$ rpki-client -vvf rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft File: 4WPw_lTxea9MbAlwmP774tQ4Wxk.mft (raw, json) Hash identifier: 0kkz8yL23+yZ7aAgYMGwTb/cFqNDJ+fvGAnWx4/ho+4= Subject key identifier: 89:56:0F:6E:D4:C4:D3:C7:9F:48:2B:CF:D6:64:5C:A9:37:C3:32:71 Authority key identifier: E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19 Certificate issuer: /CN=A91F54CD/serialNumber=E163F0FE54F179AF4C6C097098FEFBE2D4385B19 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft Manifest number: 24 Signing time: Sun 11 May 2025 06:35:14 +0000 Manifest this update: Sun 11 May 2025 06:35:13 +0000 Manifest next update: Sun 18 May 2025 06:35:13 +0000 Files and hashes: 1: 4WPw_lTxea9MbAlwmP774tQ4Wxk.crl (hash: P+bJMVOlHdvd5wdC8A8uU9y4Cu7xC92PM2vDiCJeVfY=) 2: 2CA96408FD8811EF9404CD48C4F9AE02.roa (hash: ijzYb1r/oyAKx1Hjreuyv8IcJPnhFB/m1NQeL+FUTHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.crl rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:35:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F54CD, serialNumber=E163F0FE54F179AF4C6C097098FEFBE2D4385B19 Validity Not Before: May 11 06:35:13 2025 GMT Not After : May 18 06:35:13 2025 GMT Subject: CN=68204521-d542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e5:66:bc:4b:ab:ae:aa:69:ec:6d:36:82:5d: da:01:d4:2d:59:7c:d9:c0:e1:fc:b5:74:f2:77:9b: 84:ef:1d:a9:c8:95:24:86:fc:cb:9b:08:e8:b1:65: 2b:8d:68:ad:60:d7:2a:29:c6:1c:f4:99:e0:87:cc: 69:cf:1d:d8:f8:12:ee:ae:39:f9:24:96:6f:40:3d: be:28:d4:8a:88:05:66:e3:61:c3:7c:e0:24:d5:36: ef:f0:30:1b:1b:ea:34:7e:fd:9d:e8:02:49:bc:af: 1f:ce:65:8c:8c:e3:1c:9b:96:00:c2:c6:3e:97:bb: 05:fb:b8:5f:d7:2d:9d:6b:56:31:d5:0d:8f:43:14: e2:d8:05:41:b2:f8:82:62:04:ae:dd:50:a0:f2:9b: 98:d5:f8:57:2a:ac:bb:55:9b:05:5d:d1:e1:93:d5: 84:0c:60:f8:5e:35:0a:69:ac:e7:eb:b4:4a:27:e3: 23:08:7f:b2:46:5f:d0:22:f1:c8:aa:52:7b:b2:69: 32:7d:7d:aa:7b:b4:29:7b:52:bc:d9:66:f7:bf:2f: ce:ae:13:dc:c6:a4:51:a1:f9:9e:f0:19:31:be:d0: d5:37:e6:68:33:21:db:96:6e:37:94:92:6b:9a:ff: a1:33:89:81:33:35:e6:1c:06:fb:f1:f0:2b:11:60: cd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:56:0F:6E:D4:C4:D3:C7:9F:48:2B:CF:D6:64:5C:A9:37:C3:32:71 X509v3 Authority Key Identifier: keyid:E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:6a:94:55:de:9f:e5:32:f4:3f:9a:64:57:6e:ac:9c:0e:03: 