$ rpki-client -vvf rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft File: r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft (raw, json) Hash identifier: cuNiQ3d97ORNUxOXKZGQ65d4mJ9pIXASRZKz+iQpVAE= Subject key identifier: D0:46:E0:7D:D4:D9:C4:63:45:F3:7A:2F:69:E3:9A:44:44:18:43:E2 Authority key identifier: AF:85:78:8B:8C:52:D1:28:D5:34:0A:75:09:5B:8F:0F:11:77:9C:48 Certificate issuer: /CN=A919F53A/serialNumber=AF85788B8C52D128D5340A75095B8F0F11779C48 Certificate serial: 072E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft Manifest number: 0729 Signing time: Sat 10 May 2025 21:26:29 +0000 Manifest this update: Sat 10 May 2025 21:26:28 +0000 Manifest next update: Sat 17 May 2025 21:26:28 +0000 Files and hashes: 1: r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl (hash: rEx5FKLUCYe+WAlaDcOmTl7XAsa/LDZtnHSlc8OEdTY=) 2: 72BCBB042FC211EBB8550B0AC4F9AE02.roa (hash: kntkOaZrAaOx4SVIiImPb0s+dVekp3sawuWhb73K14Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:26:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1838 (0x72e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F53A, serialNumber=AF85788B8C52D128D5340A75095B8F0F11779C48 Validity Not Before: May 10 21:26:28 2025 GMT Not After : May 17 21:26:28 2025 GMT Subject: CN=681fc485-5d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1a:6d:0a:fb:00:89:c2:9e:a7:95:11:e4:3c: aa:9f:6a:6e:85:74:31:27:56:f7:a9:28:26:68:eb: 76:26:76:0e:e5:d1:1d:da:8f:87:28:09:81:75:35: ea:3b:0f:cc:8e:3e:f4:6d:33:72:d1:51:99:f3:12: 77:68:d3:9a:05:ad:8f:fe:29:e4:c4:1c:f4:a1:dd: 42:7c:00:40:19:41:dc:dd:aa:7f:7f:26:b7:ae:60: 91:79:59:e3:36:0c:89:5b:e5:1d:83:36:6d:59:45: a7:86:b4:f8:dc:2c:41:1a:1c:3e:f8:e0:4a:e0:8b: a4:58:4e:18:c3:ae:da:27:dc:6a:f0:9e:46:1f:9d: fb:7e:eb:7e:5a:a6:0b:0c:42:9a:fd:79:33:ed:a0: 6d:a9:80:74:07:74:c4:61:52:07:d0:5d:64:07:1a: 90:5e:17:d2:23:63:a8:8f:f7:9d:a9:30:f7:3f:76: 12:6e:1c:2f:32:cf:7b:7b:81:a6:59:95:e2:be:80: 25:b8:62:03:c2:07:4d:b1:f3:de:2f:04:3e:39:17: 07:71:29:84:eb:08:7b:2e:4a:c2:ac:b5:b4:6d:b5: ee:be:f0:27:36:13:e3:11:3f:32:18:c8:d8:19:00: a8:6f:f5:e6:65:ae:10:ee:7b:a2:bf:a4:e3:a0:70: 61:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:46:E0:7D:D4:D9:C4:63:45:F3:7A:2F:69:E3:9A:44:44:18:43:E2 X509v3 Authority Key Identifier: keyid:AF:85:78:8B:8C:52:D1:28:D5:34:0A:75:09:5B:8F:0F:11:77:9C:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:10:b1:8c:7a:ef:33:99:7f:1c:4b:4b:88:ca:10:a0:9d:33: