$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft File: 4u3kp-qXJminlbJ7qdyH9LkNqJc.mft (raw, json) Hash identifier: 9HEAnMmqkI7JPN9jT1hpjQrWl6CBphLyguw6S1LaDHA= Subject key identifier: CD:DC:57:13:AB:7B:6E:5D:94:B2:31:1F:F8:E9:C2:72:B2:D9:F8:80 Authority key identifier: E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97 Certificate issuer: /CN=A9172D91/serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897 Certificate serial: 166D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft Manifest number: 162F Signing time: Mon 12 May 2025 16:41:36 +0000 Manifest this update: Mon 12 May 2025 16:41:36 +0000 Manifest next update: Mon 19 May 2025 16:41:36 +0000 Files and hashes: 1: 4u3kp-qXJminlbJ7qdyH9LkNqJc.crl (hash: 3wa38xtAWdCMeZHW+lmyI0UOsvQpYOBnQjqruIcgC24=) 2: 854D304E0C9B11EC8433FE7AC4F9AE02.roa (hash: pak3Iy8E0gYpnvDkmWBebcI4LeVYUCjbRqic1+nKIXc=) 3: 56C8FCACE38011EFBF195482C4F9AE02.roa (hash: YpgFRa2Rul9X6oABfgOzOCogI1xE9k1rvzUQOQyIs6c=) 4: 9C79DBD23E7911EBBFFAC96BC4F9AE02.roa (hash: v+Ks9nZk5YSGi8jwz8W2ujGkO89h3nHyAUbCbrfDviU=) 5: 2357FC145F8D11EF94E7303FC4F9AE02.roa (hash: Adsar2w8VAjS3SUaIO5TAhSv+c7iSEo6NtUlziAok5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:41:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5741 (0x166d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172D91, serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897 Validity Not Before: May 12 16:41:36 2025 GMT Not After : May 19 16:41:36 2025 GMT Subject: CN=682224c0-4b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:89:32:7d:51:d3:50:a0:db:f0:ef:fe:5a:78: a8:10:44:dd:e4:e6:fa:10:06:a2:13:0f:57:12:c0: e9:a6:b9:8f:53:e5:90:e6:de:bb:15:f5:e0:7a:a5: 73:0d:42:bb:22:16:13:ac:f7:88:d2:67:1d:20:4d: c1:dd:6c:ad:1a:ba:89:04:8c:9c:4c:1a:20:ad:5a: 6b:00:5f:36:67:a3:e9:48:89:14:da:be:34:8d:4c: 71:94:ab:13:59:2c:6d:13:bd:93:5e:4c:f6:c1:c6: e8:69:c0:35:c2:e8:48:22:45:65:cb:26:55:5e:fb: 3c:5a:9f:bd:c5:87:29:06:40:2d:1b:9a:c7:83:10: e7:58:90:bc:6d:40:31:9a:41:79:19:97:9f:c8:12: 48:47:0d:60:e2:c2:de:de:ab:c5:0f:d4:d9:ed:e3: c5:0e:78:a9:e8:91:f7:32:7b:81:17:49:01:00:cd: 9f:17:3f:2f:6d:7c:24:ef:95:b4:86:fb:7b:d8:50: 80:d4:de:b5:07:5d:fe:42:61:bc:ea:f3:fc:03:bd: a8:7b:44:75:a6:01:31:74:75:d6:2e:09:cc:e9:38: 18:8c:c0:47:58:a2:82:2d:fc:b2:b5:7d:5e:f1:93: 4a:c6:e2:b5:0a:72:84:bc:e4:91:84:2d:92:e4:34: 38:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DC:57:13:AB:7B:6E:5D:94:B2:31:1F:F8:E9:C2:72:B2:D9:F8:80 