$ rpki-client -vvf rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft File: RisW0yeXLqdxImoBWItSBe_qRJY.mft (raw, json) Hash identifier: VbJJ1/UblHUs4Nni0pY6IGm2sJg5zBGeNGD6JApYUOs= Subject key identifier: 60:C4:F6:9B:2E:FB:BD:96:B2:DB:2F:DF:03:A0:60:98:D4:C4:88:BC Authority key identifier: 46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96 Certificate issuer: /CN=A91E268B/serialNumber=462B16D327972EA771226A01588B5205EFEA4496 Certificate serial: 0648 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft Manifest number: 0637 Signing time: Wed 02 Apr 2025 22:54:39 +0000 Manifest this update: Wed 02 Apr 2025 22:54:38 +0000 Manifest next update: Wed 09 Apr 2025 22:54:38 +0000 Files and hashes: 1: RisW0yeXLqdxImoBWItSBe_qRJY.crl (hash: 7Ada5eNjrJ34MgVrDGhwB78x/y4wP62ACX85sau0zA4=) 2: 7549B6D2744A11EDA8F69509C4F9AE02.roa (hash: Qanq6NRaIr7kIyU/FtT70GBfspNN2MElYD/z614Bqk8=) 3: 3F4ECBD2744D11EDB5D08682C4F9AE02.roa (hash: g6OgdDZKbwzC3zinj7MpaUKQ1NJe0hr5+U2aIYgw2E0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.crl rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:54:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1608 (0x648) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E268B Validity Not Before: Apr 2 22:54:38 2025 GMT Not After : Apr 9 22:54:38 2025 GMT Subject: CN=67edc02e-d512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7d:95:14:ca:7a:4d:20:1b:5e:52:8a:ba:17: a4:e6:57:7f:3b:a8:d7:3d:f9:69:9f:87:b4:8f:db: 5a:c0:89:84:38:f2:7b:e9:93:a1:9a:a6:4f:75:3f: c8:9d:50:33:73:22:b8:93:a4:57:be:31:b9:b2:42: 5e:1e:9a:af:21:a3:c9:af:7e:0f:10:d7:27:37:af: e7:2b:65:8c:1b:28:81:b4:5d:2f:fa:d4:f6:7b:1f: 94:d8:74:0d:90:13:74:74:ed:8a:ae:aa:34:9f:40: 93:cf:28:a6:2e:df:6d:78:69:8d:78:9b:5e:26:0a: 51:4c:98:f1:0b:b8:0c:37:de:f8:3e:a4:96:d5:cc: fa:55:1f:5e:10:59:70:11:54:00:69:53:48:a5:c2: e9:12:07:ed:c4:76:69:2c:c9:ca:18:41:44:8f:e6: 37:3e:86:5d:df:0e:32:bf:f7:33:fb:1c:4c:27:ff: b8:9a:60:9f:9a:bc:a2:05:0b:a8:68:45:c9:6e:08: 9c:81:bc:83:24:8e:98:ce:26:06:6c:d6:1b:d2:20: d3:d7:98:6c:3b:d9:9f:23:86:78:e2:3f:8e:19:26: c1:71:0c:d7:e7:8e:a2:24:cd:cb:89:8e:a9:24:0a: 19:c3:2e:8b:ef:46:92:59:2e:f7:57:3f:1d:1e:dd: 2f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C4:F6:9B:2E:FB:BD:96:B2:DB:2F:DF:03:A0:60:98:D4:C4:88:BC X509v3 Authority Key Identifier: