$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft File: inTvQOZaEnwOZmsUpsZXSlNvNnM.mft (raw, json) Hash identifier: 7TnAj+9g693LI+TtzKQ/3rEIVwtRf1aYs/FTsTJDsz8= Subject key identifier: 05:A7:78:BC:DE:BD:62:4A:AD:6E:3E:77:9E:1C:BE:97:C3:C2:2F:C1 Authority key identifier: 8A:74:EF:40:E6:5A:12:7C:0E:66:6B:14:A6:C6:57:4A:53:6F:36:73 Certificate issuer: /CN=A91583E4/serialNumber=8A74EF40E65A127C0E666B14A6C6574A536F3673 Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft Manifest number: 01A5 Signing time: Thu 17 Apr 2025 02:21:45 +0000 Manifest this update: Thu 17 Apr 2025 02:21:45 +0000 Manifest next update: Thu 24 Apr 2025 02:21:45 +0000 Files and hashes: 1: inTvQOZaEnwOZmsUpsZXSlNvNnM.crl (hash: Dx1/g1Mb2xNW/aX5ZIDuanFB9uiPVPBx5u6YDcG5lFM=) 2: 94817492A7AF11EE9ABC7953C4F9AE02.roa (hash: 0cSwyQIrwsLrX5HCGrd1L+L8tXaOyusCzdo4wFfko7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.crl rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 02:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E4, serialNumber=8A74EF40E65A127C0E666B14A6C6574A536F3673 Validity Not Before: Apr 17 02:21:45 2025 GMT Not After : Apr 24 02:21:45 2025 GMT Subject: CN=680065b9-6a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9f:15:2a:9a:30:24:64:c6:fa:68:e8:d4:b8: 6d:2d:d3:8b:64:87:9f:43:88:d7:52:2c:aa:c6:8c: 00:15:20:15:59:d8:72:6a:bb:c3:43:ac:ad:e2:92: f6:ed:fb:4e:51:60:1e:d4:7d:ab:9e:3f:51:f5:61: 9b:f8:ac:cc:11:f7:d7:a9:f9:82:61:75:98:26:df: a2:59:78:c9:71:fb:f4:33:b3:53:54:00:0a:de:68: 40:dd:45:fd:65:ab:ef:64:2b:c9:0e:a9:e5:df:98: a9:02:cb:86:5b:97:40:1a:d7:2e:ae:2a:ab:2d:39: d1:4a:05:d9:27:1b:e8:09:fe:df:9d:bc:9a:5c:ea: a9:51:57:a2:42:ce:0b:c0:b9:23:66:f3:48:e5:de: 8f:1f:fd:f2:bc:be:c5:51:6e:de:d7:b8:6f:e9:bb: b1:f8:83:d5:b2:e3:bc:0a:6c:da:af:fc:a0:6e:20: d1:df:e1:c2:09:f6:b7:ac:10:09:da:01:1a:ff:1d: 2d:2c:f6:0d:d1:5a:15:c7:c6:fa:b6:13:18:a1:9e: a9:a1:eb:dc:8e:21:71:4a:76:29:51:e1:00:dc:2c: b0:b2:3e:59:b9:93:30:cf:e1:2a:49:b5:71:8f:5c: c0:06:57:25:1c:d2:73:bc:28:a9:78:80:07:c7:d2: 56:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A7:78:BC:DE:BD:62:4A:AD:6E:3E:77:9E:1C:BE:97:C3:C2:2F:C1 X509v3 Authority Key Identifier: keyid:8A:74:EF:40:E6:5A:12:7C:0E:66:6B:14:A6:C6:57:4A:53:6F:36:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:0e:96:92:b1:05:14:e5:91:45:0e:90:33:95:33:db:f3:15: 