$ rpki-client -vvf rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft File: RSWIQffwT7Odkdo-P6u1KehSj0k.mft (raw, json) Hash identifier: QV/7XGGZv7QRdoX8rUu9LgtCAjfPReClQCDUARdWyKg= Subject key identifier: D9:79:9E:49:61:B5:BF:8C:FB:00:19:BA:A9:4F:D8:46:E5:1B:A7:C5 Authority key identifier: 45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49 Certificate issuer: /CN=A91317E5/serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49 Certificate serial: 060B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft Manifest number: 0603 Signing time: Sat 12 Apr 2025 22:33:13 +0000 Manifest this update: Sat 12 Apr 2025 22:33:13 +0000 Manifest next update: Sat 19 Apr 2025 22:33:13 +0000 Files and hashes: 1: RSWIQffwT7Odkdo-P6u1KehSj0k.crl (hash: q6WTZ2RFlgwu8wqRL1fLGYG1bk0vlEGVzkgpfVyidNY=) 2: 53E7583E3D0511EF99169B21C4F9AE02.roa (hash: qCXzkeKuPVL2AFCLekUycL2ac1PSk1oLXnC7v+nyDIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 22:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1547 (0x60b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91317E5, serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49 Validity Not Before: Apr 12 22:33:13 2025 GMT Not After : Apr 19 22:33:13 2025 GMT Subject: CN=67faea29-0452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:55:74:bb:6e:97:db:bd:33:f1:86:d0:4d:ac: a1:68:ab:36:e0:f0:96:33:1d:c6:43:2b:72:3a:7e: 77:f0:5b:2d:b2:70:4c:c0:9e:21:58:0d:11:9f:f6: 19:a6:af:a9:57:bf:94:26:43:80:5c:40:27:c2:15: 88:c9:d6:9c:07:38:3b:9f:b0:25:5b:ce:39:e9:df: 00:33:68:ae:70:6a:10:27:e5:55:76:c7:ac:e6:94: 85:cc:2f:be:b7:1b:c0:c2:1f:51:7e:5e:f6:c5:dc: ee:dc:2a:a4:b8:8c:0f:32:b7:b5:1e:e4:41:11:48: 6a:32:78:bf:c3:52:ed:2c:78:4b:ec:14:73:15:7a: c2:b5:1f:7c:9d:48:de:3c:62:22:02:9b:4d:07:ce: b1:de:b3:fb:2f:b7:7f:c4:68:ef:1f:31:98:dd:01: 89:d2:0b:0e:12:79:00:93:dc:83:5b:44:0e:68:ea: 02:67:1c:00:ae:22:f1:8a:d4:7f:ec:e6:c2:7e:fc: cf:c6:e1:fa:b0:f8:f3:09:61:30:cd:c0:62:9a:42: 9d:be:77:5f:59:55:8b:dc:59:cd:fc:f6:d7:a2:c0: 61:05:aa:5b:c1:0d:ba:98:66:86:90:57:68:2c:45: e8:02:08:81:a3:92:05:b9:2c:c3:f9:35:b9:ba:00: ca:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:79:9E:49:61:B5:BF:8C:FB:00:19:BA:A9:4F:D8:46:E5:1B:A7:C5 X509v3 Authority Key Identifier: keyid:45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:c6:22:d5:ec:4f:a5:2d:fb:ec:f2:24:1d:d3:7d:3e:04:51: 72:36:63:10:90:ad:57:fe:4b:6f:81:be:5a:4a:f0:5a:df:6a: 65:fc:16:95:62:35:0f:d0:7b:ee:71:0c:dd:91:ff:9d:0f:96: 54:60:ee:f5:96:d0:9a:1b:5f:28:e3:b4:80:9f:3b:25:f2:61: 4b:ff:5b:ce:4f:ff:38:f0:4c:ad:7b:60:9a:48:64:c3:39:57: 0d:a8:af:6b:83:b3:e8:2e:b8:56:43:34:be:4a:69:e6:92:2b: fd:d3:ab:ab:55:e4:1b:e0:cd:84:59:11:53:b6:d0:7e:b6:16: f7:da:fa:1a:6c:60:e6:9c:b9:50:8a:7c:09:c7:29:82:19:be: 01:a0:5a:9a:64:42:e0:a4:9e:b5:cb:1b:16:73:de:95:e9:af: 95:65:61:bf:63:02:93:1b:b8:06:52:90:04:c9:a3:b2:cc:42: 5b:9f:3f:b3:3a:5b:06:bb:47:e0:22:a5:8d:0d:de:74:3a:a6: fc:7a:d9:53:1e:b4:25:0f:9f:70:92:a8:45:4f:c5:b3:ae:5b: e5:56:a5:36:ea:07:05:02:4a:6b:d0:e4:c3:41:22:df:bf:44: 2a:3f:71:96:33:8c:13:4c:7e:9a:0c:3f:0d:74:b8:f5:a6:56: a2:08:34:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3RTUxMTAvBgNVBAUTKDQ1MjU4ODQxRjdGMDRGQjM5RDkxREEzRTNGQUJCNTI5 RTg1MjhGNDkwHhcNMjUwNDEyMjIzMzEzWhcNMjUwNDE5MjIzMzEzWjAYMRYwFAYD VQQDEw02N2ZhZWEyOS0wNDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21V0u26X270z8YbQTayhaKs24PCWMx3GQytyOn538FstsnBMwJ4hWA0Rn/YZ pq+pV7+UJkOAXEAnwhWIydacBzg7n7AlW8456d8AM2iucGoQJ+VVdses5pSFzC++ txvAwh9Rfl72xdzu3CqkuIwPMre1HuRBEUhqMni/w1LtLHhL7BRzFXrCtR98nUje PGIiAptNB86x3rP7L7d/xGjvHzGY3QGJ0gsOEnkAk9yDW0QOaOoCZxwAriLxitR/ 7ObCfvzPxuH6sPjzCWEwzcBimkKdvndfWVWL3FnN/PbXosBhBapbwQ26mGaGkFdo LEXoAgiBo5IFuSzD+TW5ugDKmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNl5nklh tb+M+wAZuqlP2EblG6fFMB8GA1UdIwQYMBaAFEUliEH38E+znZHaPj+rtSnoUo9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTdFNS9EQjAwRjgwMkEw RkExMUVCQkMwOTk0M0FDNEY5QUUwMi9SU1dJUWZmd1Q3T2RrZG8tUDZ1MUtlaFNq MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JTV0lRZmZ3VDdPZGtkby1QNnUxS2VoU2oway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTdFNS9EQjAwRjgwMkEwRkExMUVCQkMwOTk0M0FDNEY5QUUwMi9SU1dJUWZmd1Q3 T2RrZG8tUDZ1MUtlaFNqMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRxiLV7E+lLfvs8iQd030+BFFyNmMQkK1X/ktvgb5aSvBa32pl/BaV YjUP0HvucQzdkf+dD5ZUYO71ltCaG18o47SAnzsl8mFL/1vOT/848Eyte2CaSGTD OVcNqK9rg7PoLrhWQzS+Smnmkiv906urVeQb4M2EWRFTttB+thb32voabGDmnLlQ inwJxymCGb4BoFqaZELgpJ61yxsWc96V6a+VZWG/YwKTG7gGUpAEyaOyzEJbnz+z OlsGu0fgIqWNDd50Oqb8etlTHrQlD59wkqhFT8WzrlvlVqU26gcFAkpr0OTDQSLf v0QqP3GWM4wTTH6aDD8NdLj1plaiCDQw -----END CERTIFICATE-----Generated at Sun Apr 13 04:29:39 2025 by rpki-client