$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft File: 4ggepNPNtZniYIYCcE_bNYbUj1c.mft (raw, json) Hash identifier: EgBg3hQntYVi7SUqbicN7puJqStq9X3ryndz4dPaIek= Subject key identifier: 6F:BD:2C:20:4C:0A:8E:FF:6F:81:40:79:CE:02:6E:2B:76:B6:9D:59 Authority key identifier: E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57 Certificate issuer: /CN=A91CDF1C/serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57 Certificate serial: 0B97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft Manifest number: 0B91 Signing time: Wed 14 May 2025 19:08:44 +0000 Manifest this update: Wed 14 May 2025 19:08:44 +0000 Manifest next update: Wed 21 May 2025 19:08:44 +0000 Files and hashes: 1: 4ggepNPNtZniYIYCcE_bNYbUj1c.crl (hash: X0446U9cSYwuEt9nwoYqCbaneP+2YY3CX6KlzVVh9vs=) 2: 277BE15035CD11EAA2366620C4F9AE02.roa (hash: hJTBnRNb+rBuco3pui7GARCwhnSPV6pCkk0fRFtrHKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.crl rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2967 (0xb97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDF1C, serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57 Validity Not Before: May 14 19:08:44 2025 GMT Not After : May 21 19:08:44 2025 GMT Subject: CN=6824ea3c-9760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:30:6f:23:74:97:57:a2:aa:7e:44:1d:da:c5: a2:19:a9:56:c1:30:2c:0b:1e:39:ff:14:65:81:89: 0d:77:52:4d:6f:aa:f2:bb:1d:c5:84:ec:5e:6d:da: 14:27:c0:c5:52:f2:c1:f9:df:ab:00:56:6f:88:62: d3:91:4d:c9:56:e7:9c:98:b8:c5:7b:aa:92:71:63: 5a:3d:cb:91:08:79:1b:bb:49:30:66:85:cb:ab:9b: f7:c5:cc:3a:cf:c4:b5:d6:8b:c8:ab:72:56:ef:72: 2d:bf:81:b2:2f:22:8a:18:3e:6e:a6:79:fd:b2:89: 46:1a:df:f8:30:49:41:bd:a7:cf:87:df:40:19:11: cd:44:e6:96:00:39:f7:f4:bf:75:1a:fb:4d:68:10: 40:9f:cd:c1:2a:12:9b:d9:58:af:b2:eb:59:e1:50: ff:c6:21:5c:ff:cc:f6:b3:06:5f:0f:ba:93:32:43: 60:b9:d4:02:98:c0:3e:8f:08:4a:a5:03:36:50:b1: 32:fe:57:7f:19:a5:13:cf:92:d7:97:8b:07:a3:08: 6a:8b:08:59:96:70:88:e0:66:cf:f8:f0:dc:33:d9: b4:48:ff:a5:c3:53:e0:b2:2b:e3:c0:64:4e:eb:04: 51:2a:4f:da:3c:82:0b:80:0e:c8:e8:6e:73:04:de: 14:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:BD:2C:20:4C:0A:8E:FF:6F:81:40:79:CE:02:6E:2B:76:B6:9D:59 X509v3 Authority Key Identifier: keyid:E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:91:f6:c6:d2:46:de:80:aa:c0:b2:97:83:99:5b:ad:e1:7b: db:f3:ee:6e:59:0b:1d:ff:21:42:22:5f:60:03:74:0e:8a:dd: de:13:b8:62:4a:d5:8b:ac:6f:df:cc:06:25:88:1a:3f:f9:4f: 90:75:29:1f:12:f7:48:e7:bf:52:71:a1:67:51:42:b0:28:0e: e1:3f:f9:2c:0a:81:08:f3:93:ac:8e:ec:32:a7:c4:a2:3f:69: af:2a:46:6b:ab:9f:fe:d6:b7:90:60:9d:af:5e:46:73:1b:22: 58:d0:a1:00:b7:45:57:23:35:18:1d:fe:ca:08:87:af:cc:b4: 9e:c3:fe:54:de:a3:db:ed:72:3f:d0:21:e9:e4:17:1a:db:01: 55:e9:0a:3b:13:08:d3:a8:02:95:bb:f1:7f:fb:fd:d9:f1:e9: 4f:17:33:54:88:e9:6d:c0:83:2b:68:65:be:ff:59:5f:00:7a: 09:a1:e7:d7:f2:39:0c:56:13:ce:1f:f7:a2:91:47:25:50:d3: d0:3f:1d:3c:28:08:bb:6b:26:5e:f3:ce:34:39:08:7a:13:46: 5b:92:2f:11:69:fd:48:8a:c1:c9:b7:af:82:9d:00:29:13:82: fd:86:52:7a:a3:1b:b3:15:04:8d:10:59:82:af:d7:5f:13:4a: ef:a7:48:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGMUMxMTAvBgNVBAUTKEUyMDgxRUE0RDNDREI1OTlFMjYwODYwMjcwNEZEQjM1 ODZENDhGNTcwHhcNMjUwNTE0MTkwODQ0WhcNMjUwNTIxMTkwODQ0WjAYMRYwFAYD VQQDEw02ODI0ZWEzYy05NzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDBvI3SXV6KqfkQd2sWiGalWwTAsCx45/xRlgYkNd1JNb6ryux3FhOxebdoU J8DFUvLB+d+rAFZviGLTkU3JVuecmLjFe6qScWNaPcuRCHkbu0kwZoXLq5v3xcw6 z8S11ovIq3JW73Itv4GyLyKKGD5upnn9solGGt/4MElBvafPh99AGRHNROaWADn3 9L91GvtNaBBAn83BKhKb2VivsutZ4VD/xiFc/8z2swZfD7qTMkNgudQCmMA+jwhK pQM2ULEy/ld/GaUTz5LXl4sHowhqiwhZlnCI4GbP+PDcM9m0SP+lw1PgsivjwGRO 6wRRKk/aPIILgA7I6G5zBN4UmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+9LCBM Co7/b4FAec4Cbit2tp1ZMB8GA1UdIwQYMBaAFOIIHqTTzbWZ4mCGAnBP2zWG1I9X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREYxQy8zNkM5NjIyMDI2 M0UxMUVBODRGMUJDODZDNEY5QUUwMi80Z2dlcE5QTnRabmlZSVlDY0VfYk5ZYlVq MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRnZ2VwTlBOdFpuaVlJWUNjRV9iTlliVWoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REYxQy8zNkM5NjIyMDI2M0UxMUVBODRGMUJDODZDNEY5QUUwMi80Z2dlcE5QTnRa bmlZSVlDY0VfYk5ZYlVqMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBckfbG0kbegKrAspeDmVut4Xvb8+5uWQsd/yFCIl9gA3QOit3eE7hi StWLrG/fzAYliBo/+U+QdSkfEvdI579ScaFnUUKwKA7hP/ksCoEI85Osjuwyp8Si P2mvKkZrq5/+1reQYJ2vXkZzGyJY0KEAt0VXIzUYHf7KCIevzLSew/5U3qPb7XI/ 0CHp5Bca2wFV6Qo7EwjTqAKVu/F/+/3Z8elPFzNUiOltwIMraGW+/1lfAHoJoefX 8jkMVhPOH/eikUclUNPQPx08KAi7ayZe8840OQh6E0Zbki8Raf1IisHJt6+CnQAp E4L9hlJ6oxuzFQSNEFmCr9dfE0rvp0ii -----END CERTIFICATE-----Generated at Fri May 16 11:50:26 2025 by rpki-client