$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft File: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft (raw, json) Hash identifier: ETtNudnQdQx2gnBgp2DuXW5JF9Lx4paxPz/tlFnU9E8= Subject key identifier: 81:6F:68:F3:A3:3E:EB:1C:29:00:3B:07:DB:06:E5:3C:DD:46:E1:9A Authority key identifier: 71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B Certificate issuer: /CN=A91EA6C6/serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft Manifest number: 019D Signing time: Sat 03 May 2025 02:51:18 +0000 Manifest this update: Sat 03 May 2025 02:51:18 +0000 Manifest next update: Sat 10 May 2025 02:51:18 +0000 Files and hashes: 1: cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl (hash: s1DI2HFMj0RPqlhMjYZJ2cCCsx657HUxg4e56afIN5o=) 2: BC69DF32B33E11EDAA6D117BC4F9AE02.roa (hash: db2NWeg4HG/QWHWjQkMvsucOm2s5WuaDwiakb3D08Rk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 02:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA6C6, serialNumber=71546073BD0927EBEB850F06DA76A72769E7136B Validity Not Before: May 3 02:51:18 2025 GMT Not After : May 10 02:51:18 2025 GMT Subject: CN=681584a6-d568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2c:d0:54:04:72:e1:64:80:93:20:9a:fb:80: 18:20:a4:b9:eb:26:22:5d:28:af:2f:48:28:2c:bb: be:46:a6:bc:3c:bc:af:c8:79:b1:47:82:0a:15:e8: 34:3c:5f:ac:54:27:5d:dd:fc:4f:e2:1b:31:b6:4d: 1d:ec:58:02:fb:69:9a:a0:b5:ba:c2:a9:f0:cd:6c: af:37:4c:c8:6a:db:64:01:57:8a:e1:cf:22:88:0e: 48:35:be:ca:40:82:ae:8b:db:c6:d2:07:db:27:5f: 1a:14:60:61:3b:47:48:a7:68:11:ab:11:6b:83:be: 57:d8:cd:47:8d:4c:3e:63:87:b9:bc:a7:bf:59:24: 26:fc:0f:a4:78:f8:53:4a:b8:32:44:8a:ac:8b:3d: e1:de:ef:66:83:b5:c8:6b:70:28:e4:cf:3f:0d:f8: 4f:ae:7b:96:19:9e:f1:12:b3:5f:88:d3:de:89:cb: ad:cd:5b:82:75:5b:a0:e0:68:4c:56:39:f7:00:b6: 14:64:8d:f7:c9:cc:f7:ee:89:a9:3e:d6:f1:6b:72: a5:2a:fc:03:57:bd:cd:fb:56:4c:a8:ca:2b:6a:e7: 16:ab:71:46:ac:b4:f0:1e:b9:3d:db:d0:ff:36:c4: ab:0a:7a:2b:5b:5a:af:bf:c8:fc:b0:a1:57:92:31: 76:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6F:68:F3:A3:3E:EB:1C:29:00:3B:07:DB:06:E5:3C:DD:46:E1:9A X509v3 Authority Key Identifier: keyid:71:54:60:73:BD:09:27:EB:EB:85:0F:06:DA:76:A7:27:69:E7:13:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6C6/2CAEAD04B33A11ED9FBD0E5CC4F9AE02/cVRgc70JJ-vrhQ8G2nanJ2nnE2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:d1:ec:be:7e:cc:0e:36:93:c1:6c:fb:67:a4:97:df:27:82: 