$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft File: i0b6Eepu4jUJnkhDPIJJehl7nXw.mft (raw, json) Hash identifier: AhH/h3qsGW8ZfJm1qTz7xnscxfcfbty+/NxeCVjvcmY= Subject key identifier: 0D:4B:F4:A0:C7:BC:AA:A3:5D:0A:5B:9E:86:D9:30:99:D0:47:42:0C Authority key identifier: 8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C Certificate issuer: /CN=A91FB03A/serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C Certificate serial: 0202 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft Manifest number: 01F8 Signing time: Fri 25 Apr 2025 01:50:12 +0000 Manifest this update: Fri 25 Apr 2025 01:50:11 +0000 Manifest next update: Fri 02 May 2025 01:50:11 +0000 Files and hashes: 1: i0b6Eepu4jUJnkhDPIJJehl7nXw.crl (hash: M1CtrumstiENC62V5QgOwKR89MOqHU+3pPTrYfGjrpk=) 2: 0B3B85D63A1B11EDAE662B14C4F9AE02.roa (hash: NR8OS1L1YDEOVGgB6cb2fttAqoXgsKVRMpQfg5GvzjQ=) 3: 0BF33B7C3A1B11EDAE662B14C4F9AE02.roa (hash: U57sQE5yclVx7OH+nAtAbjTBaki6Yvzg4fauYYq6XuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 514 (0x202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB03A, serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C Validity Not Before: Apr 25 01:50:11 2025 GMT Not After : May 2 01:50:11 2025 GMT Subject: CN=680aea54-09aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f6:60:3a:a1:c6:5d:49:1f:f6:e7:69:a4:9c: 35:6c:29:da:1b:d9:53:fb:fa:25:ff:52:ef:7d:5d: 30:c0:cb:7b:47:d8:d6:46:d0:8e:83:78:03:0c:27: b8:71:6a:62:c2:08:8e:7b:85:fe:63:a5:ed:03:6a: e8:60:53:a0:c8:4d:ae:b6:42:8a:fb:d4:d5:2d:07: 2b:0b:b7:17:1b:cb:a6:09:94:1c:57:45:51:0d:0c: 8a:a2:01:df:d4:56:b7:ff:1c:68:f7:17:af:ae:41: 41:c1:b0:c4:76:dd:50:d5:c4:fd:f5:72:7a:d0:b0: 5b:b2:c8:a6:5b:07:33:d0:96:a1:88:10:7e:1a:e3: 11:30:99:fe:9a:92:1c:c1:40:1b:93:25:ac:79:09: 4d:e8:e7:5a:f0:42:8d:08:ac:16:d0:38:8a:6c:59: 02:7b:e6:64:80:c9:aa:2b:33:54:19:fe:51:ce:6a: e4:65:92:99:56:cd:05:b7:95:b7:c4:1d:74:d6:7b: bb:57:79:40:00:30:27:ae:ed:aa:63:1e:80:ea:0d: 3f:3d:7d:53:26:df:1f:f1:4b:f3:b2:46:c4:63:0e: 11:f2:59:27:71:78:f7:24:91:45:6a:3c:c3:75:e9: cc:3b:ae:a5:24:e4:9b:6b:5a:74:67:29:46:e9:34: ce:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4B:F4:A0:C7:BC:AA:A3:5D:0A:5B:9E:86:D9:30:99:D0:47:42:0C X509v3 Authority Key Identifier: keyid:8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:2d:77:ed:dd:f6:e4:56:6c:58:5e:f4:3e:f6:5d:99:63:7e: 