$ rpki-client -vvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft File: 4rutOTFYoGdMaUnsO4oLc_hgKaI.mft (raw, json) Hash identifier: oQTV/BMoFFK4arO9Eou5Ltjz+OI+jhumUERi8adhC80= Subject key identifier: 84:B9:83:71:F9:2C:B6:D0:EF:23:3D:39:51:02:62:56:52:D2:C0:7A Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2 Certificate issuer: /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2 Certificate serial: 0263 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft Manifest number: 0259 Signing time: Sun 11 May 2025 01:20:49 +0000 Manifest this update: Sun 11 May 2025 01:20:48 +0000 Manifest next update: Sun 18 May 2025 01:20:48 +0000 Files and hashes: 1: 4rutOTFYoGdMaUnsO4oLc_hgKaI.crl (hash: dclEjMSfmtB9Ac6HIAdE7CA+P3V2NTvFcs6BIUB6olc=) 2: BBF0DD5216CD11EDBB046C79C4F9AE02.roa (hash: axhlzcql8Um5s2iVqGj/BuPhDZVy8siOPCHeHdpqbOU=) 3: EC75126616CA11ED8E290A59C4F9AE02.roa (hash: ldX/DKDOg9xZhESj3T5OZ1Y87w44jU1f3a2RytTmEgo=) 4: 4EEAF1DAE96211ED9A14B935C4F9AE02.roa (hash: RgIHOi6o2CyuImHKbYCkxFcAJ9v5chcNqvLkjQHCgqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 611 (0x263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156740, serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2 Validity Not Before: May 11 01:20:48 2025 GMT Not After : May 18 01:20:48 2025 GMT Subject: CN=681ffb70-ad33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:22:c6:86:80:89:a4:ec:5e:9b:72:d0:d6:86: 1b:19:e1:ca:fd:86:3e:f8:fa:24:68:e6:5a:fd:e1: 26:02:0d:d2:44:3f:82:b7:a0:65:41:ed:28:f8:e6: 1c:6a:58:3f:94:78:bc:58:db:c8:e6:e4:84:a0:3e: 67:27:06:0c:df:56:f4:dc:8a:e5:e5:77:8d:a8:7d: d0:e3:ea:f4:38:90:47:56:4b:fa:68:29:fd:37:b6: b7:50:32:54:8e:42:2d:be:5a:8c:b9:cf:be:72:5c: 57:47:13:3d:5a:04:ae:7e:6b:ba:e6:13:31:c4:00: 6c:2c:a8:9d:05:4f:37:d9:b9:a8:3d:e1:bb:0b:56: f1:bc:d7:9b:26:b8:c7:6f:00:8d:a1:00:9e:4e:f7: 32:f9:07:5f:d6:21:78:76:8e:27:20:21:ba:8c:2f: ac:fe:8e:81:57:98:28:ee:af:1c:76:69:39:e2:64: 5c:1c:ef:c0:5e:e0:7a:92:44:ae:49:ee:c4:04:88: 84:a1:19:ca:d3:0e:61:a6:12:27:9b:76:12:1b:76: 45:bf:8d:b5:33:13:1c:56:56:49:44:9f:db:13:7c: 35:c6:2b:ca:2e:d0:02:43:1c:00:f5:66:a3:49:35: 6d:10:4e:e4:d9:c3:00:61:1c:35:f8:10:e1:ca:46: 42:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B9:83:71:F9:2C:B6:D0:EF:23:3D:39:51:02:62:56:52:D2:C0:7A X509v3 Authority Key Identifier: keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:9d:c4:2b:56:0d:2f:df:13:a7:99:43:f4:1e:07:55:87:e8: 