$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft File: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft (raw, json) Hash identifier: c7uUYiGqrff3qG2hTUvcUtwId8C/DKBoe4GMPeevEHI= Subject key identifier: 35:8E:ED:C1:D0:2C:2B:46:5C:49:2E:53:80:97:1C:F1:15:C2:A0:3B Authority key identifier: D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95 Certificate issuer: /CN=A91AA897/serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095 Certificate serial: 063A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft Manifest number: 062D Signing time: Mon 12 May 2025 22:29:55 +0000 Manifest this update: Mon 12 May 2025 22:29:55 +0000 Manifest next update: Mon 19 May 2025 22:29:55 +0000 Files and hashes: 1: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl (hash: ZDwfiu2xM/8KlxBWNH0CzAYoPimUJJ878u6ytd7CpZQ=) 2: D78A16ECCAC311EC910B8C20C4F9AE02.roa (hash: oJo0EldVtMJvTJnA4FpJe7JGIUD/xhTk+VY6Q3vUpoY=) 3: D6692528CAC311EC910B8C20C4F9AE02.roa (hash: ZgaT6NUPSJGrS2FDGhXNf1URQXdcMTQg5TCptCSVeas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1594 (0x63a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA897, serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095 Validity Not Before: May 12 22:29:55 2025 GMT Not After : May 19 22:29:55 2025 GMT Subject: CN=68227663-334d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:23:7d:fb:0f:b8:c4:5e:3c:33:bb:58:a9:9e: 35:71:c9:69:26:b0:4b:72:6a:9c:46:3a:32:9a:2b: 10:ee:94:cf:0b:58:2e:e0:2e:b7:1e:e5:4d:28:b3: 9d:b3:88:4b:08:f6:6d:c2:d0:40:66:a7:47:73:e1: cd:e9:f8:c6:36:a7:7a:51:64:18:f8:3c:dd:7b:b2: c3:92:9e:4c:13:fc:5c:3e:53:32:9a:e0:d6:76:b9: 9c:6d:d3:7d:34:52:cb:f9:06:9f:3c:d2:a4:b3:87: b9:05:24:bb:bb:f3:1a:02:58:41:e0:15:8b:0c:c9: c7:55:02:3c:0a:fe:79:de:28:14:ff:3e:f3:4c:b1: 6e:3c:a4:a3:95:d9:e0:1a:10:8c:f3:ba:31:9a:76: 5e:33:c9:d4:99:14:ee:c8:53:93:fa:ba:07:5e:83: bb:c7:93:97:6e:d2:5f:b1:cb:44:93:0c:0c:f7:42: 42:97:59:fc:af:34:35:58:8a:83:44:46:5b:79:9d: 26:f1:f8:7f:05:83:80:22:c2:80:8b:59:80:2a:17: 85:f6:cb:cd:f0:16:b9:78:1e:d5:1d:f1:4f:4a:a3: f3:97:9c:94:4a:c6:5e:11:61:b6:db:e3:f2:b2:4f: 0a:a0:61:b9:22:09:55:86:5e:53:9f:72:ce:9f:8e: 02:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:8E:ED:C1:D0:2C:2B:46:5C:49:2E:53:80:97:1C:F1:15:C2:A0:3B X509v3 Authority Key Identifier: keyid:D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:a2:1d:30:8e:09:f8:3d:3a:97:23:7b:67:52:13:b3:6c:9b: 