08:a9:56:3e:65:90:a2:2d:a4:0d:b1:78:e4:bb:c4:39:67:00: 17:13:3a:1b:4c:b9:6b:88:8f:03:e5:02:52:05:62:32:e3:89: 44:04:d1:a0:8e:a3:f9:27:34:01:49:11:71:f6:a3:f5:ac:21: cd:17:11:d3:46:66:37:fc:ce:24:38:bf:c6:03:df:6d:18:78: 53:5d:39:a6:48:8d:ef:bd:ec:74:fb:b3:da:f0:6a:c1:c5:42: d6:f8:08:9f:ec:46:d6:cf:a9:87:e1:ee:87:65:4b:13:fc:25: c0:cd:02:be:96:9a:bc:c6:74:49:f2:b6:b1:ff:85:8d:a6:5c: a4:8b:bb:66:e9:36:a4:af:88:ee:23:19:af:00:6c:09:83:14: ef:00:49:9f:58:00:20:98:81:aa:07:40:f2:75:5d:73:e2:93: 3a:eb:53:d0:13:ee:36:5f:e5:81:9d:80:6b:b7:5b:9e:ab:c9: a3:ae:e2:d7:ce:16:2b:97:b7:20:1e:ea:e8:5f:23:da:8b:cc: a3:2c:df:6e:9f:c8:05:b6:d3:0a:c7:c4:22:64:95:8a:90:bc: d7:b6:b8:71:21:27:71:05:72:cf:ea:2f:97:34:99:3c:6d:06: 68:1e:75:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2QzYxMTAvBgNVBAUTKDcxNTQ2MDczQkQwOTI3RUJFQjg1MEYwNkRBNzZBNzI3 NjlFNzEzNkIwHhcNMjUwNTAzMDI1MTE4WhcNMjUwNTEwMDI1MTE4WjAYMRYwFAYD VQQDEw02ODE1ODRhNi1kNTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCzQVARy4WSAkyCa+4AYIKS56yYiXSivL0goLLu+Rqa8PLyvyHmxR4IKFeg0 PF+sVCdd3fxP4hsxtk0d7FgC+2maoLW6wqnwzWyvN0zIattkAVeK4c8iiA5INb7K QIKui9vG0gfbJ18aFGBhO0dIp2gRqxFrg75X2M1HjUw+Y4e5vKe/WSQm/A+kePhT SrgyRIqsiz3h3u9mg7XIa3Ao5M8/DfhPrnuWGZ7xErNfiNPeicutzVuCdVug4GhM Vjn3ALYUZI33ycz37ompPtbxa3KlKvwDV73N+1ZMqMoraucWq3FGrLTwHrk929D/ NsSrCnorW1qvv8j8sKFXkjF2jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFvaPOj PuscKQA7B9sG5TzdRuGaMB8GA1UdIwQYMBaAFHFUYHO9CSfr64UPBtp2pydp5xNr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTZDNi8yQ0FFQUQwNEIz M0ExMUVEOUZCRDBFNUNDNEY5QUUwMi9jVlJnYzcwSkotdnJoUThHMm5hbkoybm5F MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWUmdjNzBKSi12cmhROEcybmFuSjJubkUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTZDNi8yQ0FFQUQwNEIzM0ExMUVEOUZCRDBFNUNDNEY5QUUwMi9jVlJnYzcwSkot dnJoUThHMm5hbkoybm5FMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB20ey+fswONpPBbPtnpJffJ4IIqVY+ZZCiLaQNsXjku8Q5ZwAXEzob TLlriI8D5QJSBWIy44lEBNGgjqP5JzQBSRFx9qP1rCHNFxHTRmY3/M4kOL/GA99t GHhTXTmmSI3vvex0+7Pa8GrBxULW+Aif7EbWz6mH4e6HZUsT/CXAzQK+lpq8xnRJ 8rax/4WNplyki7tm6Takr4juIxmvAGwJgxTvAEmfWAAgmIGqB0DydV1z4pM661PQ E+42X+WBnYBrt1ueq8mjruLXzhYrl7cgHuroXyPai8yjLN9un8gFttMKx8QiZJWK kLzXtrhxISdxBXLP6i+XNJk8bQZoHnV3 -----END CERTIFICATE-----Generated at Mon May 5 03:08:02 2025 by rpki-client