$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft File: 4x5nyg5b7bJI-Xplfe_2LshvUks.mft (raw, json) Hash identifier: 0B6FZes7fAgrNbNg3qQAH7jpun6m4f7Gq8eVlmm++eU= Subject key identifier: 1D:A9:66:85:3D:37:E7:AD:A7:DC:E1:CC:C1:AC:B3:2B:25:C6:59:B9 Authority key identifier: E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B Certificate issuer: /CN=A91ED5D9/serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B Certificate serial: 0276 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft Manifest number: 0272 Signing time: Tue 13 May 2025 01:30:09 +0000 Manifest this update: Tue 13 May 2025 01:30:08 +0000 Manifest next update: Tue 20 May 2025 01:30:08 +0000 Files and hashes: 1: 4x5nyg5b7bJI-Xplfe_2LshvUks.crl (hash: 1tHI95cqEAG4OqWtf2ZTcQisoF98t2+ltmjqUMu0ayY=) 2: A3013D2A0CCB11ED97820077C4F9AE02.roa (hash: h+ue+R5DGdF0uaqUXBTnmoh/DYvzHxp90t2bN+4sANk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:30:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 630 (0x276) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED5D9, serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B Validity Not Before: May 13 01:30:08 2025 GMT Not After : May 20 01:30:08 2025 GMT Subject: CN=6822a0a0-1397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ac:33:d3:f2:39:c7:8e:4e:86:15:b2:b2:7e: 6f:6d:df:c5:65:eb:cd:60:b1:15:c4:ed:3c:d8:a5: ad:51:4d:a9:e9:8c:f5:1e:90:4a:c3:8c:6f:90:17: b1:1c:bc:cb:b9:18:c0:95:92:9d:48:ac:b6:dc:9e: 4d:4a:3c:83:9e:2f:fc:b4:c5:a1:09:81:6a:4f:54: 05:da:a8:8f:2a:06:c8:8e:6c:43:98:4a:67:5e:d4: f4:f4:1c:3c:cd:ef:d3:60:0e:fb:4d:38:68:13:9a: de:54:3c:f6:0e:ee:1c:f8:69:b7:20:6d:80:6f:eb: 65:f0:93:42:49:c9:35:9d:4f:a6:a4:3d:2b:4c:7e: f0:56:6f:6d:07:f1:70:6d:dc:c8:b6:04:1c:10:52: f0:e0:0b:b7:b1:e9:8b:1d:d5:27:09:ec:98:19:a2: ac:a5:f4:21:25:79:d7:09:70:32:9a:01:28:1b:57: d1:51:00:64:a3:93:04:df:7c:20:68:e9:72:1e:dc: 19:fb:33:9a:4e:21:fa:f7:b8:17:e9:9b:14:3d:6d: e3:56:2a:a6:15:9c:49:9c:1e:88:5f:dc:71:b7:52: 67:11:4f:b3:9d:2f:17:fe:1d:02:74:d3:4a:33:6d: 03:70:47:27:19:b7:51:6b:c9:53:ce:8f:6b:79:0c: 86:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A9:66:85:3D:37:E7:AD:A7:DC:E1:CC:C1:AC:B3:2B:25:C6:59:B9 X509v3 Authority Key Identifier: keyid:E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:26:71:e3:4c:45:b7:dd:47:bc:46:d6:e9:5a:8e:15:c4:b3: 1f:9d:b5:b9:49:41:57:34:7d:aa:4c:d7:08:e4:56:be:d4:c1: ea:e1:4f:9b:b7:b1:00:26:88:b9:b1:64:df:e8:8c:96:cf:ad: d3:72:d6:2c:3c:14:47:f4:14:5a:ba:7a:85:1b:e1:bd:ff:44: 89:86:79:15:fd:8f:88:ed:67:73:54:92:43:f5:09:3b:b6:c1: c8:09:dd:ca:b6:69:8b:a2:fa:47:a7:ac:b9:9a:96:83:73:5e: 86:bd:99:d9:55:22:b7:cb:3c:57:0e:18:3e:0d:1f:6d:9c:08: 28:6b:4b:f1:fd:c7:19:4e:1a:49:25:83:ea:4a:b8:73:13:04: 38:a5:2e:3d:9c:3b:76:f5:e6:48:80:1c:af:43:2e:53:15:b5: 8d:11:09:5b:25:1b:ad:ec:a4:c1:16:79:70:09:f8:53:6d:65: ab:0c:de:3d:00:41:9a:1c:ed:60:eb:3e:bd:40:40:a9:af:bd: 83:ba:c4:a9:25:88:9a:d5:26:db:c4:61:27:c8:34:4a:fb:c8: 7b:d4:51:ff:d4:20:9e:ca:dc:85:07:ce:f0:af:85:5c:62:17: fa:cf:90:4a:27:d1:b7:fb:7b:6b:0c:26:f8:df:c3:dc:ca:9f: d1:cd:9a:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1RDkxMTAvBgNVBAUTKEUzMUU2N0NBMEU1QkVEQjI0OEY5N0E2NTdERUZGNjJF Qzg2RjUyNEIwHhcNMjUwNTEzMDEzMDA4WhcNMjUwNTIwMDEzMDA4WjAYMRYwFAYD VQQDEw02ODIyYTBhMC0xMzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKwz0/I5x45OhhWysn5vbd/FZevNYLEVxO082KWtUU2p6Yz1HpBKw4xvkBex HLzLuRjAlZKdSKy23J5NSjyDni/8tMWhCYFqT1QF2qiPKgbIjmxDmEpnXtT09Bw8 ze/TYA77TThoE5reVDz2Du4c+Gm3IG2Ab+tl8JNCSck1nU+mpD0rTH7wVm9tB/Fw bdzItgQcEFLw4Au3semLHdUnCeyYGaKspfQhJXnXCXAymgEoG1fRUQBko5ME33wg aOlyHtwZ+zOaTiH697gX6ZsUPW3jViqmFZxJnB6IX9xxt1JnEU+znS8X/h0CdNNK M20DcEcnGbdRa8lTzo9reQyGswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2pZoU9 N+etp9zhzMGssyslxlm5MB8GA1UdIwQYMBaAFOMeZ8oOW+2ySPl6ZX3v9i7Ib1JL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDVEOS84OUU4N0ZFMDBD QzgxMUVEQjMzQjEzNzFDNEY5QUUwMi80eDVueWc1YjdiSkktWHBsZmVfMkxzaHZV a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR4NW55ZzViN2JKSS1YcGxmZV8yTHNodlVrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDVEOS84OUU4N0ZFMDBDQzgxMUVEQjMzQjEzNzFDNEY5QUUwMi80eDVueWc1Yjdi SkktWHBsZmVfMkxzaHZVa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2JnHjTEW33Ue8RtbpWo4VxLMfnbW5SUFXNH2qTNcI5Fa+1MHq4U+b t7EAJoi5sWTf6IyWz63TctYsPBRH9BRaunqFG+G9/0SJhnkV/Y+I7WdzVJJD9Qk7 tsHICd3KtmmLovpHp6y5mpaDc16GvZnZVSK3yzxXDhg+DR9tnAgoa0vx/ccZThpJ JYPqSrhzEwQ4pS49nDt29eZIgByvQy5TFbWNEQlbJRut7KTBFnlwCfhTbWWrDN49 AEGaHO1g6z69QECpr72DusSpJYia1SbbxGEnyDRK+8h71FH/1CCeytyFB87wr4Vc Yhf6z5BKJ9G3+3trDCb438Pcyp/RzZol -----END CERTIFICATE-----Generated at Wed May 14 08:14:37 2025 by rpki-client