$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft File: M1KIaoOU86z15jXjxHVvTQpuRek.mft (raw, json) Hash identifier: IrfFVN64Yf4Ofjjx7/n90p2HrWzr4pNflGrdJ6YCUxQ= Subject key identifier: E1:53:4B:EF:44:1E:09:36:54:C2:86:F1:39:0D:A8:32:4E:07:34:4C Authority key identifier: 33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9 Certificate issuer: /CN=A91B5AD4/serialNumber=3352886A8394F3ACF5E635E3C4756F4D0A6E45E9 Certificate serial: 0981 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft Manifest number: 0978 Signing time: Sun 04 May 2025 19:25:14 +0000 Manifest this update: Sun 04 May 2025 19:25:13 +0000 Manifest next update: Sun 11 May 2025 19:25:13 +0000 Files and hashes: 1: M1KIaoOU86z15jXjxHVvTQpuRek.crl (hash: sjbPK9lS6lWq8rFmRmWX4xiLzDOVYZnoT9O82JPH95w=) 2: 67A60C64441E11EB861F005AC4F9AE02.roa (hash: JcavRD/UkGMKefo40xrhCPb2PgEwMsvZQrFanuv4C9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.crl rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 19:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2433 (0x981) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5AD4, serialNumber=3352886A8394F3ACF5E635E3C4756F4D0A6E45E9 Validity Not Before: May 4 19:25:13 2025 GMT Not After : May 11 19:25:13 2025 GMT Subject: CN=6817bf1a-a266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4a:47:5c:b5:36:9c:8c:2a:f1:d5:6c:da:23: f6:2a:e6:6d:6c:d6:2a:9a:7f:28:4a:53:86:f2:4a: 8c:36:be:08:d0:36:2b:9c:0a:a5:64:b6:d6:0e:64: e5:37:06:6b:d0:be:bc:db:e9:bc:af:3a:8b:d9:cb: 27:5e:15:d6:5b:67:81:32:ae:b3:b6:24:6c:6d:57: f9:00:e6:20:c8:62:f5:6b:9a:4f:76:aa:84:5e:67: 40:46:bb:f9:78:ac:47:5b:4b:4c:e0:cc:35:fd:8b: 2d:7a:9c:5f:54:07:9f:cb:78:f1:b9:f2:52:1e:27: 0f:cd:45:d2:51:1c:08:20:03:7f:6b:fc:20:e2:5b: c5:76:22:39:e2:28:a9:1c:35:c4:5c:99:55:9a:0a: d8:25:8d:b3:eb:fa:b5:eb:16:36:ea:6e:68:41:2d: e7:eb:fc:a7:c0:19:2c:8c:3f:44:39:2b:d0:ae:b3: 44:af:39:a6:73:89:2b:3d:49:e4:53:3c:fb:86:b7: 4f:2a:48:22:e8:dc:be:a8:08:95:cc:9f:97:4b:fa: 12:dd:3e:ba:d5:26:75:2f:b2:69:ca:13:3f:6a:05: a1:a2:ee:50:44:a0:42:77:f0:9f:0d:1b:1d:ff:dc: c6:82:c8:77:96:c9:14:09:e0:95:2a:87:29:db:de: 17:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:53:4B:EF:44:1E:09:36:54:C2:86:F1:39:0D:A8:32:4E:07:34:4C X509v3 Authority Key Identifier: keyid:33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:e6:69:f6:00:1c:fb:11:67:ed:38:14:92:77:77:70:1d:fc: 