$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.mft File: 4j5WiDpuN63lIjxBOzs7D3gbySk.mft (raw, json) Hash identifier: aa5FVLgBxmGdvRPx5rR0ls2eePhm0cQgc0CF7e25AA8= Subject key identifier: DE:EE:7C:79:0A:C4:DE:D1:AB:0A:7F:39:97:B9:BD:1F:5A:87:CF:2C Authority key identifier: E2:3E:56:88:3A:6E:37:AD:E5:22:3C:41:3B:3B:3B:0F:78:1B:C9:29 Certificate issuer: /CN=A91DF645/serialNumber=E23E56883A6E37ADE5223C413B3B3B0F781BC929 Certificate serial: 116E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4j5WiDpuN63lIjxBOzs7D3gbySk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.mft Manifest number: 1165 Signing time: Fri 16 May 2025 17:28:44 +0000 Manifest this update: Fri 16 May 2025 17:28:44 +0000 Manifest next update: Fri 23 May 2025 17:28:44 +0000 Files and hashes: 1: 4j5WiDpuN63lIjxBOzs7D3gbySk.crl (hash: U5zm57CJ5V5JBBM+BtpMQdJX+bMt8ZE2qONEzxDRkxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.crl rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4j5WiDpuN63lIjxBOzs7D3gbySk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 17:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4462 (0x116e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF645, serialNumber=E23E56883A6E37ADE5223C413B3B3B0F781BC929 Validity Not Before: May 16 17:28:44 2025 GMT Not After : May 23 17:28:44 2025 GMT Subject: CN=682775cc-63a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:76:07:37:ed:6c:a8:31:35:93:c5:73:61:3c: 9d:3c:55:fc:40:46:ac:d7:7d:82:f2:9e:be:fc:b5: 0c:99:8e:b3:51:bd:bd:84:69:ed:4c:16:3d:da:49: 8e:de:2c:e3:c8:4b:b1:91:a1:37:39:ec:3d:c4:37: 67:a4:fd:34:58:7a:90:88:64:4a:d2:76:69:48:a7: b2:ce:c4:d4:3d:32:ac:1e:6b:af:ab:58:42:04:78: 1f:50:17:5f:15:c5:c1:77:5a:44:26:27:bc:2f:ee: fc:54:28:cc:12:4b:49:51:41:c4:f5:08:8e:06:9c: 78:56:f0:04:ea:6a:7a:9b:de:e3:29:c7:0a:8e:a3: c1:2b:5a:6a:0f:e2:f8:e3:c8:73:eb:f6:80:a1:b4: a9:75:3f:e1:a7:aa:b5:e3:d7:92:40:0d:3d:e7:4b: f7:fb:d7:cd:13:ad:48:a8:25:7c:a6:b9:ab:57:31: ce:5e:ea:38:79:6c:24:95:21:e6:93:d3:93:0d:9b: 15:06:d4:09:6f:65:fc:d3:f5:d0:20:67:98:13:bf: ec:4d:c2:c7:fa:ff:c4:70:70:49:8a:ee:03:56:a0: 5f:fb:30:ab:cf:99:f8:0a:af:44:f2:55:f7:2f:96: e7:53:ee:44:74:5c:77:85:c3:76:6e:08:e8:5d:2a: d6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:EE:7C:79:0A:C4:DE:D1:AB:0A:7F:39:97:B9:BD:1F:5A:87:CF:2C X509v3 Authority Key Identifier: