$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft File: a1P4D46IGzcxlyZjuhiXt0qS1E0.mft (raw, json) Hash identifier: AH21MLioOpigLV4Amnd/Eny1m21nUd0EQQoBXOEkJuY= Subject key identifier: 50:05:30:B1:CA:F8:09:F5:93:99:F5:27:1B:DA:38:83:94:FB:D6:D8 Authority key identifier: 6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D Certificate issuer: /CN=A91991D3/serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft Manifest number: 01C1 Signing time: Thu 15 May 2025 02:31:29 +0000 Manifest this update: Thu 15 May 2025 02:31:28 +0000 Manifest next update: Thu 22 May 2025 02:31:28 +0000 Files and hashes: 1: a1P4D46IGzcxlyZjuhiXt0qS1E0.crl (hash: iVITWHoKxC2qOxlabxFNEPsP30Nz6LrjkyxHaRbM/qI=) 2: 8879DC04990611EF9BA6A76EC4F9AE02.roa (hash: QMqZliYIzALZLrdF4dbF8vk9DUXnAXmdWeIPAlbr7lk=) 3: 531EFB4A8DD311EFAF53373AC4F9AE02.roa (hash: LcCehnLIRoCgjwwcDQ7TUr2n1e7iAgFU0iCoo79xeiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:31:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D3, serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D Validity Not Before: May 15 02:31:28 2025 GMT Not After : May 22 02:31:28 2025 GMT Subject: CN=68255201-351c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:aa:a7:bf:95:63:b1:6b:db:f6:f2:8d:7d:78: 01:f4:0c:03:97:38:32:60:69:69:c1:44:88:a2:57: 59:95:8e:f1:7c:b6:ac:e0:b9:07:06:7f:09:5d:24: 5a:77:83:a7:65:eb:ff:92:42:b8:62:d3:56:2a:c3: e9:ff:be:97:bb:f4:aa:9a:94:09:1e:0c:a8:80:16: 86:15:a5:ec:ea:06:01:eb:10:61:6a:45:a6:dc:2b: e9:f4:b6:a7:8e:f0:a4:0d:0f:f1:d1:8c:5a:47:e0: 8d:1b:c8:91:7f:98:78:60:b0:ff:dc:7e:3a:b6:87: 8a:c1:8e:8d:ff:4e:cf:00:31:84:b8:41:97:a4:62: 2a:53:d1:6b:ac:ac:00:c9:ca:f5:03:63:1c:d5:0c: e5:c9:d9:00:9f:68:b9:a6:3b:f1:68:b1:93:ec:de: 9c:94:fa:94:3b:86:45:f2:2e:c1:c9:6e:ea:be:77: 5e:01:fa:ed:87:6b:be:8c:2c:96:4a:ac:52:a6:7a: 86:dc:42:ac:c2:11:75:37:e5:f4:53:51:ea:a8:de: 19:ab:da:84:ad:f7:36:f3:c8:54:65:19:01:29:de: 5b:21:ab:db:dd:43:59:e0:02:a7:36:af:de:7f:07: 93:17:31:57:e2:b9:17:64:69:56:fa:85:6c:05:01: 08:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:05:30:B1:CA:F8:09:F5:93:99:F5:27:1B:DA:38:83:94:FB:D6:D8 X509v3 Authority Key Identifier: keyid:6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:9c:71:4b:5f:45:0a:03:1b:0c:89:9b:1c:de:9c:3f:38:9a: 