$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft File: F11CAiv1C9bCDzCxxa2MlOCFvE4.mft (raw, json) Hash identifier: MkE0d/d0YF454y9xf1vgNASAQBGbCm3xrPb9DaTrXoA= Subject key identifier: 0F:38:B4:9A:6A:1F:53:50:05:48:44:15:54:4D:53:28:88:CE:DB:45 Authority key identifier: 17:5D:42:02:2B:F5:0B:D6:C2:0F:30:B1:C5:AD:8C:94:E0:85:BC:4E Certificate issuer: /CN=A91F89D9/serialNumber=175D42022BF50BD6C20F30B1C5AD8C94E085BC4E Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft Manifest number: 79 Signing time: Fri 25 Apr 2025 05:46:48 +0000 Manifest this update: Fri 25 Apr 2025 05:46:47 +0000 Manifest next update: Fri 02 May 2025 05:46:47 +0000 Files and hashes: 1: F11CAiv1C9bCDzCxxa2MlOCFvE4.crl (hash: /tapxKOHytQaISB/23+4bQYZPKkRauomFkZtKuU+Ogg=) 2: A18C777C6F5F11EFAF849B28C4F9AE02.roa (hash: fujb24eQPYgPwcrZc8i7YcmXNyel+exUWMY7rJXI438=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.crl rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:46:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89D9, serialNumber=175D42022BF50BD6C20F30B1C5AD8C94E085BC4E Validity Not Before: Apr 25 05:46:47 2025 GMT Not After : May 2 05:46:47 2025 GMT Subject: CN=680b21c7-c25c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8e:a7:da:25:57:47:1b:08:c7:fa:92:64:9b: d9:ed:31:69:a8:49:f0:b0:d3:74:5c:95:47:f4:76: da:91:36:fe:e5:29:6d:5e:4e:50:ae:bc:f1:7b:26: 3e:df:7d:09:8f:95:7b:4b:a8:93:84:f0:66:fa:0c: d6:c8:cf:2f:f3:73:83:19:a0:67:d0:ca:11:e6:22: 87:7f:7e:34:e1:3c:2b:b0:39:35:10:74:30:c9:2f: 57:23:38:47:b5:6b:49:93:16:cf:9f:82:2f:1b:0f: bc:0e:70:6c:ff:19:20:3b:42:e7:07:e1:1b:45:c5: 19:f6:57:dd:d2:77:24:85:83:65:38:96:ed:d4:bf: d7:49:e8:02:8a:25:9a:a1:38:c0:08:50:02:0c:6e: ef:01:4e:20:1a:ed:26:a0:ba:c9:ad:82:a0:6b:26: d7:be:21:6f:a9:97:be:f9:f8:36:89:79:90:1e:a0: 60:0e:11:65:b6:2f:65:3a:42:3f:46:b4:20:8c:64: df:07:1e:81:64:e1:31:3a:25:5b:d3:c6:0b:63:ef: 24:b0:58:73:d5:14:fb:a0:e5:b5:38:3d:5f:7b:fe: cb:72:13:bb:91:67:92:57:0d:95:c5:15:c3:67:d1: 4e:65:74:94:12:a2:64:92:34:31:15:72:fd:8e:28: 9d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:38:B4:9A:6A:1F:53:50:05:48:44:15:54:4D:53:28:88:CE:DB:45 X509v3 Authority Key Identifier: keyid:17:5D:42:02:2B:F5:0B:D6:C2:0F:30:B1:C5:AD:8C:94:E0:85:BC:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:31:59:8b:a6:2b:be:9a:34:4d:6b:e4:11:43:ec:d3:aa:41: