$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft File: n4mmBPRc629oBPtTTq3CQWa9Dyk.mft (raw, json) Hash identifier: 3BryAjzPrHAHJp6wAAUWhQlile26oEX0AtEyINUbai4= Subject key identifier: 60:F4:C3:F3:28:1C:FD:1E:9A:45:FB:9A:F5:E0:FE:54:FA:62:57:F3 Authority key identifier: 9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29 Certificate issuer: /CN=A91FD3F6/serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft Manifest number: 26 Signing time: Fri 09 May 2025 06:49:16 +0000 Manifest this update: Fri 09 May 2025 06:49:16 +0000 Manifest next update: Fri 16 May 2025 06:49:16 +0000 Files and hashes: 1: n4mmBPRc629oBPtTTq3CQWa9Dyk.crl (hash: ajGWVCQGm4JIs10OFq9tvloufaysPeRKl+rQfRtxKWg=) 2: 27B19A58F99911EFB6B7F427C4F9AE02.roa (hash: BUhldgfxait6fPn7ddMr7oElIYN1G4FTjWGIi47OvkE=) 3: 88E11172F99A11EFA825D961C4F9AE02.roa (hash: AXOaVoqZ86dlROkyEdtuYYcAQanKRipkDbyi/sYqa94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 06:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD3F6, serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29 Validity Not Before: May 9 06:49:16 2025 GMT Not After : May 16 06:49:16 2025 GMT Subject: CN=681da56c-74b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:63:ce:9c:1e:37:f7:9e:e6:ea:5b:bd:3b:fd: fd:a8:6b:fa:8f:f2:c4:cc:7a:35:18:fd:4e:0f:6e: 67:a2:d3:fe:c7:42:32:4c:66:8d:a2:84:af:c0:41: ad:ac:e4:ed:b8:15:b6:c2:fa:24:b9:72:05:0d:e6: e9:ff:eb:ba:2a:93:0f:ff:d6:08:eb:29:33:32:8f: 54:ce:c3:e5:16:68:ac:8c:25:a0:de:35:d2:04:c9: 9b:23:9b:4f:b7:ee:bf:bb:e6:9d:1a:7e:e7:9b:f5: 68:d1:77:9d:c9:c0:b0:3f:60:8e:ae:40:9e:ff:69: 18:45:a1:59:7b:0a:d6:ea:6d:01:28:5a:41:12:5c: b7:37:73:d9:e5:f6:13:d8:32:ff:cb:78:7c:58:23: 66:b6:d1:b1:83:83:11:a5:28:d7:35:68:c8:ac:4a: c0:1c:0f:e0:96:0b:25:45:0d:dd:56:69:a3:93:b0: 02:47:21:4b:ca:c7:10:f0:b0:0a:b7:e3:96:0d:50: db:9d:39:a4:0a:03:9c:b9:ca:d8:a2:a0:10:25:56: ab:52:98:72:cc:56:f2:37:1c:dc:42:b5:40:d2:7d: 10:19:3a:fc:e7:b0:07:cf:a2:59:18:13:51:2c:fd: 6f:b1:b2:69:52:34:7c:c3:78:94:0b:ee:b5:ab:d1: e6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F4:C3:F3:28:1C:FD:1E:9A:45:FB:9A:F5:E0:FE:54:FA:62:57:F3 X509v3 Authority Key Identifier: keyid:9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:20:44:4d:bd:a4:55:6e:0a:75:fd:99:51:6d:51:df:19:3a: 