$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft File: 4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft (raw, json) Hash identifier: wloOxSuUAqY02DP4UCDoCbKH/7Xju+kDSsgTfUMo4hQ= Subject key identifier: 6A:33:40:2A:76:8A:3B:42:82:08:BF:53:17:A8:0C:46:E3:F5:83:D4 Authority key identifier: E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A Certificate issuer: /CN=A91B0367/serialNumber=E15A360372DDAF1C5B218E8C4CF69F6F8BD7F59A Certificate serial: 0D93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft Manifest number: 0D8D Signing time: Wed 14 May 2025 18:03:50 +0000 Manifest this update: Wed 14 May 2025 18:03:49 +0000 Manifest next update: Wed 21 May 2025 18:03:49 +0000 Files and hashes: 1: 4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl (hash: gHnZ2fB1eR8+bBVb1QczeTH2ptQX9qtAbQLvoHkijog=) 2: 7321413EC22511E99FB7F225C4F9AE02.roa (hash: Z6lmT51OP+45EouSJ7OPnhCtkGwpN+kuXARe/mt1yM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3475 (0xd93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0367, serialNumber=E15A360372DDAF1C5B218E8C4CF69F6F8BD7F59A Validity Not Before: May 14 18:03:49 2025 GMT Not After : May 21 18:03:49 2025 GMT Subject: CN=6824db05-2399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:81:da:35:69:ea:6e:c9:b4:33:98:e3:77:e5: 86:cc:24:06:66:64:31:19:70:8d:6e:8e:11:41:b0: 0a:6b:02:78:2c:c4:01:a3:2c:43:8a:7d:e4:e4:bb: b1:6a:b4:df:48:4f:10:12:74:28:5d:ee:60:3c:f9: 05:45:3e:39:b6:4e:b4:1d:45:2b:1e:91:32:ba:ca: 2b:eb:d8:63:77:a6:1f:76:f1:c2:ce:04:5a:d7:da: 35:53:5d:0d:81:31:13:16:9e:4c:f3:f4:42:12:cf: 64:96:04:18:2d:82:90:ee:52:e2:dd:23:93:49:6f: 09:04:cc:1e:c2:ba:de:ec:87:30:8b:47:e5:96:89: 1a:9c:35:48:0e:88:64:30:36:a0:8c:74:1e:6f:4e: 1e:ad:e4:af:15:04:55:ef:8f:9a:51:bf:22:bd:70: a0:57:53:2c:5e:5f:13:67:f8:a9:8a:3c:f9:bc:e6: 42:b9:45:60:60:7d:81:a3:70:9e:1c:d1:d4:71:0d: 03:c9:04:ef:54:ff:7b:26:3a:3a:df:e4:a4:12:3f: 99:e0:a5:cc:1c:1d:81:2b:ec:c5:07:e2:9c:7a:d3: 1d:07:9a:9d:e2:20:9d:86:77:92:b4:d2:e0:dd:78: a2:5f:04:64:5d:d8:5d:c6:b8:de:b7:03:8e:c9:5f: ec:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:33:40:2A:76:8A:3B:42:82:08:BF:53:17:A8:0C:46:E3:F5:83:D4 X509v3 Authority Key Identifier: keyid:E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:55:40:ac:80:e3:16:44:7b:69:20:c2:f1:32:58:92:1a:21: a5:91:3b:02:96:d2:c4:b6:15:1d:42:ff:7e:ba:41:38:f1:31: 8f:7f:fe:64:f5:ae:d4:f4:18:79:c8:79:a9:ae:39:d7:d8:1a: 60:79:63:52:4e:0d:99:75:36:45:90:cb:08:46:53:03:e3:8a: fd:a7:b4:0e:fe:52:b4:d3:29:b7:f2:f3:a1:0b:39:86:4d:a8: ca:3e:af:1a:97:af:b5:03:56:aa:c3:62:51:bf:4d:b9:bd:d8: 47:55:bf:72:09:1c:81:cc:b5:a1:5c:f2:49:f3:e4:fe:f0:4c: 4f:64:99:ac:f3:27:61:df:75:57:cd:43:2f:1a:75:21:ee:13: 7f:3f:ca:59:9d:5e:a6:5b:7f:d3:67:ad:53:28:ed:9d:fe:0b: fc:f3:37:72:6d:bc:70:be:8f:d6:05:28:a2:ef:17:76:b8:f8: 9c:21:89:f3:db:d4:12:9c:c9:52:62:c6:ce:0a:b9:8d:e9:8e: 1d:e5:01:c7:9d:9d:7c:8c:38:ae:58:3a:0a:ea:2e:5b:a4:ef: bb:7c:74:11:4c:2a:87:d8:39:a8:0b:e7:95:e0:25:dd:ba:54: e8:54:ce:34:d5:19:0c:34:c9:3e:ae:4d:f7:fc:26:30:59:5f: 4f:01:76:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzNjcxMTAvBgNVBAUTKEUxNUEzNjAzNzJEREFGMUM1QjIxOEU4QzRDRjY5RjZG OEJEN0Y1OUEwHhcNMjUwNTE0MTgwMzQ5WhcNMjUwNTIxMTgwMzQ5WjAYMRYwFAYD VQQDEw02ODI0ZGIwNS0yMzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp4HaNWnqbsm0M5jjd+WGzCQGZmQxGXCNbo4RQbAKawJ4LMQBoyxDin3k5Lux arTfSE8QEnQoXe5gPPkFRT45tk60HUUrHpEyusor69hjd6YfdvHCzgRa19o1U10N gTETFp5M8/RCEs9klgQYLYKQ7lLi3SOTSW8JBMwewrre7Icwi0fllokanDVIDohk MDagjHQeb04ereSvFQRV74+aUb8ivXCgV1MsXl8TZ/ipijz5vOZCuUVgYH2Bo3Ce HNHUcQ0DyQTvVP97Jjo63+SkEj+Z4KXMHB2BK+zFB+KcetMdB5qd4iCdhneStNLg 3XiiXwRkXdhdxrjetwOOyV/sFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGozQCp2 ijtCggi/UxeoDEbj9YPUMB8GA1UdIwQYMBaAFOFaNgNy3a8cWyGOjEz2n2+L1/Wa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDM2Ny8wOEMzRDI4RUMy MjUxMUU5QTM2N0QzMjVDNEY5QUUwMi80Vm8yQTNMZHJ4eGJJWTZNVFBhZmI0dlg5 Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWbzJBM0xkcnh4YklZNk1UUGFmYjR2WDlaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDM2Ny8wOEMzRDI4RUMyMjUxMUU5QTM2N0QzMjVDNEY5QUUwMi80Vm8yQTNMZHJ4 eGJJWTZNVFBhZmI0dlg5Wm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoVUCsgOMWRHtpIMLxMliSGiGlkTsCltLEthUdQv9+ukE48TGPf/5k 9a7U9Bh5yHmprjnX2BpgeWNSTg2ZdTZFkMsIRlMD44r9p7QO/lK00ym38vOhCzmG TajKPq8al6+1A1aqw2JRv025vdhHVb9yCRyBzLWhXPJJ8+T+8ExPZJms8ydh33VX zUMvGnUh7hN/P8pZnV6mW3/TZ61TKO2d/gv88zdybbxwvo/WBSii7xd2uPicIYnz 29QSnMlSYsbOCrmN6Y4d5QHHnZ18jDiuWDoK6i5bpO+7fHQRTCqH2DmoC+eV4CXd ulToVM401RkMNMk+rk33/CYwWV9PAXaN -----END CERTIFICATE-----Generated at Fri May 16 06:12:53 2025 by rpki-client