$ rpki-client -vvf rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft File: d4fx5T6beBMt6aeHEQiDFt1gVbM.mft (raw, json) Hash identifier: Xw9u0wbTAvEYEFvbcMKVFunZCf+AjhvmWjhYsJjSQy0= Subject key identifier: B6:6C:29:11:CE:6F:6D:05:B1:DD:D7:F1:BD:84:C1:87:E8:D7:D3:3C Authority key identifier: 77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3 Certificate issuer: /CN=A91A60A9/serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3 Certificate serial: 34A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft Manifest number: 3486 Signing time: Sun 04 May 2025 14:23:41 +0000 Manifest this update: Sun 04 May 2025 14:23:40 +0000 Manifest next update: Sun 11 May 2025 14:23:40 +0000 Files and hashes: 1: d4fx5T6beBMt6aeHEQiDFt1gVbM.crl (hash: QeKdtYEqvUzAUj2tCof/wSccGIQ86mvvg3espBy7Kzc=) 2: 8F368BEEF9C411EB9F9E645DC4F9AE02.roa (hash: VGqKOKmiRQqT6yzNCTI4GsckVdo9EsIqZ8D30e0mo6o=) 3: C28E34620A2011EC8B517885C4F9AE02.roa (hash: WML6bSJiK9+KF/pEPMbVuQofZWsQq5X8goxfmm+ACQg=) 4: C3C5C43A0A2011EC8B517885C4F9AE02.roa (hash: mmOf8E5cH5F9E51SwHybcc0hD3kIHBOrU1OwIH3yXaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 14:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13474 (0x34a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A60A9, serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3 Validity Not Before: May 4 14:23:40 2025 GMT Not After : May 11 14:23:40 2025 GMT Subject: CN=6817786c-ce75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e7:ab:56:ec:c4:d8:6f:91:fd:f0:7b:f9:a0: 4d:6b:ba:54:5e:17:fa:33:d0:7f:cc:d2:f4:c5:ed: b5:c1:2d:3e:ac:2e:53:92:46:8a:8a:84:e7:71:ba: 63:4c:b6:9f:00:59:de:74:cb:6f:33:ac:0c:7e:80: 89:c4:f4:62:cd:da:e3:26:12:4b:33:fc:85:f0:bc: 7b:b9:e5:5e:d4:4f:6f:b5:d5:c5:83:c4:36:83:c6: ee:61:22:ee:5b:01:9e:31:74:9f:65:9f:43:05:58: 28:08:19:ca:75:15:96:c4:da:a7:19:a7:3b:fb:02: fd:85:60:02:93:df:20:18:d0:74:67:1a:b4:03:dd: 4e:db:ed:37:14:b0:93:4c:33:ba:5f:fe:cc:ae:ad: 1e:14:76:ef:0c:ed:b6:ab:d0:7e:fa:f4:42:94:40: 35:06:de:80:12:b1:f4:20:ae:e5:5f:4b:14:33:67: 67:71:ab:0f:f5:b5:31:28:50:30:20:98:6c:aa:d0: 6c:9e:15:54:46:60:9c:85:5d:98:e4:01:23:dc:7f: 31:ce:95:9b:c6:f6:6a:4a:c1:e3:27:05:cb:29:33: 5a:69:57:0e:f1:2e:67:a3:0a:57:a0:fd:2e:5e:1f: b2:60:58:70:91:33:bd:5a:59:70:1b:a4:94:37:d5: f7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6C:29:11:CE:6F:6D:05:B1:DD:D7:F1:BD:84:C1:87:E8:D7:D3:3C X509v3 Authority Key Identifier: