$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft File: 4deDfrzHqaTRdRZXhgR2OivQQnI.mft (raw, json) Hash identifier: fWI66VehPnauGYdhpPmfxjdQ3Ov/aRY2G44pAjewJhM= Subject key identifier: A9:7E:F0:72:B4:B7:1B:BC:02:45:49:5F:F5:86:84:2F:7F:EC:8B:6D Authority key identifier: E1:D7:83:7E:BC:C7:A9:A4:D1:75:16:57:86:04:76:3A:2B:D0:42:72 Certificate issuer: /CN=A91EE92F/serialNumber=E1D7837EBCC7A9A4D17516578604763A2BD04272 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft Manifest number: 7A Signing time: Mon 05 May 2025 05:35:00 +0000 Manifest this update: Mon 05 May 2025 05:35:00 +0000 Manifest next update: Mon 12 May 2025 05:35:00 +0000 Files and hashes: 1: 4deDfrzHqaTRdRZXhgR2OivQQnI.crl (hash: FsuM7OfiRoTDI1IDlYvkfXnA5u9yEwq+SmANcoawwsY=) 2: 2EC0897A740C11EFB881CE37C4F9AE02.roa (hash: jK7WeiMtYEjncK+3WbHQbUVCOX5jz02RAdo98TCxxKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.crl rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 05:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE92F, serialNumber=E1D7837EBCC7A9A4D17516578604763A2BD04272 Validity Not Before: May 5 05:35:00 2025 GMT Not After : May 12 05:35:00 2025 GMT Subject: CN=68184e04-fc5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ee:27:5b:8a:31:30:62:e0:6b:0c:1e:7f:3b: 92:7a:5d:de:7a:49:a2:a9:3b:82:9e:e2:c7:fb:a2: cd:8f:21:a7:7c:9e:b8:35:8f:a5:de:11:dd:65:af: 0b:74:22:7a:cd:8c:f3:c5:ae:63:3b:f7:fc:38:74: bb:58:53:5d:be:60:87:d4:43:b1:f4:64:42:c2:c2: d1:e9:1e:13:f2:7a:55:a1:af:79:8a:86:74:19:04: 83:0b:48:ae:14:90:47:72:23:64:cd:a1:9a:81:99: 4a:4e:d4:bb:29:e3:a4:9c:19:4f:a4:cb:79:bc:bf: 9f:d3:af:a9:13:45:38:53:b8:b6:92:cb:e8:43:73: 2b:27:41:5f:2c:68:81:19:49:42:28:e2:1f:a4:20: 4d:52:15:60:b6:ce:9f:00:71:cf:af:c4:34:67:e6: 45:a4:10:9e:e9:40:ac:b1:4a:f5:cc:eb:4c:13:e4: 1d:9e:e9:5b:ef:0f:51:98:b1:a1:5c:7c:53:2c:0e: a4:1a:05:97:62:41:7c:97:46:8f:ba:07:ec:1e:de: a5:af:94:c5:e8:e8:03:72:41:cf:3f:61:e3:8a:a7: b9:bd:74:2c:35:05:8d:eb:e3:31:dd:2f:21:16:cd: 53:07:f6:82:cd:40:2c:a9:1e:3a:aa:77:d1:21:76: 08:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:7E:F0:72:B4:B7:1B:BC:02:45:49:5F:F5:86:84:2F:7F:EC:8B:6D X509v3 Authority Key Identifier: keyid:E1:D7:83:7E:BC:C7:A9:A4:D1:75:16:57:86:04:76:3A:2B:D0:42:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:ac:33:e4:15:cd:e0:01:47:8d:d3:bf:6d:0d:d4:a3:ab:f2: ab:6c:7c:c2:e7:75:bd:f2:67:c4:2d:a3:43:49:30:4e:d7:e6: 71:88:4b:ee:91:8b:5a:2a:e9:91:9b:44:60:1a:6e:9a:24:ac: 8d:ce:f5:34:ad:04:28:2a:ef:e1:91:05:1e:78:f4:37:9c:c5: 68:9c:c0:00:be:6f:49:66:b9:27:6e:5b:cd:75:31:26:a3:bb: e1:5a:75:fa:e2:09:ae:14:d3:98:d3:be:9c:cb:ec:7f:55:f7: 55:8b:55:91:6a:c0:de:ac:dc:42:81:47:5e:1e:3f:6a:a8:b8: ff:e1:05:82:66:34:70:0c:7e:d4:bd:b2:f7:dd:0c:ad:45:90: b1:24:c4:ae:47:a7:72:07:3f:95:60:d8:b6:7b:e1:9f:58:b6: 6d:08:fd:f9:44:15:46:04:8b:bb:e7:cc:49:b4:87:c4:e2:9c: f4:b7:ec:1e:f7:78:92:4e:df:75:da:cd:46:14:4d:fa:97:6c: f7:23:ed:ff:93:84:bf:b0:44:b4:b2:23:2b:0a:58:5f:4b:12: 87:06:6b:5d:f6:1c:09:3e:eb:d6:06:bf:ed:8b:6c:ac:ba:3e: f5:eb:29:06:f9:b8:a2:dc:e9:52:4b:eb:69:f6:ec:58:31:e0: 63:47:b8:1c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RTkyRjExMC8GA1UEBRMoRTFENzgzN0VCQ0M3QTlBNEQxNzUxNjU3ODYwNDc2M0Ey QkQwNDI3MjAeFw0yNTA1MDUwNTM1MDBaFw0yNTA1MTIwNTM1MDBaMBgxFjAUBgNV BAMTDTY4MTg0ZTA0LWZjNWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDD7idbijEwYuBrDB5/O5J6Xd56SaKpO4Ke4sf7os2PIad8nrg1j6XeEd1lrwt0 InrNjPPFrmM79/w4dLtYU12+YIfUQ7H0ZELCwtHpHhPyelWhr3mKhnQZBIMLSK4U kEdyI2TNoZqBmUpO1Lsp46ScGU+ky3m8v5/Tr6kTRThTuLaSy+hDcysnQV8saIEZ SUIo4h+kIE1SFWC2zp8Acc+vxDRn5kWkEJ7pQKyxSvXM60wT5B2e6VvvD1GYsaFc fFMsDqQaBZdiQXyXRo+6B+we3qWvlMXo6ANyQc8/YeOKp7m9dCw1BY3r4zHdLyEW zVMH9oLNQCypHjqqd9EhdghNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqX7wcrS3 G7wCRUlf9YaEL3/si20wHwYDVR0jBBgwFoAU4deDfrzHqaTRdRZXhgR2OivQQnIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFOTJGLzFCMjkwQjVFNzQw QjExRUY5RTlDMDMzNkM0RjlBRTAyLzRkZURmcnpIcWFUUmRSWlhoZ1IyT2l2UVFu SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNGRlRGZyekhxYVRSZFJaWGhnUjJPaXZRUW5JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF OTJGLzFCMjkwQjVFNzQwQjExRUY5RTlDMDMzNkM0RjlBRTAyLzRkZURmcnpIcWFU UmRSWlhoZ1IyT2l2UVFuSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABOsM+QVzeABR43Tv20N1KOr8qtsfMLndb3yZ8Qto0NJME7X5nGIS+6R i1oq6ZGbRGAabpokrI3O9TStBCgq7+GRBR549DecxWicwAC+b0lmuSduW811MSaj u+FadfriCa4U05jTvpzL7H9V91WLVZFqwN6s3EKBR14eP2qouP/hBYJmNHAMftS9 svfdDK1FkLEkxK5Hp3IHP5Vg2LZ74Z9Ytm0I/flEFUYEi7vnzEm0h8TinPS37B73 eJJO33XazUYUTfqXbPcj7f+ThL+wRLSyIysKWF9LEocGa132HAk+69YGv+2LbKy6 PvXrKQb5uKLc6VJL62n27Fgx4GNHuBw= -----END CERTIFICATE-----Generated at Mon May 5 17:40:16 2025 by rpki-client