2f:fd:d9:f5:80:c2:a4:68:01:f6:c9:68:e7:5b:c7:d1:e3:1b: bd:9d:07:fd:29:03:c2:46:d2:17:15:fb:83:23:e8:0e:3f:d4: b3:37:3a:6e:ee:d7:35:98:b3:c9:82:f0:e5:11:6b:cb:df:30: 63:aa:b5:be:68:5a:56:ca:03:17:8a:6f:46:ba:b4:f3:2b:18: ee:2e:5b:81:1b:e5:e2:fd:2e:af:d2:92:bd:7a:89:42:f3:f1: 8e:28:83:f5:3a:5d:fd:57:48:56:e5:6c:e6:ca:24:61:06:ae: c8:b5:18:18:0c:61:ba:bc:c4:0f:2e:01:2a:98:1d:07:ed:2f: a7:ae:45:0f:c9:98:57:28:02:99:0a:bd:f4:3e:10:a1:12:23: d1:17:60:ec:f1:a9:60:c8:ac:01:9f:e6:d2:04:1e:dd:60:1d: 74:79:7c:8f:ba:7d:db:c5:51:65:e0:6f:0f:01:c9:91:87:82: ac:bc:df:ff:92:34:cc:ad:59:b9:b3:b2:5a:34:a8:28:b0:8f: b5:c5:ce:c3:40:44:bc:9f:5b:e9:1e:66:32:64:a9:47:71:66: 3e:97:7f:c7:a6:9e:5d:cb:57:68:cf:61:a5:2c:be:91:4f:51: 41:3c:ac:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgzRTQxMTAvBgNVBAUTKDhBNzRFRjQwRTY1QTEyN0MwRTY2NkIxNEE2QzY1NzRB NTM2RjM2NzMwHhcNMjUwNDE3MDIyMTQ1WhcNMjUwNDI0MDIyMTQ1WjAYMRYwFAYD VQQDEw02ODAwNjViOS02YTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Z8VKpowJGTG+mjo1LhtLdOLZIefQ4jXUiyqxowAFSAVWdhyarvDQ6yt4pL2 7ftOUWAe1H2rnj9R9WGb+KzMEffXqfmCYXWYJt+iWXjJcfv0M7NTVAAK3mhA3UX9 ZavvZCvJDqnl35ipAsuGW5dAGtcuriqrLTnRSgXZJxvoCf7fnbyaXOqpUVeiQs4L wLkjZvNI5d6PH/3yvL7FUW7e17hv6bux+IPVsuO8Cmzar/ygbiDR3+HCCfa3rBAJ 2gEa/x0tLPYN0VoVx8b6thMYoZ6poevcjiFxSnYpUeEA3Cywsj5ZuZMwz+EqSbVx j1zABlclHNJzvCipeIAHx9JW+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWneLze vWJKrW4+d54cvpfDwi/BMB8GA1UdIwQYMBaAFIp070DmWhJ8DmZrFKbGV0pTbzZz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODNFNC8wNUZFRjQ0QTlF MEMxMUVEQkE5RDFEMjZDNEY5QUUwMi9pblR2UU9aYUVud09abXNVcHNaWFNsTnZO bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2luVHZRT1phRW53T1ptc1Vwc1pYU2xOdk5uTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODNFNC8wNUZFRjQ0QTlFMEMxMUVEQkE5RDFEMjZDNEY5QUUwMi9pblR2UU9aYUVu d09abXNVcHNaWFNsTnZObk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJDpaSsQUU5ZFFDpAzlTPb8xUv/dn1gMKkaAH2yWjnW8fR4xu9nQf9 KQPCRtIXFfuDI+gOP9SzNzpu7tc1mLPJgvDlEWvL3zBjqrW+aFpWygMXim9GurTz KxjuLluBG+Xi/S6v0pK9eolC8/GOKIP1Ol39V0hW5WzmyiRhBq7ItRgYDGG6vMQP LgEqmB0H7S+nrkUPyZhXKAKZCr30PhChEiPRF2Ds8algyKwBn+bSBB7dYB10eXyP un3bxVFl4G8PAcmRh4KsvN//kjTMrVm5s7JaNKgosI+1xc7DQES8n1vpHmYyZKlH cWY+l3/Hpp5dy1doz2GlLL6RT1FBPKxo -----END CERTIFICATE-----Generated at Thu Apr 17 20:14:24 2025 by rpki-client