$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft File: 4JI7Cl99XGi66s5BQV9CpSDXSyo.mft (raw, json) Hash identifier: 2msikBvhJIZgc98ztOTvJwlmddwER8gEC2NRcI32D3Q= Subject key identifier: 52:19:AE:E9:31:CF:4A:F7:CF:38:EE:97:2B:15:6E:1A:AB:25:E8:65 Authority key identifier: E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A Certificate issuer: /CN=A91D9E49/serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A Certificate serial: 0B09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft Manifest number: 0B01 Signing time: Sat 10 May 2025 19:03:57 +0000 Manifest this update: Sat 10 May 2025 19:03:57 +0000 Manifest next update: Sat 17 May 2025 19:03:57 +0000 Files and hashes: 1: 4JI7Cl99XGi66s5BQV9CpSDXSyo.crl (hash: +hl9gSdBtCffruz+I47lTspMKnsc1V1+CIugyINwel4=) 2: 4CC0341641A311EABAADCE0AC4F9AE02.roa (hash: NcQf930jPATr+5XDKM18U6rSGEkKZ2yaCI8MgpUcALY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:03:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2825 (0xb09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9E49, serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A Validity Not Before: May 10 19:03:57 2025 GMT Not After : May 17 19:03:57 2025 GMT Subject: CN=681fa31d-1148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6a:6d:2e:7d:6a:bc:13:26:e3:a2:36:bf:9a: 47:9c:4c:fe:0d:8e:9b:e9:ac:f3:ae:77:e9:dd:b1: 9a:c3:f8:ca:9e:67:30:3e:dc:e9:dd:aa:e7:43:b3: 17:0e:3a:b3:fe:8f:d6:4f:f1:6f:42:97:8b:5c:a9: 1a:95:8e:d1:dc:95:ad:9d:cc:41:3d:a5:9e:0b:b1: 66:44:49:aa:79:ab:b1:39:29:12:f5:a3:37:43:15: cf:7e:fb:f4:4e:8b:ab:50:2f:52:4f:83:e1:40:25: f5:4b:76:4d:41:13:e1:53:09:25:b3:f2:75:cb:29: c7:76:89:fe:97:f7:2b:2c:d7:a4:38:56:35:ec:3a: ac:59:a0:fc:e6:5a:d6:5d:0d:f1:55:74:6b:07:f3: 3a:3c:a8:a3:e3:39:b7:3f:bf:bb:22:8d:67:03:f4: 73:8b:b7:dd:3b:1a:54:d9:57:62:a1:f1:8c:93:ae: 6e:9c:79:49:9a:64:26:f1:28:89:57:f7:82:8b:ba: 42:9e:f0:b9:ef:92:d0:1c:d3:db:60:e9:29:a3:5d: ca:48:da:62:8c:b6:c4:4b:8a:6b:e6:47:c9:2c:15: f4:d8:c5:9c:7c:56:10:1d:7d:cf:c2:18:f4:52:aa: 33:ef:99:39:3f:12:0e:eb:95:58:90:8f:35:b8:66: 97:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:19:AE:E9:31:CF:4A:F7:CF:38:EE:97:2B:15:6E:1A:AB:25:E8:65 X509v3 Authority Key Identifier: keyid:E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:68:4a:62:5c:c1:a0:bf:22:9c:88:b3:ac:25:17:2f:6f:16: dc:c0:d0:13:62:92:f9:ed:e0:5d:c5:aa:ce:e5:19:ac:ae:fc: 4f:b6:ad:e7:46:c1:93:04:2e:10:be:9d:6c:8c:86:b5:c3:cd: ba:96:2c:0b:dd:b8:79:d1:a7:d8:02:11:93:63:00:2d:f5:1a: 0a:09:65:60:ce:b4:c3:dd:14:e0:24:78:32:fb:df:ec:4d:03: 67:75:36:2c:11:5f:a8:9d:7d:f2:0b:fa:87:09:2b:74:78:3c: da:d9:e2:c2:f4:ef:9d:55:70:cb:19:2d:28:84:3c:fe:7d:09: b2:64:78:47:ca:a9:94:55:56:8a:2c:da:38:61:ba:96:9a:89: ab:d9:5c:34:cf:83:e4:8d:00:e3:eb:26:d2:c7:36:3d:d8:52: 45:19:6e:d8:96:a8:1f:fc:0c:f7:ea:8c:3e:d6:c7:90:60:a9: 18:9e:61:a5:07:0e:2c:6b:54:6c:46:16:c5:4b:06:c6:88:c7: 4a:d3:00:0f:14:35:52:15:de:46:af:33:4c:d7:f4:9b:e4:3d: f6:52:ba:df:d8:91:74:45:73:df:12:4d:79:25:15:2a:58:93: f3:84:ce:46:b8:ae:5a:ca:e3:75:be:7a:17:04:00:4b:ab:83: cc:fc:80:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlFNDkxMTAvBgNVBAUTKEUwOTIzQjBBNUY3RDVDNjhCQUVBQ0U0MTQxNUY0MkE1 MjBENzRCMkEwHhcNMjUwNTEwMTkwMzU3WhcNMjUwNTE3MTkwMzU3WjAYMRYwFAYD VQQDEw02ODFmYTMxZC0xMTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoWptLn1qvBMm46I2v5pHnEz+DY6b6azzrnfp3bGaw/jKnmcwPtzp3arnQ7MX Djqz/o/WT/FvQpeLXKkalY7R3JWtncxBPaWeC7FmREmqeauxOSkS9aM3QxXPfvv0 TourUC9ST4PhQCX1S3ZNQRPhUwkls/J1yynHdon+l/crLNekOFY17DqsWaD85lrW XQ3xVXRrB/M6PKij4zm3P7+7Io1nA/Rzi7fdOxpU2VdiofGMk65unHlJmmQm8SiJ V/eCi7pCnvC575LQHNPbYOkpo13KSNpijLbES4pr5kfJLBX02MWcfFYQHX3Pwhj0 Uqoz75k5PxIO65VYkI81uGaXHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFIZrukx z0r3zzjulysVbhqrJehlMB8GA1UdIwQYMBaAFOCSOwpffVxouurOQUFfQqUg10sq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUU0OS8wNDA0OUQwODQx QTIxMUVBOUYyNjk1ODdDNEY5QUUwMi80Skk3Q2w5OVhHaTY2czVCUVY5Q3BTRFhT eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRKSTdDbDk5WEdpNjZzNUJRVjlDcFNEWFN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUU0OS8wNDA0OUQwODQxQTIxMUVBOUYyNjk1ODdDNEY5QUUwMi80Skk3Q2w5OVhH aTY2czVCUVY5Q3BTRFhTeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCaEpiXMGgvyKciLOsJRcvbxbcwNATYpL57eBdxarO5RmsrvxPtq3n RsGTBC4Qvp1sjIa1w826liwL3bh50afYAhGTYwAt9RoKCWVgzrTD3RTgJHgy+9/s TQNndTYsEV+onX3yC/qHCSt0eDza2eLC9O+dVXDLGS0ohDz+fQmyZHhHyqmUVVaK LNo4YbqWmomr2Vw0z4PkjQDj6ybSxzY92FJFGW7Ylqgf/Az36ow+1seQYKkYnmGl Bw4sa1RsRhbFSwbGiMdK0wAPFDVSFd5GrzNM1/Sb5D32Urrf2JF0RXPfEk15JRUq WJPzhM5GuK5ayuN1vnoXBABLq4PM/IBT -----END CERTIFICATE-----Generated at Sun May 11 21:48:25 2025 by rpki-client