6a:d2:d9:99:4c:b8:26:3b:c8:f7:29:c6:19:dd:6a:cd:48:eb: a7:84:fc:c7:f3:7f:ce:a7:ac:c0:ed:48:2b:aa:7c:e8:1a:4d: cb:4f:83:61:7a:e3:31:40:2a:ea:eb:8b:42:5d:8a:74:1c:bf: a5:17:e5:26:17:ad:fc:82:f6:7d:12:0d:ce:17:d9:7a:bb:d3: 19:be:47:13:30:fa:d3:eb:03:f1:69:95:a2:0a:0b:0d:db:16: c7:2f:73:c9:3d:ab:ba:03:05:12:63:76:27:6b:75:c3:af:03: ae:6b:cc:10:1a:20:45:8d:73:90:b8:c9:0b:2f:a4:a6:cb:ac: dd:6e:10:89:02:e0:b6:4e:6e:bc:c2:87:d9:ba:16:54:20:73: 22:3c:4c:16:de:19:40:c8:fb:72:c6:42:6f:bd:dd:48:bb:9a: 61:b6:5a:47:fd:a5:68:76:a9:be:5a:af:d4:0f:32:f2:2c:d5: d4:4e:b0:f6:bc:8e:d8:3b:ec:84:4d:fd:98:e0:7c:db:89:d9: b4:f0:8f:a0:e5:0a:80:3d:3e:53:18:e6:34:5d:0c:28:c2:20: e6:8d:00:53:a3:9f:2d:c1:95:ed:85:5f:db:cd:4c:27:ce:3a: 89:38:98:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVBRDQxMTAvBgNVBAUTKDMzNTI4ODZBODM5NEYzQUNGNUU2MzVFM0M0NzU2RjRE MEE2RTQ1RTkwHhcNMjUwNTA0MTkyNTEzWhcNMjUwNTExMTkyNTEzWjAYMRYwFAYD VQQDEw02ODE3YmYxYS1hMjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEpHXLU2nIwq8dVs2iP2KuZtbNYqmn8oSlOG8kqMNr4I0DYrnAqlZLbWDmTl NwZr0L682+m8rzqL2csnXhXWW2eBMq6ztiRsbVf5AOYgyGL1a5pPdqqEXmdARrv5 eKxHW0tM4Mw1/YstepxfVAefy3jxufJSHicPzUXSURwIIAN/a/wg4lvFdiI54iip HDXEXJlVmgrYJY2z6/q16xY26m5oQS3n6/ynwBksjD9EOSvQrrNErzmmc4krPUnk Uzz7hrdPKkgi6Ny+qAiVzJ+XS/oS3T661SZ1L7JpyhM/agWhou5QRKBCd/CfDRsd /9zGgsh3lskUCeCVKocp294X+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFTS+9E Hgk2VMKG8TkNqDJOBzRMMB8GA1UdIwQYMBaAFDNSiGqDlPOs9eY148R1b00KbkXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUFENC8xMTIyNkI3RThG OEExMUVBOTgyOEM2NURDNEY5QUUwMi9NMUtJYW9PVTg2ejE1alhqeEhWdlRRcHVS ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00xS0lhb09VODZ6MTVqWGp4SFZ2VFFwdVJlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUFENC8xMTIyNkI3RThGOEExMUVBOTgyOEM2NURDNEY5QUUwMi9NMUtJYW9PVTg2 ejE1alhqeEhWdlRRcHVSZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj5mn2ABz7EWftOBSSd3dwHfxq0tmZTLgmO8j3KcYZ3WrNSOunhPzH 83/Op6zA7UgrqnzoGk3LT4NheuMxQCrq64tCXYp0HL+lF+UmF638gvZ9Eg3OF9l6 u9MZvkcTMPrT6wPxaZWiCgsN2xbHL3PJPau6AwUSY3Yna3XDrwOua8wQGiBFjXOQ uMkLL6Smy6zdbhCJAuC2Tm68wofZuhZUIHMiPEwW3hlAyPtyxkJvvd1Iu5phtlpH /aVodqm+Wq/UDzLyLNXUTrD2vI7YO+yETf2Y4Hzbidm08I+g5QqAPT5TGOY0XQwo wiDmjQBTo58twZXthV/bzUwnzjqJOJim -----END CERTIFICATE-----Generated at Mon May 5 03:16:51 2025 by rpki-client