$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft File: 1fbdY8A4EGCv-8nSDtMPB_veiOo.mft (raw, json) Hash identifier: tXmXjhgrsNsvg5v+iysEHwkTu01dwLa+NA8NeISaKrU= Subject key identifier: E3:6A:09:7E:0F:88:B8:24:29:00:51:A4:23:5F:1D:BF:FE:FB:8C:D0 Authority key identifier: D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA Certificate issuer: /CN=A91BBF7F/serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA Certificate serial: 0ED7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft Manifest number: 0EC1 Signing time: Sun 04 May 2025 17:36:09 +0000 Manifest this update: Sun 04 May 2025 17:36:08 +0000 Manifest next update: Sun 11 May 2025 17:36:08 +0000 Files and hashes: 1: 1fbdY8A4EGCv-8nSDtMPB_veiOo.crl (hash: BwhyCJJ+jpsYA31NvO8kGbKNlvsDSBloXja1pqAerao=) 2: 656CB24EC9F611ED9853C583C4F9AE02.roa (hash: dWOEO8pwtx9hi9faa2fgwj2lHG7eHOgZT5KAz1c3Ctk=) 3: 64554290C9F611ED9853C583C4F9AE02.roa (hash: TcpjWImJ/6OMJ2cd8RP+FJqzHMIXrQ0AmNStUKst97g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 17:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3799 (0xed7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBF7F, serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA Validity Not Before: May 4 17:36:08 2025 GMT Not After : May 11 17:36:08 2025 GMT Subject: CN=6817a589-68ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e6:43:41:d7:13:4b:ef:27:2b:28:4b:d5:38: 26:fe:1a:60:f9:d3:2d:3c:58:81:1f:69:eb:1b:8c: cb:e4:b7:b8:0a:64:e1:81:33:ad:af:4b:e7:66:a4: fa:b1:e9:27:82:0e:b3:b1:86:26:2a:b3:cc:11:97: d1:78:c2:f4:f1:d8:18:fa:11:e4:a2:41:3b:e0:c5: 39:12:56:76:e8:1a:b1:60:40:42:48:c1:2d:2a:fb: 1c:ca:54:72:cb:80:bf:dd:1e:c1:0a:91:a2:0c:26: 6c:a6:08:35:9c:08:db:59:eb:4a:d4:ac:f7:e5:05: 1e:8e:29:09:1f:36:44:ae:37:5e:00:97:e8:4b:75: 02:87:62:63:51:e7:13:bb:e1:a9:ab:3c:da:a3:f7: 2d:28:04:eb:77:52:ba:76:76:f9:1d:b9:0c:6e:ae: bd:fe:6b:2c:77:b5:f4:67:48:11:fc:4b:b1:7e:8e: b9:ee:5c:40:e0:22:61:c6:29:c4:72:47:72:55:1f: 84:95:dd:ba:63:b9:56:ca:cb:a8:70:d4:62:cc:01: 99:3d:78:0d:e4:90:d2:04:70:61:ee:ef:fe:12:32: ca:55:16:df:16:58:01:9f:0a:e7:7c:f9:92:9d:c8: 37:2a:5f:23:fe:94:29:d3:b0:31:e8:7a:af:6c:96: 4f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:6A:09:7E:0F:88:B8:24:29:00:51:A4:23:5F:1D:BF:FE:FB:8C:D0 X509v3 Authority Key Identifier: keyid:D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:c2:8e:91:a4:2e:9a:46:b0:a0:3e:e8:2b:83:3c:e9:97:d2: 