ee:23:f8:7d:c4:7b:46:f0:b0:e1:d8:f4:b9:0c:1d:65:6c:66: 7e:5f:32:60:50:c2:e2:e4:85:76:00:75:7a:de:7f:41:0c:a2: 98:ea:28:18:9a:a7:95:17:8c:03:3a:db:97:7b:e7:b2:05:0a: 52:2a:cb:d6:f7:03:96:cd:ca:c1:18:16:5c:5d:8b:71:16:32: cd:88:2b:9b:73:80:71:24:8a:8b:aa:89:20:6d:18:8a:a8:44: e2:3a:8c:5f:a7:14:ce:58:86:4a:bd:dd:b4:0f:47:d5:63:0e: 72:b0:b9:08:36:7a:2f:55:f0:05:d3:f4:71:a2:0f:fd:b3:28: 51:f5:cf:72:fa:54:16:fe:3a:ac:ab:2e:f7:73:57:0f:4c:27: 01:c0:b2:9d:79:10:2f:05:30:42:fb:a8:1e:86:3e:47:93:7b: 8c:8f:6b:d1:fb:0c:0a:c0:96:08:22:d5:eb:6c:6c:a8:68:29: 25:d0:0e:bd:44:31:2c:5d:58:38:7b:71:c1:af:88:5d:32:09: eb:bc:50:c8:06:da:4d:54:d4:ab:9c:c8:f5:f1:b4:4a:1c:6f: 35:a1:8e:5b:8a:ec:ba:48:2e:47:0d:44:89:cc:d2:84:08:6a: 3c:e9:18:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY1M0ExMTAvBgNVBAUTKEFGODU3ODhCOEM1MkQxMjhENTM0MEE3NTA5NUI4RjBG MTE3NzlDNDgwHhcNMjUwNTEwMjEyNjI4WhcNMjUwNTE3MjEyNjI4WjAYMRYwFAYD VQQDEw02ODFmYzQ4NS01ZDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhptCvsAicKep5UR5Dyqn2puhXQxJ1b3qSgmaOt2JnYO5dEd2o+HKAmBdTXq Ow/Mjj70bTNy0VGZ8xJ3aNOaBa2P/inkxBz0od1CfABAGUHc3ap/fya3rmCReVnj NgyJW+UdgzZtWUWnhrT43CxBGhw++OBK4IukWE4Yw67aJ9xq8J5GH537fut+WqYL DEKa/Xkz7aBtqYB0B3TEYVIH0F1kBxqQXhfSI2Ooj/edqTD3P3YSbhwvMs97e4Gm WZXivoAluGIDwgdNsfPeLwQ+ORcHcSmE6wh7LkrCrLW0bbXuvvAnNhPjET8yGMjY GQCob/XmZa4Q7nuiv6TjoHBhWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBG4H3U 2cRjRfN6L2njmkREGEPiMB8GA1UdIwQYMBaAFK+FeIuMUtEo1TQKdQlbjw8Rd5xI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjUzQS8zNkI1MkRGQTJG QzAxMUVCQTI1RkU5ODJDNEY5QUUwMi9yNFY0aTR4UzBTalZOQXAxQ1Z1UER4RjNu RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0VjRpNHhTMFNqVk5BcDFDVnVQRHhGM25FZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjUzQS8zNkI1MkRGQTJGQzAxMUVCQTI1RkU5ODJDNEY5QUUwMi9yNFY0aTR4UzBT alZOQXAxQ1Z1UER4RjNuRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhELGMeu8zmX8cS0uIyhCgnTPuI/h9xHtG8LDh2PS5DB1lbGZ+XzJg UMLi5IV2AHV63n9BDKKY6igYmqeVF4wDOtuXe+eyBQpSKsvW9wOWzcrBGBZcXYtx FjLNiCubc4BxJIqLqokgbRiKqETiOoxfpxTOWIZKvd20D0fVYw5ysLkINnovVfAF 0/Rxog/9syhR9c9y+lQW/jqsqy73c1cPTCcBwLKdeRAvBTBC+6gehj5Hk3uMj2vR +wwKwJYIItXrbGyoaCkl0A69RDEsXVg4e3HBr4hdMgnrvFDIBtpNVNSrnMj18bRK HG81oY5biuy6SC5HDUSJzNKECGo86Rhe -----END CERTIFICATE-----Generated at Mon May 12 22:50:18 2025 by rpki-client