$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft File: _CT1OQdHh-zqsAwkJgbCvWiBmg0.mft (raw, json) Hash identifier: 7X7otmmx94M3qx+78Cyf3yx9rLUwX5yHTbfNY12qZHc= Subject key identifier: 1A:F9:E2:FF:74:99:10:09:5C:07:30:56:0E:CC:7E:29:FF:E0:89:1B Authority key identifier: FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D Certificate issuer: /CN=A91A9CBB/serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft Manifest number: 13 Signing time: Sun 11 May 2025 06:46:37 +0000 Manifest this update: Sun 11 May 2025 06:46:36 +0000 Manifest next update: Sun 18 May 2025 06:46:36 +0000 Files and hashes: 1: _CT1OQdHh-zqsAwkJgbCvWiBmg0.crl (hash: giQru2mN/CnlEbfhCgVypIFH4SnKPut64oaz+5RjQDQ=) 2: 2A8C8F02198E11F09D302145C4F9AE02.roa (hash: pkFF5f+Vaat+aJOayMibpTMU9Wp7Q864DQvUc24s624=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CBB, serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Validity Not Before: May 11 06:46:36 2025 GMT Not After : May 18 06:46:36 2025 GMT Subject: CN=682047cd-641d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:24:af:2c:59:9e:8f:d0:c3:ee:e9:4b:cf:34: a9:70:f1:a5:15:a9:81:c8:e4:1e:7a:19:a1:06:6f: f9:60:47:7f:b5:b9:da:ae:0e:5b:0b:28:b9:fa:e2: fc:33:10:8f:ea:e4:34:07:48:36:5e:00:5c:03:44: 17:5c:11:c0:24:f4:42:d0:9f:fe:a0:e7:d4:2e:be: 87:45:7c:2a:d2:46:fb:26:79:0c:56:7e:dc:ae:86: 54:3f:21:ff:af:9d:57:2d:44:b7:44:8f:e5:de:07: 6b:fe:34:41:df:8e:e3:1a:53:18:13:89:03:39:1f: ce:0d:aa:be:47:dc:dc:ba:fd:bc:6c:f1:33:ca:c0: d4:e4:c6:ac:fe:a2:80:df:70:10:76:dd:a2:6c:f9: 98:bf:12:a4:ba:f7:ec:ec:e4:c3:42:0b:30:f5:90: e0:5e:52:22:e7:46:54:1e:67:59:a6:98:0f:7c:94: 80:ed:5f:f7:87:b2:09:8b:ac:8a:a8:99:87:ff:79: d3:45:3c:13:7e:93:72:15:9a:c3:77:67:98:ab:49: 41:fb:cd:8a:b8:dc:a0:2d:9f:9d:f7:3d:d2:d4:44: d8:fd:2f:05:cf:fc:d8:5f:03:54:b3:f0:ff:89:db: c3:34:78:01:f8:e4:12:7a:e8:f3:9e:e1:e5:98:07: 21:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F9:E2:FF:74:99:10:09:5C:07:30:56:0E:CC:7E:29:FF:E0:89:1B X509v3 Authority Key Identifier: keyid:FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:f1:9e:b4:2e:60:77:79:70:a7:22:de:9d:16:bf:83:e1:1b: ea:9f:9b:8b:35:cc:cd:45:fc:84:3e:e4:e8:ec:7c:02:8c:b3: 7d:b9:0a:c8:29:0c:7e:c8:84:10:06:bf:11:d7:52:4c:96:8e: d2:e7:ab:56:f3:a8:d4:d6:f5:b2:18:ee:74:7d:c5:38:f1:99: 28:55:e2:f6:c3:d3:91:7d:d4:54:6e:24:83:8c:29:f8:b4:a6: d3:b5:63:10:a8:07:ae:7a:45:53:40:4c:ad:53:53:7b:5b:e6: 6b:4e:98:2c:50:5f:22:f7:b8:29:fd:2a:db:35:80:2d:4a:c0: e7:f9:8d:88:18:83:51:35:9e:60:bd:4c:d1:38:60:17:71:4d: 1c:d0:37:9b:e2:d2:9f:29:58:2b:15:d1:db:d4:b4:41:8f:b1: 13:59:ca:26:0d:df:65:67:5d:e2:8b:43:40:77:e3:76:fe:15: 75:6b:70:06:25:50:60:9e:c8:e4:d8:69:7c:31:66:c4:6b:19: 63:af:f5:4a:39:3b:e6:c7:db:c2:44:5a:18:28:bd:5b:db:49: 40:a6:28:0b:aa:5f:2c:5f:d6:84:21:ca:ef:fe:c4:85:f2:9a: df:01:fb:3d:b7:0b:48:6a:bd:e7:83:9d:46:42:69:df:0f:de: c7:bf:c5:1c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUNCQjExMC8GA1UEBRMoRkMyNEY1MzkwNzQ3ODdFQ0VBQjAwQzI0MjYwNkMyQkQ2 ODgxOUEwRDAeFw0yNTA1MTEwNjQ2MzZaFw0yNTA1MTgwNjQ2MzZaMBgxFjAUBgNV BAMTDTY4MjA0N2NkLTY0MWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClJK8sWZ6P0MPu6UvPNKlw8aUVqYHI5B56GaEGb/lgR3+1udquDlsLKLn64vwz EI/q5DQHSDZeAFwDRBdcEcAk9ELQn/6g59QuvodFfCrSRvsmeQxWftyuhlQ/If+v nVctRLdEj+XeB2v+NEHfjuMaUxgTiQM5H84Nqr5H3Ny6/bxs8TPKwNTkxqz+ooDf cBB23aJs+Zi/EqS69+zs5MNCCzD1kOBeUiLnRlQeZ1mmmA98lIDtX/eHsgmLrIqo mYf/edNFPBN+k3IVmsN3Z5irSUH7zYq43KAtn533PdLURNj9LwXP/NhfA1Sz8P+J 28M0eAH45BJ66POe4eWYByHPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGvni/3SZ EAlcBzBWDsx+Kf/giRswHwYDVR0jBBgwFoAU/CT1OQdHh+zqsAwkJgbCvWiBmg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5Q0JCL0Q1M0JEMTQ2MTVC MTExRjBBMjc3NEEwOUM0RjlBRTAyL19DVDFPUWRIaC16cXNBd2tKZ2JDdldpQm1n MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX0NUMU9RZEhoLXpxc0F3a0pnYkN2V2lCbWcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 Q0JCL0Q1M0JEMTQ2MTVCMTExRjBBMjc3NEEwOUM0RjlBRTAyL19DVDFPUWRIaC16 cXNBd2tKZ2JDdldpQm1nMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHPxnrQuYHd5cKci3p0Wv4PhG+qfm4s1zM1F/IQ+5OjsfAKMs325Csgp DH7IhBAGvxHXUkyWjtLnq1bzqNTW9bIY7nR9xTjxmShV4vbD05F91FRuJIOMKfi0 ptO1YxCoB656RVNATK1TU3tb5mtOmCxQXyL3uCn9Kts1gC1KwOf5jYgYg1E1nmC9 TNE4YBdxTRzQN5vi0p8pWCsV0dvUtEGPsRNZyiYN32VnXeKLQ0B343b+FXVrcAYl UGCeyOTYaXwxZsRrGWOv9Uo5O+bH28JEWhgovVvbSUCmKAuqXyxf1oQhyu/+xIXy mt8B+z23C0hqveeDnUZCad8P3se/xRw= -----END CERTIFICATE-----Generated at Tue May 13 07:54:47 2025 by rpki-client