$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft File: 4V0TCwuymA4b8RwBvMt1O0loSoA.mft (raw, json) Hash identifier: siyoTnE3WDe7jKi4bRXEQjuhgElHvnO16DQZ/gLU6l8= Subject key identifier: 7E:98:67:28:D8:3D:06:19:BC:FB:75:FE:82:1F:31:11:13:25:B2:57 Authority key identifier: E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80 Certificate issuer: /CN=A91CE7BD/serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80 Certificate serial: 0607 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft Manifest number: 0603 Signing time: Fri 16 May 2025 23:08:19 +0000 Manifest this update: Fri 16 May 2025 23:08:19 +0000 Manifest next update: Fri 23 May 2025 23:08:19 +0000 Files and hashes: 1: 4V0TCwuymA4b8RwBvMt1O0loSoA.crl (hash: TieFr5+QF14/N9uySVIbfM9vO6OOyj8TVMhfkb5jlBE=) 2: 6AE1616AA3F711EBBA757063C4F9AE02.roa (hash: mBt8RtcAAJ1E0qkhS2O17Qle9xp96BCyxe5ScaBrVUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 23:08:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1543 (0x607) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE7BD, serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80 Validity Not Before: May 16 23:08:19 2025 GMT Not After : May 23 23:08:19 2025 GMT Subject: CN=6827c563-1ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:15:93:96:6e:8a:3f:a7:57:46:e4:b0:1a:5d: 73:2b:54:d8:4a:70:39:ff:49:b2:f5:39:8f:3a:1f: 72:bd:01:18:89:f0:76:fc:c4:fb:51:ad:d7:0f:82: 5d:0e:86:ae:4b:f6:e9:ab:92:2a:5e:e6:f7:7d:0f: 08:cc:f1:16:73:25:d7:22:f9:a6:bf:a3:dc:9e:cb: eb:53:96:0a:2c:2a:21:d8:f9:90:de:db:57:80:56: 9d:cd:9f:16:b1:ce:bc:de:ba:41:05:76:35:2e:fd: 8c:23:0a:30:8f:ae:9b:cf:99:e5:7f:5b:c2:96:a3: 86:54:1e:b3:d2:2c:c3:1c:3e:b6:ac:94:02:34:fb: 85:35:8f:99:88:c6:6d:ac:a1:c6:e7:53:59:8f:62: ed:5d:fa:5b:cc:fe:97:0f:87:2f:d6:5e:7d:ac:a8: de:78:8b:b5:6c:52:74:fc:d4:67:96:2c:95:49:ae: 11:c9:82:e5:e4:1e:ee:1b:c7:e8:99:8a:f9:2b:5f: 32:06:20:10:b7:3f:f9:d1:7d:02:cd:f6:93:0a:b1: 2b:08:26:ed:56:67:a1:a9:a5:82:65:e0:32:fd:a3: 8e:00:6f:13:e9:e7:64:75:57:19:ee:e4:48:e6:ba: 1d:d7:d7:e5:81:42:29:10:23:ac:3b:61:e4:ec:bb: 58:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:98:67:28:D8:3D:06:19:BC:FB:75:FE:82:1F:31:11:13:25:B2:57 X509v3 Authority Key Identifier: keyid:E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:15:47:cc:14:fa:fd:ac:c4:ef:d6:97:e8:8c:f4:67:c0:f3: c0:cf:89:6e:6d:a7:ac:5a:22:5c:3a:54:07:ad:e8:6b:09:35: f2:90:3c:72:46:4c:5c:4a:e4:5c:5a:c4:11:66:20:d2:ca:3e: 34:c9:25:24:74:17:6d:c8:1c:61:d9:b8:31:1b:f7:6d:57:be: 6a:b5:22:29:7d:70:ae:39:ea:50:83:e9:7f:2a:12:e8:82:bf: a7:4e:49:29:ef:be:51:cb:23:13:f9:72:66:be:c8:e7:fa:8f: 38:9e:91:e1:d2:17:0d:c1:6a:67:51:6b:5c:25:10:9b:66:3a: 08:9a:d5:6a:83:b2:6e:cb:63:60:2a:ed:d3:fb:06:03:f0:d6: 9f:f1:1a:2d:b6:56:ad:d8:2b:a3:5b:bc:42:76:86:93:09:fe: b8:4f:9f:09:3b:c6:86:99:61:96:70:d2:0c:17:a2:b4:ac:3e: 4b:54:ff:a9:1e:2a:03:01:d0:6e:a9:06:82:24:7e:c6:b9:3b: d7:2a:20:da:9a:16:96:9d:4e:a5:36:6b:fd:e7:f9:97:1d:c0: 11:05:7f:0e:3a:94:2e:1b:0f:4c:59:33:24:1d:1d:4f:9e:b5: 32:a8:f6:09:45:28:3e:be:eb:ec:af:0c:3f:7a:00:10:5d:eb: 41:20:a9:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U3QkQxMTAvBgNVBAUTKEUxNUQxMzBCMEJCMjk4MEUxQkYxMUMwMUJDQ0I3NTNC NDk2ODRBODAwHhcNMjUwNTE2MjMwODE5WhcNMjUwNTIzMjMwODE5WjAYMRYwFAYD VQQDEw02ODI3YzU2My0xYWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthWTlm6KP6dXRuSwGl1zK1TYSnA5/0my9TmPOh9yvQEYifB2/MT7Ua3XD4Jd DoauS/bpq5IqXub3fQ8IzPEWcyXXIvmmv6PcnsvrU5YKLCoh2PmQ3ttXgFadzZ8W sc683rpBBXY1Lv2MIwowj66bz5nlf1vClqOGVB6z0izDHD62rJQCNPuFNY+ZiMZt rKHG51NZj2LtXfpbzP6XD4cv1l59rKjeeIu1bFJ0/NRnliyVSa4RyYLl5B7uG8fo mYr5K18yBiAQtz/50X0CzfaTCrErCCbtVmehqaWCZeAy/aOOAG8T6edkdVcZ7uRI 5rod19flgUIpECOsO2Hk7LtYywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6YZyjY PQYZvPt1/oIfMRETJbJXMB8GA1UdIwQYMBaAFOFdEwsLspgOG/EcAbzLdTtJaEqA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTdCRC9EMzAyNjAzNEEz RjUxMUVCOTJGOUM1NjFDNEY5QUUwMi80VjBUQ3d1eW1BNGI4UndCdk10MU8wbG9T b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWMFRDd3V5bUE0YjhSd0J2TXQxTzBsb1NvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTdCRC9EMzAyNjAzNEEzRjUxMUVCOTJGOUM1NjFDNEY5QUUwMi80VjBUQ3d1eW1B NGI4UndCdk10MU8wbG9Tb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVFUfMFPr9rMTv1pfojPRnwPPAz4lubaesWiJcOlQHrehrCTXykDxy RkxcSuRcWsQRZiDSyj40ySUkdBdtyBxh2bgxG/dtV75qtSIpfXCuOepQg+l/KhLo gr+nTkkp775RyyMT+XJmvsjn+o84npHh0hcNwWpnUWtcJRCbZjoImtVqg7Juy2Ng Ku3T+wYD8Naf8Rottlat2CujW7xCdoaTCf64T58JO8aGmWGWcNIMF6K0rD5LVP+p HioDAdBuqQaCJH7GuTvXKiDamhaWnU6lNmv95/mXHcARBX8OOpQuGw9MWTMkHR1P nrUyqPYJRSg+vuvsrww/egAQXetBIKmV -----END CERTIFICATE-----Generated at Sat May 17 12:03:22 2025 by rpki-client