$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft File: 4bmm6wyPr_f1TGjAViSijP0_rew.mft (raw, json) Hash identifier: C1Y9pTL00r6IejwEDXP4Ez8SrtpygQrAa46FZzC21Jk= Subject key identifier: 3A:22:A9:FF:4E:DB:05:F1:2B:A9:77:B6:91:F0:9F:1A:E7:A0:5A:44 Authority key identifier: E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC Certificate issuer: /CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft Manifest number: 0133 Signing time: Tue 13 May 2025 03:47:40 +0000 Manifest this update: Tue 13 May 2025 03:47:39 +0000 Manifest next update: Tue 20 May 2025 03:47:39 +0000 Files and hashes: 1: 4bmm6wyPr_f1TGjAViSijP0_rew.crl (hash: M3KXRoiKIji7NRJECuCwCooywmQT9mMEvO38Z79hTtk=) 2: B0D084CC9AAB11EFAEA9A178C4F9AE02.roa (hash: fjyX2RfOmg6f9yVXW0sBxbxsI7qZZGdjm0T3kgyFLM4=) 3: 17FCF7A0CE7011EF928B4F3BC4F9AE02.roa (hash: CQbFQYBGgN4cPicwihuMngPy/DYvAdUX5/XQle8VCXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:47:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F39EC, serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC Validity Not Before: May 13 03:47:39 2025 GMT Not After : May 20 03:47:39 2025 GMT Subject: CN=6822c0dc-566f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b5:24:c8:62:4d:83:82:c3:a5:ec:38:d7:1f: e3:cb:68:48:f9:5e:6a:12:d0:4e:23:dc:24:39:02: c9:f3:f3:53:f9:23:81:70:a2:cd:81:36:2d:40:9e: 64:16:77:a8:ef:97:1e:a5:26:4e:ad:1e:62:c8:72: ba:99:1b:4a:39:c0:0b:a9:6c:05:d1:17:d8:65:52: 96:b8:02:83:c0:43:3a:f1:b3:f9:c7:c0:f7:7a:d4: fa:4c:e1:78:c8:d1:6d:6f:6f:27:de:ec:18:9f:9c: 47:1e:9b:ed:e1:07:c5:2d:f9:12:fb:cd:b5:67:a8: 8d:3a:5a:a1:bf:dc:16:d6:aa:a1:ab:20:1f:86:8a: f0:53:b9:56:08:42:3d:57:da:9c:79:a2:c9:3a:c8: f4:09:8f:b4:45:44:b6:9c:f3:02:5a:a5:3d:82:b7: 4a:c5:1b:eb:a3:ea:ec:75:d5:b0:00:92:28:7f:e1: 45:d2:3b:9a:a8:b1:cd:b4:71:fa:6e:fd:4f:eb:e8: c3:8e:31:1c:f0:e9:ab:20:22:1e:db:18:62:1c:5e: 7e:13:98:72:70:02:62:bc:de:bb:63:17:09:5a:05: 9d:ec:ce:67:18:d8:81:fa:fe:06:34:29:8f:4c:de: 38:6f:12:ae:4f:30:e5:3a:d5:bb:e9:57:69:a9:44: 30:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:22:A9:FF:4E:DB:05:F1:2B:A9:77:B6:91:F0:9F:1A:E7:A0:5A:44 X509v3 Authority Key Identifier: keyid:E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:e5:06:03:d2:cb:de:74:84:02:36:ba:f4:09:ca:40:8a:ce: 