$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft File: rea1d9VLWrCQBc5hO7E2SGUuams.mft (raw, json) Hash identifier: igoUqIysa23462TQXnC042yXt+sakZk1B56/1+ofo5I= Subject key identifier: 32:E4:DC:B8:4B:9A:84:A8:AF:EA:79:23:21:10:6F:5C:89:F1:7C:3B Authority key identifier: AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B Certificate issuer: /CN=A91F4553/serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B Certificate serial: 0546 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft Manifest number: 0542 Signing time: Thu 24 Apr 2025 23:14:01 +0000 Manifest this update: Thu 24 Apr 2025 23:14:01 +0000 Manifest next update: Thu 01 May 2025 23:14:01 +0000 Files and hashes: 1: rea1d9VLWrCQBc5hO7E2SGUuams.crl (hash: M62OeupHqz+yvpDAR8rTaUSeIDN+96ks+z+SAUHWoNE=) 2: A1491F7CEB7811EB9134133BC4F9AE02.roa (hash: yAlIecRARh3umrfcsK/yx6rBFPCYyzog9iWJaTHp1QU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1350 (0x546) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4553, serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B Validity Not Before: Apr 24 23:14:01 2025 GMT Not After : May 1 23:14:01 2025 GMT Subject: CN=680ac5b9-4b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c9:10:4e:c6:37:50:dc:45:db:53:89:5c:2d: ef:fb:5d:bb:da:ab:fc:d4:22:fd:36:80:dc:44:88: a3:59:d1:fb:bf:43:72:a2:a2:fd:aa:ae:78:65:11: ff:17:1d:36:39:38:88:ef:8e:aa:d7:07:10:6b:a1: 48:93:d5:ea:1e:91:18:de:96:0c:3a:a7:79:87:fd: 25:85:41:2a:e2:2d:ce:b5:fe:27:e0:4a:28:b2:77: fa:06:ed:d7:76:21:67:94:fd:3f:b7:d9:94:4c:e5: 08:50:ae:b9:7a:a9:c7:4b:6a:da:63:af:09:44:a4: 33:d2:0e:23:34:48:f7:1a:72:81:27:7e:51:ff:56: ad:66:7b:78:55:6b:7f:20:43:12:c8:c5:26:73:c7: bf:91:e1:1b:3e:3a:dd:c4:82:7a:ab:31:4a:d5:dd: 3a:cb:c5:a5:4a:53:44:34:7f:9e:6a:b7:fc:5d:74: e6:71:44:60:c1:9a:83:14:4b:1a:84:21:fb:19:d2: 59:17:e1:4f:00:78:50:24:57:7e:eb:90:e0:1b:9b: 43:89:d2:5b:f3:d1:6e:8a:c7:02:4d:47:0d:3e:a3: 9b:70:58:3e:10:3b:09:d9:a2:6e:7f:0c:23:5a:35: 26:4b:70:9b:53:bb:e6:37:c3:ff:e3:7e:bf:4a:29: 52:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E4:DC:B8:4B:9A:84:A8:AF:EA:79:23:21:10:6F:5C:89:F1:7C:3B X509v3 Authority Key Identifier: keyid:AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:5f:61:06:f2:f4:4d:71:ac:12:60:83:d7:61:fb:ee:29:f5: a5:7e:b7:3d:44:c8:60:a8:c0:67:42:3a:c1:ce:b5:96:e3:f0: 64:fd:47:38:2b:af:b9:a6:48:42:2a:d4:79:cc:b8:96:77:fb: a0:9e:ee:f8:1b:2d:7b:63:1d:ff:c6:58:f0:48:49:91:fc:75: 62:60:9f:7f:b3:2c:50:4f:6f:6b:58:53:d4:75:91:c4:85:4e: 49:a2:02:c8:d0:5d:7e:60:28:d4:0e:8b:e5:e5:a2:2f:c1:e1: 88:5e:ef:ca:87:c0:bd:8a:4e:6b:c9:ce:fd:7e:d3:29:73:0c: 01:2c:16:d3:2f:64:4b:df:1d:40:61:5e:42:86:1b:3c:d8:a2: f6:21:bb:27:db:34:b5:e6:28:ab:0b:46:a8:36:b6:27:91:05: 95:05:e4:37:0a:41:ed:a6:e0:68:8b:7f:cf:9e:7f:07:ec:ae: 94:3f:1f:27:89:c8:73:27:6b:50:39:13:5a:a4:62:3a:a7:e4: 2e:18:41:c5:18:39:e0:09:4c:95:ce:7b:b8:68:f7:3f:2b:72: 08:67:e7:c0:df:37:81:f3:d4:d2:48:ea:86:6e:2f:f7:f3:f2: 1a:36:e4:54:6f:a0:82:bf:3c:65:99:a7:57:f2:e0:dd:06:a6: 38:a8:45:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ1NTMxMTAvBgNVBAUTKEFERTZCNTc3RDU0QjVBQjA5MDA1Q0U2MTNCQjEzNjQ4 NjUyRTZBNkIwHhcNMjUwNDI0MjMxNDAxWhcNMjUwNTAxMjMxNDAxWjAYMRYwFAYD VQQDEw02ODBhYzViOS00YjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzskQTsY3UNxF21OJXC3v+1272qv81CL9NoDcRIijWdH7v0NyoqL9qq54ZRH/ Fx02OTiI746q1wcQa6FIk9XqHpEY3pYMOqd5h/0lhUEq4i3Otf4n4Eoosnf6Bu3X diFnlP0/t9mUTOUIUK65eqnHS2raY68JRKQz0g4jNEj3GnKBJ35R/1atZnt4VWt/ IEMSyMUmc8e/keEbPjrdxIJ6qzFK1d06y8WlSlNENH+earf8XXTmcURgwZqDFEsa hCH7GdJZF+FPAHhQJFd+65DgG5tDidJb89FuiscCTUcNPqObcFg+EDsJ2aJufwwj WjUmS3CbU7vmN8P/436/SilShQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLk3LhL moSor+p5IyEQb1yJ8Xw7MB8GA1UdIwQYMBaAFK3mtXfVS1qwkAXOYTuxNkhlLmpr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDU1My80RDIzQkIwRUVC NzQxMUVCQUZCNDc2MzFDNEY5QUUwMi9yZWExZDlWTFdyQ1FCYzVoTzdFMlNHVXVh bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JlYTFkOVZMV3JDUUJjNWhPN0UyU0dVdWFtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDU1My80RDIzQkIwRUVCNzQxMUVCQUZCNDc2MzFDNEY5QUUwMi9yZWExZDlWTFdy Q1FCYzVoTzdFMlNHVXVhbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZX2EG8vRNcawSYIPXYfvuKfWlfrc9RMhgqMBnQjrBzrWW4/Bk/Uc4 K6+5pkhCKtR5zLiWd/ugnu74Gy17Yx3/xljwSEmR/HViYJ9/syxQT29rWFPUdZHE hU5JogLI0F1+YCjUDovl5aIvweGIXu/Kh8C9ik5ryc79ftMpcwwBLBbTL2RL3x1A YV5Chhs82KL2Ibsn2zS15iirC0aoNrYnkQWVBeQ3CkHtpuBoi3/Pnn8H7K6UPx8n ichzJ2tQORNapGI6p+QuGEHFGDngCUyVznu4aPc/K3IIZ+fA3zeB89TSSOqGbi/3 8/IaNuRUb6CCvzxlmadX8uDdBqY4qEXe -----END CERTIFICATE-----Generated at Sat Apr 26 16:33:10 2025 by rpki-client