$ rpki-client -vvf rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft File: _IC0m1BzMv1MnJLdXiei38qAZNo.mft (raw, json) Hash identifier: uVOOXxiooO607PIHrenpbW6GU6NZIVsJjCdPl+mVjTs= Subject key identifier: E2:BD:7F:B8:FE:54:BA:CF:3B:13:CF:E0:08:FC:DA:E9:8D:38:98:38 Authority key identifier: FC:80:B4:9B:50:73:32:FD:4C:9C:92:DD:5E:27:A2:DF:CA:80:64:DA Certificate issuer: /CN=A91E13D0/serialNumber=FC80B49B507332FD4C9C92DD5E27A2DFCA8064DA Certificate serial: 0518 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft Manifest number: 0512 Signing time: Sat 10 May 2025 23:13:40 +0000 Manifest this update: Sat 10 May 2025 23:13:40 +0000 Manifest next update: Sat 17 May 2025 23:13:40 +0000 Files and hashes: 1: _IC0m1BzMv1MnJLdXiei38qAZNo.crl (hash: zZmD1Nu4wsk/IZtbSjcgvYgh9Qj0rZbrtLgz+DX9/kA=) 2: E86C4B1E04AE11EC92C8D079C4F9AE02.roa (hash: gNJTzz5gTRCi7TWu8OqobzQyrN+9OUDBMZ0c3PoKanY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.crl rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1304 (0x518) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E13D0, serialNumber=FC80B49B507332FD4C9C92DD5E27A2DFCA8064DA Validity Not Before: May 10 23:13:40 2025 GMT Not After : May 17 23:13:40 2025 GMT Subject: CN=681fdda4-a279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ab:c1:b5:96:08:44:73:79:43:7d:23:bb:8f: 51:1e:8d:df:38:08:54:c1:de:ae:28:a3:13:8e:c4: 47:78:ed:f4:7c:b6:0d:67:53:f2:72:69:c1:aa:1a: ec:84:e4:0a:3b:8b:e1:64:0a:bf:ab:9c:f2:9b:15: c5:0a:c3:ca:f7:ba:f6:4b:19:04:ab:97:69:60:cb: 16:50:1e:3b:5d:92:1b:d5:c7:bc:62:f7:97:c0:a1: 1a:f1:72:a1:7c:4d:88:5b:5e:c9:47:a9:56:25:a7: 82:94:74:95:fa:14:c5:45:50:9a:a6:a4:e1:95:e9: 6e:be:30:10:2c:aa:c0:8d:36:81:81:d0:6f:8b:d5: 1d:d4:ac:92:82:b3:5c:e7:4b:68:05:0a:63:ad:f1: 25:f5:5c:a6:af:57:6a:10:76:ba:98:f0:1f:53:5c: 5a:3d:98:3f:57:01:dd:35:7a:d7:5f:12:1d:52:92: f7:36:c2:1d:bc:4a:bc:5b:29:e7:dd:16:ed:25:47: d6:13:6a:46:cd:6d:a8:85:b2:f2:de:d8:07:c5:e8: cd:cb:c4:76:48:a9:f0:99:85:b7:2b:c4:6c:10:b6: 0c:18:9a:01:0f:6a:90:f9:34:e6:31:98:8b:f6:08: 4f:f9:1e:3f:eb:a5:9e:69:97:a3:18:3d:77:b6:5d: f5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:BD:7F:B8:FE:54:BA:CF:3B:13:CF:E0:08:FC:DA:E9:8D:38:98:38 X509v3 Authority Key Identifier: keyid:FC:80:B4:9B:50:73:32:FD:4C:9C:92:DD:5E:27:A2:DF:CA:80:64:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:ad:81:74:a3:33:b5:cf:70:41:e6:95:bc:ca:62:1e:86:44: 