$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft File: 4ed5yzH_53MaM7Xrfq_GsqvbROM.mft (raw, json) Hash identifier: ldSGRV5P656zNUwPMRFOv5aVI/Udlp6JYBJT8yS6+Tw= Subject key identifier: F2:56:5C:87:8A:AA:71:4A:E3:7F:83:6C:C0:CF:91:95:94:9A:C8:C8 Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 Certificate issuer: /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft Manifest number: 0152 Signing time: Tue 13 May 2025 03:25:43 +0000 Manifest this update: Tue 13 May 2025 03:25:43 +0000 Manifest next update: Tue 20 May 2025 03:25:42 +0000 Files and hashes: 1: 4ed5yzH_53MaM7Xrfq_GsqvbROM.crl (hash: yx9iU9jbBwgbpJI3LGjQZ73uftg36JMYsQiOlscano8=) 2: 9E6C93C6372311EEACE5BF61C4F9AE02.roa (hash: glLqt8A+PG2i48HeZjmY7dCokn6j6eyQTAGv7a4dQe4=) 3: 9F1B80CA372311EEACE5BF61C4F9AE02.roa (hash: cXsdzPTH/yRS7sygsATYiwsQyV1n0HK8W/wMQYfB7Sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3737, serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Validity Not Before: May 13 03:25:43 2025 GMT Not After : May 20 03:25:42 2025 GMT Subject: CN=6822bbb7-b143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e6:24:37:da:47:8d:aa:07:a7:45:5c:1b:6e: d8:fe:c8:8f:a6:e1:06:d9:55:3f:63:29:3e:70:ed: 48:3d:bd:bf:e7:49:e3:bf:29:2b:da:86:b9:c7:53: 91:9b:cd:96:e1:98:b7:43:be:41:bf:8c:ad:5d:b3: 49:04:f8:aa:11:33:f7:13:fb:36:a1:f6:ce:c4:89: 5e:96:fe:b2:4a:2e:c7:e7:09:96:7e:4a:17:7c:7e: 7f:23:5e:78:19:61:6c:b1:20:7c:e7:be:3f:ee:16: 96:48:10:a4:d7:bb:06:4a:98:04:2a:a2:a0:46:0e: 2d:3d:f2:85:70:81:9b:37:ad:f5:a2:92:f9:9f:9b: a7:29:1f:84:a7:10:63:0e:15:db:22:89:d5:29:af: 88:c6:78:0e:eb:0b:a7:79:07:a6:89:20:dc:58:be: 9c:f1:9b:8d:a2:e1:1a:7b:22:43:6d:ce:33:ad:cc: 48:4b:c3:5e:b7:49:eb:e5:f1:79:25:31:62:b1:55: b6:ea:a1:ea:47:e2:f0:0c:86:99:c6:d4:19:77:6f: 40:16:66:08:b1:ab:34:74:c3:3d:d5:37:6c:2e:9e: cd:41:e4:1a:89:ca:6b:68:5b:05:89:38:c1:0d:d9: a3:45:7e:09:26:a4:5e:fd:54:51:1f:b5:7a:7c:e9: 80:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:56:5C:87:8A:AA:71:4A:E3:7F:83:6C:C0:CF:91:95:94:9A:C8:C8 X509v3 Authority Key Identifier: keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:21:fa:c8:e2:50:9b:b2:10:fe:fb:72:e0:d1:88:47:8c:5f: 27:16:b9:a8:23:84:41:59:5d:1e:ba:1e:7f:e7:83:34:4f:4a: ca:6e:a6:98:0d:c6:5c:4c:d7:59:3e:8e:96:df:0b:e3:74:ff: ae:82:05:f6:c5:9a:4a:95:90:0b:44:ca:d8:a8:8c:95:63:20: 66:e4:7a:f1:88:86:09:7c:31:19:0f:a9:4c:80:d3:59:8f:9c: 86:39:c5:03:a7:e9:db:ce:5f:99:69:be:21:30:63:fa:83:2f: da:b1:fc:bd:47:b9:39:93:33:1a:b9:3b:09:93:cd:a9:d1:ed: 0a:bc:bf:fb:17:0a:31:80:c8:36:1f:82:f4:76:a1:af:6f:c5: a2:fd:c9:90:ef:9d:52:1d:cc:99:65:24:5b:80:11:49:0b:f0: 9c:34:db:0d:76:54:ad:d0:ea:7d:c5:33:33:22:09:1c:32:2a: 94:f8:eb:3d:ee:07:72:5c:3d:c0:99:76:cb:02:17:82:7a:d5: 3f:79:1e:54:ad:0e:8b:6e:11:82:00:b5:9b:7b:0f:41:b1:b5: 13:06:63:8c:7f:65:c3:5f:d3:87:43:a0:bb:c5:44:a5:35:b8: ac:92:fd:b3:b5:61:fc:5a:94:51:79:c1:32:42:d3:b7:04:96: 7f:3b:4a:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3MzcxMTAvBgNVBAUTKEUxRTc3OUNCMzFGRkU3NzMxQTMzQjVFQjdFQUZDNkIy QUJEQjQ0RTMwHhcNMjUwNTEzMDMyNTQzWhcNMjUwNTIwMDMyNTQyWjAYMRYwFAYD VQQDEw02ODIyYmJiNy1iMTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOYkN9pHjaoHp0VcG27Y/siPpuEG2VU/Yyk+cO1IPb2/50njvykr2oa5x1OR m82W4Zi3Q75Bv4ytXbNJBPiqETP3E/s2ofbOxIlelv6ySi7H5wmWfkoXfH5/I154 GWFssSB8574/7haWSBCk17sGSpgEKqKgRg4tPfKFcIGbN631opL5n5unKR+EpxBj DhXbIonVKa+IxngO6wuneQemiSDcWL6c8ZuNouEaeyJDbc4zrcxIS8Net0nr5fF5 JTFisVW26qHqR+LwDIaZxtQZd29AFmYIsas0dMM91TdsLp7NQeQaicpraFsFiTjB DdmjRX4JJqRe/VRRH7V6fOmATwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJWXIeK qnFK43+DbMDPkZWUmsjIMB8GA1UdIwQYMBaAFOHnecsx/+dzGjO1636vxrKr20Tj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzczNy84Mjk0MzYzRTMz NTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUzTWFNN1hyZnFfR3NxdmJS T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRlZDV5ekhfNTNNYU03WHJmcV9Hc3F2YlJPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzczNy84Mjk0MzYzRTMzNTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUz TWFNN1hyZnFfR3NxdmJST00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjIfrI4lCbshD++3Lg0YhHjF8nFrmoI4RBWV0euh5/54M0T0rKbqaY DcZcTNdZPo6W3wvjdP+uggX2xZpKlZALRMrYqIyVYyBm5HrxiIYJfDEZD6lMgNNZ j5yGOcUDp+nbzl+Zab4hMGP6gy/asfy9R7k5kzMauTsJk82p0e0KvL/7FwoxgMg2 H4L0dqGvb8Wi/cmQ751SHcyZZSRbgBFJC/CcNNsNdlSt0Op9xTMzIgkcMiqU+Os9 7gdyXD3AmXbLAheCetU/eR5UrQ6LbhGCALWbew9BsbUTBmOMf2XDX9OHQ6C7xUSl Nbiskv2ztWH8WpRRecEyQtO3BJZ/O0oC -----END CERTIFICATE-----Generated at Tue May 13 19:17:46 2025 by rpki-client