$ rpki-client -vvf rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft File: 4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft (raw, json) Hash identifier: 0yxFsKnJiTwSbTrHYFeDd9q+7GXfWAg541HphUX0Aak= Subject key identifier: 6C:1D:01:F1:7A:22:9B:77:3F:0D:3B:78:80:49:31:E7:94:03:60:BF Authority key identifier: E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE Certificate issuer: /CN=A91273A9/serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft Manifest number: 0170 Signing time: Tue 13 May 2025 03:02:34 +0000 Manifest this update: Tue 13 May 2025 03:02:34 +0000 Manifest next update: Tue 20 May 2025 03:02:34 +0000 Files and hashes: 1: 4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl (hash: 7l3tUBuum9m6a87I6BbeKIijjmRSZLf9rXpMs5k+nyk=) 2: 831C2D12FAD711EDBF5E232DC4F9AE02.roa (hash: xOIBDojCa/AhVm9mCjiREx1MnKn4cRQ1FEtf62lnznw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91273A9, serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE Validity Not Before: May 13 03:02:34 2025 GMT Not After : May 20 03:02:34 2025 GMT Subject: CN=6822b64a-521e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b0:e5:59:70:5d:f9:18:1f:4b:51:1c:d2:49: f8:b3:f6:00:ee:97:48:5e:65:f6:db:5c:7c:74:19: d7:4f:82:5f:40:07:ab:4e:4b:35:07:d4:9d:9e:b1: 27:2f:14:84:a5:10:07:96:7c:e4:67:87:55:d8:f0: 35:bb:95:23:9b:6f:2f:aa:48:82:fe:43:69:45:90: 03:b4:12:67:fc:47:5f:81:bd:05:02:fc:9d:7a:48: 72:7e:fe:4f:e1:db:b3:fe:2a:b4:c9:e8:83:0e:98: 2c:f6:71:28:b2:0a:c9:1c:41:48:ce:f7:ad:1a:a4: eb:57:bf:5c:03:14:13:8e:d5:57:49:5a:db:49:2f: d2:3c:c2:7e:b5:b0:86:c1:c4:3d:77:5d:4c:ca:2d: 23:a6:bd:b7:b3:09:90:17:ea:03:c5:9e:34:6a:29: e7:32:22:80:b6:ce:23:23:89:48:c2:ba:e9:2d:d9: 52:46:f1:62:36:ae:85:5e:a5:e9:7d:49:8f:fd:ac: 70:a5:fb:66:ef:a5:3f:a0:1e:b4:e6:b4:46:2a:40: 73:24:83:f9:bf:50:1b:dd:aa:28:c4:2d:a7:4c:0b: 5c:e2:d2:2d:28:6b:84:5a:ed:d1:d6:f0:b3:e1:a3: 46:76:5b:0c:d8:49:79:d0:13:57:23:b1:36:11:25: e3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:1D:01:F1:7A:22:9B:77:3F:0D:3B:78:80:49:31:E7:94:03:60:BF X509v3 Authority Key Identifier: keyid:E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:41:2d:56:d9:83:a2:a0:d6:77:d9:48:8c:b4:c3:0b:35:bd: 1c:92:bd:cc:1b:3a:5c:bd:a0:55:99:81:8f:7c:f2:9b:da:55: 61:d6:63:64:db:15:08:e3:12:c9:b2:6e:e1:79:c9:a1:de:3e: 4d:90:e0:a2:39:76:fd:0c:fa:83:5a:bf:5f:57:7a:f3:bf:22: 41:4b:24:7b:30:df:56:e5:e8:50:17:6e:89:ef:ba:e3:2b:11: 20:d6:81:c6:79:73:fa:b7:fe:64:74:bd:b2:2b:07:8a:a7:ee: b3:ec:56:20:a9:c9:7a:3f:67:db:60:ad:ac:48:c9:4a:2b:7e: 5b:24:ff:3f:5c:8e:28:86:a7:43:a7:11:cc:2a:80:82:f6:c6: 8a:66:25:7e:35:d0:91:34:98:7c:2a:cd:ca:4b:55:43:54:ff: 61:40:4c:6e:52:24:aa:29:7a:87:f9:45:03:26:48:ba:07:64: ce:7c:7f:be:a8:e5:31:c9:9b:f8:bd:77:2b:8e:9d:f1:30:ac: 36:95:25:94:ea:6f:d6:1a:8c:b3:f2:18:78:bb:cd:39:ef:c3: 43:07:5d:be:f4:a9:45:eb:53:70:a8:69:28:43:8c:e2:80:da: bd:36:7f:4b:b2:de:1d:7e:d8:41:ec:a8:47:56:c2:bf:eb:03: d6:a6:f4:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczQTkxMTAvBgNVBAUTKEUwQjQ0NThCOUFCRDMyMDM1MTczNTNFQzgwQkUzMTBD MzY1NTREQUUwHhcNMjUwNTEzMDMwMjM0WhcNMjUwNTIwMDMwMjM0WjAYMRYwFAYD VQQDEw02ODIyYjY0YS01MjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbDlWXBd+RgfS1Ec0kn4s/YA7pdIXmX221x8dBnXT4JfQAerTks1B9SdnrEn LxSEpRAHlnzkZ4dV2PA1u5Ujm28vqkiC/kNpRZADtBJn/Edfgb0FAvydekhyfv5P 4duz/iq0yeiDDpgs9nEosgrJHEFIzvetGqTrV79cAxQTjtVXSVrbSS/SPMJ+tbCG wcQ9d11Myi0jpr23swmQF+oDxZ40ainnMiKAts4jI4lIwrrpLdlSRvFiNq6FXqXp fUmP/axwpftm76U/oB605rRGKkBzJIP5v1Ab3aooxC2nTAtc4tItKGuEWu3R1vCz 4aNGdlsM2El50BNXI7E2ESXjDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwdAfF6 Ipt3Pw07eIBJMeeUA2C/MB8GA1UdIwQYMBaAFOC0RYuavTIDUXNT7IC+MQw2VU2u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNBOS9EOEVGMTNDMkZB Q0MxMUVEQjU1QUJFODdDNEY5QUUwMi80TFJGaTVxOU1nTlJjMVBzZ0w0eEREWlZU YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRMUkZpNXE5TWdOUmMxUHNnTDR4RERaVlRhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzNBOS9EOEVGMTNDMkZBQ0MxMUVEQjU1QUJFODdDNEY5QUUwMi80TFJGaTVxOU1n TlJjMVBzZ0w0eEREWlZUYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgQS1W2YOioNZ32UiMtMMLNb0ckr3MGzpcvaBVmYGPfPKb2lVh1mNk 2xUI4xLJsm7hecmh3j5NkOCiOXb9DPqDWr9fV3rzvyJBSyR7MN9W5ehQF26J77rj KxEg1oHGeXP6t/5kdL2yKweKp+6z7FYgqcl6P2fbYK2sSMlKK35bJP8/XI4ohqdD pxHMKoCC9saKZiV+NdCRNJh8Ks3KS1VDVP9hQExuUiSqKXqH+UUDJki6B2TOfH++ qOUxyZv4vXcrjp3xMKw2lSWU6m/WGoyz8hh4u80578NDB12+9KlF61NwqGkoQ4zi gNq9Nn9Lst4dfthB7KhHVsK/6wPWpvSb -----END CERTIFICATE-----Generated at Tue May 13 08:28:34 2025 by rpki-client