1c:11:f9:ed:6e:bb:b2:0b:c1:d2:bb:8b:d4:14:69:e8:d9:35: f4:f4:74:81:de:7f:94:36:98:39:25:70:a3:01:be:00:0e:80: 0d:68:6e:21:42:16:fd:c0:76:05:8e:db:42:af:f6:9b:88:96: 2e:1a:0a:f8:4c:60:a0:71:70:03:b6:4e:62:76:14:a8:d3:a8: a3:1b:1e:ae:66:fa:f8:38:bb:81:59:77:0d:e7:e7:ac:c3:98: 0c:02:3b:3c:59:3d:0a:bd:ef:7f:99:7b:12:6e:8b:e0:5e:00: 52:c7:57:e3:87:30:2d:53:bf:fc:bf:e7:41:77:56:e7:b7:d2: 8b:e1:cd:72:7e:98:c8:86:a9:e0:de:a6:85:ca:c3:fa:c1:a3: ea:0a:b8:5e:00:6e:a9:e9:f1:8c:a9:1d:bf:e0:dc:23:24:99: 8a:db:cb:c9:43:67:1f:9a:5e:72:c7:ed:d8:81:3c:98:7a:d3: 40:32:bc:76:77:9a:14:4c:b1:77:16:9e:8b:ee:6b:a6:21:83: 11:8a:f7:e5:26:d4:13:b2:75:bb:ba:9b:8c:ab:f4:50:63:c7: b2:fe:d3:e4:69:d3:7e:1a:59:2f:40:48:dc:65:38:c6:67:57: 7f:10:2c:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5RUMxMTAvBgNVBAUTKEUxQjlBNkVCMEM4RkFGRjdGNTRDNjhDMDU2MjRBMjhD RkQzRkFERUMwHhcNMjUwNTEzMDM0NzM5WhcNMjUwNTIwMDM0NzM5WjAYMRYwFAYD VQQDEw02ODIyYzBkYy01NjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbUkyGJNg4LDpew41x/jy2hI+V5qEtBOI9wkOQLJ8/NT+SOBcKLNgTYtQJ5k Fneo75cepSZOrR5iyHK6mRtKOcALqWwF0RfYZVKWuAKDwEM68bP5x8D3etT6TOF4 yNFtb28n3uwYn5xHHpvt4QfFLfkS+821Z6iNOlqhv9wW1qqhqyAfhorwU7lWCEI9 V9qceaLJOsj0CY+0RUS2nPMCWqU9grdKxRvro+rsddWwAJIof+FF0juaqLHNtHH6 bv1P6+jDjjEc8OmrICIe2xhiHF5+E5hycAJivN67YxcJWgWd7M5nGNiB+v4GNCmP TN44bxKuTzDlOtW76VdpqUQwuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDoiqf9O 2wXxK6l3tpHwnxrnoFpEMB8GA1UdIwQYMBaAFOG5pusMj6/39UxowFYkooz9P63s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzlFQy8xMzU1RTc1MjY2 QkIxMUVFODQ2MkVFODRDNEY5QUUwMi80Ym1tNnd5UHJfZjFUR2pBVmlTaWpQMF9y ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRibW02d3lQcl9mMVRHakFWaVNpalAwX3Jldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzlFQy8xMzU1RTc1MjY2QkIxMUVFODQ2MkVFODRDNEY5QUUwMi80Ym1tNnd5UHJf ZjFUR2pBVmlTaWpQMF9yZXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo5QYD0svedIQCNrr0CcpAis4cEfntbruyC8HSu4vUFGno2TX09HSB 3n+UNpg5JXCjAb4ADoANaG4hQhb9wHYFjttCr/abiJYuGgr4TGCgcXADtk5idhSo 06ijGx6uZvr4OLuBWXcN5+esw5gMAjs8WT0Kve9/mXsSbovgXgBSx1fjhzAtU7/8 v+dBd1bnt9KL4c1yfpjIhqng3qaFysP6waPqCrheAG6p6fGMqR2/4NwjJJmK28vJ Q2cfml5yx+3YgTyYetNAMrx2d5oUTLF3Fp6L7mumIYMRivflJtQTsnW7upuMq/RQ Y8ey/tPkadN+GlkvQEjcZTjGZ1d/ECwe -----END CERTIFICATE-----Generated at Tue May 13 08:32:42 2025 by rpki-client