dd:a9:77:0b:f9: f2:03:95:13:e1:58:71:63:20:00:f6:79:c8:29:fe: 94:c2:d4:0d:27:f6:5e:d8:31:23:cf:bc:ef:0b:ae: d2:08:71:21:57:92:d2:1b:9b:48:01:3b:4b:dd:f1: 07:f0:72:d1:20:fd:d9:14:24:a4:ba:8a:0c:c0:dd: 66:35:6b:34:be:0d:d2:5b:54:62:ea:f5:8b:21:9a: 88:5b:61:cd:67:e9:e9:a9:38:1a:b9:62:f2:11:1c: e7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:CE:79:06:E7:9F:47:C3:E0:07:7F:74:75:94:F8:DF:AF:DC:78:48 X509v3 Authority Key Identifier: keyid:D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:3b:c4:a8:05:e2:2d:3f:be:41:5d:43:2f:24:c4:f2:48:aa: ec:ab:9f:27:9f:7c:99:bc:c9:ee:e5:43:e4:16:e3:ef:98:2e: ef:b2:0e:4a:dd:29:f2:b9:9e:8c:2d:93:5c:92:01:94:46:a3: ed:55:02:93:db:8e:07:25:ca:93:3d:07:a9:06:97:c3:b5:b8: 73:7a:90:5d:07:6b:e9:f2:0b:c0:ea:5f:c7:3d:c5:1d:68:c0: 80:e4:dd:2a:8a:e7:db:75:bc:e1:16:a6:f5:ee:37:1b:fc:f7: 8d:90:5a:84:35:9e:1e:6f:2f:f5:46:3e:3a:f2:7a:61:3b:15: f5:0c:1f:dc:ec:3f:a6:26:63:ba:8d:3b:cf:04:6d:4b:e7:01: e2:a8:98:38:d6:32:49:e5:41:d1:24:75:85:82:b7:08:c8:f7: 83:39:21:da:04:80:79:5e:b3:38:74:12:99:c0:24:6a:6e:dc: 22:ec:07:bc:8e:66:30:c0:7a:57:2d:d4:c4:c1:4b:6e:c2:2e: ea:7f:69:72:85:a5:c6:5a:0a:fb:68:33:28:af:1b:b2:d5:2a: 35:2e:38:6c:fd:d4:56:86:f6:05:f3:6a:e2:85:8f:ca:f1:de: 9c:b1:82:44:d5:1e:d6:b6:29:cd:ff:6b:39:c1:c8:47:3d:7c: 6a:a5:2f:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOEMxMTAvBgNVBAUTKEQ3MTg2QjI4NjVCODYwMEQ2NjI4MjJBRkVCOTAxNTcw MDZFMEY0MTAwHhcNMjUwNDI0MTUwMzU4WhcNMjUwNTAxMTUwMzU4WjAYMRYwFAYD VQQDEw02ODBhNTJkZi1iZjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8vUbdtoc44I33REc85UdEDonax1YFg/sTXq/IIGvcLu7MvjZjm4E69KjBYPn VTJRU9zDn676Lj+dXQfN1Z0PluXB7GXjJZXgEVAbogJCMCYHCJuau0QfNXf7wWM1 bWnz5jJSfDgPyYuMpqGQ7Tbvs4VRR/hOPKSyjsrgdJ4X3WeQnXyAApJR8u42bM8I uHtwzKyu9rHa9do1mGKNggB73al3C/nyA5UT4VhxYyAA9nnIKf6UwtQNJ/Ze2DEj z7zvC67SCHEhV5LSG5tIATtL3fEH8HLRIP3ZFCSkuooMwN1mNWs0vg3SW1Ri6vWL IZqIW2HNZ+npqTgauWLyERznaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbOeQbn n0fD4Ad/dHWU+N+v3HhIMB8GA1UdIwQYMBaAFNcYayhluGANZigir+uQFXAG4PQQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4Qy81MkZDQzY0ODFE QTAxMUUyQjZEODcwOTEwOEIwMkNEMi8xeGhyS0dXNFlBMW1LQ0t2NjVBVmNBYmc5 QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4aHJLR1c0WUExbUtDS3Y2NUFWY0FiZzlCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4Qy81MkZDQzY0ODFEQTAxMUUyQjZEODcwOTEwOEIwMkNEMi8xeGhyS0dXNFlB MW1LQ0t2NjVBVmNBYmc5QkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhO8SoBeItP75BXUMvJMTySKrsq58nn3yZvMnu5UPkFuPvmC7vsg5K 3SnyuZ6MLZNckgGURqPtVQKT244HJcqTPQepBpfDtbhzepBdB2vp8gvA6l/HPcUd aMCA5N0qiufbdbzhFqb17jcb/PeNkFqENZ4eby/1Rj468nphOxX1DB/c7D+mJmO6 jTvPBG1L5wHiqJg41jJJ5UHRJHWFgrcIyPeDOSHaBIB5XrM4dBKZwCRqbtwi7Ae8 jmYwwHpXLdTEwUtuwi7qf2lyhaXGWgr7aDMorxuy1So1Ljhs/dRWhvYF82rihY/K 8d6csYJE1R7WtinN/2s5wchHPXxqpS/S -----END CERTIFICATE-----Generated at Sat Apr 26 14:53:54 2025 by rpki-client