$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft File: 1vBnJNCWhwftHfr9uyJYArPaoZQ.mft (raw, json) Hash identifier: BiY1b8is0DsprymizPglih+oF/C+VFLE4k7wsHpJ1cw= Subject key identifier: DE:BE:EB:B2:D9:55:2A:0A:92:93:B4:86:09:FA:F4:88:CA:1A:AB:ED Authority key identifier: D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94 Certificate issuer: /CN=A91D1F95/serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194 Certificate serial: 0259 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft Manifest number: 0251 Signing time: Mon 05 May 2025 01:25:08 +0000 Manifest this update: Mon 05 May 2025 01:25:08 +0000 Manifest next update: Mon 12 May 2025 01:25:08 +0000 Files and hashes: 1: 1vBnJNCWhwftHfr9uyJYArPaoZQ.crl (hash: OAEcp5q3i9UU8z0uPcj8WBGlIAlGErczSOyppeCZkjw=) 2: 834FFE88679911EEB8243436C4F9AE02.roa (hash: Yrv7ZBN66aHo1fxboSYdyeMXxVo+vZh3rt3Di282sAw=) 3: C965E8C4679911EEB466ED36C4F9AE02.roa (hash: 4shhW+hfwKEr12lvGKCQFs6BqumTNDAweN+QTLEQJao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 01:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1F95, serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194 Validity Not Before: May 5 01:25:08 2025 GMT Not After : May 12 01:25:08 2025 GMT Subject: CN=68181374-861f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cd:32:67:9c:5e:db:24:73:c4:b3:85:da:a8: 3d:63:54:07:de:d7:53:19:d1:7a:35:32:4b:b1:52: b7:77:2e:65:6a:a7:ad:ce:2b:57:73:a6:aa:b2:2e: f9:af:0d:bd:93:ed:26:19:a3:c9:1b:44:5c:e7:39: ac:3d:a8:bb:1c:78:22:c5:3d:84:3e:b6:8f:83:0d: fa:fb:8f:74:34:ce:dd:a9:5d:14:b2:58:f2:83:17: 5e:87:50:97:29:75:eb:96:89:a0:43:37:e4:c2:56: a5:de:07:e4:bc:94:c7:8b:cb:a3:c6:22:2a:16:d0: 22:49:79:66:58:48:30:1f:d2:85:80:03:24:b2:98: 26:39:43:0c:cb:87:fc:c5:6f:92:9c:db:28:40:d9: 70:63:cd:31:68:db:ff:5a:e6:35:05:54:e4:12:cd: 68:9f:21:58:2f:39:f0:aa:ec:8d:7e:e5:02:bf:04: d1:37:b3:a9:4c:85:08:87:4e:15:8e:e6:43:e7:c5: eb:ad:f6:33:53:8f:c6:76:ad:66:a4:80:cf:14:10: 8b:6f:0f:10:b7:45:37:96:71:f1:eb:23:af:55:ab: 1d:75:eb:71:a8:02:68:9c:d5:ea:c6:b6:24:67:79: ec:76:50:37:4a:21:12:ee:ee:1b:61:5b:19:0d:3a: e1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BE:EB:B2:D9:55:2A:0A:92:93:B4:86:09:FA:F4:88:CA:1A:AB:ED X509v3 Authority Key Identifier: keyid:D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:55:46:20:be:3c:12:d2:f7:ab:33:2f:65:e1:a4:95:77:52: