$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft File: _g28w89QoeDrA9MSluOfuogMGQU.mft (raw, json) Hash identifier: meASZmj5J/rkAzPSEvqgqRHVNgmp3vndVLH5Eheee7M= Subject key identifier: 1B:ED:F0:86:EE:DE:B3:A5:D5:16:4A:FF:97:0F:29:E4:D3:C7:C6:6D Authority key identifier: FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 Certificate issuer: /CN=A91F7FEA/serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Certificate serial: 0A7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft Manifest number: 0A6E Signing time: Thu 24 Apr 2025 19:32:52 +0000 Manifest this update: Thu 24 Apr 2025 19:32:51 +0000 Manifest next update: Thu 01 May 2025 19:32:51 +0000 Files and hashes: 1: _g28w89QoeDrA9MSluOfuogMGQU.crl (hash: YJoELEtwbi6SDj2JK4UE601fzCnTr88CK+tM5Ca/oFc=) 2: AF5AC6B69E3F11EEA6B6CB0DC4F9AE02.roa (hash: aO7ZzsxjyqFcAzfGikfamjQffULd11X020Rl4PUmMgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:32:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2684 (0xa7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7FEA, serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Validity Not Before: Apr 24 19:32:51 2025 GMT Not After : May 1 19:32:51 2025 GMT Subject: CN=680a91e3-4317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:61:e8:ea:e7:14:a9:68:36:1d:e9:3b:5f:0e: 28:2d:c0:80:36:f4:59:d3:bf:38:a2:6a:13:83:ac: 3d:ba:1b:59:ee:ed:91:bd:e1:7d:99:a2:8f:e0:fd: 59:c6:36:6b:0b:71:b4:3c:1b:95:f2:1b:b8:83:db: fc:eb:df:6a:05:cb:28:7b:58:9c:6c:61:5d:fd:9f: fd:2b:26:ac:14:c8:03:8d:f6:e7:e9:45:7e:bb:cf: bc:00:ce:fb:09:e8:35:0d:38:aa:8a:8a:f9:bd:da: 45:bf:c0:18:a5:87:68:10:e4:da:67:82:12:a5:b1: fc:84:aa:9e:8c:f8:50:a1:5f:8a:d9:58:cf:4b:99: 4b:8a:96:93:d1:c4:17:37:ef:12:7a:ff:ca:a1:f1: 04:dc:a0:bd:f3:5a:df:fb:51:84:c4:23:8e:32:b8: e9:4b:50:a2:7e:10:0b:3f:fa:a9:24:68:93:98:6e: a4:53:e2:ce:97:0c:76:9a:f0:58:f6:1f:cd:58:73: 98:f0:c0:ca:ad:42:c1:da:5e:9e:82:ea:b4:bc:ff: 12:b1:69:fb:70:6a:65:ef:87:b0:94:5f:1b:68:d2: 70:8e:d7:0a:f9:bd:69:69:2c:a1:17:84:58:44:41: ec:83:44:05:26:7e:b4:d0:bb:09:67:5e:63:bf:1a: a5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:ED:F0:86:EE:DE:B3:A5:D5:16:4A:FF:97:0F:29:E4:D3:C7:C6:6D X509v3 Authority Key Identifier: keyid:FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d0:8b:90:e6:30:6e:06:d6:d4:bb:a8:91:37:e3:9f:d5:89: b8:a3:10:9b:8f:12:08:d9:de:b7:98:fc:db:e6:f5:0f:33:6b: e6:64:91:40:65:6c:ae:9e:28:fd:8a:2c:df:5b:00:f4:b0:80: 91:4e:92:cc:2f:9d:cd:97:f1:5a:ed:f0:0a:fa:ac:29:59:89: 4c:c1:77:b9:d7:36:5b:4c:fc:0f:cb:31:d7:96:77:02:ea:f1: 5e:f2:77:f9:83:f3:11:29:66:1b:1c:18:23:a5:e6:32:65:b7: 9a:c6:8d:7a:03:b3:89:da:46:7d:18:01:1e:a7:40:98:fa:ee: 74:72:b9:47:b8:34:a0:fd:8c:73:d9:f5:e4:a3:ec:2c:b3:1e: 5c:c0:52:74:74:82:c4:56:a2:df:ca:0a:2c:3f:e2:7e:a9:92: a6:a9:0a:35:53:2a:23:bd:c5:5d:a1:e1:fc:f4:38:2a:18:8b: c7:67:31:f8:4c:42:d1:1a:e8:4e:0a:33:41:0e:e0:f2:44:e2: ab:49:02:5e:cb:22:b8:63:81:44:7d:60:5b:c6:ee:67:36:d7: 23:4a:b6:08:a4:08:c9:f6:b4:b5:c1:89:5f:d4:30:a8:7e:96: 29:c8:99:ad:13:5a:9b:33:b8:bf:c5:5b:1c:29:c4:79:25:94: a0:54:61:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdGRUExMTAvBgNVBAUTKEZFMERCQ0MzQ0Y1MEExRTBFQjAzRDMxMjk2RTM5RkJB ODgwQzE5MDUwHhcNMjUwNDI0MTkzMjUxWhcNMjUwNTAxMTkzMjUxWjAYMRYwFAYD VQQDEw02ODBhOTFlMy00MzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmHo6ucUqWg2Hek7Xw4oLcCANvRZ0784omoTg6w9uhtZ7u2RveF9maKP4P1Z xjZrC3G0PBuV8hu4g9v8699qBcsoe1icbGFd/Z/9KyasFMgDjfbn6UV+u8+8AM77 Ceg1DTiqior5vdpFv8AYpYdoEOTaZ4ISpbH8hKqejPhQoV+K2VjPS5lLipaT0cQX N+8Sev/KofEE3KC981rf+1GExCOOMrjpS1CifhALP/qpJGiTmG6kU+LOlwx2mvBY 9h/NWHOY8MDKrULB2l6eguq0vP8SsWn7cGpl74ewlF8baNJwjtcK+b1paSyhF4RY REHsg0QFJn600LsJZ15jvxqlQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvt8Ibu 3rOl1RZK/5cPKeTTx8ZtMB8GA1UdIwQYMBaAFP4NvMPPUKHg6wPTEpbjn7qIDBkF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0ZFQS8xRUUzQUVFQzYw NDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9lRHJBOU1TbHVPZnVvZ01H UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19nMjh3ODlRb2VEckE5TVNsdU9mdW9nTUdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0ZFQS8xRUUzQUVFQzYwNDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9l RHJBOU1TbHVPZnVvZ01HUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL0IuQ5jBuBtbUu6iRN+Of1Ym4oxCbjxII2d63mPzb5vUPM2vmZJFA ZWyunij9iizfWwD0sICRTpLML53Nl/Fa7fAK+qwpWYlMwXe51zZbTPwPyzHXlncC 6vFe8nf5g/MRKWYbHBgjpeYyZbeaxo16A7OJ2kZ9GAEep0CY+u50crlHuDSg/Yxz 2fXko+wssx5cwFJ0dILEVqLfygosP+J+qZKmqQo1UyojvcVdoeH89DgqGIvHZzH4 TELRGuhOCjNBDuDyROKrSQJeyyK4Y4FEfWBbxu5nNtcjSrYIpAjJ9rS1wYlf1DCo fpYpyJmtE1qbM7i/xVscKcR5JZSgVGFo -----END CERTIFICATE-----Generated at Sat Apr 26 12:35:50 2025 by rpki-client