$ rpki-client -vvf rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft File: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft (raw, json) Hash identifier: /yy2TUwrqEu/3zjA/653FiOJfQQ9C/uoiD7QkZxYVYo= Subject key identifier: 04:CF:0B:5B:8D:9E:F1:FF:18:BC:BC:96:48:BE:B2:EB:1F:55:03:3B Authority key identifier: E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C Certificate issuer: /CN=A913B0D6/serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C Certificate serial: 079B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft Manifest number: 0794 Signing time: Wed 14 May 2025 21:25:45 +0000 Manifest this update: Wed 14 May 2025 21:25:44 +0000 Manifest next update: Wed 21 May 2025 21:25:44 +0000 Files and hashes: 1: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl (hash: Ml9ikd379xgr/zfSi+XKq+bd+U4VmIN/aS60mpAtDOQ=) 2: A7501D94086B11EBB0FF1A43C4F9AE02.roa (hash: 04Yyac0X4yooHW+vSmS1SL3uVYlQ7JtEGZ1zzlU0iN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 21:25:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1947 (0x79b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B0D6, serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C Validity Not Before: May 14 21:25:44 2025 GMT Not After : May 21 21:25:44 2025 GMT Subject: CN=68250a59-cc22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:73:08:df:69:f8:bc:99:e9:62:86:ae:e2:1b: f2:13:80:68:43:13:9e:a7:a2:31:5d:23:b5:10:0b: 1a:76:0c:0b:a0:32:dd:05:0d:18:37:3c:f1:f2:46: 2d:3e:d9:2a:76:8c:7b:7b:d5:74:27:18:a6:57:9b: 77:55:5c:00:94:6b:86:97:14:a5:2b:02:19:4e:fe: 9b:51:b0:66:e1:93:7c:d1:25:87:35:97:c0:f0:f3: 8a:aa:d3:26:a6:64:ac:0a:09:af:d6:b0:e5:a8:e3: 87:b8:d6:58:31:8c:6d:63:29:1b:0e:df:9d:98:35: 8e:75:c0:99:d5:b2:1b:b3:c3:1e:c9:0d:b8:83:3d: ed:08:3c:40:1e:81:d3:a9:df:40:ef:64:85:cc:dc: 1b:de:47:b6:4b:e7:88:5c:12:18:78:10:e1:b3:9e: 66:c3:1d:40:d8:03:ad:9c:3c:9e:4c:4d:46:87:80: 84:f9:33:77:ec:7b:07:5e:12:a7:7a:94:bb:e0:b9: 84:ff:1f:94:97:62:89:b1:10:90:0a:ab:d5:8f:a2: 0b:bf:b2:d7:a4:51:24:c0:e5:51:fb:53:48:ba:32: 52:61:06:e3:d6:dc:f8:ef:ba:83:f4:3c:6c:3f:ed: 9a:dc:5f:48:c9:a4:3f:08:09:4c:97:bf:f5:4f:4e: 39:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CF:0B:5B:8D:9E:F1:FF:18:BC:BC:96:48:BE:B2:EB:1F:55:03:3B X509v3 Authority Key Identifier: keyid:E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ad:c1:aa:70:0d:96:42:36:59:8d:95:2c:7b:81:d5:67:a4: 75:23:85:08:c9:92:41:07:ff:28:1d:04:37:a1:3b:64:e6:4b: 06:70:88:98:6a:48:9f:5f:1d:cf:a2:09:ca:7d:7b:e1:35:4b: 22:79:0b:fa:34:65:77:12:7a:75:88:f6:e2:e1:71:95:3e:85: 25:a8:df:ae:ae:b7:4c:7c:63:17:b3:f9:a1:29:46:88:84:40: 4d:23:37:46:d4:16:e0:5c:a7:4d:cc:8d:c8:e3:af:38:83:1a: 18:65:c8:35:3f:d2:5c:a7:d3:7c:84:86:0f:eb:e0:de:d9:eb: 52:cf:f0:00:1b:48:a9:04:ff:42:9b:3d:fd:30:ec:8a:7a:30: 5d:62:ec:73:30:3a:77:77:66:46:25:4a:74:52:26:6b:cb:95: 10:ec:3d:05:4b:26:93:4c:08:ae:49:d5:c6:ec:8e:19:21:68: 1e:30:73:d4:82:8a:50:7c:01:f2:9b:6d:55:e8:e1:46:bb:fe: 6d:84:d9:6d:c6:f5:54:34:27:46:ff:6e:ea:14:cb:31:3e:31: a6:5d:f3:dc:4c:1c:e9:bc:be:d9:44:3e:02:ed:f4:73:66:8b: 49:f1:b8:9a:0a:8f:80:d2:42:db:c8:e3:3c:9a:9b:e9:a5:67: 21:96:ca:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IwRDYxMTAvBgNVBAUTKEUyRDgxM0Q2NkNFNTBERDkzOEZDM0E1MzJEQjhFREUy QzVCQTc5NUMwHhcNMjUwNTE0MjEyNTQ0WhcNMjUwNTIxMjEyNTQ0WjAYMRYwFAYD VQQDEw02ODI1MGE1OS1jYzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3MI32n4vJnpYoau4hvyE4BoQxOep6IxXSO1EAsadgwLoDLdBQ0YNzzx8kYt Ptkqdox7e9V0JximV5t3VVwAlGuGlxSlKwIZTv6bUbBm4ZN80SWHNZfA8POKqtMm pmSsCgmv1rDlqOOHuNZYMYxtYykbDt+dmDWOdcCZ1bIbs8MeyQ24gz3tCDxAHoHT qd9A72SFzNwb3ke2S+eIXBIYeBDhs55mwx1A2AOtnDyeTE1Gh4CE+TN37HsHXhKn epS74LmE/x+Ul2KJsRCQCqvVj6ILv7LXpFEkwOVR+1NIujJSYQbj1tz477qD9Dxs P+2a3F9IyaQ/CAlMl7/1T045nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATPC1uN nvH/GLy8lki+susfVQM7MB8GA1UdIwQYMBaAFOLYE9Zs5Q3ZOPw6Uy247eLFunlc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjBENi84OUEwRTdBMjA4 NkExMUVCOURGMzM4NDJDNEY5QUUwMi80dGdUMW16bERkazRfRHBUTGJqdDRzVzZl VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR0Z1QxbXpsRGRrNF9EcFRMYmp0NHNXNmVWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjBENi84OUEwRTdBMjA4NkExMUVCOURGMzM4NDJDNEY5QUUwMi80dGdUMW16bERk azRfRHBUTGJqdDRzVzZlVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtrcGqcA2WQjZZjZUse4HVZ6R1I4UIyZJBB/8oHQQ3oTtk5ksGcIiY akifXx3PognKfXvhNUsieQv6NGV3Enp1iPbi4XGVPoUlqN+urrdMfGMXs/mhKUaI hEBNIzdG1BbgXKdNzI3I4684gxoYZcg1P9Jcp9N8hIYP6+De2etSz/AAG0ipBP9C mz39MOyKejBdYuxzMDp3d2ZGJUp0UiZry5UQ7D0FSyaTTAiuSdXG7I4ZIWgeMHPU gopQfAHym21V6OFGu/5thNltxvVUNCdG/27qFMsxPjGmXfPcTBzpvL7ZRD4C7fRz ZotJ8biaCo+A0kLbyOM8mpvppWchlsoz -----END CERTIFICATE-----Generated at Thu May 15 19:12:33 2025 by rpki-client