53:3b:14:83:75:2e:09:36:ea:8c:af:66:4f:af:5f:b3:c7:d3: 31:2f:f5:45:9f:b8:63:f3:c7:ec:d5:0a:c0:1a:bc:df:9d:43: 22:76:76:b2:78:17:0d:e1:d8:a7:a7:a3:45:fb:27:39:62:7c: 86:97:f7:3a:39:a6:48:d6:45:ab:41:bf:80:d4:a3:d0:60:de: 02:7b:1d:fd:82:50:22:e8:17:00:0c:36:11:6a:a7:e5:21:5f: 34:29:9f:1a:e7:80:c2:fe:f2:7c:74:14:ba:e5:4e:8e:d8:f9: 01:98:aa:e0:16:3b:07:ed:7d:d9:12:03:4a:91:4b:f3:3c:ce: 43:ad:ef:17:ef:68:9b:6f:78:16:ee:93:fb:c4:6d:89:79:b9: 7f:a2:82:77:16:1f:46:ed:01:f7:73:df:9d:6a:c7:cb:d0:f0: d2:1e:a1:48:d3:54:2b:f9:0f:ba:96:8e:92:27:23:93:e9:b5: fa:6b:7b:0f:c6:ae:ff:8c:67:c7:70:e9:67:8b:3f:64:42:3a: 34:6b:7a:88:ff:7c:3b:33:62:8d:a9:e7:3f:0a:ca:b2:45:82: 47:74:54:8c:e4:9b:e9:bb:47:02:62:ae:62:72:de:57:d0:5e: f5:14:cf:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIwM0ExMTAvBgNVBAUTKDhCNDZGQTExRUE2RUUyMzUwOTlFNDg0MzNDODI0OTdB MTk3QjlEN0MwHhcNMjUwNDI1MDE1MDExWhcNMjUwNTAyMDE1MDExWjAYMRYwFAYD VQQDEw02ODBhZWE1NC0wOWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPZgOqHGXUkf9udppJw1bCnaG9lT+/ol/1LvfV0wwMt7R9jWRtCOg3gDDCe4 cWpiwgiOe4X+Y6XtA2roYFOgyE2utkKK+9TVLQcrC7cXG8umCZQcV0VRDQyKogHf 1Fa3/xxo9xevrkFBwbDEdt1Q1cT99XJ60LBbssimWwcz0JahiBB+GuMRMJn+mpIc wUAbkyWseQlN6Oda8EKNCKwW0DiKbFkCe+ZkgMmqKzNUGf5RzmrkZZKZVs0Ft5W3 xB101nu7V3lAADAnru2qYx6A6g0/PX1TJt8f8UvzskbEYw4R8lkncXj3JJFFajzD denMO66lJOSba1p0ZylG6TTOJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA1L9KDH vKqjXQpbnobZMJnQR0IMMB8GA1UdIwQYMBaAFItG+hHqbuI1CZ5IQzyCSXoZe518 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjAzQS9ERkM2OEQ2NDNB MTYxMUVEOTE1MkJGMEVDNEY5QUUwMi9pMGI2RWVwdTRqVUpua2hEUElKSmVobDdu WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kwYjZFZXB1NGpVSm5raERQSUpKZWhsN25Ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjAzQS9ERkM2OEQ2NDNBMTYxMUVEOTE1MkJGMEVDNEY5QUUwMi9pMGI2RWVwdTRq VUpua2hEUElKSmVobDduWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3LXft3fbkVmxYXvQ+9l2ZY35TOxSDdS4JNuqMr2ZPr1+zx9MxL/VF n7hj88fs1QrAGrzfnUMidnayeBcN4dinp6NF+yc5YnyGl/c6OaZI1kWrQb+A1KPQ YN4Cex39glAi6BcADDYRaqflIV80KZ8a54DC/vJ8dBS65U6O2PkBmKrgFjsH7X3Z EgNKkUvzPM5Dre8X72ibb3gW7pP7xG2Jebl/ooJ3Fh9G7QH3c9+dasfL0PDSHqFI 01Qr+Q+6lo6SJyOT6bX6a3sPxq7/jGfHcOlniz9kQjo0a3qI/3w7M2KNqec/Csqy RYJHdFSM5Jvpu0cCYq5ict5X0F71FM+e -----END CERTIFICATE-----Generated at Sat Apr 26 12:20:53 2025 by rpki-client