18:9f:76:bc:b0:10:4c:19:fd:03:08:67:25:d0:2b:28:fe:a1: ee:83:1d:4f:fd:69:76:14:11:13:23:2d:83:1c:0f:ff:80:d4: e3:f9:8a:8b:2d:16:a1:e1:b4:7e:5e:db:39:44:b5:b7:55:5f: eb:d0:b7:bd:76:3b:43:66:36:0f:6b:d1:6d:c9:5e:69:e5:f1: 5e:74:fd:dd:f3:71:55:8c:d5:b3:6c:0f:b3:ba:c0:9c:88:36: da:4f:14:47:0f:be:a0:c6:02:2d:76:d2:90:d9:4e:15:e8:f0: ae:e9:5e:f6:1b:0e:51:06:1b:ac:15:bf:1e:62:d0:9d:f8:14: b0:e6:e1:00:82:93:f2:5e:d7:e3:27:c4:bf:e1:fd:bb:27:e8: 85:37:bd:59:52:f4:01:58:7d:15:9b:2b:8a:bb:09:ab:e1:3e: 73:dc:31:aa:51:8e:9f:50:ea:27:3d:ba:15:ac:c9:3a:96:47: 7f:dd:17:50:1a:c5:cb:b6:6b:e2:e0:3e:7f:83:71:ef:5f:87: 45:0d:38:58:2e:09:81:7c:a4:25:f4:c0:2d:fd:ea:4c:5b:f3: eb:30:fb:95:9b:ba:4b:9b:32:f2:86:91:8f:89:51:ce:d5:43: 14:75:6f:d2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTRDRDExMC8GA1UEBRMoRTE2M0YwRkU1NEYxNzlBRjRDNkMwOTcwOThGRUZCRTJE NDM4NUIxOTAeFw0yNTA1MTEwNjM1MTNaFw0yNTA1MTgwNjM1MTNaMBgxFjAUBgNV BAMTDTY4MjA0NTIxLWQ1NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCy5Wa8S6uuqmnsbTaCXdoB1C1ZfNnA4fy1dPJ3m4TvHanIlSSG/MubCOixZSuN aK1g1yopxhz0meCHzGnPHdj4Eu6uOfkklm9APb4o1IqIBWbjYcN84CTVNu/wMBsb 6jR+/Z3oAkm8rx/OZYyM4xyblgDCxj6XuwX7uF/XLZ1rVjHVDY9DFOLYBUGy+IJi BK7dUKDym5jV+FcqrLtVmwVd0eGT1YQMYPheNQpprOfrtEon4yMIf7JGX9Ai8ciq UnuyaTJ9fap7tCl7UrzZZve/L86uE9zGpFGh+Z7wGTG+0NU35mgzIduWbjeUkmua /6EziYEzNeYcBvvx8CsRYM0xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiVYPbtTE 08efSCvP1mRcqTfDMnEwHwYDVR0jBBgwFoAU4WPw/lTxea9MbAlwmP774tQ4Wxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1NENEL0QyRTJDQTdDRkQ4 NzExRUZCNjYyNEEyOEM0RjlBRTAyLzRXUHdfbFR4ZWE5TWJBbHdtUDc3NHRRNFd4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNFdQd19sVHhlYTlNYkFsd21QNzc0dFE0V3hrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 NENEL0QyRTJDQTdDRkQ4NzExRUZCNjYyNEEyOEM0RjlBRTAyLzRXUHdfbFR4ZWE5 TWJBbHdtUDc3NHRRNFd4ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADZqlFXen+Uy9D+aZFdurJwOAxifdrywEEwZ/QMIZyXQKyj+oe6DHU/9 aXYUERMjLYMcD/+A1OP5iostFqHhtH5e2zlEtbdVX+vQt712O0NmNg9r0W3JXmnl 8V50/d3zcVWM1bNsD7O6wJyINtpPFEcPvqDGAi120pDZThXo8K7pXvYbDlEGG6wV vx5i0J34FLDm4QCCk/Je1+MnxL/h/bsn6IU3vVlS9AFYfRWbK4q7CavhPnPcMapR jp9Q6ic9uhWsyTqWR3/dF1Aaxcu2a+LgPn+Dce9fh0UNOFguCYF8pCX0wC396kxb 8+sw+5WbukubMvKGkY+JUc7VQxR1b9I= -----END CERTIFICATE-----Generated at Tue May 13 02:26:07 2025 by rpki-client