$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft File: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft (raw, json) Hash identifier: xJnYF9Ng4qnLZZlkT2IsNw7rz4zVXbYWSa6Jw4XmBiM= Subject key identifier: 98:9B:44:79:EC:69:CA:3D:66:DC:ED:11:5C:73:E3:96:7F:1E:6D:0F Authority key identifier: D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32 Certificate issuer: /CN=A91B7BDC/serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32 Certificate serial: 0461 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft Manifest number: 0451 Signing time: Sat 10 May 2025 23:52:18 +0000 Manifest this update: Sat 10 May 2025 23:52:18 +0000 Manifest next update: Sat 17 May 2025 23:52:18 +0000 Files and hashes: 1: 1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl (hash: mSRStfepNqFwYFZb3CXqZBP5L7WHEXaDj8l8zloMv3o=) 2: D76AC8AC2EAB11EF9B369566C4F9AE02.roa (hash: naYHhlwgJToIdxwYRVcDTwuzPaQ2WtmkFGMwkiEal6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1121 (0x461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7BDC, serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32 Validity Not Before: May 10 23:52:18 2025 GMT Not After : May 17 23:52:18 2025 GMT Subject: CN=681fe6b2-f61c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3d:a2:01:28:54:bb:fb:1c:92:45:2a:67:f9: d5:00:fd:7c:7b:23:c3:73:ee:b5:41:0f:98:c3:af: 42:f1:7b:2b:21:0c:50:c4:24:ba:80:3f:0b:9e:49: 65:47:3b:da:cc:a0:6e:ae:13:68:b2:26:4f:c7:01: ed:d1:5d:0a:1f:0d:d9:56:c7:03:ae:9e:7a:0f:a1: 7d:8e:33:9a:7c:e3:e6:f3:d2:b0:e3:66:2c:1b:be: 81:a9:aa:eb:a5:a1:be:4d:f5:df:6f:67:1e:66:5a: eb:13:69:f1:1b:6e:cd:c9:90:9a:84:f5:e6:e0:60: 6a:9d:a2:fe:6d:3f:c1:07:00:38:8c:c9:28:d7:4b: 98:40:61:43:94:71:2b:a3:fb:f2:c3:42:ea:fb:04: 06:f4:0c:f4:b1:33:37:23:2e:b1:c1:b0:90:eb:d7: f4:88:29:b4:9f:c2:a2:5d:bc:03:65:75:09:0e:2c: ee:16:7d:26:c8:0c:a7:50:01:98:1b:b9:25:41:63: 7d:4a:d7:56:3c:00:97:30:54:c9:19:54:fe:fe:7a: 19:f9:c1:ce:72:ef:06:f4:96:9c:0e:ed:c5:e9:f8: d7:ed:43:7e:9a:71:39:ce:de:ad:ed:be:38:bb:9d: e4:08:c2:1c:4c:a1:d2:cb:fe:0a:07:72:e4:f5:aa: 76:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9B:44:79:EC:69:CA:3D:66:DC:ED:11:5C:73:E3:96:7F:1E:6D:0F X509v3 Authority Key Identifier: keyid:D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:6f:2d:8a:01:8e:10:c0:54:b0:18:ac:86:ea:38:f3:77:83: a7:fa:e6:60:3d:ee:9a:12:ad:df:a6:34:c9:10:ac:77:cf:7d: 0e:a1:1c:e0:54:40:a3:12:47:d7:10:e6:e1:71:95:14:19:78: 0c:86:3b:17:ba:3d:42:c4:2d:86:6b:d8:73:f4:9d:9f:a9:93: 98:f3:f0:40:c9:34:f9:31:44:44:23:5b:5a:2e:83:63:0f:7a: 21:42:4e:6f:80:38:4c:af:e3:cc:99:a5:1a:02:cc:57:76:e6: 5e:b6:d8:92:cb:80:0e:ce:31:e0:7e:f2:9d:9b:52:5b:1b:e8: 0d:ae:e3:65:0a:79:9e:56:ed:d2:35:6e:4c:5f:d3:ac:44:f6: aa:67:e0:57:2e:bc:51:0a:77:d1:fa:d0:61:36:4c:98:94:37: 3a:21:ad:4b:62:9d:ac:81:4d:16:d7:a5:10:4e:11:f0:44:71: ed:94:b4:6b:5f:f2:05:54:65:53:4f:f5:c5:9a:b2:12:fa:35: 4c:22:9a:4b:18:89:98:e7:93:41:88:38:49:69:76:f9:af:23: 84:cc:94:19:8e:0e:59:7a:17:cc:0f:7e:0e:f6:3f:3d:2e:4a: 6e:35:1a:8c:cd:d4:a5:6a:ee:cd:fb:87:d5:c6:ab:26:ee:cb: 5e:58:88:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCREMxMTAvBgNVBAUTKEQ0M0I0NEQ1RjkzN0Y2NUU4QkFCOUI3Rjk4N0EzREM5 RDIxMDRBMzIwHhcNMjUwNTEwMjM1MjE4WhcNMjUwNTE3MjM1MjE4WjAYMRYwFAYD VQQDEw02ODFmZTZiMi1mNjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkT2iAShUu/sckkUqZ/nVAP18eyPDc+61QQ+Yw69C8XsrIQxQxCS6gD8Lnkll RzvazKBurhNosiZPxwHt0V0KHw3ZVscDrp56D6F9jjOafOPm89Kw42YsG76Bqarr paG+TfXfb2ceZlrrE2nxG27NyZCahPXm4GBqnaL+bT/BBwA4jMko10uYQGFDlHEr o/vyw0Lq+wQG9Az0sTM3Iy6xwbCQ69f0iCm0n8KiXbwDZXUJDizuFn0myAynUAGY G7klQWN9StdWPACXMFTJGVT+/noZ+cHOcu8G9JacDu3F6fjX7UN+mnE5zt6t7b44 u53kCMIcTKHSy/4KB3Lk9ap2lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJibRHns aco9ZtztEVxz45Z/Hm0PMB8GA1UdIwQYMBaAFNQ7RNX5N/Zei6ubf5h6PcnSEEoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0JEQy82ODFDOEY0NjU4 QkUxMUVDOEFFRDVGMkNDNEY5QUUwMi8xRHRFMWZrMzlsNkxxNXRfbUhvOXlkSVFT akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEdEUxZmszOWw2THE1dF9tSG85eWRJUVNqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0JEQy82ODFDOEY0NjU4QkUxMUVDOEFFRDVGMkNDNEY5QUUwMi8xRHRFMWZrMzls NkxxNXRfbUhvOXlkSVFTakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpby2KAY4QwFSwGKyG6jjzd4On+uZgPe6aEq3fpjTJEKx3z30OoRzg VECjEkfXEObhcZUUGXgMhjsXuj1CxC2Ga9hz9J2fqZOY8/BAyTT5MUREI1taLoNj D3ohQk5vgDhMr+PMmaUaAsxXduZettiSy4AOzjHgfvKdm1JbG+gNruNlCnmeVu3S NW5MX9OsRPaqZ+BXLrxRCnfR+tBhNkyYlDc6Ia1LYp2sgU0W16UQThHwRHHtlLRr X/IFVGVTT/XFmrIS+jVMIppLGImY55NBiDhJaXb5ryOEzJQZjg5ZehfMD34O9j89 LkpuNRqMzdSlau7N+4fVxqsm7steWIg9 -----END CERTIFICATE-----Generated at Sun May 11 20:07:32 2025 by rpki-client