$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft File: 156odshIAT1wTjIDr31ghtsCx50.mft (raw, json) Hash identifier: u7mrLbMADyP8eTrS9K1HKqUTBjXIz9T/1ZwDsyRR9Lw= Subject key identifier: C6:06:7B:D5:A3:BF:D9:77:B2:E1:93:E6:67:79:F8:F9:3D:7D:67:F4 Authority key identifier: D7:9E:A8:76:C8:48:01:3D:70:4E:32:03:AF:7D:60:86:DB:02:C7:9D Certificate issuer: /CN=A91EB7B8/serialNumber=D79EA876C848013D704E3203AF7D6086DB02C79D Certificate serial: 0303 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft Manifest number: 02FB Signing time: Sun 11 May 2025 00:49:55 +0000 Manifest this update: Sun 11 May 2025 00:49:55 +0000 Manifest next update: Sun 18 May 2025 00:49:55 +0000 Files and hashes: 1: 156odshIAT1wTjIDr31ghtsCx50.crl (hash: X1ReWHMaWW3ci5AQlPdEEvu6alPD56YTVA8iLRBoPcw=) 2: BD8AAEBAD6BE11EEAAFF5049C4F9AE02.roa (hash: YRBBvYzXkWRWLkE236Di+i1iGk4csDhuPaUKd1DrSGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.crl rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 771 (0x303) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB7B8, serialNumber=D79EA876C848013D704E3203AF7D6086DB02C79D Validity Not Before: May 11 00:49:55 2025 GMT Not After : May 18 00:49:55 2025 GMT Subject: CN=681ff433-0604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3e:31:ae:25:88:23:69:e8:60:8f:6c:ae:f8: 8e:33:0f:63:55:ab:7e:cc:05:1f:04:1b:54:c9:36: e6:db:a1:04:79:c1:2f:96:01:a9:f7:67:f9:46:85: 54:fd:a1:f7:10:29:8d:db:2c:53:bb:e8:a3:6f:be: 9b:36:e4:98:0f:f5:d3:e0:87:05:d9:a8:97:d2:6e: c2:86:8f:80:9b:cb:62:78:98:7c:14:90:05:ef:0c: 96:e6:a0:e5:fd:5c:cd:40:6a:03:5a:c3:66:67:fd: fc:5d:f4:cd:3f:3b:10:48:c4:92:ee:41:f7:af:08: f9:b4:b8:da:d4:2b:f7:04:1a:f0:08:55:92:e0:8f: cc:6a:60:38:a6:f4:3f:9d:98:80:1b:87:43:b9:f8: 95:bd:5b:22:e9:49:fd:d6:90:f5:41:86:f0:df:36: 8b:7a:6b:1b:ed:6c:2a:f5:80:1f:d9:74:57:61:d9: 80:ef:66:e7:48:1e:d8:64:57:69:fb:a7:fd:06:cf: 65:2e:18:dc:0c:ef:e8:03:c1:81:8f:d4:d9:b6:e8: 76:07:22:2e:e6:13:8a:ef:4c:b7:1a:ae:38:0e:9f: f7:bd:6d:7a:5c:92:3a:b8:f9:88:28:a9:ab:d3:6c: 0d:e2:3f:3f:8e:79:57:9d:f5:98:1a:e0:6a:7a:40: 57:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:06:7B:D5:A3:BF:D9:77:B2:E1:93:E6:67:79:F8:F9:3D:7D:67:F4 X509v3 Authority Key Identifier: keyid:D7:9E:A8:76:C8:48:01:3D:70:4E:32:03:AF:7D:60:86:DB:02:C7:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:43:ba:a4:16:79:f1:7e:37:f0:22:39:9e:e5:21:75:10:1b: 