X509v3 Authority Key Identifier: keyid:E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:18:64:d4:ce:17:3c:e2:44:0d:62:8f:bb:99:cb:8c:89:07: a8:d2:70:4a:83:45:85:8b:11:62:d6:f6:a4:52:85:5a:d2:35: a4:55:08:07:44:ee:87:f2:e1:bc:40:9e:ad:5d:be:c3:94:12: cd:cb:c0:c9:35:02:7a:43:7d:cf:d1:09:44:5f:2c:a3:ac:fe: 07:72:95:f1:97:15:bf:86:80:b7:af:83:bf:6f:ca:f6:fc:56: a0:cf:98:ea:9f:34:8d:2e:03:2a:19:ef:b8:cb:00:b5:f3:68: fd:cc:fa:e5:ae:8d:2e:47:0d:78:0a:96:6b:53:00:42:26:3d: 84:db:70:4c:55:ec:80:d5:2d:c9:c2:e9:16:61:f4:a9:cb:96: 2b:0e:14:35:ce:91:d0:1b:44:6b:c1:ef:52:47:21:65:77:01: 1c:2a:f1:a7:4e:a1:33:b9:1f:48:76:bb:6b:b3:ae:b5:3c:5f: db:ed:85:1f:92:62:87:0e:04:b1:f4:09:e2:07:cc:0d:3c:4a: de:a6:08:20:95:87:22:0f:cf:e3:56:f1:72:e0:c1:98:96:6c: 29:54:f5:1c:08:02:ed:28:e2:51:fa:87:5f:b1:d5:04:9d:e3: ad:dd:d4:f1:26:bf:3b:02:a0:df:09:fc:90:4f:8a:86:15:0f: aa:cb:40:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJEOTExMTAvBgNVBAUTKEUyRURFNEE3RUE5NzI2NjhBNzk1QjI3QkE5REM4N0Y0 QjkwREE4OTcwHhcNMjUwNTEyMTY0MTM2WhcNMjUwNTE5MTY0MTM2WjAYMRYwFAYD VQQDEw02ODIyMjRjMC00YjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYkyfVHTUKDb8O/+WnioEETd5Ob6EAaiEw9XEsDpprmPU+WQ5t67FfXgeqVz DUK7IhYTrPeI0mcdIE3B3WytGrqJBIycTBogrVprAF82Z6PpSIkU2r40jUxxlKsT WSxtE72TXkz2wcboacA1wuhIIkVlyyZVXvs8Wp+9xYcpBkAtG5rHgxDnWJC8bUAx mkF5GZefyBJIRw1g4sLe3qvFD9TZ7ePFDnip6JH3MnuBF0kBAM2fFz8vbXwk75W0 hvt72FCA1N61B13+QmG86vP8A72oe0R1pgExdHXWLgnM6TgYjMBHWKKCLfyytX1e 8ZNKxuK1CnKEvOSRhC2S5DQ4lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3cVxOr e25dlLIxH/jpwnKy2fiAMB8GA1UdIwQYMBaAFOLt5KfqlyZop5Wye6nch/S5DaiX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkQ5MS9FQTY3MkE1QzE5 RTcxMUU4QjI0M0Q1N0NDNEY5QUUwMi80dTNrcC1xWEptaW5sYko3cWR5SDlMa05x SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR1M2twLXFYSm1pbmxiSjdxZHlIOUxrTnFKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkQ5MS9FQTY3MkE1QzE5RTcxMUU4QjI0M0Q1N0NDNEY5QUUwMi80dTNrcC1xWEpt aW5sYko3cWR5SDlMa05xSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEGGTUzhc84kQNYo+7mcuMiQeo0nBKg0WFixFi1vakUoVa0jWkVQgH RO6H8uG8QJ6tXb7DlBLNy8DJNQJ6Q33P0QlEXyyjrP4HcpXxlxW/hoC3r4O/b8r2 /Fagz5jqnzSNLgMqGe+4ywC182j9zPrlro0uRw14CpZrUwBCJj2E23BMVeyA1S3J wukWYfSpy5YrDhQ1zpHQG0Rrwe9SRyFldwEcKvGnTqEzuR9Idrtrs661PF/b7YUf kmKHDgSx9AniB8wNPErepggglYciD8/jVvFy4MGYlmwpVPUcCALtKOJR+odfsdUE neOt3dTxJr87AqDfCfyQT4qGFQ+qy0C0 -----END CERTIFICATE-----Generated at Tue May 13 08:00:07 2025 by rpki-client