$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft File: 4VW4KofSjod2AvmU-P_T50Sq9IA.mft (raw, json) Hash identifier: 0eBxz0phbol30xEgQAH1gRoxvtQswkM9njn13aoEJ4k= Subject key identifier: 38:13:02:AC:BF:8B:D8:2B:C7:1E:D6:D8:B0:D9:88:F0:4B:C0:0D:7A Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80 Certificate issuer: /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480 Certificate serial: 07F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft Manifest number: 07AC Signing time: Mon 12 May 2025 21:14:51 +0000 Manifest this update: Mon 12 May 2025 21:14:50 +0000 Manifest next update: Mon 19 May 2025 21:14:50 +0000 Files and hashes: 1: 4VW4KofSjod2AvmU-P_T50Sq9IA.crl (hash: bySIPVG8USvncZBMAXnVAGLpL83UNNRCsvUrVilkuOc=) 2: C13E824AC49F11EBAC936D7AC4F9AE02.roa (hash: JGXFZsvdAlPkzVwMIVDlhUnyxUdEjpH4xc3F+m/pQB0=) 3: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (hash: yu9kaJ9SbaIghj5mweHVls+umbPvibjZ8k0y4rtHgrI=) 4: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (hash: KYrgpq+j2JdiosQSHACv2bRMY5BVzOvfLnyNf5narws=) 5: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (hash: Y/iBnK8ZipjxkATaALxABZ9CTEeJIdjjxY8Yxx9n9DM=) 6: 0989F3EE120911EB83107638C4F9AE02.roa (hash: ZN83zETo/fGZjHplsgi4LIPj/1+Cv9tK+RMfhDQAvcM=) 7: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (hash: MIyFaAMcoVX+JijHyNBp9lzEprzyQwwRu4V9wwVXios=) 8: F255E05612DB11EBBE14D853C4F9AE02.roa (hash: CoOgUqT0FD59n+BELVSjes/s0qoXYfrPfM4+T31Fkoo=) 9: BBBC061A122711EB952CAB3FC4F9AE02.roa (hash: Ej4Olhx/k6YWemdl2TV8Frzo1JOOuwGbcCqfJq8lBxg=) 10: F5D6628C205011EB9EC2AA46C4F9AE02.roa (hash: UjevdaGjYYh/fLHbv94Vi82GRHni+SflrmcRbP8Ltsg=) 11: 1BDAA63E12B211EBA631032CC4F9AE02.roa (hash: BJy4+HNv8kQ6Lc2CH7nff6rHz79DtOyFMzKFxBbxH6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2033 (0x7f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480 Validity Not Before: May 12 21:14:50 2025 GMT Not After : May 19 21:14:50 2025 GMT Subject: CN=682264ca-e198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:07:5d:13:0b:f2:d4:42:00:c9:60:9c:5a:8e: 13:6b:36:53:17:ee:49:04:c4:fc:6d:38:5f:f2:a1: b8:15:c9:35:4e:31:5d:87:61:d4:aa:0f:c0:a8:68: 25:19:70:4a:45:0f:57:c1:c3:fd:4c:68:ee:3c:16: 3c:2b:99:48:7d:d7:a9:b5:74:d8:20:02:db:2e:b0: b2:a7:34:4a:e0:36:60:07:1b:75:60:4b:7c:c6:06: f0:31:0d:ee:b3:dd:d7:3b:75:67:ff:21:c9:e2:1b: 64:73:bd:07:0a:27:34:c3:1f:29:e4:3d:b7:18:19: da:fc:a3:6f:7a:3c:77:ff:d3:32:31:f1:28:d6:f4: 4f:cc:c6:ae:8d:17:6b:10:b1:40:62:93:cc:ca:51: bf:04:56:c3:7c:33:42:67:ef:02:69:70:11:fc:1d: 72:99:33:15:b4:f7:f7:17:b4:07:a6:1f:d3:1e:8b: 92:1e:f3:ee:4c:b2:bd:e4:df:2b:2d:f5:ef:69:6e: ec:3a:42:91:79:2a:cf:8c:f7:43:40:4d:64:fc:3e: 9a:43:38:b5:fa:e6:5b:74:ac:61:8c:8a:3d:97:e8: 