$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft File: p4emPknujsb5dRFgfxt8Ww3xFk4.mft (raw, json) Hash identifier: 2iB87y7W39rVGuJ5i2VLJpoJZKWcEvoODyJw0MnTqRI= Subject key identifier: E8:98:D4:F4:C6:0E:43:78:79:BA:7C:9F:8C:02:6C:97:2F:5E:2E:EE Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E Certificate issuer: /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E Certificate serial: 09C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft Manifest number: 09B9 Signing time: Mon 12 May 2025 19:49:43 +0000 Manifest this update: Mon 12 May 2025 19:49:43 +0000 Manifest next update: Mon 19 May 2025 19:49:43 +0000 Files and hashes: 1: p4emPknujsb5dRFgfxt8Ww3xFk4.crl (hash: gN/nM9Fwy/Ytoo6JVxbQj5e1dXPteu6hAWhDrW5v8Ig=) 2: CFDF8B8A5B5D11EE967F161DC4F9AE02.roa (hash: /KN4Le3BcyLgzqHmFT/XiG9LlFk89B6INXp50IfH424=) 3: B13B2E5A5B5D11EEADF5C61CC4F9AE02.roa (hash: dJLvj8H+OzZAi8s6DdJIU3wM9EnuCPBO5qhQ8TBHFMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2500 (0x9c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0A6C, serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E Validity Not Before: May 12 19:49:43 2025 GMT Not After : May 19 19:49:43 2025 GMT Subject: CN=682250d7-c9a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:38:84:c8:f0:c2:99:bf:d0:a2:08:2e:21:64: 1c:e3:82:88:63:f7:00:13:b1:8a:d7:b5:5f:ff:9c: ae:6c:9c:fd:4e:a4:68:ad:65:82:c4:44:56:4d:c7: 34:68:a1:d2:9e:56:78:80:15:b7:86:06:fc:e9:20: cb:22:3e:b5:59:63:42:af:e7:5b:93:bd:27:a3:b8: 5d:27:85:61:81:58:e4:fe:88:db:dc:6a:71:6c:59: 03:dd:d3:b9:74:92:f6:2b:03:c0:d0:6f:77:86:08: c7:34:08:48:b7:70:1c:a0:f0:d6:de:1e:c8:c7:9b: 55:24:c5:35:d7:3f:f8:29:e0:b7:26:c8:8e:04:9b: bb:1c:2b:8c:0d:c8:71:25:f4:65:4c:d1:b2:df:53: 68:87:67:72:23:51:b2:cf:7e:48:88:b0:f5:f6:92: ba:c2:a8:38:a6:22:5d:f5:99:d3:af:d4:1b:f6:51: e7:54:f7:d2:64:05:66:83:ce:2f:2b:10:7e:31:2c: 93:c3:0c:49:98:03:f5:fa:bf:b3:c3:de:49:f0:fc: f0:5e:23:df:87:ff:5c:18:3f:69:2e:b2:18:60:39: c9:0e:c0:7f:54:2d:dc:6f:f8:81:9d:8a:a4:b5:1b: 2f:41:d1:5e:e4:00:f0:9a:c0:9e:cb:bf:58:7c:a3: 06:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:98:D4:F4:C6:0E:43:78:79:BA:7C:9F:8C:02:6C:97:2F:5E:2E:EE X509v3 Authority Key Identifier: keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:1f:c3:60:dd:a9:08:5c:be:46:ea:04:80:22:43:ce:07:29: 