73:f0:5b:9f:92:d3:2b:3d:cd:af:06:0c:4b:7f:2c:ce:b9:5e: ae:1d:a0:b0:fb:1e:66:40:f6:06:1d:e7:8b:1a:b0:cf:ed:3c: 07:c3:e4:20:c0:ea:3e:26:e7:0e:7f:80:60:b7:9a:ad:6f:1a: df:3a:05:aa:00:81:22:df:2c:0e:db:74:b6:38:ff:cb:ac:95: ac:05:25:09:fd:52:50:d8:24:f0:d3:52:d9:89:f5:ba:1d:58: 3b:98:11:53:a2:eb:11:a3:63:94:2e:36:86:60:0f:96:f8:c7: 23:f4:be:83:76:a8:96:a8:3e:e9:80:36:5d:49:1e:39:bc:0f: ec:4c:d4:94:94:fa:d9:66:d7:14:8d:dc:35:f8:84:8f:bc:63: 47:06:ae:d2:90:4b:3e:9f:f2:b3:22:61:e8:1a:16:e6:45:66: d4:c0:3d:4e:1a:da:a2:75:05:f2:77:c8:13:00:50:cc:75:42: d1:3e:e5:bc:48:76:77:83:ac:62:81:a3:bf:a8:0d:be:ff:bc: af:17:04:cc:2a:9c:1e:43:55:8a:e5:5e:c7:f4:1a:53:78:4b: 94:b3:15:90:d6:2c:94:a0:47:45:b0:16:ce:a2:ee:22:d2:fa: 7a:a6:bc:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDMxMTAvBgNVBAUTKDZCNTNGODBGOEU4ODFCMzczMTk3MjY2M0JBMTg5N0I3 NEE5MkQ0NEQwHhcNMjUwNTE1MDIzMTI4WhcNMjUwNTIyMDIzMTI4WjAYMRYwFAYD VQQDEw02ODI1NTIwMS0zNTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6qnv5VjsWvb9vKNfXgB9AwDlzgyYGlpwUSIoldZlY7xfLas4LkHBn8JXSRa d4OnZev/kkK4YtNWKsPp/76Xu/SqmpQJHgyogBaGFaXs6gYB6xBhakWm3Cvp9Lan jvCkDQ/x0YxaR+CNG8iRf5h4YLD/3H46toeKwY6N/07PADGEuEGXpGIqU9FrrKwA ycr1A2Mc1QzlydkAn2i5pjvxaLGT7N6clPqUO4ZF8i7ByW7qvndeAfrth2u+jCyW SqxSpnqG3EKswhF1N+X0U1HqqN4Zq9qErfc288hUZRkBKd5bIavb3UNZ4AKnNq/e fweTFzFX4rkXZGlW+oVsBQEIHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFAFMLHK +An1k5n1JxvaOIOU+9bYMB8GA1UdIwQYMBaAFGtT+A+OiBs3MZcmY7oYl7dKktRN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy81RkEzNkUzNDg5 MjMxMUVEQkNBMjk2MTNDNEY5QUUwMi9hMVA0RDQ2SUd6Y3hseVpqdWhpWHQwcVMx RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ExUDRENDZJR3pjeGx5Wmp1aGlYdDBxUzFFMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTFEMy81RkEzNkUzNDg5MjMxMUVEQkNBMjk2MTNDNEY5QUUwMi9hMVA0RDQ2SUd6 Y3hseVpqdWhpWHQwcVMxRTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXnHFLX0UKAxsMiZsc3pw/OJpz8FufktMrPc2vBgxLfyzOuV6uHaCw +x5mQPYGHeeLGrDP7TwHw+QgwOo+JucOf4Bgt5qtbxrfOgWqAIEi3ywO23S2OP/L rJWsBSUJ/VJQ2CTw01LZifW6HVg7mBFTousRo2OULjaGYA+W+Mcj9L6DdqiWqD7p gDZdSR45vA/sTNSUlPrZZtcUjdw1+ISPvGNHBq7SkEs+n/KzImHoGhbmRWbUwD1O GtqidQXyd8gTAFDMdULRPuW8SHZ3g6xigaO/qA2+/7yvFwTMKpweQ1WK5V7H9BpT eEuUsxWQ1iyUoEdFsBbOou4i0vp6pry2 -----END CERTIFICATE-----Generated at Fri May 16 14:40:29 2025 by rpki-client