0e:96:79:3f:bb:85:56:c8:3d:1b:9f:b4:08:fb:da:73:55:d5: 08:af:85:17:8d:0b:81:59:d1:3d:9c:66:5f:47:85:e2:ae:fc: ec:18:8a:a5:ab:70:c5:80:e0:ef:09:1d:25:f9:49:7d:2e:6d: 52:6a:13:3c:3e:f8:85:7f:9f:5b:fb:3a:91:3a:27:c8:f1:6d: 68:3e:74:50:1a:70:04:76:78:8d:24:78:92:25:65:52:cb:f1: 1d:fa:b5:49:9e:3f:6a:e7:18:c7:a8:5b:99:82:22:bc:fb:43: bf:ea:81:30:b5:af:f4:f2:8a:67:66:57:bc:0c:39:bb:2f:d8: ab:db:83:48:6e:cc:3e:99:e6:d5:a0:42:b3:1e:7f:43:a3:f2: e7:83:25:5b:87:bc:d6:e4:78:11:f3:9c:6a:c4:1d:09:46:fb: 2e:3b:79:14:e1:f0:10:62:dc:c1:62:e9:25:89:29:15:2c:c9: 43:8f:d9:88:08:33:49:0e:06:3f:be:a0:04:bc:94:7d:18:dc: f1:28:72:70:f5:ee:27:14:42:d2:7e:71:a2:93:3b:06:89:df: 84:2c:ec:79:46:65:d5:08:a6:7f:c8:15:b6:ac:38:a9:4f:aa: 5b:62:9d:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3NDAxMTAvBgNVBAUTKEUyQkJBRDM5MzE1OEEwNjc0QzY5NDlFQzNCOEEwQjcz Rjg2MDI5QTIwHhcNMjUwNTExMDEyMDQ4WhcNMjUwNTE4MDEyMDQ4WjAYMRYwFAYD VQQDEw02ODFmZmI3MC1hZDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyiLGhoCJpOxem3LQ1oYbGeHK/YY++PokaOZa/eEmAg3SRD+Ct6BlQe0o+OYc alg/lHi8WNvI5uSEoD5nJwYM31b03Irl5XeNqH3Q4+r0OJBHVkv6aCn9N7a3UDJU jkItvlqMuc++clxXRxM9WgSufmu65hMxxABsLKidBU832bmoPeG7C1bxvNebJrjH bwCNoQCeTvcy+Qdf1iF4do4nICG6jC+s/o6BV5go7q8cdmk54mRcHO/AXuB6kkSu Se7EBIiEoRnK0w5hphInm3YSG3ZFv421MxMcVlZJRJ/bE3w1xivKLtACQxwA9Waj STVtEE7k2cMAYRw1+BDhykZCTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIS5g3H5 LLbQ7yM9OVECYlZS0sB6MB8GA1UdIwQYMBaAFOK7rTkxWKBnTGlJ7DuKC3P4YCmi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njc0MC8zNTI4QjBDQzE2 QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9HZE1hVW5zTzRvTGNfaGdL YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRydXRPVEZZb0dkTWFVbnNPNG9MY19oZ0thSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njc0MC8zNTI4QjBDQzE2QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9H ZE1hVW5zTzRvTGNfaGdLYUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGncQrVg0v3xOnmUP0HgdVh+gOlnk/u4VWyD0bn7QI+9pzVdUIr4UX jQuBWdE9nGZfR4XirvzsGIqlq3DFgODvCR0l+Ul9Lm1SahM8PviFf59b+zqROifI 8W1oPnRQGnAEdniNJHiSJWVSy/Ed+rVJnj9q5xjHqFuZgiK8+0O/6oEwta/08opn Zle8DDm7L9ir24NIbsw+mebVoEKzHn9Do/LngyVbh7zW5HgR85xqxB0JRvsuO3kU 4fAQYtzBYukliSkVLMlDj9mICDNJDgY/vqAEvJR9GNzxKHJw9e4nFELSfnGikzsG id+ELOx5RmXVCKZ/yBW2rDipT6pbYp0b -----END CERTIFICATE-----Generated at Mon May 12 13:35:00 2025 by rpki-client