$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft File: 53anM2-PZ4WjagEEaEC1FKDUGSk.mft (raw, json) Hash identifier: tzl0THGT7tyzvJN6enNy8Dgvrn5badEJpkvCXm86akw= Subject key identifier: 09:60:10:38:EB:25:86:BF:77:62:BD:5F:A8:D1:77:50:EA:3A:E3:4F Authority key identifier: E7:76:A7:33:6F:8F:67:85:A3:6A:01:04:68:40:B5:14:A0:D4:19:29 Certificate issuer: /CN=A91E1486/serialNumber=E776A7336F8F6785A36A01046840B514A0D41929 Certificate serial: 0C26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft Manifest number: 0C20 Signing time: Thu 10 Apr 2025 18:28:08 +0000 Manifest this update: Thu 10 Apr 2025 18:28:08 +0000 Manifest next update: Thu 17 Apr 2025 18:28:08 +0000 Files and hashes: 1: 53anM2-PZ4WjagEEaEC1FKDUGSk.crl (hash: RtshD9RcvAsqJMFAEgZ6S2jG368l0iKnXJbDNDxri4E=) 2: 964FB9AE06A111EAAE446E30C4F9AE02.roa (hash: 7T6rttGkDUZMLr7YNcGWXFP6okk75uTuQj2yDiVmYPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.crl rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 18:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3110 (0xc26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1486, serialNumber=E776A7336F8F6785A36A01046840B514A0D41929 Validity Not Before: Apr 10 18:28:08 2025 GMT Not After : Apr 17 18:28:08 2025 GMT Subject: CN=67f80db8-1553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:86:95:e6:47:57:90:bd:9d:7d:7b:5d:ce:df: 43:62:14:4f:04:39:fb:0b:12:7f:d9:a1:19:41:13: 8d:70:91:00:c7:97:38:7c:f7:a7:ed:8d:29:4e:ce: bd:12:f5:49:a4:9a:08:66:b2:7c:e1:11:ed:2c:ce: 3b:c1:84:33:4c:a5:2a:e6:50:9a:06:f2:c8:1a:8f: 84:06:ff:31:30:24:a9:32:3f:d1:a7:08:d6:b7:68: 76:66:3c:9b:e6:83:f5:6e:2a:e3:1d:c2:6b:dd:05: 35:27:ec:77:4f:69:39:2d:07:3e:94:a2:44:1a:c5: 57:68:2d:c9:c2:00:d1:ec:86:13:c8:aa:bf:43:54: 20:f8:fa:16:9d:2f:af:cb:72:06:af:bd:5f:29:ba: cf:5a:3d:1f:ea:7c:1e:97:75:bc:ba:b3:e1:ef:cd: 3f:ad:f2:8e:63:e1:d7:fb:2f:fe:f0:5f:27:d7:02: c9:b9:5c:6e:74:fb:29:09:22:b0:fe:c2:57:cf:44: 97:4e:69:bc:76:b8:8f:f0:e5:a1:18:1f:8f:55:28: c2:72:fb:1d:d7:96:96:5f:e3:82:be:13:f1:56:e7: 6d:df:af:72:94:1d:ad:bb:4b:c7:53:05:ba:96:c7: a5:38:60:84:d5:94:29:04:2a:92:2f:af:c6:d1:cc: d0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:60:10:38:EB:25:86:BF:77:62:BD:5F:A8:D1:77:50:EA:3A:E3:4F X509v3 Authority Key Identifier: keyid:E7:76:A7:33:6F:8F:67:85:A3:6A:01:04:68:40:B5:14:A0:D4:19:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:31:0d:eb:2a:f3:39:26:79:40:48:78:98:64:36:6f:4b:07: c5:43:32:25:c8:6f:3a:3b:90:96:d7:08:b1:4e:17:d2:3f:ba: bb:21:a5:7a:a5:e6:0d:37:d3:b4:e0:11:93:75:12:83:3f:83: 8c:b2:67:f9:f9:9a:35:65:e3:11:70:e8:23:49:46:98:36:29: f0:f0:42:4d:56:2e:df:d5:59:91:99:8b:ab:fd:61:21:5c:00: 60:21:05:38:2d:68:d1:30:7d:4e:3c:5b:95:23:c5:08:19:64: 87:c0:ba:23:d7:0c:36:6c:38:25:67:83:08:07:10:53:2b:a4: d1:b3:7e:ba:60:e5:20:5d:e4:44:cd:57:05:2b:9b:2c:4d:df: 33:b1:c5:5e:4b:6e:1b:8e:4f:f1:90:d5:c0:30:69:e2:7c:5f: 73:8f:0c:72:b1:c2:aa:e1:55:21:54:47:ad:3c:d5:23:8b:94: 0b:b3:9a:6b:5d:36:fd:28:c0:f8:39:6c:70:6c:8a:db:64:7c: 72:26:12:ef:cd:0d:f6:07:6a:be:54:bf:44:1a:18:53:17:46: 74:8d:77:b6:fc:d0:b9:db:06:53:1e:4c:c2:9b:b2:27:3a:93: 90:82:7d:fd:16:31:ea:a0:94:7a:2b:94:cf:be:2b:bd:ab:2f: 11:b1:0d:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE0ODYxMTAvBgNVBAUTKEU3NzZBNzMzNkY4RjY3ODVBMzZBMDEwNDY4NDBCNTE0 QTBENDE5MjkwHhcNMjUwNDEwMTgyODA4WhcNMjUwNDE3MTgyODA4WjAYMRYwFAYD VQQDEw02N2Y4MGRiOC0xNTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIaV5kdXkL2dfXtdzt9DYhRPBDn7CxJ/2aEZQRONcJEAx5c4fPen7Y0pTs69 EvVJpJoIZrJ84RHtLM47wYQzTKUq5lCaBvLIGo+EBv8xMCSpMj/RpwjWt2h2Zjyb 5oP1birjHcJr3QU1J+x3T2k5LQc+lKJEGsVXaC3JwgDR7IYTyKq/Q1Qg+PoWnS+v y3IGr71fKbrPWj0f6nwel3W8urPh780/rfKOY+HX+y/+8F8n1wLJuVxudPspCSKw /sJXz0SXTmm8driP8OWhGB+PVSjCcvsd15aWX+OCvhPxVudt369ylB2tu0vHUwW6 lselOGCE1ZQpBCqSL6/G0czQrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlgEDjr JYa/d2K9X6jRd1DqOuNPMB8GA1UdIwQYMBaAFOd2pzNvj2eFo2oBBGhAtRSg1Bkp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTQ4Ni8wNkM0QjJGRTA2 QTAxMUVBQUQ2OURDMkFDNEY5QUUwMi81M2FuTTItUFo0V2phZ0VFYUVDMUZLRFVH U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUzYW5NMi1QWjRXamFnRUVhRUMxRktEVUdTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTQ4Ni8wNkM0QjJGRTA2QTAxMUVBQUQ2OURDMkFDNEY5QUUwMi81M2FuTTItUFo0 V2phZ0VFYUVDMUZLRFVHU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfMQ3rKvM5JnlASHiYZDZvSwfFQzIlyG86O5CW1wixThfSP7q7IaV6 peYNN9O04BGTdRKDP4OMsmf5+Zo1ZeMRcOgjSUaYNinw8EJNVi7f1VmRmYur/WEh XABgIQU4LWjRMH1OPFuVI8UIGWSHwLoj1ww2bDglZ4MIBxBTK6TRs366YOUgXeRE zVcFK5ssTd8zscVeS24bjk/xkNXAMGnifF9zjwxyscKq4VUhVEetPNUji5QLs5pr XTb9KMD4OWxwbIrbZHxyJhLvzQ32B2q+VL9EGhhTF0Z0jXe2/NC52wZTHkzCm7In OpOQgn39FjHqoJR6K5TPviu9qy8RsQ0h -----END CERTIFICATE-----Generated at Sat Apr 12 16:13:02 2025 by rpki-client