91:45:eb:46:0a:87:19:2b:38:c9:ce:dd:e8:2e:1c:a2:da:f5: 35:ab:0c:34:76:64:ff:3d:d9:1b:12:f8:8f:35:4a:0b:67:20: 3a:5b:f1:07:f8:13:9c:8d:2b:85:36:a8:b7:cb:5b:9e:06:29: f4:47:0f:69:0c:77:60:a9:04:38:1f:b5:86:88:88:b9:83:6e: ed:42:5d:b2:8e:b0:8f:df:2a:8b:e3:13:6a:7a:59:67:cf:aa: f0:3d:8f:d1:d9:79:93:7b:fc:3c:3c:f7:bf:14:ed:c5:9b:ce: f1:d0:d4:2f:88:4f:3a:a1:c4:fc:a6:15:80:af:8b:14:4b:d3: e1:e6:fd:95:98:5e:ef:68:db:3a:62:81:2b:d9:fb:d2:c2:1f: 48:2f:25:3b:15:d8:64:60:0d:cf:2d:3c:04:7d:48:8e:ef:92: 78:82:e5:d8:05:92:20:bc:03:28:7e:e8:e5:ee:46:69:15:7e: 5d:b8:3d:2b:56:67:75:77:9a:0e:73:6b:64:a7:ef:5e:2d:84: c3:4f:d9:cd:be:50:4f:c1:78:7e:57:ca:c9:0c:82:ee:1f:88: bd:23:c4:1d:31:0e:31:b2:92:cf:eb:b9:46:3e:80:7b:61:c8: 6a:45:9d:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE4OTcxMTAvBgNVBAUTKEQ2OEQ0MTFBRDAzRTczMTRGMTQ5MkQwNjJEQjBEOTE5 NEU5RjUwOTUwHhcNMjUwNTEyMjIyOTU1WhcNMjUwNTE5MjIyOTU1WjAYMRYwFAYD VQQDEw02ODIyNzY2My0zMzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0iN9+w+4xF48M7tYqZ41cclpJrBLcmqcRjoymisQ7pTPC1gu4C63HuVNKLOd s4hLCPZtwtBAZqdHc+HN6fjGNqd6UWQY+Dzde7LDkp5ME/xcPlMymuDWdrmcbdN9 NFLL+QafPNKks4e5BSS7u/MaAlhB4BWLDMnHVQI8Cv553igU/z7zTLFuPKSjldng GhCM87oxmnZeM8nUmRTuyFOT+roHXoO7x5OXbtJfsctEkwwM90JCl1n8rzQ1WIqD REZbeZ0m8fh/BYOAIsKAi1mAKheF9svN8Ba5eB7VHfFPSqPzl5yUSsZeEWG22+Py sk8KoGG5IglVhl5Tn3LOn44COQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWO7cHQ LCtGXEkuU4CXHPEVwqA7MB8GA1UdIwQYMBaAFNaNQRrQPnMU8UktBi2w2RlOn1CV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTg5Ny9FMUQxMTc3MDk1 QkExMUVCQjI4MTIzNzFDNEY5QUUwMi8xbzFCR3RBLWN4VHhTUzBHTGJEWkdVNmZV SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFvMUJHdEEtY3hUeFNTMEdMYkRaR1U2ZlVKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTg5Ny9FMUQxMTc3MDk1QkExMUVCQjI4MTIzNzFDNEY5QUUwMi8xbzFCR3RBLWN4 VHhTUzBHTGJEWkdVNmZVSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUoh0wjgn4PTqXI3tnUhOzbJuRRetGCocZKzjJzt3oLhyi2vU1qww0 dmT/PdkbEviPNUoLZyA6W/EH+BOcjSuFNqi3y1ueBin0Rw9pDHdgqQQ4H7WGiIi5 g27tQl2yjrCP3yqL4xNqellnz6rwPY/R2XmTe/w8PPe/FO3Fm87x0NQviE86ocT8 phWAr4sUS9Ph5v2VmF7vaNs6YoEr2fvSwh9ILyU7FdhkYA3PLTwEfUiO75J4guXY BZIgvAMofujl7kZpFX5duD0rVmd1d5oOc2tkp+9eLYTDT9nNvlBPwXh+V8rJDILu H4i9I8QdMQ4xspLP67lGPoB7YchqRZ3r -----END CERTIFICATE-----Generated at Wed May 14 04:41:20 2025 by rpki-client