$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft File: C4E-K7qEBp60NNZWZn_s4fYbSUs.mft (raw, json) Hash identifier: YuatMiEbgPk/fLIQbGMBx8vjOYfXYRslvf3rb/ZVZ1M= Subject key identifier: B6:32:5B:27:87:41:84:AC:C1:83:E0:BD:6B:37:9A:67:B1:77:2E:C4 Authority key identifier: 0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B Certificate issuer: /CN=A91E7A8E/serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft Manifest number: 0115 Signing time: Fri 09 May 2025 03:54:23 +0000 Manifest this update: Fri 09 May 2025 03:54:22 +0000 Manifest next update: Fri 16 May 2025 03:54:22 +0000 Files and hashes: 1: C4E-K7qEBp60NNZWZn_s4fYbSUs.crl (hash: ft2CLruFUnJmZNSz3PUtAfxa9RIP+LiEqsrJc4YJgm4=) 2: 0120C296835D11EEA3484166C4F9AE02.roa (hash: 7OzrwZ3Ky/gjMPnFBCcju8Q1dBXI74VmazgiOgPzNsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 03:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7A8E, serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B Validity Not Before: May 9 03:54:22 2025 GMT Not After : May 16 03:54:22 2025 GMT Subject: CN=681d7c6e-d4fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ff:39:f1:f0:86:0f:83:60:54:2a:26:f3:9e: a8:4a:06:d5:25:ec:af:4b:26:d8:cb:32:d6:eb:b6: 75:eb:c6:7f:78:4e:0c:c6:76:e8:99:48:4c:d0:1e: a7:6d:e9:c5:55:d5:aa:c7:6e:31:05:16:59:dc:44: 89:21:4d:73:55:7a:1b:96:19:d8:f9:d3:9c:bc:6a: 73:51:9b:25:c3:a3:8b:ab:c4:87:01:c8:20:bd:bd: 98:2b:f0:b8:c6:9b:07:30:1f:d9:58:0f:9d:31:51: b0:72:e4:9c:20:ee:f7:50:91:c9:1c:27:6c:0b:6a: 46:e8:88:78:b3:fb:ac:90:5c:7e:d8:08:58:6b:ae: 83:f0:a9:90:c1:31:e3:84:09:ca:5e:3b:cd:c5:89: 7f:2e:9a:a5:32:e0:a1:8e:06:0a:41:38:56:59:14: 20:65:21:c6:65:a5:59:8f:e1:09:9f:61:91:f9:15: 54:05:0c:c7:0f:8e:6c:15:c8:cd:14:4c:ad:de:ee: 31:0b:f4:2e:63:2d:c4:9c:da:18:77:15:ee:99:f2: d7:ba:b5:ce:a3:40:b3:29:fb:4c:6b:df:a5:33:9e: e4:89:ea:e1:57:f8:3a:60:89:6e:87:8f:c4:6b:02: d4:03:ae:fa:f1:ed:61:d6:55:68:8e:08:c7:fe:83: 0b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:32:5B:27:87:41:84:AC:C1:83:E0:BD:6B:37:9A:67:B1:77:2E:C4 X509v3 Authority Key Identifier: keyid:0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:21:8b:c9:0c:f2:ac:80:3b:ee:72:2b:19:ea:c6:e3:df:eb: ec:d0:32:b3:2f:7c:00:aa:a3:6f:74:8f:37:44:11:e8:b6:dc: 75:b2:fd:24:92:dc:17:b5:bd:e2:77:28:ca:10:78:d4:f5:5f: 74:cf:ff:b6:85:23:f3:29:ea:60:84:ad:00:5d:d3:6b:cd:6e: 69:7b:dc:40:ff:a6:00:e2:76:8a:32:18:e8:a1:2e:d5:6b:10: 87:53:ba:cc:88:8e:70:17:2e:0c:2b:b6:40:df:bd:24:22:36: b3:65:b9:52:df:e6:27:78:7f:2f:73:58:3d:2e:0d:5d:04:f8: 50:a9:03:a5:ec:14:4b:f2:3f:63:58:31:1b:63:3d:56:d9:37: 70:70:79:93:36:7a:0e:ef:d2:86:12:93:32:b5:5e:5f:eb:80: c7:84:04:d1:60:02:a5:04:ba:16:0a:0d:fa:50:4d:ac:f3:24: 36:ab:53:97:66:b2:26:ba:11:4f:44:b8:fc:f7:09:8b:1e:ea: 01:41:f3:3f:60:85:1d:f5:01:ea:0a:31:cb:6c:0b:9b:c8:e7: f8:de:33:21:6b:69:b1:35:09:85:30:db:75:36:d0:35:f1:0c: 44:db:5c:31:c7:cc:e1:b3:0f:04:3a:59:5a:d2:13:e7:66:b2: 39:c6:ce:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdBOEUxMTAvBgNVBAUTKDBCODEzRTJCQkE4NDA2OUVCNDM0RDY1NjY2N0ZFQ0Ux RjYxQjQ5NEIwHhcNMjUwNTA5MDM1NDIyWhcNMjUwNTE2MDM1NDIyWjAYMRYwFAYD VQQDEw02ODFkN2M2ZS1kNGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2P858fCGD4NgVCom856oSgbVJeyvSybYyzLW67Z168Z/eE4MxnbomUhM0B6n benFVdWqx24xBRZZ3ESJIU1zVXoblhnY+dOcvGpzUZslw6OLq8SHAcggvb2YK/C4 xpsHMB/ZWA+dMVGwcuScIO73UJHJHCdsC2pG6Ih4s/uskFx+2AhYa66D8KmQwTHj hAnKXjvNxYl/LpqlMuChjgYKQThWWRQgZSHGZaVZj+EJn2GR+RVUBQzHD45sFcjN FEyt3u4xC/QuYy3EnNoYdxXumfLXurXOo0CzKftMa9+lM57kierhV/g6YIluh4/E awLUA6768e1h1lVojgjH/oMLIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYyWyeH QYSswYPgvWs3mmexdy7EMB8GA1UdIwQYMBaAFAuBPiu6hAaetDTWVmZ/7OH2G0lL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0E4RS9BMDUxNTZBNjgz NUMxMUVFODhFQUI4NEZDNEY5QUUwMi9DNEUtSzdxRUJwNjBOTlpXWm5fczRmWWJT VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M0RS1LN3FFQnA2ME5OWldabl9zNGZZYlNVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0E4RS9BMDUxNTZBNjgzNUMxMUVFODhFQUI4NEZDNEY5QUUwMi9DNEUtSzdxRUJw NjBOTlpXWm5fczRmWWJTVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLIYvJDPKsgDvucisZ6sbj3+vs0DKzL3wAqqNvdI83RBHottx1sv0k ktwXtb3idyjKEHjU9V90z/+2hSPzKepghK0AXdNrzW5pe9xA/6YA4naKMhjooS7V axCHU7rMiI5wFy4MK7ZA370kIjazZblS3+YneH8vc1g9Lg1dBPhQqQOl7BRL8j9j WDEbYz1W2TdwcHmTNnoO79KGEpMytV5f64DHhATRYAKlBLoWCg36UE2s8yQ2q1OX ZrImuhFPRLj89wmLHuoBQfM/YIUd9QHqCjHLbAubyOf43jMha2mxNQmFMNt1NtA1 8QxE21wxx8zhsw8EOlla0hPnZrI5xs6P -----END CERTIFICATE-----Generated at Sun May 11 04:35:56 2025 by rpki-client