$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft File: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft (raw, json) Hash identifier: DjgrFrn67j2J7UGyKfBU77hTZwrtEehdra+jg++m3dI= Subject key identifier: 59:09:C7:69:3B:8E:3C:71:F3:A7:79:2D:AE:98:95:30:2C:3C:FD:F4 Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E Certificate issuer: /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E Certificate serial: 078D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft Manifest number: 0783 Signing time: Thu 08 May 2025 21:15:49 +0000 Manifest this update: Thu 08 May 2025 21:15:49 +0000 Manifest next update: Thu 15 May 2025 21:15:49 +0000 Files and hashes: 1: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl (hash: BuBC5DAA1ibtMsrhZPuGagb7FAUQo1miBRYqODDOsHM=) 2: 009FA5F0397C11EF9EC42850C4F9AE02.roa (hash: BUdadXM84LZqg6dcPh4b0sJ5Cd4Jg9PJnJrm+wRnwP8=) 3: E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (hash: GwT8wJjuiJq3ptd4ORrNmt479yde0NY4ozRqZ/YvpGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 21:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1933 (0x78d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9FCC, serialNumber=E01002B37C26B9709915267666F44900C0131E2E Validity Not Before: May 8 21:15:49 2025 GMT Not After : May 15 21:15:49 2025 GMT Subject: CN=681d1f05-2b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:75:ea:91:ff:4d:df:0d:d2:6d:e8:68:3e:98: 37:08:6d:20:2f:d6:6d:95:7d:68:51:8f:7d:82:2c: b8:d0:ad:db:8d:b0:65:df:7c:c5:5b:92:77:e7:87: c3:9e:41:b8:2f:be:c8:fe:ac:40:76:78:8b:3e:82: 84:7a:5d:60:7b:97:46:45:cf:5a:d7:f0:9a:c4:43: e9:77:37:7c:b7:45:96:e9:72:62:1c:12:27:22:72: e5:42:8a:4c:9e:db:0d:11:36:d6:54:6e:3d:f7:1a: fa:84:a8:7f:3d:92:0f:f0:b6:0e:91:6d:c2:b9:22: bd:bb:00:f2:62:f6:9a:c4:92:0c:4e:4a:d2:17:9a: 59:a5:7f:2b:4c:b9:a1:64:f8:10:8c:c5:d7:bb:6c: a0:16:7d:4b:cf:60:6e:82:0f:e2:2a:85:52:53:46: 76:99:7b:af:1a:f3:83:38:63:bf:58:d0:b2:c7:67: 35:4b:3f:7b:56:43:19:45:07:2a:ce:cc:9c:92:92: b1:eb:2e:81:84:84:bb:00:14:68:e9:c5:8b:5d:ff: 92:33:44:be:79:13:25:20:6d:53:bc:7d:09:27:99: e7:1c:1e:65:dd:f5:d3:e4:8d:e4:d2:47:cd:ab:bb: f7:a3:74:ff:45:81:82:c2:8f:73:70:f2:9c:66:ba: c8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:09:C7:69:3B:8E:3C:71:F3:A7:79:2D:AE:98:95:30:2C:3C:FD:F4 X509v3 Authority Key Identifier: keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:9d:ee:d1:12:a7:30:1a:94:67:2b:ea:85:1c:13:d1:e8:4a: ea:f5:b6:36:3c:0d:5b:40:3d:d6:5a:64:52:c0:2b:eb:33:cd: e0:a7:58:e3:61:d8:60:12:29:f3:ed:5e:d8:ed:b6:18:78:c7: f6:0c:4b:d8:71:59:0b:14:d6:ac:de:7a:dd:38:7e:b4:24:39: 93:7d:27:82:ad:99:6e:9f:1c:34:7d:21:7c:7d:73:de:5b:91: 63:d7:cd:23:c2:3d:5c:e1:96:89:b6:75:9e:4b:94:8d:a8:20: db:ec:0d:9a:30:9d:b5:5b:d3:16:ce:7d:3d:0b:2f:0b:d7:de: 51:fb:47:ee:80:5c:b5:7d:c3:8d:02:5c:e4:1f:ed:4d:10:52: 97:1b:ea:79:60:05:73:86:26:97:82:a7:30:0c:5b:44:d0:60: 29:39:6a:77:80:63:74:3b:f8:4b:a7:df:1e:8d:3c:f8:40:3b: f7:2f:9d:b7:47:fd:53:22:9c:48:98:2e:af:d9:f2:8d:ab:a6: c8:fb:e8:6a:80:e3:fe:7d:62:81:f9:d1:a3:60:2c:23:ce:63: e1:66:e1:dc:5f:3e:49:6c:76:bc:fd:06:17:aa:63:fc:c3:f1: 43:31:75:dc:a0:08:7f:e4:e5:21:f6:6c:7b:c1:cc:94:31:6a: d2:c6:dc:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGQ0MxMTAvBgNVBAUTKEUwMTAwMkIzN0MyNkI5NzA5OTE1MjY3NjY2RjQ0OTAw QzAxMzFFMkUwHhcNMjUwNTA4MjExNTQ5WhcNMjUwNTE1MjExNTQ5WjAYMRYwFAYD VQQDEw02ODFkMWYwNS0yYjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm3Xqkf9N3w3SbehoPpg3CG0gL9ZtlX1oUY99giy40K3bjbBl33zFW5J354fD nkG4L77I/qxAdniLPoKEel1ge5dGRc9a1/CaxEPpdzd8t0WW6XJiHBInInLlQopM ntsNETbWVG499xr6hKh/PZIP8LYOkW3CuSK9uwDyYvaaxJIMTkrSF5pZpX8rTLmh ZPgQjMXXu2ygFn1Lz2Bugg/iKoVSU0Z2mXuvGvODOGO/WNCyx2c1Sz97VkMZRQcq zsyckpKx6y6BhIS7ABRo6cWLXf+SM0S+eRMlIG1TvH0JJ5nnHB5l3fXT5I3k0kfN q7v3o3T/RYGCwo9zcPKcZrrIaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkJx2k7 jjxx86d5La6YlTAsPP30MB8GA1UdIwQYMBaAFOAQArN8JrlwmRUmdmb0SQDAEx4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUZDQy8yMkNENzlERTBE Q0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVYQ1pGU1oyWnZSSkFNQVRI aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCQUNzM3dtdVhDWkZTWjJadlJKQU1BVEhpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUZDQy8yMkNENzlERTBEQ0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVY Q1pGU1oyWnZSSkFNQVRIaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABne7REqcwGpRnK+qFHBPR6Erq9bY2PA1bQD3WWmRSwCvrM83gp1jj YdhgEinz7V7Y7bYYeMf2DEvYcVkLFNas3nrdOH60JDmTfSeCrZlunxw0fSF8fXPe W5Fj180jwj1c4ZaJtnWeS5SNqCDb7A2aMJ21W9MWzn09Cy8L195R+0fugFy1fcON AlzkH+1NEFKXG+p5YAVzhiaXgqcwDFtE0GApOWp3gGN0O/hLp98ejTz4QDv3L523 R/1TIpxImC6v2fKNq6bI++hqgOP+fWKB+dGjYCwjzmPhZuHcXz5JbHa8/QYXqmP8 w/FDMXXcoAh/5OUh9mx7wcyUMWrSxtzI -----END CERTIFICATE-----Generated at Sat May 10 01:39:57 2025 by rpki-client