$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft File: 4ISfBUORggKxeEROX_IviZ-eMg4.mft (raw, json) Hash identifier: EeEcxE4j1VSBb0wXLpjqEw2VgOEsDHOu/HAJWLn9Xr0= Subject key identifier: 35:FB:DC:B7:BF:05:71:74:F2:1E:16:36:4E:99:5C:AC:EF:82:D1:9F Authority key identifier: E0:84:9F:05:43:91:82:02:B1:78:44:4E:5F:F2:2F:89:9F:9E:32:0E Certificate issuer: /CN=A91F7DBA/serialNumber=E0849F0543918202B178444E5FF22F899F9E320E Certificate serial: 04B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft Manifest number: 04AF Signing time: Sat 10 May 2025 23:29:08 +0000 Manifest this update: Sat 10 May 2025 23:29:07 +0000 Manifest next update: Sat 17 May 2025 23:29:07 +0000 Files and hashes: 1: 4ISfBUORggKxeEROX_IviZ-eMg4.crl (hash: eD61RB9BjAdIWa10POVUbK7DgwrE4oQBTKmZutAZHaU=) 2: 145F8B6434D211EEA9BD8F64C4F9AE02.roa (hash: MOCtEXuSWTSIWA+J+aTGfRvUWTN01u8L13mcqeEHJ4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.crl rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1204 (0x4b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7DBA, serialNumber=E0849F0543918202B178444E5FF22F899F9E320E Validity Not Before: May 10 23:29:07 2025 GMT Not After : May 17 23:29:07 2025 GMT Subject: CN=681fe144-aaee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:52:05:82:48:4d:e4:d3:35:1c:79:cb:09:c7: 54:4a:f3:a6:99:33:24:03:be:91:99:0f:20:33:b4: ba:be:2b:59:41:86:35:ff:6c:fc:c3:8f:8d:71:5b: 64:41:e9:b5:24:78:30:6b:00:a3:27:ff:90:29:3d: d4:3b:3b:a2:20:fb:bd:e0:3d:54:c6:fb:0e:8e:02: d1:67:3e:4f:29:ac:54:c5:d6:f3:eb:95:bc:c1:30: 8b:3a:73:34:fa:99:58:d4:d4:2e:19:f9:6b:92:9f: c2:4b:74:dd:11:2a:0c:3c:1d:5c:66:06:0a:62:45: de:82:1d:76:69:25:cd:20:56:de:a1:51:0d:f9:23: 86:42:ef:c2:3a:8e:bb:6c:15:1b:81:1d:cb:18:99: 40:f6:88:3f:7c:d9:6c:af:42:62:66:3c:03:b7:e1: ec:c8:34:6a:91:7d:32:ee:65:cb:b4:7b:b2:af:25: 88:c3:f9:5b:ef:62:c6:a5:47:26:2e:ce:6e:0f:41: 13:4e:ec:fa:44:47:80:28:a0:d4:33:a0:9a:36:0e: 3a:40:ca:e5:14:5d:e9:b6:eb:91:57:09:2e:ef:56: 0d:8a:92:73:77:12:21:a9:5a:4e:00:34:70:36:7a: 11:5e:d6:f2:a0:d2:1a:81:a1:05:1b:fc:37:1a:4b: 16:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:FB:DC:B7:BF:05:71:74:F2:1E:16:36:4E:99:5C:AC:EF:82:D1:9F X509v3 Authority Key Identifier: keyid:E0:84:9F:05:43:91:82:02:B1:78:44:4E:5F:F2:2F:89:9F:9E:32:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:ec:58:a9:b7:27:00:89:58:26:5c:35:04:03:5c:f4:18:ae: