$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft File: g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft (raw, json) Hash identifier: o8WOm4cf4oRTwjp0w8Pp57Uo04oSgRTOGldNBTCTLLo= Subject key identifier: 2B:12:43:15:AB:1A:D8:3B:C5:46:44:C0:57:F9:50:46:DE:74:70:D0 Authority key identifier: 83:B6:E7:EA:23:BD:C3:A3:8D:60:B4:FF:A2:EF:F5:A1:8F:1D:CD:68 Certificate issuer: /CN=A91AB4BA/serialNumber=83B6E7EA23BDC3A38D60B4FFA2EFF5A18F1DCD68 Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft Manifest number: 01AD Signing time: Fri 09 May 2025 02:24:42 +0000 Manifest this update: Fri 09 May 2025 02:24:41 +0000 Manifest next update: Fri 16 May 2025 02:24:41 +0000 Files and hashes: 1: g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl (hash: xLYPStVVNMsvnsirc+A9h6aVCziJOXXNIL/vxdxO9K0=) 2: 93E8AC909CA111ED97E7FC20C4F9AE02.roa (hash: yz7MYEbOgQ8Al3poUxihFYnUX5uLUR4cvOqS22MeFsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 02:24:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB4BA, serialNumber=83B6E7EA23BDC3A38D60B4FFA2EFF5A18F1DCD68 Validity Not Before: May 9 02:24:41 2025 GMT Not After : May 16 02:24:41 2025 GMT Subject: CN=681d676a-2514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:af:d0:4b:2d:97:ce:88:a1:28:ba:40:f3:8e: 6e:49:35:72:e8:3e:34:46:80:14:aa:07:d3:fb:bd: d8:15:46:3f:7a:f5:56:ff:a5:d4:ca:2f:ab:27:93: 2b:f0:8e:58:64:06:c9:a2:1a:65:e3:03:1c:60:fe: bb:f0:9c:cb:de:c7:b1:0c:6c:c5:c9:ee:e2:fe:b8: 34:1f:9d:f9:c1:f4:30:92:c2:4a:2a:a9:b8:db:fc: a8:08:b2:bd:c8:0e:92:fe:84:23:11:c0:b4:17:e0: 34:40:bc:0c:5a:46:dc:9d:63:41:4a:8e:00:a0:8c: bd:1f:38:fa:dc:42:96:2d:06:08:2d:f4:32:17:e2: bc:a4:25:79:1c:29:0e:26:ce:e7:1b:bb:d9:c0:fa: 54:0c:63:07:a7:8a:6a:04:79:4f:c8:a4:54:58:d5: 26:92:5a:c4:66:68:c2:c1:95:43:6d:36:dd:5e:79: 51:9c:01:2a:32:96:a8:f3:d0:e9:80:ee:01:13:03: ce:31:d2:2f:39:51:43:83:a5:6f:2f:5c:9f:f4:0d: da:98:0f:30:9d:28:21:f1:63:b2:8d:3a:15:5a:ad: c5:7d:51:9d:c3:ac:1e:ac:d4:21:df:75:36:51:0c: 5b:52:20:52:92:d4:df:36:77:8d:20:d2:cd:76:4e: f7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:12:43:15:AB:1A:D8:3B:C5:46:44:C0:57:F9:50:46:DE:74:70:D0 X509v3 Authority Key Identifier: keyid:83:B6:E7:EA:23:BD:C3:A3:8D:60:B4:FF:A2:EF:F5:A1:8F:1D:CD:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:67:b6:3c:78:07:46:b8:9a:7e:a9:fe:51:2c:d8:b1:2d:1f: 