$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft File: 4z23k7vv5Gy8912zTnCUJ6cu8PM.mft (raw, json) Hash identifier: QOnSLqQcYnbr2vpUkH5TZCoQdiXnf+lZOZo4+MC3gss= Subject key identifier: 28:11:E1:73:58:F1:61:38:6C:BC:DB:D6:FB:26:73:C1:65:1D:BE:84 Authority key identifier: E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3 Certificate issuer: /CN=A91C7F6A/serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3 Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft Manifest number: 01C1 Signing time: Sun 11 May 2025 02:00:34 +0000 Manifest this update: Sun 11 May 2025 02:00:34 +0000 Manifest next update: Sun 18 May 2025 02:00:34 +0000 Files and hashes: 1: 4z23k7vv5Gy8912zTnCUJ6cu8PM.crl (hash: Q+e3id1RQNnTVzl/oMVBFvBEYcEyawVCVTbm8zFjEYQ=) 2: 81D5DEE47F5D11EDB4309B54C4F9AE02.roa (hash: zRdos/o+mb+OSdMpMggoSh17MEeYkJt0eDW/UfdGZq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7F6A, serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3 Validity Not Before: May 11 02:00:34 2025 GMT Not After : May 18 02:00:34 2025 GMT Subject: CN=682004c2-d4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b9:5e:5f:70:b9:ec:04:30:7b:bd:7c:06:fb: 73:d7:04:0c:68:94:0f:e4:c6:74:53:f3:bc:03:8e: cf:2f:9e:4a:31:0f:fb:71:f4:b8:e5:ce:3b:f3:b9: f6:dc:cb:42:88:b8:fd:d8:25:2e:24:d6:e6:8f:fe: 11:5e:20:33:b1:5e:d7:b7:61:7f:f3:f5:ca:3e:06: c6:7b:ac:6e:ba:c5:d0:70:8a:c3:89:08:42:5f:b1: a6:4c:21:45:56:d6:52:2a:24:5d:d8:3e:34:2f:e5: 04:34:ca:c4:45:09:f2:c4:32:2f:b1:bc:5a:f9:cf: 35:b7:51:81:a5:12:0c:ff:ce:31:cc:db:2b:26:59: 2d:09:f2:3f:71:2b:94:60:9d:7c:81:17:d0:28:b5: 54:2e:34:28:7c:c4:bc:dd:33:48:4c:66:a7:28:b9: f2:81:ca:0c:96:87:ca:05:7c:db:ea:fe:3f:81:42: 1f:fe:79:60:46:ee:0d:7a:8f:17:c7:42:a2:75:1f: 4e:83:56:08:01:da:1a:7d:f4:74:84:dc:91:08:3a: cc:08:ec:4e:4a:29:63:9e:63:47:de:1c:54:aa:f1: d3:3a:4a:f2:a4:f2:89:89:8f:9a:b4:77:83:f9:b2: 66:6a:1c:94:48:11:4a:fb:67:c7:24:5b:8d:95:f0: 5d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:11:E1:73:58:F1:61:38:6C:BC:DB:D6:FB:26:73:C1:65:1D:BE:84 X509v3 Authority Key Identifier: keyid:E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:90:0b:f5:a3:10:0d:30:94:10:ee:88:89:84:a0:a6:dd:88: 5e:e1:af:21:dd:62:c0:92:7f:b7:98:77:28:18:55:6a:60:2a: 07:62:89:3e:df:2c:86:08:d0:9c:1c:74:06:92:de:bb:3a:2c: e2:5b:fd:6f:ef:bc:c0:d3:67:f2:ba:f0:d4:08:7f:3f:7a:7f: 37:b6:56:60:fb:8a:1a:52:6f:57:75:33:08:8e:fa:ec:7c:0b: 2e:a8:9f:26:32:8c:dd:0d:51:ef:24:a3:b2:39:85:0f:d7:8b: 16:61:c1:95:bb:a3:88:4a:62:7b:d8:97:6a:68:f7:32:c0:f4: 4f:39:cc:7e:b8:72:0d:43:0e:20:36:9e:c0:f9:db:7e:f0:e3: 79:68:bf:52:62:6a:6c:01:f3:05:a5:79:2b:76:ae:83:c4:00: 9a:a6:11:3a:66:be:c4:14:76:6b:ba:1b:4d:c8:8d:4b:1d:9e: 65:ab:16:c0:0b:b5:ed:a2:bc:3a:ef:be:5e:80:8b:84:43:9d: 54:7f:cd:2d:04:40:04:0d:7a:d9:ee:76:2d:5c:0c:95:6c:74: 1b:5c:73:ed:14:d0:a7:86:27:89:4b:02:5a:f3:6e:b6:a2:5e: 6b:9d:33:c3:37:62:3f:39:32:a6:81:f6:3a:4b:02:ad:97:6a: 27:02:c0:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdGNkExMTAvBgNVBAUTKEUzM0RCNzkzQkJFRkU0NkNCQ0Y3NURCMzRFNzA5NDI3 QTcyRUYwRjMwHhcNMjUwNTExMDIwMDM0WhcNMjUwNTE4MDIwMDM0WjAYMRYwFAYD VQQDEw02ODIwMDRjMi1kNGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrleX3C57AQwe718Bvtz1wQMaJQP5MZ0U/O8A47PL55KMQ/7cfS45c4787n2 3MtCiLj92CUuJNbmj/4RXiAzsV7Xt2F/8/XKPgbGe6xuusXQcIrDiQhCX7GmTCFF VtZSKiRd2D40L+UENMrERQnyxDIvsbxa+c81t1GBpRIM/84xzNsrJlktCfI/cSuU YJ18gRfQKLVULjQofMS83TNITGanKLnygcoMlofKBXzb6v4/gUIf/nlgRu4Neo8X x0KidR9Og1YIAdoaffR0hNyRCDrMCOxOSiljnmNH3hxUqvHTOkrypPKJiY+atHeD +bJmahyUSBFK+2fHJFuNlfBdvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgR4XNY 8WE4bLzb1vsmc8FlHb6EMB8GA1UdIwQYMBaAFOM9t5O77+RsvPdds05wlCenLvDz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0Y2QS8wNjc5MjUwMDdG NDIxMUVEQjRFNzhDODZDNEY5QUUwMi80ejIzazd2djVHeTg5MTJ6VG5DVUo2Y3U4 UE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzR6MjNrN3Z2NUd5ODkxMnpUbkNVSjZjdThQTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0Y2QS8wNjc5MjUwMDdGNDIxMUVEQjRFNzhDODZDNEY5QUUwMi80ejIzazd2djVH eTg5MTJ6VG5DVUo2Y3U4UE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHkAv1oxANMJQQ7oiJhKCm3Yhe4a8h3WLAkn+3mHcoGFVqYCoHYok+ 3yyGCNCcHHQGkt67OiziW/1v77zA02fyuvDUCH8/en83tlZg+4oaUm9XdTMIjvrs fAsuqJ8mMozdDVHvJKOyOYUP14sWYcGVu6OISmJ72JdqaPcywPRPOcx+uHINQw4g Np7A+dt+8ON5aL9SYmpsAfMFpXkrdq6DxACaphE6Zr7EFHZruhtNyI1LHZ5lqxbA C7Xtorw6775egIuEQ51Uf80tBEAEDXrZ7nYtXAyVbHQbXHPtFNCnhieJSwJa8262 ol5rnTPDN2I/OTKmgfY6SwKtl2onAsCh -----END CERTIFICATE-----Generated at Sun May 11 11:05:59 2025 by rpki-client