$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft File: c4wjqkznVV7qL8jCvtj0akiNyT0.mft (raw, json) Hash identifier: hJnMr4tW5OdpYP2Laqw2g+kG9YvNvJccHzGoSAifNRg= Subject key identifier: 9C:26:2C:1B:79:07:5C:44:81:A8:2A:87:81:29:A2:22:89:D8:98:F2 Authority key identifier: 73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D Certificate issuer: /CN=A91B2D29/serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D Certificate serial: 2417 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft Manifest number: 4650 Signing time: Sun 04 May 2025 15:44:25 +0000 Manifest this update: Sun 04 May 2025 15:44:25 +0000 Manifest next update: Sun 11 May 2025 15:44:25 +0000 Files and hashes: 1: c4wjqkznVV7qL8jCvtj0akiNyT0.crl (hash: YomvUC18Yv1I2IbitUyI0ILeS2Z+e8tIueH/fY9op0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 15:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9239 (0x2417) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D29, serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D Validity Not Before: May 4 15:44:25 2025 GMT Not After : May 11 15:44:25 2025 GMT Subject: CN=68178b59-868a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b4:82:3e:bb:bf:16:df:52:3e:d2:3a:d4:9e: 4a:36:80:f8:99:1b:fd:d4:ae:9d:e1:0a:6f:e0:2b: 78:c4:e9:f6:4c:a5:e5:ae:ae:99:53:bc:f3:9f:c4: 65:dc:16:58:a5:0a:76:20:1f:d5:a3:4b:39:fb:51: 51:c4:dd:53:20:be:91:37:2a:77:d6:5c:2e:aa:20: a3:32:b9:bc:ed:a7:97:57:46:44:28:94:87:e5:2c: 1b:ec:fa:9f:ed:44:b3:aa:b4:ae:61:a5:ce:9e:5e: ed:d9:5c:39:5f:ee:fe:77:23:57:e6:d1:4d:d6:97: 71:38:d8:8a:74:d2:d5:e7:62:eb:6f:a3:d5:89:a1: 08:09:8d:58:e5:ff:c6:ed:0b:7f:ba:2b:77:e3:c8: 05:75:66:be:e6:06:c6:e8:ea:c9:c1:bb:77:b3:28: 45:80:60:4f:1f:4e:54:6f:78:d2:86:de:37:91:39: 51:6f:83:18:9f:45:45:c8:50:b6:64:fd:e9:f7:7a: f8:26:2b:ff:5b:3e:0d:41:dc:a9:d7:51:36:51:6b: b9:54:07:c0:54:51:f0:4e:f9:4d:8f:df:7e:0a:f2: fb:17:c7:45:85:7d:75:2e:8e:14:0f:c4:cd:2a:b8: ad:af:76:cb:8a:38:14:49:4a:1c:eb:1b:a5:88:5c: 8d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:26:2C:1B:79:07:5C:44:81:A8:2A:87:81:29:A2:22:89:D8:98:F2 X509v3 Authority Key Identifier: keyid:73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:32:0c:3e:ec:b9:dd:d0:85:7c:f1:a1:a4:d4:e9:72:a1:88: 4c:ef:3f:78:ed:7a:25:5b:d4:25:e1:a1:a2:0f:7f:d6:01:bd: e3:a8:a0:b9:29:31:56:a0:52:e4:f3:29:2c:28:f9:77:20:f5: f9:c9:1e:22:5c:d4:8a:bd:0e:47:19:c8:64:4e:3d:f2:72:eb: 1a:74:6b:31:d8:fc:78:d2:e2:d9:e0:c3:0f:11:80:64:61:4d: cd:fb:92:d0:01:7e:85:cc:9c:20:a1:8b:2a:aa:8f:96:2f:4d: 82:6b:73:45:e1:36:22:7e:de:60:de:7e:c1:e8:43:cd:41:24: 01:25:b2:69:d5:8c:de:da:4c:67:b3:e5:5d:70:5f:90:51:ae: e3:a7:ff:e3:13:86:7a:36:30:ae:23:a4:a9:1c:dc:e6:f5:34: 43:d1:14:e8:30:cb:a3:76:ed:3f:7c:2b:02:74:46:20:8c:81: 7a:47:e9:e4:2a:b0:43:e7:4a:0b:c6:22:6c:15:af:ac:54:4e: f8:d6:f7:1d:5b:10:b1:e3:e5:47:ec:a9:e8:55:98:23:64:a6: 53:a4:31:af:fc:e8:e1:b9:2f:6c:b0:5a:2d:a5:91:67:66:7d: c1:24:e9:18:f9:72:0d:d4:09:f7:c9:85:d6:2f:65:90:55:e1: 99:13:ce:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJEMjkxMTAvBgNVBAUTKDczOEMyM0FBNENFNzU1NUVFQTJGQzhDMkJFRDhGNDZB NDg4REM5M0QwHhcNMjUwNTA0MTU0NDI1WhcNMjUwNTExMTU0NDI1WjAYMRYwFAYD VQQDEw02ODE3OGI1OS04NjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmLSCPru/Ft9SPtI61J5KNoD4mRv91K6d4Qpv4Ct4xOn2TKXlrq6ZU7zzn8Rl 3BZYpQp2IB/Vo0s5+1FRxN1TIL6RNyp31lwuqiCjMrm87aeXV0ZEKJSH5Swb7Pqf 7USzqrSuYaXOnl7t2Vw5X+7+dyNX5tFN1pdxONiKdNLV52Lrb6PViaEICY1Y5f/G 7Qt/uit348gFdWa+5gbG6OrJwbt3syhFgGBPH05Ub3jSht43kTlRb4MYn0VFyFC2 ZP3p93r4Jiv/Wz4NQdyp11E2UWu5VAfAVFHwTvlNj99+CvL7F8dFhX11Lo4UD8TN Kritr3bLijgUSUoc6xuliFyNVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwmLBt5 B1xEgagqh4EpoiKJ2JjyMB8GA1UdIwQYMBaAFHOMI6pM51Ve6i/Iwr7Y9GpIjck9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQyOS9GNzFFNzE2NjU1 MjExMUU1QURCMjA5MkFDNEY5QUUwMi9jNHdqcWt6blZWN3FMOGpDdnRqMGFraU55 VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M0d2pxa3puVlY3cUw4akN2dGowYWtpTnlUMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQyOS9GNzFFNzE2NjU1MjExMUU1QURCMjA5MkFDNEY5QUUwMi9jNHdqcWt6blZW N3FMOGpDdnRqMGFraU55VDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/Mgw+7Lnd0IV88aGk1OlyoYhM7z947XolW9Ql4aGiD3/WAb3jqKC5 KTFWoFLk8yksKPl3IPX5yR4iXNSKvQ5HGchkTj3ycusadGsx2Px40uLZ4MMPEYBk YU3N+5LQAX6FzJwgoYsqqo+WL02Ca3NF4TYift5g3n7B6EPNQSQBJbJp1Yze2kxn s+VdcF+QUa7jp//jE4Z6NjCuI6SpHNzm9TRD0RToMMujdu0/fCsCdEYgjIF6R+nk KrBD50oLxiJsFa+sVE741vcdWxCx4+VH7KnoVZgjZKZTpDGv/OjhuS9ssFotpZFn Zn3BJOkY+XIN1An3yYXWL2WQVeGZE87e -----END CERTIFICATE-----Generated at Mon May 5 05:35:16 2025 by rpki-client