13:91:ab:74:c1:1c:2e:7a:e7:7b:cc:4d:92:0b:f5:67:65:84: 3b:cc:99:e5:8f:dc:9c:76:e1:a0:c4:4f:fb:63:f8:38:4c:16: 41:35:17:c6:db:08:4e:f6:96:9b:cc:4c:83:44:15:32:b8:88: d5:27:78:ce:1d:0c:6a:f7:4c:56:75:71:99:7d:d2:37:43:0f: a8:f5:15:5b:ff:20:b0:2d:14:1b:32:99:de:46:71:ab:2a:84: a3:e8:6c:24:ce:87:fd:a1:df:a1:56:a9:3c:45:8f:81:cd:97: b4:b5:57:fc:45:ab:f9:b1:23:07:48:a5:e8:d8:dc:ef:cc:ab: a9:ec:9d:a2:fc:97:5a:fa:20:60:d3:ff:59:3a:af:3d:74:d4: 05:ec:6e:77:4b:0f:6f:11:f3:c3:be:98:b4:b1:98:8f:b1:ff: a3:90:1d:e3:a9:c9:24:a2:4c:3e:5b:1b:0f:42:cd:8c:f3:f6: 8b:27:00:6f:a5:ea:32:a2:50:49:f6:2d:83:0b:15:f8:e1:d5: 2d:29:99:df:47:c9:b1:09:e5:66:cc:53:f4:23:e2:9e:30:5c: 4d:03:34:b7:6a:1a:b4:c6:5d:06:03:aa:f9:2f:92:fd:88:d3: 2c:18:08:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJGN0YxMTAvBgNVBAUTKEQ1RjZERDYzQzAzODEwNjBBRkZCQzlEMjBFRDMwRjA3 RkJERTg4RUEwHhcNMjUwNTA0MTczNjA4WhcNMjUwNTExMTczNjA4WjAYMRYwFAYD VQQDEw02ODE3YTU4OS02OGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeZDQdcTS+8nKyhL1Tgm/hpg+dMtPFiBH2nrG4zL5Le4CmThgTOtr0vnZqT6 sekngg6zsYYmKrPMEZfReML08dgY+hHkokE74MU5ElZ26BqxYEBCSMEtKvscylRy y4C/3R7BCpGiDCZspgg1nAjbWetK1Kz35QUejikJHzZErjdeAJfoS3UCh2JjUecT u+Gpqzzao/ctKATrd1K6dnb5HbkMbq69/mssd7X0Z0gR/Euxfo657lxA4CJhxinE ckdyVR+Eld26Y7lWysuocNRizAGZPXgN5JDSBHBh7u/+EjLKVRbfFlgBnwrnfPmS ncg3Kl8j/pQp07Ax6HqvbJZP4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONqCX4P iLgkKQBRpCNfHb/++4zQMB8GA1UdIwQYMBaAFNX23WPAOBBgr/vJ0g7TDwf73ojq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkY3Ri80NTNFQjZGNDg3 NDUxMUU5QkY4NjQ0NUNDNEY5QUUwMi8xZmJkWThBNEVHQ3YtOG5TRHRNUEJfdmVp T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFmYmRZOEE0RUdDdi04blNEdE1QQl92ZWlPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkY3Ri80NTNFQjZGNDg3NDUxMUU5QkY4NjQ0NUNDNEY5QUUwMi8xZmJkWThBNEVH Q3YtOG5TRHRNUEJfdmVpT28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFwo6RpC6aRrCgPugrgzzpl9ITkat0wRwueud7zE2SC/VnZYQ7zJnl j9ycduGgxE/7Y/g4TBZBNRfG2whO9pabzEyDRBUyuIjVJ3jOHQxq90xWdXGZfdI3 Qw+o9RVb/yCwLRQbMpneRnGrKoSj6Gwkzof9od+hVqk8RY+BzZe0tVf8Rav5sSMH SKXo2NzvzKup7J2i/Jda+iBg0/9ZOq89dNQF7G53Sw9vEfPDvpi0sZiPsf+jkB3j qckkokw+WxsPQs2M8/aLJwBvpeoyolBJ9i2DCxX44dUtKZnfR8mxCeVmzFP0I+Ke MFxNAzS3ahq0xl0GA6r5L5L9iNMsGAhs -----END CERTIFICATE-----Generated at Mon May 5 18:25:51 2025 by rpki-client