$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft File: 4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft (raw, json) Hash identifier: 8dti6y5t4p6KndMZWCa4u6j0+qsaWpwaF7CZ7USWT8Y= Subject key identifier: D3:F6:0A:24:63:1B:EE:F5:8E:EC:F0:15:DE:0B:CF:97:3A:41:1E:3E Authority key identifier: E1:18:96:B0:0C:94:86:E4:3E:E7:48:02:D2:19:69:F8:88:EE:4E:2D Certificate issuer: /CN=A91F2B47/serialNumber=E11896B00C9486E43EE74802D21969F888EE4E2D Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft Manifest number: 021C Signing time: Sun 11 May 2025 01:31:45 +0000 Manifest this update: Sun 11 May 2025 01:31:44 +0000 Manifest next update: Sun 18 May 2025 01:31:44 +0000 Files and hashes: 1: 4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl (hash: YItjPxQFYbMIYzRoQ34CLt2WtkauUu3MiQprMM4ysAM=) 2: 909F94F070F911EDBA42F056C4F9AE02.roa (hash: J59LrtIyPPPdrZKXDpKJBMgQFNUlF3OmhLoyAq20BcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:31:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B47, serialNumber=E11896B00C9486E43EE74802D21969F888EE4E2D Validity Not Before: May 11 01:31:44 2025 GMT Not After : May 18 01:31:44 2025 GMT Subject: CN=681ffe01-5fe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:67:4b:ef:80:13:a8:cb:48:21:82:a6:eb:d7: 4c:db:15:01:05:58:32:50:09:16:07:c2:71:45:7e: 94:7a:e4:a8:ce:f8:f3:35:da:36:c4:93:52:2d:6c: 1f:93:74:aa:aa:a8:a6:78:14:fe:e4:65:02:49:e9: 90:cb:e1:c4:fd:86:a1:ec:68:d1:c9:e1:af:54:53: 6e:f1:98:18:00:58:d0:ca:e1:0e:b2:0a:9d:c1:36: 5e:e3:3f:ae:75:7f:72:6a:98:f7:ae:90:cc:83:47: 03:9a:7c:b0:db:36:5e:0e:44:9d:96:0d:4c:17:82: 0f:e7:6d:f8:f8:82:42:17:77:d5:b3:a5:13:88:6c: ec:d0:10:e7:71:92:0d:fe:6d:fc:5d:dc:04:94:31: 6f:37:66:32:f3:a5:4e:37:d6:14:32:d1:0d:53:fc: 6a:f2:54:53:39:79:4c:c6:a2:17:e1:f3:93:92:21: 77:3f:1b:59:e1:1e:9d:dd:43:9b:23:bb:d2:df:c9: 96:37:a0:ab:f8:2b:9c:ca:92:71:5a:97:f3:ad:c0: 71:fe:25:f3:f1:a9:d5:85:c6:18:51:b5:3e:4b:95: 1e:c7:80:2c:cc:91:6c:8f:6a:78:28:f9:9c:7c:28: 74:bd:5b:d9:4f:2c:11:fa:57:21:d4:d3:f2:8a:ff: 19:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F6:0A:24:63:1B:EE:F5:8E:EC:F0:15:DE:0B:CF:97:3A:41:1E:3E X509v3 Authority Key Identifier: keyid:E1:18:96:B0:0C:94:86:E4:3E:E7:48:02:D2:19:69:F8:88:EE:4E:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:1a:36:fa:c3:2c:37:e6:61:c5:fd:44:b6:47:9e:66:06:2f: 