71:8d:5a:28:50:77:b2:2d:8f:9e:fc:4f:f0:bc:8b:c1:35:98: 0d:eb:db:8b:db:1f:59:9e:69:d0:27:da:ea:32:53:40:1d:b5: 73:7f:97:e9:5d:0a:ef:96:61:d5:5a:02:4e:a7:f4:e4:7c:e1: 0a:1d:a8:71:31:db:99:dc:5d:ec:2b:80:90:49:f5:a3:6e:f8: aa:93:11:c6:e2:39:66:0d:be:89:99:be:85:a0:b9:c1:b4:1d: 99:a2:0f:37:69:41:b8:06:03:3c:ca:2e:21:07:f5:71:ed:54: 5c:d5:d0:a8:8f:13:93:03:12:7c:75:f1:fc:9e:19:1d:f1:a9: b5:b3:f1:13:ef:87:c7:6a:74:62:4a:53:ea:9c:b7:4c:ef:49: 8e:8a:73:8d:08:15:f3:39:2d:7a:68:79:31:2a:8a:ed:98:b6: 94:66:97:f2:08:be:5a:bf:6c:ba:c1:f3:84:cb:9a:24:56:fb: cc:da:b2:c0:71:0e:de:3b:fb:f1:61:85:d3:82:a1:d3:1b:e4: e6:03:9d:75:8e:4d:40:87:7d:7c:bb:c8:8c:b8:31:26:d6:a2: 8e:38:60:b8:86:33:fe:15:10:c4:83:8e:1a:1a:e6:a1:b6:e2: d0:99:ad:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDNGNjExMC8GA1UEBRMoOUY4OUE2MDRGNDVDRUI2RjY4MDRGQjUzNEVBREMyNDE2 NkJEMEYyOTAeFw0yNTA1MDkwNjQ5MTZaFw0yNTA1MTYwNjQ5MTZaMBgxFjAUBgNV BAMTDTY4MWRhNTZjLTc0YjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyY86cHjf3nubqW707/f2oa/qP8sTMejUY/U4Pbmei0/7HQjJMZo2ihK/AQa2s 5O24FbbC+iS5cgUN5un/67oqkw//1gjrKTMyj1TOw+UWaKyMJaDeNdIEyZsjm0+3 7r+75p0afueb9WjRd53JwLA/YI6uQJ7/aRhFoVl7CtbqbQEoWkESXLc3c9nl9hPY Mv/LeHxYI2a20bGDgxGlKNc1aMisSsAcD+CWCyVFDd1WaaOTsAJHIUvKxxDwsAq3 45YNUNudOaQKA5y5ytiioBAlVqtSmHLMVvI3HNxCtUDSfRAZOvznsAfPolkYE1Es /W+xsmlSNHzDeJQL7rWr0earAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYPTD8ygc /R6aRfua9eD+VPpiV/MwHwYDVR0jBBgwFoAUn4mmBPRc629oBPtTTq3CQWa9Dykw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEM0Y2LzM3MTY4MUZBRjhE MzExRUY5NzU4RkIwRkM0RjlBRTAyL240bW1CUFJjNjI5b0JQdFRUcTNDUVdhOUR5 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbjRtbUJQUmM2MjlvQlB0VFRxM0NRV2E5RHlrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE M0Y2LzM3MTY4MUZBRjhEMzExRUY5NzU4RkIwRkM0RjlBRTAyL240bW1CUFJjNjI5 b0JQdFRUcTNDUVdhOUR5ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEsgRE29pFVuCnX9mVFtUd8ZOnGNWihQd7Itj578T/C8i8E1mA3r24vb H1meadAn2uoyU0AdtXN/l+ldCu+WYdVaAk6n9OR84QodqHEx25ncXewrgJBJ9aNu +KqTEcbiOWYNvomZvoWgucG0HZmiDzdpQbgGAzzKLiEH9XHtVFzV0KiPE5MDEnx1 8fyeGR3xqbWz8RPvh8dqdGJKU+qct0zvSY6Kc40IFfM5LXpoeTEqiu2YtpRml/II vlq/bLrB84TLmiRW+8zassBxDt47+/FhhdOCodMb5OYDnXWOTUCHfXy7yIy4MSbW oo44YLiGM/4VEMSDjhoa5qG24tCZrSc= -----END CERTIFICATE-----Generated at Sat May 10 13:13:29 2025 by rpki-client