$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft File: 4mhztF-I0fXYg8F-TM9wokUWIUI.mft (raw, json) Hash identifier: mjy/wGABp2zSVHz4KUCx+XN8LRet1EY9ZAV+qRX3VS0= Subject key identifier: 93:5A:BF:E5:94:D5:38:90:C2:34:3E:04:E0:B0:F3:74:AB:5C:F8:11 Authority key identifier: E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42 Certificate issuer: /CN=A91F4C6B/serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142 Certificate serial: 08C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft Manifest number: 08B6 Signing time: Thu 08 May 2025 20:25:09 +0000 Manifest this update: Thu 08 May 2025 20:25:09 +0000 Manifest next update: Thu 15 May 2025 20:25:09 +0000 Files and hashes: 1: 4mhztF-I0fXYg8F-TM9wokUWIUI.crl (hash: xBp0m2280dEKKGEYTRUxbbfnqSDKECh9fWhHd71PY3I=) 2: E146B994B51F11EA9146DD58C4F9AE02.roa (hash: LQpBHD/6AS6W0OQnBLuqSE1x8/uA+xxXkzDajQvXSSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 20:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2244 (0x8c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4C6B, serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142 Validity Not Before: May 8 20:25:09 2025 GMT Not After : May 15 20:25:09 2025 GMT Subject: CN=681d1325-664b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e9:04:a9:53:cc:51:c8:13:d1:84:18:ca:fa: d8:ad:87:5e:4d:80:12:54:a2:0d:b6:4a:f0:56:f8: ae:ee:5a:89:52:af:fe:ef:5b:80:0f:f2:da:0e:f7: 33:cf:88:8a:5d:a2:5d:f3:e9:7c:6d:ca:60:12:b9: 02:55:2f:86:0a:fe:fc:bb:85:bd:71:1b:98:f5:32: 86:cc:ad:b5:4a:24:0d:5b:12:52:4b:91:f0:ee:1f: e3:5e:22:b7:ab:d3:37:c2:18:a5:f2:87:ab:28:d4: 32:7a:da:fd:fe:9a:d4:45:e6:f2:b6:16:85:88:82: f0:c3:ab:be:d4:44:47:8a:45:a7:74:86:32:a4:e3: 3d:86:89:69:13:37:62:35:03:42:70:2b:8a:19:66: 19:82:57:bf:b6:07:bd:f6:1a:2c:d7:41:1b:8c:74: dd:8c:24:54:23:31:cc:34:d5:32:ec:1c:5b:97:33: 73:e7:a3:aa:44:fa:34:97:f2:72:e8:4f:57:ed:31: 02:d1:8f:78:d9:64:ba:d2:3c:0c:21:9e:9b:5d:60: 88:49:07:c2:89:84:7c:46:ef:5d:1a:c1:01:0e:62: ea:28:74:50:9d:c8:4f:e3:6e:b6:d1:f9:fe:80:1a: 1d:69:ba:0f:e4:9b:ba:1c:f1:4f:be:cb:d4:3a:15: 94:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:5A:BF:E5:94:D5:38:90:C2:34:3E:04:E0:B0:F3:74:AB:5C:F8:11 X509v3 Authority Key Identifier: keyid:E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:2d:d3:21:24:24:ec:14:72:2d:df:92:94:c4:ec:61:ea:64: 09:70:59:30:3d:21:58:df:e2:ec:df:2d:bf:fc:dd:35:19:47: a2:69:0f:6f:34:99:21:33:20:a3:24:6a:3b:6d:59:5b:79:b4: a9:75:60:0e:c1:0e:88:2d:89:31:0d:e9:f5:ec:cd:6d:ef:ad: 7f:9d:c5:42:f7:b9:41:0d:7f:d9:9d:96:f1:76:5b:7f:e2:ce: ad:8f:75:7a:81:52:e9:d2:c2:c6:c5:6e:f0:ed:e9:e7:5f:de: 7d:4e:6a:de:39:a4:2a:fe:9a:7e:c7:bd:d7:33:15:23:4f:bd: 4e:02:2b:c2:fd:bd:a8:3b:ce:fa:9d:f4:ad:00:3b:04:77:7c: 82:21:10:9b:ad:dd:31:43:12:f3:01:01:1d:da:40:65:94:35: 86:7a:b5:e2:76:bd:f8:36:5b:67:41:a7:e8:12:07:51:b9:03: 08:ce:22:7d:74:38:c6:1e:4b:4e:00:00:0a:e2:51:8d:11:83: aa:61:86:ec:cb:d1:13:b6:fb:3f:1a:30:a6:af:3d:7a:08:35: 18:12:e6:04:1e:e6:bf:9e:cb:ab:59:28:e3:49:d5:e7:a4:5d: 2a:68:ac:7b:75:86:14:aa:92:03:7a:20:40:51:bd:f2:f3:00: ca:2a:78:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRDNkIxMTAvBgNVBAUTKEUyNjg3M0I0NUY4OEQxRjVEODgzQzE3RTRDQ0Y3MEEy NDUxNjIxNDIwHhcNMjUwNTA4MjAyNTA5WhcNMjUwNTE1MjAyNTA5WjAYMRYwFAYD VQQDEw02ODFkMTMyNS02NjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtukEqVPMUcgT0YQYyvrYrYdeTYASVKINtkrwVviu7lqJUq/+71uAD/LaDvcz z4iKXaJd8+l8bcpgErkCVS+GCv78u4W9cRuY9TKGzK21SiQNWxJSS5Hw7h/jXiK3 q9M3whil8oerKNQyetr9/prURebythaFiILww6u+1ERHikWndIYypOM9holpEzdi NQNCcCuKGWYZgle/tge99hos10EbjHTdjCRUIzHMNNUy7BxblzNz56OqRPo0l/Jy 6E9X7TEC0Y942WS60jwMIZ6bXWCISQfCiYR8Ru9dGsEBDmLqKHRQnchP42620fn+ gBodaboP5Ju6HPFPvsvUOhWUiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNav+WU 1TiQwjQ+BOCw83SrXPgRMB8GA1UdIwQYMBaAFOJoc7RfiNH12IPBfkzPcKJFFiFC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEM2Qi8yNzhBQTNFNEI1 MUYxMUVBOUZFOEJENThDNEY5QUUwMi80bWh6dEYtSTBmWFlnOEYtVE05d29rVVdJ VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRtaHp0Ri1JMGZYWWc4Ri1UTTl3b2tVV0lVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEM2Qi8yNzhBQTNFNEI1MUYxMUVBOUZFOEJENThDNEY5QUUwMi80bWh6dEYtSTBm WFlnOEYtVE05d29rVVdJVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZLdMhJCTsFHIt35KUxOxh6mQJcFkwPSFY3+Ls3y2//N01GUeiaQ9v NJkhMyCjJGo7bVlbebSpdWAOwQ6ILYkxDen17M1t761/ncVC97lBDX/ZnZbxdlt/ 4s6tj3V6gVLp0sLGxW7w7ennX959TmreOaQq/pp+x73XMxUjT71OAivC/b2oO876 nfStADsEd3yCIRCbrd0xQxLzAQEd2kBllDWGerXidr34NltnQafoEgdRuQMIziJ9 dDjGHktOAAAK4lGNEYOqYYbsy9ETtvs/GjCmrz16CDUYEuYEHua/nsurWSjjSdXn pF0qaKx7dYYUqpIDeiBAUb3y8wDKKngF -----END CERTIFICATE-----Generated at Sat May 10 20:15:59 2025 by rpki-client