$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft File: CHspwfvXREICrgAqSXEn_WbyStk.mft (raw, json) Hash identifier: mKNNr8NyIc70ll+jIy83pJDoAfTlXXnd6rH1yfFA/vQ= Subject key identifier: 24:E2:59:D9:A2:4E:90:A5:B0:7A:EC:C8:68:DF:6D:D5:3B:CB:A2:18 Authority key identifier: 08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9 Certificate issuer: /CN=A91FAED9/serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9 Certificate serial: 0469 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft Manifest number: 0464 Signing time: Thu 24 Apr 2025 23:54:58 +0000 Manifest this update: Thu 24 Apr 2025 23:54:58 +0000 Manifest next update: Thu 01 May 2025 23:54:58 +0000 Files and hashes: 1: CHspwfvXREICrgAqSXEn_WbyStk.crl (hash: Os91Vg6vdAkDZZYaCSjsAB4R5gID78UU2bTMu8mLe/U=) 2: D3C965FA45F611EC9FB3BB49C4F9AE02.roa (hash: TOciMmg+YXh13dYfOrB14chWnhLKZ+JRHOQLiS8Jf5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1129 (0x469) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAED9, serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9 Validity Not Before: Apr 24 23:54:58 2025 GMT Not After : May 1 23:54:58 2025 GMT Subject: CN=680acf52-fe98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:35:8d:e1:6c:4c:6a:0b:8f:1a:a8:f8:9d:75: 07:4f:d1:f7:5b:ab:29:23:eb:75:2e:fb:c8:14:46: 1c:c4:17:d8:c0:8f:1c:21:7d:ea:96:7b:72:22:46: 51:cb:7e:46:16:4f:bd:ab:34:fb:1d:06:8f:06:fc: ff:d5:7d:87:37:c6:0c:28:f1:a1:4b:14:f4:e5:4a: 01:68:57:53:91:4f:36:c7:46:88:67:49:6a:b9:ec: 1e:b7:4d:30:ff:2b:cf:19:2a:20:3c:20:ae:c0:62: 9c:30:88:f7:09:71:e0:ad:a3:c0:8a:ea:4e:c0:ef: 0d:ae:e5:92:68:90:6e:69:f7:f4:33:d6:65:a4:04: 75:7a:56:25:89:54:2b:03:e2:f5:d7:e7:7e:93:db: 07:7f:ad:aa:45:f3:a7:ca:59:20:cf:31:01:d0:8c: b5:cc:fb:fc:0d:e2:0e:a0:fe:6f:b0:fe:1f:b7:a4: 12:b4:5a:c0:38:6c:dc:24:b7:a3:55:4f:a5:92:5a: 65:31:f8:9d:fa:65:1f:85:69:62:96:51:d1:68:29: d0:d7:bb:07:c9:e0:04:c6:d3:38:79:46:cc:58:8b: 0b:49:20:3b:2a:37:b6:0f:09:cd:ea:62:dd:19:72: a4:85:01:a9:c6:c4:24:00:d8:11:dc:ca:10:9e:24: 7d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E2:59:D9:A2:4E:90:A5:B0:7A:EC:C8:68:DF:6D:D5:3B:CB:A2:18 X509v3 Authority Key Identifier: keyid:08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:91:0c:57:8e:e8:32:bf:c1:70:57:16:9d:98:3b:54:4c:6a: bb:e5:23:f3:5d:20:30:1c:41:f8:6c:94:22:2f:2e:a7:bb:91: 4a:cb:dc:15:5a:24:b1:7b:a0:a9:1c:95:db:48:bd:1e:b6:bf: 6d:b8:95:c6:f3:f3:03:c7:21:4a:94:e3:e2:6d:0c:c9:34:d8: 45:5c:63:74:ec:ad:35:10:03:9d:4d:07:56:35:49:71:14:fb: 2a:eb:6d:d0:6e:12:57:49:66:bd:94:ee:79:98:32:37:98:7a: 5d:08:f3:e7:37:a9:d4:5e:b0:15:97:35:0c:b5:0b:75:0a:e4: f0:b8:e6:e2:f9:0e:1f:18:ee:e4:23:43:e6:29:d2:f9:4d:1f: 6a:63:11:23:2f:00:52:ce:54:6b:3a:fb:fa:c8:d2:2d:97:0f: 1f:70:ad:1e:93:73:bd:05:4d:ed:de:61:33:c9:8a:66:9e:b7: 0b:6c:42:ea:85:f2:2a:dc:2d:6e:71:42:8d:91:e1:0f:16:e2: 56:c7:3b:17:79:34:71:04:34:54:7d:1e:ec:b0:47:e7:58:ed: 56:b3:c4:0b:12:ae:01:93:cd:76:cc:dc:51:45:b5:31:84:41: 55:76:ea:c6:36:4a:98:b5:c3:cd:8e:b6:da:d2:f9:ed:f6:36: a9:ea:83:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFFRDkxMTAvBgNVBAUTKDA4N0IyOUMxRkJENzQ0NDIwMkFFMDAyQTQ5NzEyN0ZE NjZGMjRBRDkwHhcNMjUwNDI0MjM1NDU4WhcNMjUwNTAxMjM1NDU4WjAYMRYwFAYD VQQDEw02ODBhY2Y1Mi1mZTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArTWN4WxMaguPGqj4nXUHT9H3W6spI+t1LvvIFEYcxBfYwI8cIX3qlntyIkZR y35GFk+9qzT7HQaPBvz/1X2HN8YMKPGhSxT05UoBaFdTkU82x0aIZ0lquewet00w /yvPGSogPCCuwGKcMIj3CXHgraPAiupOwO8NruWSaJBuaff0M9ZlpAR1elYliVQr A+L11+d+k9sHf62qRfOnylkgzzEB0Iy1zPv8DeIOoP5vsP4ft6QStFrAOGzcJLej VU+lklplMfid+mUfhWlillHRaCnQ17sHyeAExtM4eUbMWIsLSSA7Kje2DwnN6mLd GXKkhQGpxsQkANgR3MoQniR99QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTiWdmi TpClsHrsyGjfbdU7y6IYMB8GA1UdIwQYMBaAFAh7KcH710RCAq4AKklxJ/1m8krZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUVEOS82QTc2NUFBQTQ1 REMxMUVDQThBMzE0NkRDNEY5QUUwMi9DSHNwd2Z2WFJFSUNyZ0FxU1hFbl9XYnlT dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NIc3B3ZnZYUkVJQ3JnQXFTWEVuX1dieVN0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUVEOS82QTc2NUFBQTQ1REMxMUVDQThBMzE0NkRDNEY5QUUwMi9DSHNwd2Z2WFJF SUNyZ0FxU1hFbl9XYnlTdGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAukQxXjugyv8FwVxadmDtUTGq75SPzXSAwHEH4bJQiLy6nu5FKy9wV WiSxe6CpHJXbSL0etr9tuJXG8/MDxyFKlOPibQzJNNhFXGN07K01EAOdTQdWNUlx FPsq623QbhJXSWa9lO55mDI3mHpdCPPnN6nUXrAVlzUMtQt1CuTwuObi+Q4fGO7k I0PmKdL5TR9qYxEjLwBSzlRrOvv6yNItlw8fcK0ek3O9BU3t3mEzyYpmnrcLbELq hfIq3C1ucUKNkeEPFuJWxzsXeTRxBDRUfR7ssEfnWO1Ws8QLEq4Bk812zNxRRbUx hEFVdurGNkqYtcPNjrba0vnt9jap6oO/ -----END CERTIFICATE-----Generated at Sat Apr 26 14:21:04 2025 by rpki-client