$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft File: 4XI0Y4kx9DllENfQutUfivTrhrY.mft (raw, json) Hash identifier: d12pACcC3DS3Vq7JmA4WPrPXAGMLWBIcvriqGwAb77A= Subject key identifier: BE:9F:2B:EC:DC:33:F7:A1:62:E0:2E:05:A6:1B:B3:36:7B:48:89:77 Authority key identifier: E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 Certificate issuer: /CN=A91F34FA/serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Certificate serial: 01D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft Manifest number: 01D2 Signing time: Thu 15 May 2025 02:17:07 +0000 Manifest this update: Thu 15 May 2025 02:17:06 +0000 Manifest next update: Thu 22 May 2025 02:17:06 +0000 Files and hashes: 1: 4XI0Y4kx9DllENfQutUfivTrhrY.crl (hash: sYsc/YU8kc+YnU9uTb+bGjFmYTn3b9HGFhNwh4VthJE=) 2: 8256A692444A11EFB043DE36C4F9AE02.roa (hash: Ple4OYydaAojanyJwx7ZWPyKox9DD4lFfc6gQi2CwTI=) 3: 81B847F4444A11EFB043DE36C4F9AE02.roa (hash: iBZ0Vc5oqFw84Bi0mykH6jGLVo3+N0cmUjqo5T+vIIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F34FA, serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Validity Not Before: May 15 02:17:06 2025 GMT Not After : May 22 02:17:06 2025 GMT Subject: CN=68254ea3-4c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:23:b3:22:50:98:8e:de:63:9f:73:66:54:b5: c5:d8:7e:b2:b0:18:4c:21:99:90:50:39:9c:82:5d: 46:21:5a:39:12:e7:de:1c:7b:52:b5:43:f9:8a:4c: 1e:3d:0d:29:10:82:01:43:4f:e3:98:db:73:7e:b9: 56:12:e1:11:a5:30:c0:b3:43:ae:31:b6:d5:25:5f: ea:70:4d:b4:6a:a2:5e:ba:7c:3d:9d:32:02:aa:1a: 31:15:ee:7c:64:02:1a:72:7a:0d:36:23:4e:b6:00: 5b:79:58:d5:7b:dd:bb:81:85:43:90:bd:9d:4c:0c: 91:cf:a5:39:4f:91:96:5a:5e:1e:b3:1f:40:fc:fb: d8:ee:5c:3f:b7:25:fd:56:cf:ad:fe:13:08:fc:4c: 17:3f:68:c8:dc:a5:40:ef:e3:24:cc:d0:77:13:5e: c6:43:c9:42:0e:ae:55:c0:70:a4:5c:05:17:bb:a7: e0:7a:a1:90:78:83:dc:79:3f:7e:13:02:be:75:fd: 18:0f:28:2b:ab:48:be:0a:c6:16:d3:ef:5f:0d:3b: 4f:01:0e:21:d9:56:09:9e:68:1a:a3:60:cd:35:d9: 47:a9:fe:bf:36:43:d1:82:cf:1e:8c:fe:22:6f:e2: d8:17:64:f5:ed:2f:29:0e:7a:81:fe:20:22:d2:ac: fb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9F:2B:EC:DC:33:F7:A1:62:E0:2E:05:A6:1B:B3:36:7B:48:89:77 X509v3 Authority Key Identifier: keyid:E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:f8:21:9a:32:73:e2:a4:90:a6:84:78:af:65:2b:a3:0c:17: 95:1f:77:7f:0e:75:44:8a:b4:23:a9:1a:13:97:c4:6c:12:2d: cd:9e:67:6c:dc:fb:05:75:2c:81:d0:0d:40:9a:12:54:8d:32: 98:e4:3c:16:d5:61:07:37:00:42:8b:0c:48:ef:29:6d:6b:13: 07:80:5b:4f:e8:cf:a9:2f:db:2c:38:c8:1a:ff:7b:f1:b6:b5: 3f:7b:55:6b:2c:01:94:c8:ac:87:c1:1f:30:7a:fa:0c:7f:f9: 37:1d:df:e0:86:87:06:f3:2d:22:8e:b5:17:b1:c3:dd:5d:68: 30:c4:0a:51:f3:cc:4e:2e:97:b9:70:26:7b:d4:00:da:c0:4e: c8:b3:fa:47:ea:70:47:68:6d:f7:13:3b:bc:d7:c1:14:eb:54: a0:e5:9e:09:21:e4:43:9d:2e:8c:1c:95:b1:f0:39:b7:89:e5: 06:39:48:f4:cb:b6:f5:19:5c:c3:74:ff:f6:31:8d:3e:89:45: ac:ea:6e:a6:24:35:a2:d7:4d:92:14:91:72:56:ae:cf:6f:b7: 31:1b:52:85:25:b7:c0:ec:8c:70:9a:9a:b4:01:36:e4:04:b9: 53:c6:c1:bd:cb:22:09:a4:cf:3e:71:21:c2:07:40:48:51:ca: 7e:ff:c8:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM0RkExMTAvBgNVBAUTKEUxNzIzNDYzODkzMUY0Mzk2NTEwRDdEMEJBRDUxRjhB RjRFQjg2QjYwHhcNMjUwNTE1MDIxNzA2WhcNMjUwNTIyMDIxNzA2WjAYMRYwFAYD VQQDEw02ODI1NGVhMy00YzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6COzIlCYjt5jn3NmVLXF2H6ysBhMIZmQUDmcgl1GIVo5EufeHHtStUP5ikwe PQ0pEIIBQ0/jmNtzfrlWEuERpTDAs0OuMbbVJV/qcE20aqJeunw9nTICqhoxFe58 ZAIacnoNNiNOtgBbeVjVe927gYVDkL2dTAyRz6U5T5GWWl4esx9A/PvY7lw/tyX9 Vs+t/hMI/EwXP2jI3KVA7+MkzNB3E17GQ8lCDq5VwHCkXAUXu6fgeqGQeIPceT9+ EwK+df0YDygrq0i+CsYW0+9fDTtPAQ4h2VYJnmgao2DNNdlHqf6/NkPRgs8ejP4i b+LYF2T17S8pDnqB/iAi0qz75QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6fK+zc M/ehYuAuBaYbszZ7SIl3MB8GA1UdIwQYMBaAFOFyNGOJMfQ5ZRDX0LrVH4r064a2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRGQS80NUU5RTE2QTY1 OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlEbGxFTmZRdXRVZml2VHJo clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYSTBZNGt4OURsbEVOZlF1dFVmaXZUcmhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzRGQS80NUU5RTE2QTY1OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlE bGxFTmZRdXRVZml2VHJoclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM+CGaMnPipJCmhHivZSujDBeVH3d/DnVEirQjqRoTl8RsEi3Nnmds 3PsFdSyB0A1AmhJUjTKY5DwW1WEHNwBCiwxI7yltaxMHgFtP6M+pL9ssOMga/3vx trU/e1VrLAGUyKyHwR8wevoMf/k3Hd/ghocG8y0ijrUXscPdXWgwxApR88xOLpe5 cCZ71ADawE7Is/pH6nBHaG33Ezu818EU61Sg5Z4JIeRDnS6MHJWx8Dm3ieUGOUj0 y7b1GVzDdP/2MY0+iUWs6m6mJDWi102SFJFyVq7Pb7cxG1KFJbfA7Ixwmpq0ATbk BLlTxsG9yyIJpM8+cSHCB0BIUcp+/8g7 -----END CERTIFICATE-----Generated at Sat May 17 02:02:36 2025 by rpki-client