keyid:46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:a5:5c:50:7f:42:9a:fa:57:a5:8e:2a:d6:0c:d4:6f:19:14: d9:1b:bd:9e:c5:43:52:1a:93:ce:a4:de:68:8b:09:53:ec:e3: 8d:c8:21:5c:a0:f1:6b:42:a2:63:5d:e1:d9:40:66:10:f9:02: 19:b9:e2:80:1a:20:50:a8:90:c5:98:1c:ef:86:be:27:f3:07: bb:55:a8:ec:c1:32:3e:e4:6f:fa:76:0f:4a:f2:99:f7:d1:f9: e1:bd:a4:dc:e0:98:60:53:0f:6e:35:c0:3a:24:78:b0:1a:63: dd:fb:0f:37:93:af:de:29:39:96:e6:de:c8:75:a7:cd:ef:dd: ba:09:ff:87:8d:3a:83:6d:a2:de:3d:4c:e9:75:ce:15:78:97: 6c:a8:b4:b7:a5:a9:1a:a1:32:0c:03:1d:52:71:06:00:af:b3: 8d:66:4c:9f:b6:d2:7e:69:ef:7e:91:79:e7:9a:fe:a7:b5:65: bd:6c:0e:b7:bf:6d:68:61:64:b9:a3:a3:7e:9b:90:81:46:38: 98:3f:e1:0c:bc:41:8f:c1:7c:27:50:f9:14:68:78:b4:ae:01: 45:8c:16:a9:73:56:ba:aa:60:29:33:77:89:29:31:76:29:2d: 09:c1:6c:1b:e7:ec:e6:84:8c:e2:17:09:27:75:af:0b:9c:72: ef:eb:47:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI2OEIxMTAvBgNVBAUTKDQ2MkIxNkQzMjc5NzJFQTc3MTIyNkEwMTU4OEI1MjA1 RUZFQTQ0OTYwHhcNMjUwNDAyMjI1NDM4WhcNMjUwNDA5MjI1NDM4WjAYMRYwFAYD VQQDEw02N2VkYzAyZS1kNTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsX2VFMp6TSAbXlKKuhek5ld/O6jXPflpn4e0j9tawImEOPJ76ZOhmqZPdT/I nVAzcyK4k6RXvjG5skJeHpqvIaPJr34PENcnN6/nK2WMGyiBtF0v+tT2ex+U2HQN kBN0dO2Krqo0n0CTzyimLt9teGmNeJteJgpRTJjxC7gMN974PqSW1cz6VR9eEFlw EVQAaVNIpcLpEgftxHZpLMnKGEFEj+Y3PoZd3w4yv/cz+xxMJ/+4mmCfmryiBQuo aEXJbgicgbyDJI6YziYGbNYb0iDT15hsO9mfI4Z44j+OGSbBcQzX546iJM3LiY6p JAoZwy6L70aSWS73Vz8dHt0vcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDE9psu +72Wstsv3wOgYJjUxIi8MB8GA1UdIwQYMBaAFEYrFtMnly6ncSJqAViLUgXv6kSW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjY4Qi80MjZGNTdDMDhE MzkxMUVCQjlGNENCMTdDNEY5QUUwMi9SaXNXMHllWExxZHhJbW9CV0l0U0JlX3FS SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Jpc1cweWVYTHFkeEltb0JXSXRTQmVfcVJKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjY4Qi80MjZGNTdDMDhEMzkxMUVCQjlGNENCMTdDNEY5QUUwMi9SaXNXMHllWExx ZHhJbW9CV0l0U0JlX3FSSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtpVxQf0Ka+leljirWDNRvGRTZG72exUNSGpPOpN5oiwlT7OONyCFc oPFrQqJjXeHZQGYQ+QIZueKAGiBQqJDFmBzvhr4n8we7VajswTI+5G/6dg9K8pn3 0fnhvaTc4JhgUw9uNcA6JHiwGmPd+w83k6/eKTmW5t7IdafN7926Cf+HjTqDbaLe PUzpdc4VeJdsqLS3pakaoTIMAx1ScQYAr7ONZkyfttJ+ae9+kXnnmv6ntWW9bA63 v21oYWS5o6N+m5CBRjiYP+EMvEGPwXwnUPkUaHi0rgFFjBapc1a6qmApM3eJKTF2 KS0JwWwb5+zmhIziFwknda8LnHLv60eW -----END CERTIFICATE-----Generated at Fri Apr 4 18:29:28 2025 by rpki-client