99:7d:d5:5a:ba:5d:10:5b:f9:f0:55:61:01:a8:a5:bf:a0:fc: 92:b3:99:eb:e9:74:49:9b:7e:d1:8e:d8:58:e1:06:23:75:88: 6b:10:5a:80:b3:0b:7d:70:98:fc:60:de:7f:1d:bb:47:33:bc: a2:c5:53:92:1b:0d:2f:eb:49:8e:1c:07:a8:f5:e9:67:24:fa: e9:0d:9b:99:37:82:91:e4:e7:b3:25:4a:e2:4c:43:fd:f5:b5: 0e:33:0b:c7:62:dd:78:a9:20:38:61:8d:26:52:be:76:cd:5c: 19:d2:5b:b0:ce:b0:53:1e:d2:72:59:d1:c8:f9:d0:39:54:73: 4b:7e:73:46:0d:2b:23:d5:52:8f:6c:51:6e:94:5c:05:97:d3: f1:02:9d:8f:55:3d:09:11:56:ec:65:c2:67:23:70:7d:74:e4: ab:0f:40:32:de:de:79:7b:ad:c8:18:20:96:40:b9:86:f3:4d: d9:bf:e1:f2:cb:5c:e9:9b:41:45:25:22:3e:4e:ab:e7:86:40: 21:59:3e:77:ca:e3:83:66:86:c5:66:09:02:ef:e1:ee:c5:67: 0f:40:0f:cc:ea:5a:4d:a6:63:2e:79:08:05:89:26:39:45:aa: 57:a2:e1:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTEzRDAxMTAvBgNVBAUTKEZDODBCNDlCNTA3MzMyRkQ0QzlDOTJERDVFMjdBMkRG Q0E4MDY0REEwHhcNMjUwNTEwMjMxMzQwWhcNMjUwNTE3MjMxMzQwWjAYMRYwFAYD VQQDEw02ODFmZGRhNC1hMjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8KvBtZYIRHN5Q30ju49RHo3fOAhUwd6uKKMTjsRHeO30fLYNZ1PycmnBqhrs hOQKO4vhZAq/q5zymxXFCsPK97r2SxkEq5dpYMsWUB47XZIb1ce8YveXwKEa8XKh fE2IW17JR6lWJaeClHSV+hTFRVCapqThleluvjAQLKrAjTaBgdBvi9Ud1KySgrNc 50toBQpjrfEl9Vymr1dqEHa6mPAfU1xaPZg/VwHdNXrXXxIdUpL3NsIdvEq8Wynn 3RbtJUfWE2pGzW2ohbLy3tgHxejNy8R2SKnwmYW3K8RsELYMGJoBD2qQ+TTmMZiL 9ghP+R4/66WeaZejGD13tl31zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOK9f7j+ VLrPOxPP4Aj82umNOJg4MB8GA1UdIwQYMBaAFPyAtJtQczL9TJyS3V4not/KgGTa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTNEMC9EN0E0QkI1NjA0 QUMxMUVDQkVCNTBDNzlDNEY5QUUwMi9fSUMwbTFCek12MU1uSkxkWGllaTM4cUFa Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JQzBtMUJ6TXYxTW5KTGRYaWVpMzhxQVpOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTNEMC9EN0E0QkI1NjA0QUMxMUVDQkVCNTBDNzlDNEY5QUUwMi9fSUMwbTFCek12 MU1uSkxkWGllaTM4cUFaTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4rYF0ozO1z3BB5pW8ymIehkSZfdVaul0QW/nwVWEBqKW/oPySs5nr 6XRJm37RjthY4QYjdYhrEFqAswt9cJj8YN5/HbtHM7yixVOSGw0v60mOHAeo9eln JPrpDZuZN4KR5OezJUriTEP99bUOMwvHYt14qSA4YY0mUr52zVwZ0luwzrBTHtJy WdHI+dA5VHNLfnNGDSsj1VKPbFFulFwFl9PxAp2PVT0JEVbsZcJnI3B9dOSrD0Ay 3t55e63IGCCWQLmG803Zv+Hyy1zpm0FFJSI+TqvnhkAhWT53yuODZobFZgkC7+Hu xWcPQA/M6lpNpmMueQgFiSY5RapXouED -----END CERTIFICATE-----Generated at Mon May 12 04:22:21 2025 by rpki-client