keyid:E2:3E:56:88:3A:6E:37:AD:E5:22:3C:41:3B:3B:3B:0F:78:1B:C9:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4j5WiDpuN63lIjxBOzs7D3gbySk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:ad:30:11:9e:60:0d:3c:7b:62:b1:df:48:3e:23:89:86:b1: e0:a0:79:03:c6:09:a8:67:ef:5c:9d:24:82:5d:5d:8f:f8:23: 74:9c:eb:40:49:1b:17:2e:b2:d1:6a:5c:23:97:ba:a5:b3:1e: 2a:55:fe:d2:44:34:4b:5f:fa:e4:a4:6c:47:2f:b3:06:5b:06: f6:4f:b1:00:49:7b:4f:c2:db:d3:40:58:0a:67:15:e8:dc:f1: 4c:3a:e3:4b:42:e4:82:9d:a6:e9:4f:f2:62:c5:85:d8:65:5b: 02:fb:81:4c:8b:0a:ec:e5:44:15:f5:cd:0c:a4:05:05:a6:b2: cb:f4:55:a2:bd:07:67:81:e0:60:5a:48:1a:36:02:0e:63:07: ab:ec:aa:58:8a:a1:b9:c0:65:18:3a:ef:dc:6e:a4:8e:ce:63: 6a:7b:fc:e3:81:86:d6:b5:54:f5:f2:f9:66:12:5f:38:e1:38: 5a:f8:4b:3f:a8:1c:41:e9:18:02:4f:73:fa:fc:80:51:74:41: 21:fe:9d:88:4e:da:3c:33:3c:33:99:2a:79:cd:a2:76:ba:a0: c0:5e:20:f5:f3:2e:91:84:aa:ea:0e:34:f9:bd:01:bb:53:69: b1:39:f6:f8:4f:02:af:04:3f:fb:4a:41:95:2f:9c:a4:0d:0b: 84:55:19:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY2NDUxMTAvBgNVBAUTKEUyM0U1Njg4M0E2RTM3QURFNTIyM0M0MTNCM0IzQjBG NzgxQkM5MjkwHhcNMjUwNTE2MTcyODQ0WhcNMjUwNTIzMTcyODQ0WjAYMRYwFAYD VQQDEw02ODI3NzVjYy02M2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznYHN+1sqDE1k8VzYTydPFX8QEas132C8p6+/LUMmY6zUb29hGntTBY92kmO 3izjyEuxkaE3Oew9xDdnpP00WHqQiGRK0nZpSKeyzsTUPTKsHmuvq1hCBHgfUBdf FcXBd1pEJie8L+78VCjMEktJUUHE9QiOBpx4VvAE6mp6m97jKccKjqPBK1pqD+L4 48hz6/aAobSpdT/hp6q149eSQA0950v3+9fNE61IqCV8prmrVzHOXuo4eWwklSHm k9OTDZsVBtQJb2X80/XQIGeYE7/sTcLH+v/EcHBJiu4DVqBf+zCrz5n4Cq9E8lX3 L5bnU+5EdFx3hcN2bgjoXSrWFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7ufHkK xN7Rqwp/OZe5vR9ah88sMB8GA1UdIwQYMBaAFOI+Vog6bjet5SI8QTs7Ow94G8kp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjY0NS9BQjE2RTU1MjAx RjYxMUU5QUJCODg3MERDNEY5QUUwMi80ajVXaURwdU42M2xJanhCT3pzN0QzZ2J5 U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRqNVdpRHB1TjYzbElqeEJPenM3RDNnYnlTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjY0NS9BQjE2RTU1MjAxRjYxMUU5QUJCODg3MERDNEY5QUUwMi80ajVXaURwdU42 M2xJanhCT3pzN0QzZ2J5U2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjrTARnmANPHtisd9IPiOJhrHgoHkDxgmoZ+9cnSSCXV2P+CN0nOtA SRsXLrLRalwjl7qlsx4qVf7SRDRLX/rkpGxHL7MGWwb2T7EASXtPwtvTQFgKZxXo 3PFMOuNLQuSCnabpT/JixYXYZVsC+4FMiwrs5UQV9c0MpAUFprLL9FWivQdngeBg WkgaNgIOYwer7KpYiqG5wGUYOu/cbqSOzmNqe/zjgYbWtVT18vlmEl844Tha+Es/ qBxB6RgCT3P6/IBRdEEh/p2ITto8MzwzmSp5zaJ2uqDAXiD18y6RhKrqDjT5vQG7 U2mxOfb4TwKvBD/7SkGVL5ykDQuEVRlz -----END CERTIFICATE-----Generated at Fri May 16 23:36:54 2025 by rpki-client