eb:2b:01:64:0f:9d:93:2c:f9:2f:73:39:68:0f:73:7f:0d:a7: bb:b4:b2:22:b1:99:d6:17:fa:22:f6:32:63:2c:4a:a1:60:eb: d8:ae:5a:fe:87:de:04:48:65:18:43:3d:c2:3f:7a:25:0a:56: 0b:8d:a4:28:6b:8b:65:80:ce:9a:7a:cd:61:a8:09:7c:d7:68: 5b:f6:cf:03:73:32:1c:12:1c:1c:60:20:25:bb:e5:bd:ad:95: 81:12:ab:fa:50:1f:8f:0d:81:b8:19:c3:ac:c3:e7:70:12:fd: 0f:a0:25:e2:99:0e:9e:11:6e:b3:87:88:6d:bc:61:f9:4b:4f: 6b:14:64:ba:8c:65:53:54:7e:e8:fb:f7:64:9a:77:1b:39:0c: 71:c8:82:cd:19:83:6b:18:3d:69:29:cf:9c:1f:65:a2:f2:6c: 79:cc:53:5c:21:db:76:7e:53:5a:a2:74:96:fb:89:5c:62:6a: 62:29:f3:31:5b:71:a4:73:5c:dd:bb:14:b2:af:37:a8:6e:f5: af:eb:53:ca:fb:ab:a6:17:60:b4:4c:89:da:66:03:5c:6c:e5: 04:1b:6b:1a:61:2e:73:55:70:e6:cc:bb:15:3c:57:c8:3b:51: 32:00:ca:ba -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODlEOTExMC8GA1UEBRMoMTc1RDQyMDIyQkY1MEJENkMyMEYzMEIxQzVBRDhDOTRF MDg1QkM0RTAeFw0yNTA0MjUwNTQ2NDdaFw0yNTA1MDIwNTQ2NDdaMBgxFjAUBgNV BAMTDTY4MGIyMWM3LWMyNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDijqfaJVdHGwjH+pJkm9ntMWmoSfCw03RclUf0dtqRNv7lKW1eTlCuvPF7Jj7f fQmPlXtLqJOE8Gb6DNbIzy/zc4MZoGfQyhHmIod/fjThPCuwOTUQdDDJL1cjOEe1 a0mTFs+fgi8bD7wOcGz/GSA7QucH4RtFxRn2V93SdySFg2U4lu3Uv9dJ6AKKJZqh OMAIUAIMbu8BTiAa7SagusmtgqBrJte+IW+pl775+DaJeZAeoGAOEWW2L2U6Qj9G tCCMZN8HHoFk4TE6JVvTxgtj7ySwWHPVFPug5bU4PV97/styE7uRZ5JXDZXFFcNn 0U5ldJQSomSSNDEVcv2OKJ3FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDzi0mmof U1AFSEQVVE1TKIjO20UwHwYDVR0jBBgwFoAUF11CAiv1C9bCDzCxxa2MlOCFvE4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4OUQ5L0VBQkZFQkYyNkY1 QzExRUY4MzVBN0I2NkM0RjlBRTAyL0YxMUNBaXYxQzliQ0R6Q3h4YTJNbE9DRnZF NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRjExQ0FpdjFDOWJDRHpDeHhhMk1sT0NGdkU0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 OUQ5L0VBQkZFQkYyNkY1QzExRUY4MzVBN0I2NkM0RjlBRTAyL0YxMUNBaXYxQzli Q0R6Q3h4YTJNbE9DRnZFNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEUxWYumK76aNE1r5BFD7NOqQesrAWQPnZMs+S9zOWgPc38Np7u0siKx mdYX+iL2MmMsSqFg69iuWv6H3gRIZRhDPcI/eiUKVguNpChri2WAzpp6zWGoCXzX aFv2zwNzMhwSHBxgICW75b2tlYESq/pQH48NgbgZw6zD53AS/Q+gJeKZDp4RbrOH iG28YflLT2sUZLqMZVNUfuj792Sadxs5DHHIgs0Zg2sYPWkpz5wfZaLybHnMU1wh 23Z+U1qidJb7iVxiamIp8zFbcaRzXN27FLKvN6hu9a/rU8r7q6YXYLRMidpmA1xs 5QQbaxphLnNVcObMuxU8V8g7UTIAyro= -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:20 2025 by rpki-client