e9:e6:99:d7:1a:7b:7e:65:08:a2:94:a3:15:de:e5:c7:48:a3: 78:ac:63:88:6f:eb:22:28:4f:3a:e7:88:21:ed:2b:e6:06:4a: 5e:88:f7:be:0e:80:ce:5e:43:b5:75:8f:34:19:0f:fb:d3:cc: b6:bd:2a:84:d6:7d:b9:31:d4:c6:5b:af:22:cb:05:58:20:4f: 2e:13:b6:35:81:b5:76:60:74:6d:63:43:b1:d1:c8:1c:17:94: 5f:1b:44:b2:d8:0c:25:3f:b7:df:30:1e:4e:1f:f4:0d:3a:7b: c0:21:b2:ec:ac:37:99:f3:6d:41:6e:f4:4b:b2:99:47:9d:b4: a9:cd:c1:44:82:03:d2:43:c7:13:fb:7c:56:54:2b:25:a1:88: 00:81:96:63:a0:47:8a:46:8b:2d:a7:11:d5:9a:9f:5b:17:28: 8a:91:d6:81:2e:de:6f:9c:55:de:11:a6:6b:ae:91:f4:9c:ca: e2:36:fe:ab:5d:cc:82:56:c2:67:ba:d7:dc:2f:d6:62:68:78: b3:a8:33:2c:21:f5:6f:7f:dd:7d:03:81:75:0a:e7:6d:42:44: 2f:75:9d:9c:d9:d6:ed:51:fa:59:e4:39:2b:55:6a:dd:74:93: 2a:24:f6:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdEQkExMTAvBgNVBAUTKEUwODQ5RjA1NDM5MTgyMDJCMTc4NDQ0RTVGRjIyRjg5 OUY5RTMyMEUwHhcNMjUwNTEwMjMyOTA3WhcNMjUwNTE3MjMyOTA3WjAYMRYwFAYD VQQDEw02ODFmZTE0NC1hYWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFIFgkhN5NM1HHnLCcdUSvOmmTMkA76RmQ8gM7S6vitZQYY1/2z8w4+NcVtk Qem1JHgwawCjJ/+QKT3UOzuiIPu94D1UxvsOjgLRZz5PKaxUxdbz65W8wTCLOnM0 +plY1NQuGflrkp/CS3TdESoMPB1cZgYKYkXegh12aSXNIFbeoVEN+SOGQu/COo67 bBUbgR3LGJlA9og/fNlsr0JiZjwDt+HsyDRqkX0y7mXLtHuyryWIw/lb72LGpUcm Ls5uD0ETTuz6REeAKKDUM6CaNg46QMrlFF3ptuuRVwku71YNipJzdxIhqVpOADRw NnoRXtbyoNIagaEFG/w3GksWjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDX73Le/ BXF08h4WNk6ZXKzvgtGfMB8GA1UdIwQYMBaAFOCEnwVDkYICsXhETl/yL4mfnjIO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0RCQS8yOEVCNzE0NjJC RDQxMUVDQjBCQURFNThDNEY5QUUwMi80SVNmQlVPUmdnS3hlRVJPWF9JdmlaLWVN ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRJU2ZCVU9SZ2dLeGVFUk9YX0l2aVotZU1nNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0RCQS8yOEVCNzE0NjJCRDQxMUVDQjBCQURFNThDNEY5QUUwMi80SVNmQlVPUmdn S3hlRVJPWF9JdmlaLWVNZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ7FiptycAiVgmXDUEA1z0GK7p5pnXGnt+ZQiilKMV3uXHSKN4rGOI b+siKE8654gh7SvmBkpeiPe+DoDOXkO1dY80GQ/708y2vSqE1n25MdTGW68iywVY IE8uE7Y1gbV2YHRtY0Ox0cgcF5RfG0Sy2AwlP7ffMB5OH/QNOnvAIbLsrDeZ821B bvRLsplHnbSpzcFEggPSQ8cT+3xWVCsloYgAgZZjoEeKRostpxHVmp9bFyiKkdaB Lt5vnFXeEaZrrpH0nMriNv6rXcyCVsJnutfcL9ZiaHizqDMsIfVvf919A4F1Cudt QkQvdZ2c2dbtUfpZ5DkrVWrddJMqJPa0 -----END CERTIFICATE-----Generated at Mon May 12 03:44:38 2025 by rpki-client