$ rpki-client -vvf rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft File: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft (raw, json) Hash identifier: 46YPzRM/43dHjNIoTEPRS1JwD4yA8mp2EtGcisnX3kQ= Subject key identifier: A6:81:54:0F:02:BC:B6:91:52:D4:B6:E9:EC:D8:7A:90:39:E5:D0:E0 Authority key identifier: D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 Certificate issuer: /CN=A91F495C/serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft Manifest number: 96 Signing time: Fri 25 Apr 2025 05:22:33 +0000 Manifest this update: Fri 25 Apr 2025 05:22:33 +0000 Manifest next update: Fri 02 May 2025 05:22:33 +0000 Files and hashes: 1: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl (hash: k0PcLSDAy+WdMcVwq30Ue/d+OBG7oJtRaiPv9dNeH+0=) 2: 084D41C6407111EFB0944C40C4F9AE02.roa (hash: Jb/5el+254tvWTwmxgE5e2fworHZ6IC6eYTkaaOmWbo=) 3: 08FDDCFC407111EFB0944C40C4F9AE02.roa (hash: 5j1mJUsKsqLJqbWxCLNYcCoMJnOjUallWOckNeSTW7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F495C, serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Validity Not Before: Apr 25 05:22:33 2025 GMT Not After : May 2 05:22:33 2025 GMT Subject: CN=680b1c19-462a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5a:bd:26:35:06:f5:74:12:d3:ed:c2:89:78: 69:3b:9c:89:e9:d4:18:9c:14:62:c5:ee:ad:ca:6e: ef:80:0f:3e:33:95:13:17:36:d0:a1:ad:48:46:94: 9e:77:db:7a:54:d4:2b:47:b2:43:e6:a7:1f:cd:b7: 11:33:aa:67:b1:0d:e7:09:64:6e:f3:0a:7f:44:e5: ac:55:d4:1a:b6:65:65:ca:80:8b:3f:c5:f6:bc:2f: 35:10:76:30:5a:04:6e:c9:c4:9e:39:0b:03:b5:90: 44:32:3d:94:d7:33:d5:05:32:94:e3:a1:2e:dd:4f: f7:52:da:dc:05:9a:16:d4:39:43:45:52:75:a4:8f: fb:e6:fe:22:88:38:11:37:05:7f:d2:33:73:d4:ab: be:b8:c9:44:ea:d1:c4:cf:22:87:4f:11:7b:66:28: f3:bb:12:60:0e:73:d7:e2:05:6f:90:e1:98:fb:9c: ed:1b:c5:36:ad:b9:5c:f6:f6:16:8c:f4:b1:fe:ab: 8b:d0:23:bd:14:0d:96:58:9a:a9:a8:59:b1:42:74: 97:ac:2c:7e:49:5c:a6:e3:b1:9c:d5:19:0b:d6:66: 47:e2:bb:0b:83:d9:20:ad:fb:b5:22:97:e9:8d:8e: d8:2e:d6:34:e2:ef:8e:f5:63:80:a4:a2:37:2f:59: be:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:81:54:0F:02:BC:B6:91:52:D4:B6:E9:EC:D8:7A:90:39:E5:D0:E0 X509v3 Authority Key Identifier: keyid:D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:fe:5e:ef:d6:aa:76:82:4e:9b:99:ed:ac:6b:af:ec:66:45: a8:e4:06:56:14:51:85:86:a2:b5:f0:74:63:af:f1:ca:de:db: 27:95:7e:74:e9:ec:78:1f:94:e3:2e:af:46:1f:3a:dd:3a:89: 20:23:98:41:d4:4f:80:f6:3f:31:25:c9:a0:76:d2:b3:55:e3: e1:b9:7a:50:29:19:61:bf:1b:0c:c9:27:01:34:d6:e9:e2:2a: c0:96:d2:e4:f2:6e:83:30:1b:b9:fb:94:d4:47:b7:a7:94:c5: 3f:20:4c:2c:0f:69:e0:56:ef:69:cd:aa:13:6e:f2:2c:0c:40: b8:95:db:db:8e:d4:76:c8:9b:61:e8:f2:93:ed:b7:03:08:08: e4:8a:54:f5:2f:77:55:a3:88:34:81:4f:bb:4e:d3:72:a8:ab: 23:a6:a3:b1:80:0f:89:1d:fd:0d:4d:22:c6:7a:53:58:c4:93: e2:24:b9:3d:51:57:b2:4a:6b:85:15:8c:d1:f8:b8:fb:ac:b0: 21:c8:4f:21:85:7f:4a:28:e1:ca:e6:ab:a5:fc:57:00:9f:8b: 89:89:6f:5a:48:fe:dc:9e:73:80:02:e5:c8:eb:e5:94:23:55: 59:21:ba:c2:64:fa:99:6b:60:cf:74:84:f7:4e:56:ec:6d:8c: 8f:e4:8b:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ5NUMxMTAvBgNVBAUTKEQ2QzgwQzVEMzhBQTNGMTBEMUVCMEUxMzlCOUU0OTRF QkY2QzY0MjEwHhcNMjUwNDI1MDUyMjMzWhcNMjUwNTAyMDUyMjMzWjAYMRYwFAYD VQQDEw02ODBiMWMxOS00NjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoVq9JjUG9XQS0+3CiXhpO5yJ6dQYnBRixe6tym7vgA8+M5UTFzbQoa1IRpSe d9t6VNQrR7JD5qcfzbcRM6pnsQ3nCWRu8wp/ROWsVdQatmVlyoCLP8X2vC81EHYw WgRuycSeOQsDtZBEMj2U1zPVBTKU46Eu3U/3UtrcBZoW1DlDRVJ1pI/75v4iiDgR NwV/0jNz1Ku+uMlE6tHEzyKHTxF7ZijzuxJgDnPX4gVvkOGY+5ztG8U2rblc9vYW jPSx/quL0CO9FA2WWJqpqFmxQnSXrCx+SVym47Gc1RkL1mZH4rsLg9kgrfu1Ipfp jY7YLtY04u+O9WOApKI3L1m+9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKaBVA8C vLaRUtS26ezYepA55dDgMB8GA1UdIwQYMBaAFNbIDF04qj8Q0esOE5ueSU6/bGQh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Qy81QkM2M0VGNDQw NjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4RFI2dzRUbTU1SlRyOXNa Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFzZ01YVGlxUHhEUjZ3NFRtNTVKVHI5c1pDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDk1Qy81QkM2M0VGNDQwNjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4 RFI2dzRUbTU1SlRyOXNaQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDX/l7v1qp2gk6bme2sa6/sZkWo5AZWFFGFhqK18HRjr/HK3tsnlX50 6ex4H5TjLq9GHzrdOokgI5hB1E+A9j8xJcmgdtKzVePhuXpQKRlhvxsMyScBNNbp 4irAltLk8m6DMBu5+5TUR7enlMU/IEwsD2ngVu9pzaoTbvIsDEC4ldvbjtR2yJth 6PKT7bcDCAjkilT1L3dVo4g0gU+7TtNyqKsjpqOxgA+JHf0NTSLGelNYxJPiJLk9 UVeySmuFFYzR+Lj7rLAhyE8hhX9KKOHK5qul/FcAn4uJiW9aSP7cnnOAAuXI6+WU I1VZIbrCZPqZa2DPdIT3TlbsbYyP5IvN -----END CERTIFICATE-----Generated at Sat Apr 26 13:04:30 2025 by rpki-client