keyid:77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:44:7d:4b:6d:5d:9e:88:e6:31:ef:81:0a:62:48:05:a9:60: 3d:b3:91:b6:f6:dd:ee:49:a1:ad:31:85:c2:aa:77:3a:ce:65: fb:45:17:91:06:37:c0:1f:1f:39:45:f2:c5:e2:f1:55:47:24: 64:e3:5f:de:cd:2a:85:38:6a:81:0c:5f:e1:e9:19:2b:5d:bb: ab:90:dc:25:47:27:d4:eb:d4:fb:0d:8f:f6:ee:15:89:48:1f: 69:40:6a:77:f0:d3:a4:f7:f8:df:45:62:03:b3:ca:7f:fe:97: 8c:37:11:31:f2:03:52:5e:55:94:5a:92:09:58:ca:1b:9e:e8: 9e:8b:c5:42:60:cf:b9:07:81:ca:39:e9:09:0c:8a:38:e1:22: 0f:dc:d6:15:14:02:ca:f8:c1:26:21:0b:b2:c3:ea:fa:c6:56: bd:aa:52:2f:8e:30:85:16:83:d7:07:fa:6e:6a:65:2a:1a:e1: b7:64:17:c4:07:26:45:a6:ba:e1:e0:66:49:03:5d:bf:9f:3e: d9:28:96:44:40:ec:be:06:ea:74:60:ff:b8:e7:d6:d4:d1:50: 5d:b1:3b:26:b4:10:dc:16:c9:d3:a2:6b:8e:13:e0:c6:22:bf: dc:ea:7c:18:88:7c:7e:42:2c:98:db:e3:b7:f3:be:28:79:5c: 8a:3d:33:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYwQTkxMTAvBgNVBAUTKDc3ODdGMUU1M0U5Qjc4MTMyREU5QTc4NzExMDg4MzE2 REQ2MDU1QjMwHhcNMjUwNTA0MTQyMzQwWhcNMjUwNTExMTQyMzQwWjAYMRYwFAYD VQQDEw02ODE3Nzg2Yy1jZTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+erVuzE2G+R/fB7+aBNa7pUXhf6M9B/zNL0xe21wS0+rC5TkkaKioTncbpj TLafAFnedMtvM6wMfoCJxPRizdrjJhJLM/yF8Lx7ueVe1E9vtdXFg8Q2g8buYSLu WwGeMXSfZZ9DBVgoCBnKdRWWxNqnGac7+wL9hWACk98gGNB0Zxq0A91O2+03FLCT TDO6X/7Mrq0eFHbvDO22q9B++vRClEA1Bt6AErH0IK7lX0sUM2dncasP9bUxKFAw IJhsqtBsnhVURmCchV2Y5AEj3H8xzpWbxvZqSsHjJwXLKTNaaVcO8S5nowpXoP0u Xh+yYFhwkTO9WllwG6SUN9X3IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZsKRHO b20Fsd3X8b2EwYfo19M8MB8GA1UdIwQYMBaAFHeH8eU+m3gTLemnhxEIgxbdYFWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjBBOS82QkE4MDYxQTFE ODQxMUUyQjNBNTRGREEwOEIwMkNEMi9kNGZ4NVQ2YmVCTXQ2YWVIRVFpREZ0MWdW Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q0Zng1VDZiZUJNdDZhZUhFUWlERnQxZ1ZiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjBBOS82QkE4MDYxQTFEODQxMUUyQjNBNTRGREEwOEIwMkNEMi9kNGZ4NVQ2YmVC TXQ2YWVIRVFpREZ0MWdWYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABRH1LbV2eiOYx74EKYkgFqWA9s5G29t3uSaGtMYXCqnc6zmX7RReR BjfAHx85RfLF4vFVRyRk41/ezSqFOGqBDF/h6RkrXburkNwlRyfU69T7DY/27hWJ SB9pQGp38NOk9/jfRWIDs8p//peMNxEx8gNSXlWUWpIJWMobnuiei8VCYM+5B4HK OekJDIo44SIP3NYVFALK+MEmIQuyw+r6xla9qlIvjjCFFoPXB/puamUqGuG3ZBfE ByZFprrh4GZJA12/nz7ZKJZEQOy+Bup0YP+459bU0VBdsTsmtBDcFsnTomuOE+DG Ir/c6nwYiHx+QiyY2+O3874oeVyKPTPD -----END CERTIFICATE-----Generated at Mon May 5 02:57:36 2025 by rpki-client