61:d8:e8:95:f8:ae:09:9d:57:34:77:3b:a9:d2:66:4a:fb:54: 70:5e:92:ff:e8:6f:ce:06:3e:cd:eb:57:37:b2:fd:28:bb:32: d8:11:c8:90:54:b3:43:54:03:48:ba:9e:28:4f:ee:d5:aa:2e: d6:55:f6:9e:e1:d0:5f:82:4b:be:9e:5c:5a:45:8d:cc:59:e4: 67:57:62:3a:93:a6:22:65:7d:c5:7a:35:25:de:a6:ea:63:c2: fe:4a:ae:a0:11:b4:be:d5:1b:93:1d:5c:7a:b6:33:fb:c1:89: 29:bd:66:94:c4:0c:7d:dc:4f:05:15:9d:04:9b:80:f2:18:a1: b5:36:5d:d4:91:37:57:bc:17:80:4c:cf:ba:85:a2:76:67:77: fa:de:34:62:03:05:75:3e:dc:8b:b7:45:73:73:3a:3c:6d:5d: 7f:dc:22:16:f0:43:7d:5a:94:23:85:2a:83:58:8a:5e:10:b8: 9b:f8:0d:fc:b3:d1:7a:e3:de:c1:35:2f:21:d9:0f:b2:2e:3e: 28:45:60:f6:fd:c2:74:28:32:2e:2b:9d:36:ec:34:ee:c0:01: 41:ab:29:3d:f7:1d:0d:94:83:30:b0:6c:74:be:ec:0b:12:ba: 6f:69:28:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI0QkExMTAvBgNVBAUTKDgzQjZFN0VBMjNCREMzQTM4RDYwQjRGRkEyRUZGNUEx OEYxRENENjgwHhcNMjUwNTA5MDIyNDQxWhcNMjUwNTE2MDIyNDQxWjAYMRYwFAYD VQQDEw02ODFkNjc2YS0yNTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6/QSy2XzoihKLpA845uSTVy6D40RoAUqgfT+73YFUY/evVW/6XUyi+rJ5Mr 8I5YZAbJohpl4wMcYP678JzL3sexDGzFye7i/rg0H535wfQwksJKKqm42/yoCLK9 yA6S/oQjEcC0F+A0QLwMWkbcnWNBSo4AoIy9Hzj63EKWLQYILfQyF+K8pCV5HCkO Js7nG7vZwPpUDGMHp4pqBHlPyKRUWNUmklrEZmjCwZVDbTbdXnlRnAEqMpao89Dp gO4BEwPOMdIvOVFDg6VvL1yf9A3amA8wnSgh8WOyjToVWq3FfVGdw6werNQh33U2 UQxbUiBSktTfNneNINLNdk73lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsSQxWr Gtg7xUZEwFf5UEbedHDQMB8GA1UdIwQYMBaAFIO25+ojvcOjjWC0/6Lv9aGPHc1o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjRCQS9DNzNFMTg0NDlD OUUxMUVEOTFCNzE2MURDNEY5QUUwMi9nN2JuNmlPOXc2T05ZTFRfb3VfMW9ZOGR6 V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c3Ym42aU85dzZPTllMVF9vdV8xb1k4ZHpXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjRCQS9DNzNFMTg0NDlDOUUxMUVEOTFCNzE2MURDNEY5QUUwMi9nN2JuNmlPOXc2 T05ZTFRfb3VfMW9ZOGR6V2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNZ7Y8eAdGuJp+qf5RLNixLR9h2OiV+K4JnVc0dzup0mZK+1RwXpL/ 6G/OBj7N61c3sv0ouzLYEciQVLNDVANIup4oT+7Vqi7WVfae4dBfgku+nlxaRY3M WeRnV2I6k6YiZX3FejUl3qbqY8L+Sq6gEbS+1RuTHVx6tjP7wYkpvWaUxAx93E8F FZ0Em4DyGKG1Nl3UkTdXvBeATM+6haJ2Z3f63jRiAwV1PtyLt0Vzczo8bV1/3CIW 8EN9WpQjhSqDWIpeELib+A38s9F6497BNS8h2Q+yLj4oRWD2/cJ0KDIuK5027DTu wAFBqyk99x0NlIMwsGx0vuwLErpvaShF -----END CERTIFICATE-----Generated at Sun May 11 01:38:50 2025 by rpki-client