ad:7c:c6:1e:d5:3d:a5:ee:d6:00:2f:c3:87:06:fc:4a:d9:39: 5d:5c:dc:0c:d4:1e:89:e1:b3:3d:b0:c6:d3:2c:dc:48:32:29: 3e:16:ca:35:ea:b8:ce:9e:41:45:b8:c0:a0:42:4b:ef:da:bf: 6a:69:e4:09:8f:4d:e7:db:73:bf:53:bf:a9:bf:67:2a:55:ab: d2:53:76:75:2d:75:63:b0:86:0c:1b:da:d0:d0:3a:c1:c5:4a: 26:64:69:81:f4:38:bf:ce:20:aa:97:f5:92:d7:aa:e9:8a:9e: ee:13:00:20:ea:14:c9:ab:5e:22:af:ec:5f:b6:93:d8:05:36: 84:d0:59:2c:dc:e9:46:5f:ee:20:df:95:ae:5c:8a:e8:70:89: c9:38:2b:9f:de:21:2f:36:85:82:99:11:48:5e:a0:1d:14:64: 4f:fc:fc:5a:c5:4c:59:19:32:32:15:26:0b:91:fb:6a:f6:9f: 89:b0:af:4c:d4:9a:0b:aa:ff:c6:43:c2:cb:86:cc:1d:8f:28: 16:cd:76:50:47:93:e7:8a:04:b8:05:60:c0:aa:e0:44:47:8f: f1:06:46:f1:f1:08:64:28:f9:a8:d9:02:9b:ba:fe:07:86:c4: 9d:d2:58:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFGOTUxMTAvBgNVBAUTKEQ2RjA2NzI0RDA5Njg3MDdFRDFERkFGREJCMjI1ODAy QjNEQUExOTQwHhcNMjUwNTA1MDEyNTA4WhcNMjUwNTEyMDEyNTA4WjAYMRYwFAYD VQQDEw02ODE4MTM3NC04NjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAms0yZ5xe2yRzxLOF2qg9Y1QH3tdTGdF6NTJLsVK3dy5laqetzitXc6aqsi75 rw29k+0mGaPJG0Rc5zmsPai7HHgixT2EPraPgw36+490NM7dqV0Usljygxdeh1CX KXXrlomgQzfkwlal3gfkvJTHi8ujxiIqFtAiSXlmWEgwH9KFgAMkspgmOUMMy4f8 xW+SnNsoQNlwY80xaNv/WuY1BVTkEs1onyFYLznwquyNfuUCvwTRN7OpTIUIh04V juZD58XrrfYzU4/Gdq1mpIDPFBCLbw8Qt0U3lnHx6yOvVasddetxqAJonNXqxrYk Z3nsdlA3SiES7u4bYVsZDTrhfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6+67LZ VSoKkpO0hgn69IjKGqvtMB8GA1UdIwQYMBaAFNbwZyTQlocH7R36/bsiWAKz2qGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUY5NS9GRjkzRUM3MjE5 NUYxMUVEQjJCREY5NUVDNEY5QUUwMi8xdkJuSk5DV2h3ZnRIZnI5dXlKWUFyUGFv WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF2Qm5KTkNXaHdmdEhmcjl1eUpZQXJQYW9aUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUY5NS9GRjkzRUM3MjE5NUYxMUVEQjJCREY5NUVDNEY5QUUwMi8xdkJuSk5DV2h3 ZnRIZnI5dXlKWUFyUGFvWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZVUYgvjwS0verMy9l4aSVd1KtfMYe1T2l7tYAL8OHBvxK2TldXNwM 1B6J4bM9sMbTLNxIMik+Fso16rjOnkFFuMCgQkvv2r9qaeQJj03n23O/U7+pv2cq VavSU3Z1LXVjsIYMG9rQ0DrBxUomZGmB9Di/ziCql/WS16rpip7uEwAg6hTJq14i r+xftpPYBTaE0Fks3OlGX+4g35WuXIrocInJOCuf3iEvNoWCmRFIXqAdFGRP/Pxa xUxZGTIyFSYLkftq9p+JsK9M1JoLqv/GQ8LLhswdjygWzXZQR5PnigS4BWDAquBE R4/xBkbx8QhkKPmo2QKbuv4HhsSd0liv -----END CERTIFICATE-----Generated at Mon May 5 07:18:50 2025 by rpki-client