09:2a:2a:2e:6d:4d:7c:f8:03:de:49:5d:55:97:74:ee:43:ec: 01:87:35:a0:e5:a3:f0:75:8b:e0:5d:f9:d7:2b:75:47:a0:f8: 38:b0:61:c1:ed:ac:11:9f:ef:0e:e6:1b:d5:fd:8b:ff:51:11: 9c:d5:38:2b:20:e3:df:f6:69:d6:04:74:55:05:ce:01:b3:74: 66:ec:02:a8:b7:57:48:74:3b:d3:c1:17:1a:5d:be:b7:17:c3: 76:79:a0:ee:fa:74:12:6d:16:6a:07:5d:cd:bb:40:b4:2a:2c: ec:be:24:c8:f0:b9:dc:44:5f:5e:15:c1:d9:0e:a1:6d:9a:33: 01:b1:a5:2a:56:47:c9:f3:41:9b:81:d6:0d:e9:26:da:2e:ee: 02:40:21:20:89:1f:bf:bf:f6:29:2d:5a:b6:fd:3f:bd:90:58: 47:05:e2:b5:72:79:16:05:74:0b:01:73:2a:00:a6:6e:77:44: 8e:c0:ab:42:b9:f1:b7:a3:0f:8c:26:86:b0:ca:29:95:0e:47: 46:59:15:02:6d:9b:9b:da:de:49:dd:ea:f6:b3:05:13:1f:be: a8:a7:26:37:c2:a1:3e:c0:3a:88:ca:f7:c7:95:b3:ca:60:31: 9f:fc:93:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBBNkMxMTAvBgNVBAUTKEE3ODdBNjNFNDlFRThFQzZGOTc1MTE2MDdGMUI3QzVC MERGMTE2NEUwHhcNMjUwNTEyMTk0OTQzWhcNMjUwNTE5MTk0OTQzWjAYMRYwFAYD VQQDEw02ODIyNTBkNy1jOWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ziEyPDCmb/QogguIWQc44KIY/cAE7GK17Vf/5yubJz9TqRorWWCxERWTcc0 aKHSnlZ4gBW3hgb86SDLIj61WWNCr+dbk70no7hdJ4VhgVjk/ojb3GpxbFkD3dO5 dJL2KwPA0G93hgjHNAhIt3AcoPDW3h7Ix5tVJMU11z/4KeC3JsiOBJu7HCuMDchx JfRlTNGy31Noh2dyI1Gyz35IiLD19pK6wqg4piJd9ZnTr9Qb9lHnVPfSZAVmg84v KxB+MSyTwwxJmAP1+r+zw95J8PzwXiPfh/9cGD9pLrIYYDnJDsB/VC3cb/iBnYqk tRsvQdFe5ADwmsCey79YfKMGvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOiY1PTG DkN4ebp8n4wCbJcvXi7uMB8GA1UdIwQYMBaAFKeHpj5J7o7G+XURYH8bfFsN8RZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEE2Qy9COTE2RjM4ODgy QzIxMUVBOUE1MTQ2MzlDNEY5QUUwMi9wNGVtUGtudWpzYjVkUkZnZnh0OFd3M3hG azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A0ZW1Qa251anNiNWRSRmdmeHQ4V3czeEZrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEE2Qy9COTE2RjM4ODgyQzIxMUVBOUE1MTQ2MzlDNEY5QUUwMi9wNGVtUGtudWpz YjVkUkZnZnh0OFd3M3hGazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDH8Ng3akIXL5G6gSAIkPOBykJKioubU18+APeSV1Vl3TuQ+wBhzWg 5aPwdYvgXfnXK3VHoPg4sGHB7awRn+8O5hvV/Yv/URGc1TgrIOPf9mnWBHRVBc4B s3Rm7AKot1dIdDvTwRcaXb63F8N2eaDu+nQSbRZqB13Nu0C0KizsviTI8LncRF9e FcHZDqFtmjMBsaUqVkfJ80GbgdYN6SbaLu4CQCEgiR+/v/YpLVq2/T+9kFhHBeK1 cnkWBXQLAXMqAKZud0SOwKtCufG3ow+MJoawyimVDkdGWRUCbZub2t5J3er2swUT H76opyY3wqE+wDqIyvfHlbPKYDGf/JOO -----END CERTIFICATE-----Generated at Wed May 14 14:49:04 2025 by rpki-client