$ rpki-client -vvf rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft File: ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft (raw, json) Hash identifier: eQbuEgMTbPyF0hTUkzu8gw8QfflURJllhWQfr754kP4= Subject key identifier: 46:90:23:8C:5F:AE:AE:84:96:AC:1C:F5:99:84:72:66:B8:D5:E0:CA Authority key identifier: 7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74 Certificate issuer: /CN=A91803B8/serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74 Certificate serial: 0ABE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft Manifest number: 0AB1 Signing time: Mon 12 May 2025 19:22:23 +0000 Manifest this update: Mon 12 May 2025 19:22:22 +0000 Manifest next update: Mon 19 May 2025 19:22:22 +0000 Files and hashes: 1: ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl (hash: 5krg9kW2dbrO7NPD8Nq5wiLmWE58QgxMo4H+gzWu9wU=) 2: 378397D8539A11EAAA519470C4F9AE02.roa (hash: xe07Bh/37lddOkgu4nWtJeTBqHbyu/j2lK7PTJ6ZiCs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2750 (0xabe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803B8, serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74 Validity Not Before: May 12 19:22:22 2025 GMT Not After : May 19 19:22:22 2025 GMT Subject: CN=68224a6f-a931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:52:d7:f6:b6:50:a9:bf:24:bd:4b:b4:e8:fd: a1:4f:f9:8b:ef:7f:dd:5e:17:9d:6f:3d:59:7f:26: 29:2b:42:28:97:57:f3:cf:2a:13:98:3c:0c:6d:78: 16:ee:f9:20:17:b9:1c:4c:5a:af:b2:db:4a:6a:90: f6:1b:b1:23:ec:44:83:93:4d:10:16:fa:66:40:9a: c1:26:e9:ce:a1:ac:0c:19:52:24:20:c0:03:2a:fb: 37:5a:23:6e:1b:83:d0:25:cc:b9:a7:9b:7f:1a:3a: 3a:47:09:67:60:c2:79:60:11:1b:89:78:e1:fc:e9: 8d:a0:fa:b5:52:96:76:42:7b:87:f2:b6:f4:40:b2: 9b:5d:d4:99:92:41:82:c6:2b:ee:f1:fd:8f:28:73: 93:39:38:6d:e5:d4:d8:29:29:b1:e0:f5:73:25:4a: fb:d8:68:b6:a7:db:8d:da:df:05:67:73:77:d0:ac: ef:4b:99:df:83:ff:35:5a:24:9d:7f:de:36:18:a0: 5e:bd:a7:c8:b5:91:eb:a5:36:1d:35:88:65:7e:61: 61:41:83:f3:89:b5:55:55:38:d3:d0:eb:3c:c8:8f: 58:7d:ce:a9:0c:6a:be:6e:2a:98:73:6d:7c:bf:8f: 1d:9f:68:6f:86:8b:0a:3b:d6:80:34:6c:a3:8b:cc: 61:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:90:23:8C:5F:AE:AE:84:96:AC:1C:F5:99:84:72:66:B8:D5:E0:CA X509v3 Authority Key Identifier: keyid:7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:99:05:b7:c8:4b:01:b6:9b:ab:6e:ca:dd:ba:b7:00:06:af: 1b:44:cf:77:8d:6a:fc:38:5b:9c:63:e1:49:6a:95:0a:a4:ac: d6:85:ce:3a:d4:ea:f5:fe:4d:2f:d5:17:d5:fb:cd:c6:34:f2: 8c:99:8a:be:02:5c:a0:4e:63:5f:89:d5:ce:76:fc:8b:ce:3b: 2f:15:25:6c:31:62:e3:66:c8:2d:a5:00:6e:15:a0:9e:a0:56: b8:61:41:47:27:a8:1a:8a:3b:ba:0d:de:dd:82:ee:d7:c5:5e: 01:5a:ff:2b:ad:55:36:66:43:d4:7f:3a:f8:c5:ea:cd:11:41: 4c:d2:2d:fe:69:96:22:b2:fe:19:33:c7:53:5e:0d:2f:ad:50: 57:14:17:2c:36:8d:80:7d:44:b0:ff:dc:4c:2b:cd:bc:51:d5: 94:31:e2:fe:6d:bf:ce:21:b4:2e:90:b2:c0:b5:cd:aa:bf:2d: ed:66:64:77:fd:4b:0d:b4:c5:a6:17:f7:d0:a0:cb:9b:f7:d6: 87:ef:40:62:77:12:b0:87:37:9f:f1:55:9a:23:03:79:36:eb: dc:b9:b4:b6:d0:bc:35:ef:28:e6:e8:22:f6:c1:21:b1:e4:01: de:1b:b9:7a:7f:14:1d:e0:4e:89:f7:56:5f:2d:cc:37:2b:e0: f1:1e:df:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzQjgxMTAvBgNVBAUTKDdFREUyNzY1MzY1NDE0RUE1QzFEOUU0OUYxNzg4RDA5 NEVBQkZCNzQwHhcNMjUwNTEyMTkyMjIyWhcNMjUwNTE5MTkyMjIyWjAYMRYwFAYD VQQDEw02ODIyNGE2Zi1hOTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1LX9rZQqb8kvUu06P2hT/mL73/dXhedbz1ZfyYpK0Iol1fzzyoTmDwMbXgW 7vkgF7kcTFqvsttKapD2G7Ej7ESDk00QFvpmQJrBJunOoawMGVIkIMADKvs3WiNu G4PQJcy5p5t/Gjo6RwlnYMJ5YBEbiXjh/OmNoPq1UpZ2QnuH8rb0QLKbXdSZkkGC xivu8f2PKHOTOTht5dTYKSmx4PVzJUr72Gi2p9uN2t8FZ3N30KzvS5nfg/81WiSd f942GKBevafItZHrpTYdNYhlfmFhQYPzibVVVTjT0Os8yI9Yfc6pDGq+biqYc218 v48dn2hvhosKO9aANGyji8xhCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEaQI4xf rq6Elqwc9ZmEcma41eDKMB8GA1UdIwQYMBaAFH7eJ2U2VBTqXB2eSfF4jQlOq/t0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNCOC8zRDZCNTkzNDUz OTkxMUVBOUVBRDRCNkZDNEY5QUUwMi9mdDRuWlRaVUZPcGNIWjVKOFhpTkNVNnIt M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0NG5aVFpVRk9wY0haNUo4WGlOQ1U2ci0zUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDNCOC8zRDZCNTkzNDUzOTkxMUVBOUVBRDRCNkZDNEY5QUUwMi9mdDRuWlRaVUZP cGNIWjVKOFhpTkNVNnItM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdmQW3yEsBtpurbsrdurcABq8bRM93jWr8OFucY+FJapUKpKzWhc46 1Or1/k0v1RfV+83GNPKMmYq+AlygTmNfidXOdvyLzjsvFSVsMWLjZsgtpQBuFaCe oFa4YUFHJ6gaiju6Dd7dgu7XxV4BWv8rrVU2ZkPUfzr4xerNEUFM0i3+aZYisv4Z M8dTXg0vrVBXFBcsNo2AfUSw/9xMK828UdWUMeL+bb/OIbQukLLAtc2qvy3tZmR3 /UsNtMWmF/fQoMub99aH70BidxKwhzef8VWaIwN5NuvcubS20Lw17yjm6CL2wSGx 5AHeG7l6fxQd4E6J91ZfLcw3K+DxHt/y -----END CERTIFICATE-----Generated at Wed May 14 14:10:28 2025 by rpki-client