$ rpki-client -vvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft File: 1cBKCsLVKt_nBVZHjcsOHYHtENo.mft (raw, json) Hash identifier: +srz2c2VLyeFsASFqKrDKAxtvchBIL4D01UM2dFvpsU= Subject key identifier: 97:93:1A:C7:72:E0:02:37:33:65:18:02:B1:91:1E:9B:BD:E0:C4:C2 Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA Certificate issuer: /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA Certificate serial: 046B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft Manifest number: 0465 Signing time: Sun 04 May 2025 23:47:03 +0000 Manifest this update: Sun 04 May 2025 23:47:03 +0000 Manifest next update: Sun 11 May 2025 23:47:03 +0000 Files and hashes: 1: 1cBKCsLVKt_nBVZHjcsOHYHtENo.crl (hash: lhh38Ka7FI+IatAWD0FLMloLCLJRKDES9peBRiZUsVo=) 2: F11B4C14E40111ECBD78E571C4F9AE02.roa (hash: yrgJiB4VmkkkL0wy5q4A23svX1r+S/7CECcoJjyrMso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 18:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1131 (0x46b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91284EC, serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA Validity Not Before: May 4 23:47:03 2025 GMT Not After : May 11 23:47:03 2025 GMT Subject: CN=6817fc77-f953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:52:cd:bd:28:3d:b1:86:b4:7c:1a:87:a1:a5: 20:0e:2a:26:e8:d5:e3:aa:ee:81:23:f2:4d:d3:de: 97:96:29:cf:8f:aa:27:74:8e:a2:77:ed:52:e5:b5: a7:8e:c6:4a:9e:85:2d:0d:2d:2f:b5:08:c9:13:40: f9:0b:c0:1e:35:4e:43:0d:82:f6:68:c5:d4:27:1c: f4:0c:1b:79:65:35:fb:28:e4:e6:8a:1c:38:a5:95: 44:a5:9d:e9:f5:94:bd:fd:87:84:aa:3f:20:c3:47: 59:46:2e:56:74:83:0d:c4:e7:51:f6:45:91:49:b2: 02:84:21:49:83:c4:6d:0c:bd:9c:62:80:70:ee:51: a2:66:2a:92:7d:c3:08:44:a2:64:7f:f3:05:1a:f8: d2:b7:2f:ad:94:33:37:6a:9a:8b:e0:9f:1f:3b:8e: f5:97:cf:42:f9:24:38:55:92:ce:ea:50:8d:0f:45: 0e:88:a2:50:41:83:26:9d:00:00:18:da:3a:8b:a4: cf:2f:df:29:b0:96:5e:34:88:0a:2e:31:ac:8e:33: 10:0d:7b:27:66:51:82:d8:6b:ef:92:c5:56:d9:fc: 0c:c9:79:90:20:71:63:41:0e:15:d6:8d:34:a5:36: 65:22:d9:1f:3d:5b:9c:03:75:b6:6e:38:3b:b6:e4: e7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:93:1A:C7:72:E0:02:37:33:65:18:02:B1:91:1E:9B:BD:E0:C4:C2 X509v3 Authority Key Identifier: keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:29:a1:a4:0c:2f:e3:84:88:b5:16:24:b9:58:29:9b:a0:5a: 80:b5:49:aa:0a:37:95:f0:37:58:e0:40:f8:4a:9c:2c:5d:03: f3:81:a1:74:f6:c8:82:4a:c6:34:d4:d4:e4:1e:cc:b1:18:ab: 03:fc:90:bf:ee:08:3a:02:db:c1:1e:49:1a:45:9a:57:4e:48: e2:ec:f4:a4:a2:1a:33:81:5e:fb:3a:6c:0c:dd:14:0b:00:1c: 16:55:db:ac:3c:6c:13:99:08:5c:22:3a:6a:98:71:03:c8:50: 6b:00:5d:db:51:eb:d4:3c:97:bd:6b:d8:05:9b:fc:58:78:0e: 61:3b:c3:cd:e2:87:b9:cf:37:14:af:bd:01:d8:a7:f7:c2:07: 50:17:0c:ce:6a:ca:ab:2f:57:55:75:d8:c9:8f:d6:21:a0:ef: 30:5a:f8:69:44:2b:d1:34:7c:e7:61:d9:65:85:ad:a0:fe:3a: c7:61:94:9f:b4:3a:b0:ab:95:5c:9c:b9:53:de:1b:f5:e3:8b: fb:e8:e8:01:f0:2d:3b:12:1f:5d:f2:e4:d7:35:0f:79:ca:dc: a5:11:cc:0b:f3:b1:e9:2f:68:ae:d7:9a:9e:78:f2:f0:31:7d: f3:04:88:33:60:b4:3e:42:fd:8d:99:44:43:8f:f3:a9:0d:9e: ad:d4:31:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg0RUMxMTAvBgNVBAUTKEQ1QzA0QTBBQzJENTJBREZFNzA1NTY0NzhEQ0IwRTFE ODFFRDEwREEwHhcNMjUwNTA0MjM0NzAzWhcNMjUwNTExMjM0NzAzWjAYMRYwFAYD VQQDEw02ODE3ZmM3Ny1mOTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+1LNvSg9sYa0fBqHoaUgDiom6NXjqu6BI/JN096XlinPj6ondI6id+1S5bWn jsZKnoUtDS0vtQjJE0D5C8AeNU5DDYL2aMXUJxz0DBt5ZTX7KOTmihw4pZVEpZ3p 9ZS9/YeEqj8gw0dZRi5WdIMNxOdR9kWRSbIChCFJg8RtDL2cYoBw7lGiZiqSfcMI RKJkf/MFGvjSty+tlDM3apqL4J8fO471l89C+SQ4VZLO6lCND0UOiKJQQYMmnQAA GNo6i6TPL98psJZeNIgKLjGsjjMQDXsnZlGC2GvvksVW2fwMyXmQIHFjQQ4V1o00 pTZlItkfPVucA3W2bjg7tuTnUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJeTGsdy 4AI3M2UYArGRHpu94MTCMB8GA1UdIwQYMBaAFNXASgrC1Srf5wVWR43LDh2B7RDa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODRFQy9FQkY2MDFGQzQ4 Q0YxMUVDQTY2NkIwM0VDNEY5QUUwMi8xY0JLQ3NMVkt0X25CVlpIamNzT0hZSHRF Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjQktDc0xWS3RfbkJWWkhqY3NPSFlIdEVOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODRFQy9FQkY2MDFGQzQ4Q0YxMUVDQTY2NkIwM0VDNEY5QUUwMi8xY0JLQ3NMVkt0 X25CVlpIamNzT0hZSHRFTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8KaGkDC/jhIi1FiS5WCmboFqAtUmqCjeV8DdY4ED4SpwsXQPzgaF0 9siCSsY01NTkHsyxGKsD/JC/7gg6AtvBHkkaRZpXTkji7PSkohozgV77OmwM3RQL ABwWVdusPGwTmQhcIjpqmHEDyFBrAF3bUevUPJe9a9gFm/xYeA5hO8PN4oe5zzcU r70B2Kf3wgdQFwzOasqrL1dVddjJj9YhoO8wWvhpRCvRNHznYdllha2g/jrHYZSf tDqwq5VcnLlT3hv144v76OgB8C07Eh9d8uTXNQ95ytylEcwL87HpL2iu15qeePLw MX3zBIgzYLQ+Qv2NmURDj/OpDZ6t1DH/ -----END CERTIFICATE-----Generated at Mon May 5 01:22:06 2025 by rpki-client