$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft File: v49Do1Dk9qJgvwPtS9_BqB2itaE.mft (raw, json) Hash identifier: RWUJCfnTX7sNyF2kkHeDTpXNq3mfvbi1DJ7xU2kZ5qU= Subject key identifier: 27:70:C8:A7:F1:0E:69:EE:BA:A8:17:FF:0B:11:62:BF:7A:77:C1:60 Authority key identifier: BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1 Certificate issuer: /CN=A91FAB62/serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1 Certificate serial: 066F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft Manifest number: 0650 Signing time: Fri 16 May 2025 23:00:59 +0000 Manifest this update: Fri 16 May 2025 23:00:58 +0000 Manifest next update: Fri 23 May 2025 23:00:58 +0000 Files and hashes: 1: v49Do1Dk9qJgvwPtS9_BqB2itaE.crl (hash: jcWGehEbgdtzh7ozHisBgANdKVWBJqDFvz0bcjWdMqQ=) 2: 606DB4B298D111EB84F5A23CC4F9AE02.roa (hash: d5GPHUQ6PbzbALE1pusneP0He2eAPmJTteAnoAOf/Gs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.crl rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 23:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1647 (0x66f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAB62, serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1 Validity Not Before: May 16 23:00:58 2025 GMT Not After : May 23 23:00:58 2025 GMT Subject: CN=6827c3aa-dcf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:51:a6:aa:0e:2d:70:a3:09:28:39:ea:a7:96: b7:4b:ab:9e:fd:61:92:3d:46:80:88:aa:29:2a:9c: 35:da:44:38:93:7d:3f:14:56:14:6c:23:7a:09:fb: 79:40:aa:fc:27:8c:cf:29:bc:a1:2b:23:7b:9b:f3: d5:25:d4:24:1f:98:76:d7:86:f5:80:e1:e6:19:5d: 18:e5:73:22:a6:af:b0:8e:ef:06:f4:2e:da:07:56: 6d:01:6e:48:86:e5:1c:ea:86:36:23:11:1b:98:1a: 14:c5:74:7c:93:11:55:e6:af:15:52:1e:2b:59:67: 6d:64:b9:3e:4f:6c:60:be:57:fe:4f:03:ef:01:f9: a9:07:c1:b0:5c:21:ad:83:4b:71:b3:64:c6:a7:df: cd:25:8d:6c:7d:f9:22:69:ba:e5:89:6d:12:bb:eb: c0:e8:51:7e:22:33:c6:07:71:00:12:a0:0f:9a:d9: 71:c7:c8:9e:8a:9b:5a:dc:cb:01:98:b1:91:f8:a6: d2:32:79:ee:aa:83:81:bc:3b:28:b5:b6:c2:74:53: 48:97:fa:63:fc:5a:16:1a:1a:3b:41:b9:c0:e6:f6: 8a:d7:e0:46:22:e7:68:a0:79:84:c9:28:db:7c:48: 0b:d1:d9:54:5e:ae:91:57:96:be:79:ab:c9:75:d5: 49:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:70:C8:A7:F1:0E:69:EE:BA:A8:17:FF:0B:11:62:BF:7A:77:C1:60 X509v3 Authority Key Identifier: keyid:BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c1:3b:c6:f1:cf:6b:ad:31:2b:2b:f8:c3:bb:35:78:b9:8c: 8b:e1:1d:01:f9:56:02:7b:08:e4:5f:d5:0f:da:08:a5:eb:f9: ac:99:6f:52:e6:5a:92:3c:54:69:1b:11:2d:0a:35:05:19:33: e9:51:e6:1d:66:71:08:97:0c:e5:c7:19:2c:f6:2a:84:31:ea: 86:62:f8:fa:75:7d:22:38:c5:74:9d:54:89:84:b8:25:b1:08: 75:92:42:0d:9d:5f:11:c0:02:57:1c:94:4c:30:35:e6:8c:71: 0e:66:e0:c0:59:3c:24:1c:11:19:a9:ee:fd:e8:2d:b6:68:7f: eb:99:8b:90:ec:20:f9:bc:cf:11:c1:cf:05:c5:80:2d:83:45: 1b:e5:9c:0a:d6:b1:28:6b:5f:a0:88:09:48:a4:44:fe:1f:f4: 5d:ba:c9:08:f7:90:50:b6:fc:6e:38:ee:82:26:7e:ce:b7:af: 1d:4b:7a:ef:2c:ac:97:ad:8f:92:41:37:6c:61:d8:7c:7c:2d: 64:1a:91:5e:df:e6:f3:b8:90:4f:20:75:2f:1f:80:8a:40:90: 68:36:1b:60:c4:a0:d5:66:d4:16:2d:63:2f:86:ef:96:8c:fa: 13:67:b1:68:7f:32:c5:be:71:67:35:32:fa:0e:58:74:ca:a5: 59:35:22:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFCNjIxMTAvBgNVBAUTKEJGOEY0M0EzNTBFNEY2QTI2MEJGMDNFRDRCREZDMUE4 MURBMkI1QTEwHhcNMjUwNTE2MjMwMDU4WhcNMjUwNTIzMjMwMDU4WjAYMRYwFAYD VQQDEw02ODI3YzNhYS1kY2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlGmqg4tcKMJKDnqp5a3S6ue/WGSPUaAiKopKpw12kQ4k30/FFYUbCN6Cft5 QKr8J4zPKbyhKyN7m/PVJdQkH5h214b1gOHmGV0Y5XMipq+wju8G9C7aB1ZtAW5I huUc6oY2IxEbmBoUxXR8kxFV5q8VUh4rWWdtZLk+T2xgvlf+TwPvAfmpB8GwXCGt g0txs2TGp9/NJY1sffkiabrliW0Su+vA6FF+IjPGB3EAEqAPmtlxx8ieipta3MsB mLGR+KbSMnnuqoOBvDsotbbCdFNIl/pj/FoWGho7QbnA5vaK1+BGIudooHmEySjb fEgL0dlUXq6RV5a+eavJddVJmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCdwyKfx DmnuuqgX/wsRYr96d8FgMB8GA1UdIwQYMBaAFL+PQ6NQ5PaiYL8D7UvfwagdorWh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUI2Mi84MkU5M0YyQzk4 Q0YxMUVCQjc1NzJBM0FDNEY5QUUwMi92NDlEbzFEazlxSmd2d1B0UzlfQnFCMml0 YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y0OURvMURrOXFKZ3Z3UHRTOV9CcUIyaXRhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUI2Mi84MkU5M0YyQzk4Q0YxMUVCQjc1NzJBM0FDNEY5QUUwMi92NDlEbzFEazlx Smd2d1B0UzlfQnFCMml0YUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqwTvG8c9rrTErK/jDuzV4uYyL4R0B+VYCewjkX9UP2gil6/msmW9S 5lqSPFRpGxEtCjUFGTPpUeYdZnEIlwzlxxks9iqEMeqGYvj6dX0iOMV0nVSJhLgl sQh1kkINnV8RwAJXHJRMMDXmjHEOZuDAWTwkHBEZqe796C22aH/rmYuQ7CD5vM8R wc8FxYAtg0Ub5ZwK1rEoa1+giAlIpET+H/RduskI95BQtvxuOO6CJn7Ot68dS3rv LKyXrY+SQTdsYdh8fC1kGpFe3+bzuJBPIHUvH4CKQJBoNhtgxKDVZtQWLWMvhu+W jPoTZ7FofzLFvnFnNTL6Dlh0yqVZNSLt -----END CERTIFICATE-----Generated at Sat May 17 07:11:54 2025 by rpki-client