88:4e:55:ea:10:65:e9:46:75:3c:9b:02:7d:27:c2: 7d:1b:19:ee:fc:cf:1c:93:a3:b9:c2:f6:8c:d4:b8: ee:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:13:02:AC:BF:8B:D8:2B:C7:1E:D6:D8:B0:D9:88:F0:4B:C0:0D:7A X509v3 Authority Key Identifier: keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:0e:59:b3:3d:59:fc:3d:48:44:5f:c0:d8:03:4e:57:42:9d: fa:20:d0:3d:d7:89:c0:b1:b3:a9:d4:f1:fe:26:36:d6:61:d1: fb:01:50:ae:f2:2b:92:01:ac:c4:5a:9b:51:95:39:27:0e:84: 5c:f9:43:b7:78:b2:de:2b:b8:8a:3d:dc:10:39:8e:9d:a0:55: f8:8a:82:bf:57:48:2c:b9:87:4d:bc:ee:c7:32:f6:81:50:af: d9:81:ba:2b:cd:c7:53:99:40:60:b9:0d:52:13:e9:31:16:59: cd:40:8d:7e:e4:46:70:9d:34:a0:ab:79:dd:a1:ff:c6:12:86: da:ff:d6:31:7d:07:ce:f5:07:18:1d:d8:d1:eb:df:78:ff:51: 53:99:b7:bd:f2:86:43:c8:70:3e:a3:c8:05:99:ae:0d:a1:02: a3:14:22:ac:7e:b1:d0:f5:9c:0f:38:df:2b:b5:f6:5b:7f:5d: 9a:94:13:25:10:19:56:91:2b:58:a2:c9:26:4f:41:15:99:89: 76:e8:0e:18:e7:8c:f5:ec:95:51:36:c9:49:6f:f6:56:fd:77: 73:cb:88:d0:03:ac:09:07:b4:22:88:e4:47:ce:7e:0a:4d:99: 6f:4e:96:fd:d7:b0:06:f5:2d:51:cf:ec:57:c0:36:c3:69:1b: 84:2a:b0:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyNUYxMTAvBgNVBAUTKEUxNTVCODJBODdEMjhFODc3NjAyRjk5NEY4RkZEM0U3 NDRBQUY0ODAwHhcNMjUwNTEyMjExNDUwWhcNMjUwNTE5MjExNDUwWjAYMRYwFAYD VQQDEw02ODIyNjRjYS1lMTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApwddEwvy1EIAyWCcWo4TazZTF+5JBMT8bThf8qG4Fck1TjFdh2HUqg/AqGgl GXBKRQ9XwcP9TGjuPBY8K5lIfdeptXTYIALbLrCypzRK4DZgBxt1YEt8xgbwMQ3u s93XO3Vn/yHJ4htkc70HCic0wx8p5D23GBna/KNvejx3/9MyMfEo1vRPzMaujRdr ELFAYpPMylG/BFbDfDNCZ+8CaXAR/B1ymTMVtPf3F7QHph/THouSHvPuTLK95N8r LfXvaW7sOkKReSrPjPdDQE1k/D6aQzi1+uZbdKxhjIo9l+iITlXqEGXpRnU8mwJ9 J8J9Gxnu/M8ck6O5wvaM1LjuZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgTAqy/ i9grxx7W2LDZiPBLwA16MB8GA1UdIwQYMBaAFOFVuCqH0o6HdgL5lPj/0+dEqvSA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI1Ri8yMkQ5MUY3MjEx Q0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pvZDJBdm1VLVBfVDUwU3E5 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWVzRLb2ZTam9kMkF2bVUtUF9UNTBTcTlJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjI1Ri8yMkQ5MUY3MjExQ0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pv ZDJBdm1VLVBfVDUwU3E5SUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzDlmzPVn8PUhEX8DYA05XQp36INA914nAsbOp1PH+JjbWYdH7AVCu 8iuSAazEWptRlTknDoRc+UO3eLLeK7iKPdwQOY6doFX4ioK/V0gsuYdNvO7HMvaB UK/ZgborzcdTmUBguQ1SE+kxFlnNQI1+5EZwnTSgq3ndof/GEoba/9YxfQfO9QcY HdjR6994/1FTmbe98oZDyHA+o8gFma4NoQKjFCKsfrHQ9ZwPON8rtfZbf12alBMl EBlWkStYoskmT0EVmYl26A4Y54z17JVRNslJb/ZW/Xdzy4jQA6wJB7QiiORHzn4K TZlvTpb917AG9S1Rz+xXwDbDaRuEKrBn -----END CERTIFICATE-----Generated at Tue May 13 04:50:54 2025 by rpki-client