$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft File: ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft (raw, json) Hash identifier: R6gXAcXhqsJwLp4ZiPzBh8A5nOBkQ+dqzrio69UPs/Y= Subject key identifier: 4E:78:2B:3C:C4:71:01:5C:61:8A:FE:E7:50:3A:C0:A3:C6:23:AB:E6 Authority key identifier: A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6 Certificate issuer: /CN=A91CE6EC/serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6 Certificate serial: 2576 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft Manifest number: 256B Signing time: Sun 04 May 2025 15:40:51 +0000 Manifest this update: Sun 04 May 2025 15:40:50 +0000 Manifest next update: Sun 11 May 2025 15:40:50 +0000 Files and hashes: 1: ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl (hash: p5VEq8Zulf2Lok3SxQRhHepEFXFv1/f6cqS/jAMs4K4=) 2: 96F26DD8E4A511EF8259C769C4F9AE02.roa (hash: Fcy0t/fzkFaWJQcPeRfi9B3H65XjHBViUmgSczRX2lU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 15:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9590 (0x2576) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE6EC, serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6 Validity Not Before: May 4 15:40:50 2025 GMT Not After : May 11 15:40:50 2025 GMT Subject: CN=68178a82-b745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e4:f6:16:15:4d:26:31:20:48:a7:8b:31:fc: 16:05:a6:4e:64:c5:37:4f:0d:a1:a8:15:df:bb:79: 4c:c8:dd:20:60:ad:50:8b:34:a1:2c:f3:da:1b:f8: 89:4c:21:15:81:a3:47:27:16:58:70:84:b5:a6:28: b9:1f:3a:1d:38:5b:83:e9:29:b9:7f:f9:ee:9a:8d: 52:96:76:21:f0:b3:e4:3b:ab:be:00:7b:54:97:bd: 3b:10:ce:3d:a6:ce:57:a1:c5:de:49:a6:c7:6b:ca: 87:f2:14:fd:47:60:f8:93:b9:34:53:e6:dc:00:f2: 54:ea:b5:1a:2a:31:87:0e:6b:62:72:b7:73:aa:a6: be:09:1c:c3:82:35:2e:19:98:2b:cd:e2:3b:ca:97: 49:78:45:ad:df:ee:6b:68:b5:a1:b5:a5:75:97:af: f8:8c:f4:9f:64:1b:80:8d:b9:e0:15:b8:9b:2e:57: 46:71:ae:ec:da:36:ab:fd:8d:1f:c8:a2:81:c5:b0: a3:a8:36:f5:c7:d6:b4:bc:9c:71:e9:79:e3:26:89: d6:f4:7c:66:ec:51:64:c2:ef:b6:18:dd:2b:6a:58: 2b:c7:2f:c8:a3:1b:1a:cd:ec:5f:32:1b:49:1d:01: e8:27:3d:27:0e:51:5c:bf:38:2f:48:ea:e4:05:52: 79:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:78:2B:3C:C4:71:01:5C:61:8A:FE:E7:50:3A:C0:A3:C6:23:AB:E6 X509v3 Authority Key Identifier: keyid:A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:6d:8a:0d:7d:c3:49:9d:32:ea:8b:4a:f2:71:90:46:0e:01: 74:59:90:d7:6b:e1:31:51:c3:30:ff:85:73:f4:c7:91:8e:25: 13:bd:56:fc:a6:3d:39:07:3b:a1:4d:4d:50:d2:6f:4b:f5:f5: 2b:55:ce:96:03:06:f4:c3:9c:61:7c:69:a8:88:12:84:ba:11: 29:c3:5d:79:b4:b8:6e:43:87:80:c2:3b:a1:1f:7a:bb:9a:7f: e2:df:7f:d0:2b:e1:2f:f4:19:63:41:5d:fe:71:14:88:85:62: 58:de:a7:f0:6e:88:d3:a7:fe:8b:5b:30:aa:04:40:d0:d0:0e: 3a:78:2a:ed:02:0c:28:83:6f:3c:4d:d0:c0:e8:e8:08:5e:f3: be:91:2f:ae:a1:ba:ab:72:01:e9:8f:49:3c:e7:70:a5:7f:db: 4a:e4:75:5a:b6:b9:17:0f:f4:47:73:ee:ab:09:08:fe:34:1d: 9a:f5:2a:70:38:75:1c:45:1b:94:d6:fe:bf:b0:20:5d:ef:3a: 15:f6:8f:75:58:00:e0:ac:1f:81:09:0c:de:9a:ca:04:9a:b0: 81:12:7c:ab:8f:a6:3b:e4:75:bf:02:db:d0:d8:07:a6:b5:8e: 8e:24:f5:91:19:0b:8a:5d:68:dc:54:9d:c3:83:07:fa:5b:cb: b0:ad:82:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2RUMxMTAvBgNVBAUTKEExQzIzOTY1NzA0MDE3NzI0MjlFQjhDQkIwREY2NjUz RjE2NzhDRjYwHhcNMjUwNTA0MTU0MDUwWhcNMjUwNTExMTU0MDUwWjAYMRYwFAYD VQQDEw02ODE3OGE4Mi1iNzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOT2FhVNJjEgSKeLMfwWBaZOZMU3Tw2hqBXfu3lMyN0gYK1QizShLPPaG/iJ TCEVgaNHJxZYcIS1pii5HzodOFuD6Sm5f/numo1SlnYh8LPkO6u+AHtUl707EM49 ps5XocXeSabHa8qH8hT9R2D4k7k0U+bcAPJU6rUaKjGHDmticrdzqqa+CRzDgjUu GZgrzeI7ypdJeEWt3+5raLWhtaV1l6/4jPSfZBuAjbngFbibLldGca7s2jar/Y0f yKKBxbCjqDb1x9a0vJxx6XnjJonW9Hxm7FFkwu+2GN0ralgrxy/IoxsazexfMhtJ HQHoJz0nDlFcvzgvSOrkBVJ5cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE54KzzE cQFcYYr+51A6wKPGI6vmMB8GA1UdIwQYMBaAFKHCOWVwQBdyQp64y7DfZlPxZ4z2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTZFQy9EM0FCNjAxNjE0 QzgxMUU1QTJGQ0VGMTVDNEY5QUUwMi9vY0k1WlhCQUYzSkNucmpMc045bVVfRm5q UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29jSTVaWEJBRjNKQ25yakxzTjltVV9GbmpQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTZFQy9EM0FCNjAxNjE0QzgxMUU1QTJGQ0VGMTVDNEY5QUUwMi9vY0k1WlhCQUYz SkNucmpMc045bVVfRm5qUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/bYoNfcNJnTLqi0rycZBGDgF0WZDXa+ExUcMw/4Vz9MeRjiUTvVb8 pj05BzuhTU1Q0m9L9fUrVc6WAwb0w5xhfGmoiBKEuhEpw115tLhuQ4eAwjuhH3q7 mn/i33/QK+Ev9BljQV3+cRSIhWJY3qfwbojTp/6LWzCqBEDQ0A46eCrtAgwog288 TdDA6OgIXvO+kS+uobqrcgHpj0k853Clf9tK5HVatrkXD/RHc+6rCQj+NB2a9Spw OHUcRRuU1v6/sCBd7zoV9o91WADgrB+BCQzemsoEmrCBEnyrj6Y75HW/AtvQ2Aem tY6OJPWRGQuKXWjcVJ3Dgwf6W8uwrYIl -----END CERTIFICATE-----Generated at Mon May 5 05:28:41 2025 by rpki-client