$ rpki-client -vvf rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft File: 4NVEW4CxgX9i88ZKqMj21-E64QM.mft (raw, json) Hash identifier: h/fKjdaNP7ycXOhvy+b8W4q2NssO3DCdy5uOuv6Z8SE= Subject key identifier: 2A:E4:A6:BF:3C:A1:E7:E1:CF:2C:66:8F:91:A1:78:DB:1A:D9:B5:C2 Authority key identifier: E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03 Certificate issuer: /CN=A918E469/serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103 Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft Manifest number: 01AA Signing time: Sat 17 May 2025 02:53:46 +0000 Manifest this update: Sat 17 May 2025 02:53:45 +0000 Manifest next update: Sat 24 May 2025 02:53:45 +0000 Files and hashes: 1: 4NVEW4CxgX9i88ZKqMj21-E64QM.crl (hash: Ht6gUm30HJK+9jMBFMJ/1vThg5KirE0DmxGBPh+qWwo=) 2: D3CE9058A5AD11ED95DBC66FC4F9AE02.roa (hash: V89TVKMG86FWKeqAC80eNKWm9QeM+Xm489cfb+DFW7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 02:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E469, serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103 Validity Not Before: May 17 02:53:45 2025 GMT Not After : May 24 02:53:45 2025 GMT Subject: CN=6827fa39-489a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e9:57:7d:67:0c:a8:dd:17:ac:52:6e:35:71: 6f:66:09:56:d8:40:4e:a8:6c:0d:68:b3:1b:3a:5f: 59:f5:02:52:ec:bd:1f:19:64:d5:61:81:cd:a9:58: 9a:20:f2:51:89:15:84:5d:5a:5d:9d:39:6d:c4:c6: c2:70:4d:4e:4b:98:0a:29:a3:e7:f1:62:13:d3:44: 7b:69:a3:5e:30:f2:2c:34:a8:5a:f0:c5:5b:84:0a: d1:52:6a:b5:79:b9:f6:db:b0:43:3c:bc:61:89:a4: 5e:98:4b:64:71:14:ca:7c:8c:fe:58:e7:b9:14:c3: d4:73:6c:d7:70:8f:83:07:76:6a:d4:b3:42:a3:e6: c7:13:3b:e9:5b:bc:7c:d2:9a:a0:73:6e:d8:14:0d: 1a:68:09:b0:ad:c7:ac:69:3c:5b:29:43:f1:b6:15: 2e:41:b8:b3:02:7d:c4:43:0e:29:65:02:4f:05:89: 78:46:11:7f:06:5e:5c:a7:f9:32:e0:76:a7:88:f5: 09:03:7c:be:52:fe:43:46:1d:f9:c7:07:53:f9:1a: 1c:16:7e:f3:33:37:36:4f:3b:0a:60:e6:10:c9:4a: 93:2f:35:94:66:77:d7:8d:5f:ac:eb:76:32:21:b3: c4:23:8d:03:15:cd:4a:c4:23:14:9e:d5:e5:1a:03: 02:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E4:A6:BF:3C:A1:E7:E1:CF:2C:66:8F:91:A1:78:DB:1A:D9:B5:C2 X509v3 Authority Key Identifier: keyid:E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:40:d1:dd:66:72:91:8d:f3:ae:30:32:30:da:91:45:d2:66: 01:60:df:53:43:15:19:c6:2e:45:04:59:28:22:97:ff:6c:a9: 68:ee:80:26:6b:f1:75:af:d3:3b:21:96:26:92:e5:ad:b3:80: dd:92:fa:09:36:8a:0b:ee:1e:f3:42:34:2b:3c:0e:fc:d5:50: e9:43:e3:27:0c:9d:38:7e:75:f2:1d:64:43:98:15:53:2d:e0: 90:e1:b1:32:5d:50:a9:ca:d3:d2:d0:79:1b:64:4a:2a:98:9a: a3:f0:5e:f5:c4:9d:53:b7:8e:e3:5f:9d:ea:97:10:2b:a6:7a: 15:32:89:5d:54:7c:24:1f:c3:69:b6:67:50:df:18:d3:ea:ae: 2d:2a:0b:57:fb:c7:36:01:e0:45:61:0a:70:fe:28:b5:69:56: 51:01:5d:b3:79:a0:69:14:aa:1e:9d:3e:35:19:53:2e:06:fb: 4c:98:80:96:53:da:c5:08:8f:02:29:04:31:d2:78:4c:b3:b1: 4b:d6:16:9d:c8:22:bc:97:68:15:24:2d:cf:b7:c4:cc:07:96: f4:66:80:b0:d6:8f:e7:7f:c5:a3:a0:71:d0:c1:89:7c:56:29: 66:c2:d7:72:ce:f0:88:c7:b7:d5:e2:4e:b6:42:ac:f5:06:5c: de:8e:7b:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0NjkxMTAvBgNVBAUTKEUwRDU0NDVCODBCMTgxN0Y2MkYzQzY0QUE4QzhGNkQ3 RTEzQUUxMDMwHhcNMjUwNTE3MDI1MzQ1WhcNMjUwNTI0MDI1MzQ1WjAYMRYwFAYD VQQDEw02ODI3ZmEzOS00ODlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ulXfWcMqN0XrFJuNXFvZglW2EBOqGwNaLMbOl9Z9QJS7L0fGWTVYYHNqVia IPJRiRWEXVpdnTltxMbCcE1OS5gKKaPn8WIT00R7aaNeMPIsNKha8MVbhArRUmq1 ebn227BDPLxhiaRemEtkcRTKfIz+WOe5FMPUc2zXcI+DB3Zq1LNCo+bHEzvpW7x8 0pqgc27YFA0aaAmwrcesaTxbKUPxthUuQbizAn3EQw4pZQJPBYl4RhF/Bl5cp/ky 4HaniPUJA3y+Uv5DRh35xwdT+RocFn7zMzc2TzsKYOYQyUqTLzWUZnfXjV+s63Yy IbPEI40DFc1KxCMUntXlGgMCNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrkpr88 oefhzyxmj5GheNsa2bXCMB8GA1UdIwQYMBaAFODVRFuAsYF/YvPGSqjI9tfhOuED MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTQ2OS9FRkE1NjNDOEE1 QTkxMUVEOEZFMzA1NTNDNEY5QUUwMi80TlZFVzRDeGdYOWk4OFpLcU1qMjEtRTY0 UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzROVkVXNEN4Z1g5aTg4WktxTWoyMS1FNjRRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTQ2OS9FRkE1NjNDOEE1QTkxMUVEOEZFMzA1NTNDNEY5QUUwMi80TlZFVzRDeGdY OWk4OFpLcU1qMjEtRTY0UU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeQNHdZnKRjfOuMDIw2pFF0mYBYN9TQxUZxi5FBFkoIpf/bKlo7oAm a/F1r9M7IZYmkuWts4DdkvoJNooL7h7zQjQrPA781VDpQ+MnDJ04fnXyHWRDmBVT LeCQ4bEyXVCpytPS0HkbZEoqmJqj8F71xJ1Tt47jX53qlxArpnoVMoldVHwkH8Np tmdQ3xjT6q4tKgtX+8c2AeBFYQpw/ii1aVZRAV2zeaBpFKoenT41GVMuBvtMmICW U9rFCI8CKQQx0nhMs7FL1hadyCK8l2gVJC3Pt8TMB5b0ZoCw1o/nf8WjoHHQwYl8 VilmwtdyzvCIx7fV4k62Qqz1BlzejnsS -----END CERTIFICATE-----Generated at Sat May 17 10:23:37 2025 by rpki-client