$ rpki-client -vvf rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft File: S630I4efFU256siNFgtOEW9mzak.mft (raw, json) Hash identifier: xwr2kE/i/j5UgXJhNaPxIq36/3k+yT197FNL+QDjw+o= Subject key identifier: 2B:A8:3D:8B:EE:D0:10:A2:0C:59:9D:E5:6E:53:2C:D5:F1:8C:BE:EE Authority key identifier: 4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9 Certificate issuer: /CN=A91B30E5/serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9 Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft Manifest number: 01AB Signing time: Sat 05 Apr 2025 02:42:53 +0000 Manifest this update: Sat 05 Apr 2025 02:42:53 +0000 Manifest next update: Sat 12 Apr 2025 02:42:52 +0000 Files and hashes: 1: S630I4efFU256siNFgtOEW9mzak.crl (hash: fwiCzOICAl7eKpOUkgQQWu5BeF/2qyM04URDSNGXKkM=) 2: 0F1061D0868911EDA888A96CC4F9AE02.roa (hash: aGKXoopb0arb0ntbaAeX9hZshlxruOuTWjBQoFMqiCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B30E5 Validity Not Before: Apr 5 02:42:53 2025 GMT Not After : Apr 12 02:42:52 2025 GMT Subject: CN=67f098ad-776a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6a:06:09:af:54:01:a6:da:65:fc:18:ad:db: fc:83:78:2a:49:6a:87:22:ea:5d:02:93:e4:7f:b1: 48:14:52:b1:1b:67:2f:34:9e:dc:9c:7c:90:02:67: 24:6d:6f:28:e2:65:6b:1e:f9:37:67:28:76:9d:83: 61:1c:41:31:36:1b:01:4c:d0:8f:0b:ef:35:09:e9: 70:ac:dc:d4:35:cd:92:3d:91:0d:74:11:06:e1:93: 48:86:38:26:51:62:4b:f1:b6:da:d6:39:08:3b:bc: 0e:28:01:f9:df:75:2a:18:4f:1a:ff:c9:8f:1c:b9: cf:69:c6:47:eb:7e:f3:ad:d3:dc:e9:12:f4:40:6d: b1:74:64:57:dd:5e:65:64:a6:84:fa:c8:05:c1:3d: a7:6b:f3:e7:68:48:0c:6f:08:4c:34:fd:6e:c3:52: f9:74:8a:95:54:1e:44:ef:de:2e:9b:a5:29:24:81: 79:14:72:bc:e8:df:92:6f:10:15:e6:ed:75:5e:b7: 1f:81:64:af:43:5d:c5:5b:0d:4d:34:d7:bd:82:de: ef:b4:0b:0b:ca:9f:b5:03:2b:1b:c9:3a:eb:14:a2: 46:87:ed:85:cb:cb:a2:74:0d:61:b2:e5:d1:28:51: 9b:4a:d2:1b:2b:5e:82:11:a0:14:da:cf:b0:c6:3c: d1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A8:3D:8B:EE:D0:10:A2:0C:59:9D:E5:6E:53:2C:D5:F1:8C:BE:EE X509v3 Authority Key Identifier: keyid:4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:57:4d:1c:b7:12:50:8a:90:a2:89:32:7b:d8:28:3d:10:c7: 01:51:5a:c1:3c:84:22:26:32:5e:6d:65:8b:e9:3e:df:6b:7a: 72:3c:54:16:c5:d6:a6:22:2b:7d:93:54:0b:bf:78:b4:18:da: 4c:5e:d6:4e:ce:c7:4c:c2:0b:d9:84:7d:cd:26:9b:59:7c:29: 0f:1b:f1:ee:75:a8:87:1d:89:58:57:ea:a7:c8:ae:3e:8f:05: 30:70:aa:4a:3e:d6:0e:9c:54:f1:47:5f:c8:6b:35:29:2f:40: 09:8a:95:b7:91:4b:86:e5:75:65:f1:2c:33:8a:95:a8:f6:b0: 93:87:95:06:10:63:87:7d:79:cd:1a:54:be:86:d9:e2:11:7a: 81:f0:b2:72:bd:01:e0:96:4e:a2:79:be:fd:a2:dd:b6:6b:61: 37:a5:f1:dc:78:e0:f1:e9:f1:12:3b:d3:fe:40:b0:b1:ba:88: 9d:44:f0:d6:36:ce:65:8a:60:2e:a5:6c:95:4e:ea:19:e8:05: 47:6d:17:a9:9e:7a:d4:be:e4:61:19:9e:f4:19:a2:16:bf:4a: c1:dd:1a:dd:e6:f5:e8:ce:6a:7d:32:fa:1d:e2:c7:79:a0:7b: 59:87:1f:b0:92:6b:13:47:74:99:90:73:3f:d5:8b:51:c6:a5: 68:97:ad:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMwRTUxMTAvBgNVBAUTKDRCQURGNDIzODc5RjE1NERCOUVBQzg4RDE2MEI0RTEx NkY2NkNEQTkwHhcNMjUwNDA1MDI0MjUzWhcNMjUwNDEyMDI0MjUyWjAYMRYwFAYD VQQDEw02N2YwOThhZC03NzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2oGCa9UAabaZfwYrdv8g3gqSWqHIupdApPkf7FIFFKxG2cvNJ7cnHyQAmck bW8o4mVrHvk3Zyh2nYNhHEExNhsBTNCPC+81CelwrNzUNc2SPZENdBEG4ZNIhjgm UWJL8bba1jkIO7wOKAH533UqGE8a/8mPHLnPacZH637zrdPc6RL0QG2xdGRX3V5l ZKaE+sgFwT2na/PnaEgMbwhMNP1uw1L5dIqVVB5E794um6UpJIF5FHK86N+SbxAV 5u11XrcfgWSvQ13FWw1NNNe9gt7vtAsLyp+1AysbyTrrFKJGh+2Fy8uidA1hsuXR KFGbStIbK16CEaAU2s+wxjzR1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuoPYvu 0BCiDFmd5W5TLNXxjL7uMB8GA1UdIwQYMBaAFEut9COHnxVNuerIjRYLThFvZs2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzBFNS83MjkzQzExNjg2 ODQxMUVEQjdCRkExNzFDNEY5QUUwMi9TNjMwSTRlZkZVMjU2c2lORmd0T0VXOW16 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M2MzBJNGVmRlUyNTZzaU5GZ3RPRVc5bXphay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzBFNS83MjkzQzExNjg2ODQxMUVEQjdCRkExNzFDNEY5QUUwMi9TNjMwSTRlZkZV MjU2c2lORmd0T0VXOW16YWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoV00ctxJQipCiiTJ72Cg9EMcBUVrBPIQiJjJebWWL6T7fa3pyPFQW xdamIit9k1QLv3i0GNpMXtZOzsdMwgvZhH3NJptZfCkPG/HudaiHHYlYV+qnyK4+ jwUwcKpKPtYOnFTxR1/IazUpL0AJipW3kUuG5XVl8SwzipWo9rCTh5UGEGOHfXnN GlS+htniEXqB8LJyvQHglk6ieb79ot22a2E3pfHceODx6fESO9P+QLCxuoidRPDW Ns5limAupWyVTuoZ6AVHbRepnnrUvuRhGZ70GaIWv0rB3Rrd5vXozmp9Mvod4sd5 oHtZhx+wkmsTR3SZkHM/1YtRxqVol62p -----END CERTIFICATE-----Generated at Sat Apr 5 10:23:22 2025 by rpki-client