$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft File: m_aWWObA_qLqCOOn_dKtysoTOUk.mft (raw, json) Hash identifier: WpZAjq1G1KKi105w0z7eoXfUGvJuo0ApDXI22NY7NTE= Subject key identifier: 0E:61:38:1A:67:4C:A4:F7:07:2C:CC:5D:80:89:E2:EC:45:D9:17:44 Authority key identifier: 9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49 Certificate issuer: /CN=A91CC28E/serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949 Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft Manifest number: 01B7 Signing time: Fri 11 Apr 2025 02:26:52 +0000 Manifest this update: Fri 11 Apr 2025 02:26:52 +0000 Manifest next update: Fri 18 Apr 2025 02:26:52 +0000 Files and hashes: 1: m_aWWObA_qLqCOOn_dKtysoTOUk.crl (hash: lrTSLE3KAZnuZySbxv1EDDvxe3OSxnmptBqK0+khtD0=) 2: 73E253FC76D011EDBAECD665C4F9AE02.roa (hash: n/BMRPFUHjUzsfa0GoSirwLl0k+pEwLO2kUv8wHTWRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.crl rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 02:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC28E, serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949 Validity Not Before: Apr 11 02:26:52 2025 GMT Not After : Apr 18 02:26:52 2025 GMT Subject: CN=67f87dec-dfba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:8c:1a:b8:e7:16:5a:f5:36:89:ca:93:0e:53: 79:cd:ac:35:08:6f:7a:2e:92:e9:10:68:71:be:cc: c9:86:b1:46:38:57:89:d3:62:8c:0f:3f:9e:38:77: 31:dc:2f:dd:8b:13:a8:1d:64:50:8f:93:26:85:56: 15:72:c0:48:2c:95:b6:04:fd:03:28:b6:5a:e1:69: 19:dc:6d:9f:f2:c9:ed:6c:69:a1:c7:03:43:1d:8f: 8e:b6:dd:6e:59:57:ed:81:af:a1:50:7f:f1:3e:75: 2c:8b:26:0c:60:26:69:74:66:6b:03:de:32:59:48: 41:eb:78:01:71:d7:1f:c5:0d:1a:34:53:77:21:93: 81:99:81:50:3a:f0:07:06:95:2e:4b:5a:cd:95:44: fc:dc:96:73:59:ff:25:a1:70:c9:00:37:3c:17:a3: ad:e5:ca:ac:0b:5d:1f:19:63:73:f9:f5:3d:20:0a: 15:26:6c:b1:ce:82:3c:78:e8:18:d5:8e:8c:5c:3c: 64:fe:51:fb:d8:09:90:ae:e8:1e:1e:7b:d9:56:ce: 50:80:3e:da:7a:24:46:eb:55:e6:46:df:73:e9:79: 60:5b:ae:e6:f3:20:96:4e:57:87:be:c4:87:96:e2: bc:1c:59:3e:03:1b:61:1a:12:1e:df:cd:7b:c5:f2: cf:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:61:38:1A:67:4C:A4:F7:07:2C:CC:5D:80:89:E2:EC:45:D9:17:44 X509v3 Authority Key Identifier: keyid:9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:b7:ff:a7:23:ee:e3:cf:ea:91:01:fe:ed:b3:ee:74:c2:99: 60:14:93:7c:22:21:3c:b1:5e:f1:a7:56:fa:65:9a:74:51:62: c2:df:4f:7b:29:1d:60:54:09:7b:38:6e:cd:46:e8:b0:b7:8d: 7a:e0:ab:87:9c:76:98:5f:d4:6c:96:e9:09:80:64:c0:ce:cd: 01:81:af:49:df:71:7a:10:9d:ec:b9:6c:12:1b:8e:75:e4:e8: e3:d3:61:8b:df:40:5e:1e:10:cb:17:ba:37:0d:ce:78:e3:9d: d9:db:d2:98:ed:fb:a0:aa:ae:20:fd:7a:eb:69:3c:5b:aa:50: 3a:bc:e0:92:85:d2:ec:d4:fb:92:5a:0f:76:59:f2:b5:6d:d8: 18:00:95:4e:f9:26:b8:d4:9d:a3:d2:82:a7:e8:2e:c5:56:af: f5:b7:40:1d:f8:67:f6:0f:48:8b:02:35:9c:46:bf:85:2a:f9: 41:b5:65:80:f8:86:14:55:2a:39:93:9f:67:4d:60:e5:96:94: 0c:9e:ff:d8:5b:47:aa:29:65:fc:a3:48:c1:9a:bf:19:8a:9d: 5a:10:ef:19:7e:2c:36:a6:84:8b:b3:07:fa:23:03:f9:9e:03: d8:32:e4:2a:a7:54:a4:40:2d:96:87:ff:12:17:26:db:a4:b8: 45:97:3e:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MyOEUxMTAvBgNVBAUTKDlCRjY5NjU4RTZDMEZFQTJFQTA4RTNBN0ZERDJBRENB Q0ExMzM5NDkwHhcNMjUwNDExMDIyNjUyWhcNMjUwNDE4MDIyNjUyWjAYMRYwFAYD VQQDEw02N2Y4N2RlYy1kZmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8IwauOcWWvU2icqTDlN5zaw1CG96LpLpEGhxvszJhrFGOFeJ02KMDz+eOHcx 3C/dixOoHWRQj5MmhVYVcsBILJW2BP0DKLZa4WkZ3G2f8sntbGmhxwNDHY+Ott1u WVftga+hUH/xPnUsiyYMYCZpdGZrA94yWUhB63gBcdcfxQ0aNFN3IZOBmYFQOvAH BpUuS1rNlUT83JZzWf8loXDJADc8F6Ot5cqsC10fGWNz+fU9IAoVJmyxzoI8eOgY 1Y6MXDxk/lH72AmQrugeHnvZVs5QgD7aeiRG61XmRt9z6XlgW67m8yCWTleHvsSH luK8HFk+AxthGhIe3817xfLP4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5hOBpn TKT3ByzMXYCJ4uxF2RdEMB8GA1UdIwQYMBaAFJv2lljmwP6i6gjjp/3SrcrKEzlJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzI4RS9CNUNBODk2ODc2 Q0QxMUVEOERDNjNBNjRDNEY5QUUwMi9tX2FXV09iQV9xTHFDT09uX2RLdHlzb1RP VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21fYVdXT2JBX3FMcUNPT25fZEt0eXNvVE9Vay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzI4RS9CNUNBODk2ODc2Q0QxMUVEOERDNjNBNjRDNEY5QUUwMi9tX2FXV09iQV9x THFDT09uX2RLdHlzb1RPVWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlt/+nI+7jz+qRAf7ts+50wplgFJN8IiE8sV7xp1b6ZZp0UWLC3097 KR1gVAl7OG7NRuiwt4164KuHnHaYX9RslukJgGTAzs0Bga9J33F6EJ3suWwSG451 5Ojj02GL30BeHhDLF7o3Dc54453Z29KY7fugqq4g/XrraTxbqlA6vOCShdLs1PuS Wg92WfK1bdgYAJVO+Sa41J2j0oKn6C7FVq/1t0Ad+Gf2D0iLAjWcRr+FKvlBtWWA +IYUVSo5k59nTWDllpQMnv/YW0eqKWX8o0jBmr8Zip1aEO8Zfiw2poSLswf6IwP5 ngPYMuQqp1SkQC2Wh/8SFybbpLhFlz5Z -----END CERTIFICATE-----Generated at Sat Apr 12 21:45:28 2025 by rpki-client