81:0d:db:46:df:83:4e:36:c3:22:bf:4d:40:20:17:85:30:38: 78:c7:83:28:49:ba:e0:c4:f2:c2:67:f8:54:ba:c9:2f:2c:ce: 4a:32:97:8d:49:3a:dd:92:35:6c:38:32:cd:74:65:8b:3f:76: 62:f4:1e:0f:92:de:4c:11:85:5f:1a:aa:01:9b:cc:a2:a6:71: ba:3c:6c:2a:06:72:0d:d4:9d:bf:87:27:c1:fc:01:40:04:06: ee:67:66:ac:33:65:b4:a6:97:d0:e5:50:a5:29:89:93:1b:ff: ac:3e:00:01:72:1c:42:df:e7:be:76:46:89:1b:4b:8b:8f:09: 0a:d8:ff:63:43:9b:dd:05:5e:e1:ab:a2:27:28:ba:15:09:a2: 12:d6:2e:e5:5b:04:6f:70:4a:5e:91:c3:ea:bf:d9:1a:6e:68: b7:0b:a0:a7:6c:58:69:b4:da:24:a6:e9:1a:2f:0a:d7:ea:20: a6:50:94:19:0f:a9:d9:10:0d:bd:a3:1c:f9:a3:00:df:c7:bb: e9:0d:6c:e1:77:eb:90:50:78:34:6d:b0:27:98:c4:e7:8e:22: d2:c4:f7:f7:9b:d8:64:73:16:8e:3c:cf:39:4c:bd:cd:f3:a9: 91:7c:d2:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI3QjgxMTAvBgNVBAUTKEQ3OUVBODc2Qzg0ODAxM0Q3MDRFMzIwM0FGN0Q2MDg2 REIwMkM3OUQwHhcNMjUwNTExMDA0OTU1WhcNMjUwNTE4MDA0OTU1WjAYMRYwFAYD VQQDEw02ODFmZjQzMy0wNjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyz4xriWII2noYI9srviOMw9jVat+zAUfBBtUyTbm26EEecEvlgGp92f5RoVU /aH3ECmN2yxTu+ijb76bNuSYD/XT4IcF2aiX0m7Cho+Am8tieJh8FJAF7wyW5qDl /VzNQGoDWsNmZ/38XfTNPzsQSMSS7kH3rwj5tLja1Cv3BBrwCFWS4I/MamA4pvQ/ nZiAG4dDufiVvVsi6Un91pD1QYbw3zaLemsb7Wwq9YAf2XRXYdmA72bnSB7YZFdp +6f9Bs9lLhjcDO/oA8GBj9TZtuh2ByIu5hOK70y3Gq44Dp/3vW16XJI6uPmIKKmr 02wN4j8/jnlXnfWYGuBqekBX4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYGe9Wj v9l3suGT5md5+Pk9fWf0MB8GA1UdIwQYMBaAFNeeqHbISAE9cE4yA699YIbbAsed MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjdCOC80REUxNkNFNEQ4 MTgxMUVDQjY0OTNENUFDNEY5QUUwMi8xNTZvZHNoSUFUMXdUaklEcjMxZ2h0c0N4 NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1Nm9kc2hJQVQxd1RqSURyMzFnaHRzQ3g1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjdCOC80REUxNkNFNEQ4MTgxMUVDQjY0OTNENUFDNEY5QUUwMi8xNTZvZHNoSUFU MXdUaklEcjMxZ2h0c0N4NTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5Q7qkFnnxfjfwIjme5SF1EBuBDdtG34NONsMiv01AIBeFMDh4x4Mo SbrgxPLCZ/hUuskvLM5KMpeNSTrdkjVsODLNdGWLP3Zi9B4Pkt5MEYVfGqoBm8yi pnG6PGwqBnIN1J2/hyfB/AFABAbuZ2asM2W0ppfQ5VClKYmTG/+sPgABchxC3+e+ dkaJG0uLjwkK2P9jQ5vdBV7hq6InKLoVCaIS1i7lWwRvcEpekcPqv9kabmi3C6Cn bFhptNokpukaLwrX6iCmUJQZD6nZEA29oxz5owDfx7vpDWzhd+uQUHg0bbAnmMTn jiLSxPf3m9hkcxaOPM85TL3N86mRfNI6 -----END CERTIFICATE-----Generated at Mon May 12 16:04:58 2025 by rpki-client