52:42:8f:bb:3a:03:9f:f8:1b:8b:59:e5:d3:6c:c3:bf:eb:73: ec:af:f5:76:4b:ba:42:67:ff:2e:04:9c:1e:3e:a2:a5:77:44: 53:2b:5d:d5:7f:63:c5:0a:f5:ef:34:8d:5c:b0:0b:0b:3e:36: c7:c4:2a:af:a6:d6:36:2d:39:33:28:36:df:ad:7b:e9:01:60: d5:d9:ee:05:35:7f:53:d1:66:55:20:a2:57:46:a8:0c:a0:84: 77:79:52:0a:b3:76:bc:7f:66:bb:dd:85:ab:5a:48:b3:86:e0: 87:bc:56:c3:ac:34:09:47:39:4e:d1:31:de:e2:f2:c2:d5:7b: eb:43:2b:24:41:ff:02:f9:36:77:6b:f3:d8:d2:ee:65:b3:7d: 36:f8:14:1e:29:57:2b:f8:37:fc:ea:73:b6:ea:94:81:2c:75: 25:f6:34:90:75:c0:0a:61:7b:d4:66:a8:fd:d2:cd:d2:d7:a7: 4f:b9:70:35:74:ed:97:4a:06:57:98:00:b7:29:09:92:8c:7d: f8:bc:3e:38:a9:4d:74:ce:3f:9d:a0:2e:30:ad:4c:30:b7:41: dc:1f:78:6e:a8:0c:bb:58:ce:54:b5:78:05:70:08:89:fb:05: 0c:b5:bc:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNDcxMTAvBgNVBAUTKEUxMTg5NkIwMEM5NDg2RTQzRUU3NDgwMkQyMTk2OUY4 ODhFRTRFMkQwHhcNMjUwNTExMDEzMTQ0WhcNMjUwNTE4MDEzMTQ0WjAYMRYwFAYD VQQDEw02ODFmZmUwMS01ZmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3GdL74ATqMtIIYKm69dM2xUBBVgyUAkWB8JxRX6UeuSozvjzNdo2xJNSLWwf k3SqqqimeBT+5GUCSemQy+HE/Yah7GjRyeGvVFNu8ZgYAFjQyuEOsgqdwTZe4z+u dX9yapj3rpDMg0cDmnyw2zZeDkSdlg1MF4IP5234+IJCF3fVs6UTiGzs0BDncZIN /m38XdwElDFvN2Yy86VON9YUMtENU/xq8lRTOXlMxqIX4fOTkiF3PxtZ4R6d3UOb I7vS38mWN6Cr+CucypJxWpfzrcBx/iXz8anVhcYYUbU+S5Uex4AszJFsj2p4KPmc fCh0vVvZTywR+lch1NPyiv8ZuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNP2CiRj G+71juzwFd4Lz5c6QR4+MB8GA1UdIwQYMBaAFOEYlrAMlIbkPudIAtIZafiI7k4t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI0Ny9GMUZFMzJCQTMz QUYxMUVEQjYxMDc0MzRDNEY5QUUwMi80UmlXc0F5VWh1US01MGdDMGhscC1JanVU aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRSaVdzQXlVaHVRLTUwZ0MwaGxwLUlqdVRpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkI0Ny9GMUZFMzJCQTMzQUYxMUVEQjYxMDc0MzRDNEY5QUUwMi80UmlXc0F5VWh1 US01MGdDMGhscC1JanVUaTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgGjb6wyw35mHF/US2R55mBi9SQo+7OgOf+BuLWeXTbMO/63Psr/V2 S7pCZ/8uBJwePqKld0RTK13Vf2PFCvXvNI1csAsLPjbHxCqvptY2LTkzKDbfrXvp AWDV2e4FNX9T0WZVIKJXRqgMoIR3eVIKs3a8f2a73YWrWkizhuCHvFbDrDQJRzlO 0THe4vLC1XvrQyskQf8C+TZ3a/PY0u5ls302+BQeKVcr+Df86nO26pSBLHUl9jSQ dcAKYXvUZqj90s3S16dPuXA1dO2XSgZXmAC3KQmSjH34vD44qU10zj+doC4wrUww t0HcH3huqAy7WM5UtXgFcAiJ+wUMtbwo -----END CERTIFICATE-----Generated at Mon May 12 16:56:08 2025 by rpki-client