$ rpki-client -vvf rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft File: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft (raw, json) Hash identifier: Oq0IPc3a0+Yy7h4GIVB9e8UCrvf2rCsOnNVbqgoF6dU= Subject key identifier: A2:71:AC:81:48:CC:4B:F8:E5:BB:AB:B7:3D:C4:1E:58:87:F7:29:DA Authority key identifier: E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 Certificate issuer: /CN=A9174FD4/serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Certificate serial: 091F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft Manifest number: 091F Signing time: Fri 16 May 2025 20:34:31 +0000 Manifest this update: Fri 16 May 2025 20:34:30 +0000 Manifest next update: Fri 23 May 2025 20:34:30 +0000 Files and hashes: 1: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl (hash: pt3YCXoAvYDqdfRt7qqpGs/oFTPABI/rhX7kYj4MpI0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 20:34:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2335 (0x91f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174FD4, serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Validity Not Before: May 16 20:34:30 2025 GMT Not After : May 23 20:34:30 2025 GMT Subject: CN=6827a157-b690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:db:ed:18:f5:ca:20:21:91:98:db:e5:b7:5c: b8:4a:de:5d:22:d0:31:99:1a:27:31:a3:76:f4:09: c4:2b:01:14:ef:44:8a:74:80:83:c3:c3:01:63:bf: ff:9e:18:a6:99:85:75:7e:ac:d9:78:2d:f1:90:dc: 1e:be:d6:3a:f4:b7:7f:8b:36:f6:a6:b8:a4:27:ef: 79:39:42:9f:9d:56:53:6c:f0:03:a4:cd:49:4e:50: 56:8a:97:e0:da:53:3b:43:ea:13:71:ad:64:f5:9d: 62:a7:fc:66:d3:3d:14:7f:53:32:b0:3c:26:d8:88: e3:32:ac:42:c3:20:1b:d6:35:80:b5:7d:e1:15:8a: af:2d:ec:ed:3b:c8:af:83:d1:db:e8:8f:00:2c:38: c2:72:b2:b4:06:37:76:6e:ae:2a:2c:ef:63:55:58: 6f:58:7a:97:41:18:43:96:a3:98:1e:25:80:41:26: 9c:89:d5:c7:2b:b5:62:55:08:68:6b:3d:53:07:92: 7e:37:62:bc:42:5d:99:ab:d9:b3:7a:25:35:d7:52: 97:8d:87:24:ed:3b:3f:b4:a7:92:d9:e2:3a:9c:ec: dc:d9:f3:89:2b:6a:cc:60:8e:68:ce:1b:87:0e:00: c1:71:5a:36:6b:7e:34:b1:34:a3:f0:74:59:e0:89: 1b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:71:AC:81:48:CC:4B:F8:E5:BB:AB:B7:3D:C4:1E:58:87:F7:29:DA X509v3 Authority Key Identifier: keyid:E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:0c:3d:8b:bd:4a:38:e2:e4:bf:7a:6f:b5:a1:69:c1:56:36: ef:b2:a9:9e:3f:6c:82:a0:f6:d7:02:8e:9f:63:50:86:65:5b: d6:57:63:28:b1:dc:e2:c4:ca:b8:2e:b9:66:b6:5a:f2:26:3a: 35:18:72:fa:c3:08:05:8f:75:b9:e3:a9:30:15:89:29:aa:ca: 3a:a6:e9:00:ab:50:01:13:62:0b:3a:1d:93:13:81:4c:1f:60: 9b:80:2a:3d:61:58:01:88:f7:a5:8a:82:3d:f2:2c:8f:ca:21: 1f:0c:0b:d3:ec:2a:0e:5d:9e:64:38:a9:f3:93:84:ed:d7:ea: 5d:13:ee:6d:53:79:5a:d2:6f:9b:44:be:9e:c6:d7:57:70:b4: b3:bf:1f:06:e4:46:5a:72:51:72:81:25:e3:29:bf:8a:87:10: e6:80:3d:33:6f:85:6e:6d:5f:a7:e4:9e:84:28:ed:ff:d3:42: 19:53:0e:35:b4:22:5f:55:09:c3:6e:f0:63:44:48:2d:61:23: a0:a7:15:e4:e3:db:42:0c:11:47:b4:11:6c:51:d6:db:bd:24: 09:d9:2f:99:6f:c5:3d:8c:78:f5:63:d5:0c:86:a4:ff:03:40: 21:ed:45:84:d5:bc:27:89:63:1a:dc:c3:b1:9b:62:f1:a7:60: 71:5d:ef:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRGRDQxMTAvBgNVBAUTKEUxQzgyN0MzNDg5NzQ1RTM1NkU5MEU4QjYxQTNGNDQ3 RDFEMTUzMTEwHhcNMjUwNTE2MjAzNDMwWhcNMjUwNTIzMjAzNDMwWjAYMRYwFAYD VQQDEw02ODI3YTE1Ny1iNjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA49vtGPXKICGRmNvlt1y4St5dItAxmRonMaN29AnEKwEU70SKdICDw8MBY7// nhimmYV1fqzZeC3xkNwevtY69Ld/izb2prikJ+95OUKfnVZTbPADpM1JTlBWipfg 2lM7Q+oTca1k9Z1ip/xm0z0Uf1MysDwm2IjjMqxCwyAb1jWAtX3hFYqvLeztO8iv g9Hb6I8ALDjCcrK0Bjd2bq4qLO9jVVhvWHqXQRhDlqOYHiWAQSacidXHK7ViVQho az1TB5J+N2K8Ql2Zq9mzeiU111KXjYck7Ts/tKeS2eI6nOzc2fOJK2rMYI5ozhuH DgDBcVo2a340sTSj8HRZ4IkbfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJxrIFI zEv45burtz3EHliH9ynaMB8GA1UdIwQYMBaAFOHIJ8NIl0XjVukOi2Gj9EfR0VMR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEZENC80MEMwMTNGODlG MTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJlTlc2UTZMWWFQMFI5SFJV eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRjZ253MGlYUmVOVzZRNkxZYVAwUjlIUlV4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEZENC80MEMwMTNGODlGMTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJl Tlc2UTZMWWFQMFI5SFJVeEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAODD2LvUo44uS/em+1oWnBVjbvsqmeP2yCoPbXAo6fY1CGZVvWV2Mo sdzixMq4LrlmtlryJjo1GHL6wwgFj3W546kwFYkpqso6pukAq1ABE2ILOh2TE4FM H2CbgCo9YVgBiPelioI98iyPyiEfDAvT7CoOXZ5kOKnzk4Tt1+pdE+5tU3la0m+b RL6extdXcLSzvx8G5EZaclFygSXjKb+KhxDmgD0zb4VubV+n5J6EKO3/00IZUw41 tCJfVQnDbvBjREgtYSOgpxXk49tCDBFHtBFsUdbbvSQJ2S+Zb8U9jHj1Y9UMhqT/ A0Ah7UWE1bwniWMa3MOxm2Lxp2BxXe+X -----END CERTIFICATE-----Generated at Sat May 17 00:06:26 2025 by rpki-client