$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft File: CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft (raw, json) Hash identifier: ljjdfSkdY41t6LKkTDO5iZhupaMERuJ1r9QoPhs/mAY= Subject key identifier: 23:90:66:8D:62:AD:72:2F:5B:30:8E:BF:E3:4B:B6:7B:D1:A3:4B:B9 Authority key identifier: 08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F Certificate issuer: /CN=A91FF7FC/serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F Certificate serial: 04B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft Manifest number: 04B4 Signing time: Wed 14 May 2025 23:54:38 +0000 Manifest this update: Wed 14 May 2025 23:54:38 +0000 Manifest next update: Wed 21 May 2025 23:54:38 +0000 Files and hashes: 1: CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl (hash: iq8u8ivabL8xUx77Lz1s7Q9TrL0rUCrKDuScEZGWIrQ=) 2: 5CA72CF82A6911EC94518740C4F9AE02.roa (hash: DNv6RERe4SqIzEBmNx3Q6xCWL7cpJvtrVCrMm/mBf0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 23:54:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1209 (0x4b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF7FC, serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F Validity Not Before: May 14 23:54:38 2025 GMT Not After : May 21 23:54:38 2025 GMT Subject: CN=68252d3e-1661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:64:9e:10:f2:2e:17:82:13:2c:5b:25:20:43: 28:18:09:f0:99:32:ec:b8:a3:82:a8:4d:f3:1f:ee: 1a:d3:79:4c:13:da:44:0a:2c:eb:24:63:6c:0c:97: 94:69:b8:a8:f3:b2:14:e3:b1:48:2f:e9:bb:54:17: 9b:9a:24:fb:42:b6:da:43:95:e0:a9:73:6d:ce:06: 2d:0b:0e:44:43:6c:7d:a5:96:04:ed:5d:18:89:f7: f5:29:d8:50:63:b8:b4:19:ee:94:9c:9f:c8:0a:4a: 00:a5:b5:03:36:aa:aa:00:b6:de:3b:61:b1:29:a3: 6a:3c:c6:a1:1d:0e:0a:3b:82:28:3a:e7:c9:53:ea: 55:de:a9:0c:c0:cd:5d:ea:0e:97:4d:4c:cd:76:0a: 7e:e2:08:a3:8c:c4:31:22:32:a3:73:41:2e:3e:13: af:80:7a:54:05:eb:e4:3a:ed:01:1f:7a:5c:bf:a2: 4c:27:0f:cf:99:8f:ab:9a:bb:32:ca:32:24:4d:2e: ca:4f:ff:38:ee:74:2e:c1:5d:c1:e8:c6:a3:cc:5d: 10:23:1f:2c:92:a9:3c:17:9e:b0:ac:8f:5a:93:d5: 68:c3:4f:ec:69:bb:df:29:87:01:6e:8c:7f:d6:f5: e4:75:2f:a5:28:ea:ea:b5:c3:77:f5:64:fc:99:61: 4c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:90:66:8D:62:AD:72:2F:5B:30:8E:BF:E3:4B:B6:7B:D1:A3:4B:B9 X509v3 Authority Key Identifier: keyid:08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:13:4e:4b:c7:63:0d:ab:19:14:d7:f6:fa:2b:97:54:95:43: b3:22:95:52:83:13:9d:51:23:2c:27:33:70:d8:a8:83:eb:14: 12:47:9f:e0:92:6b:f9:6c:c0:30:2f:c9:3e:83:b2:ab:6f:6b: 7c:db:7c:c3:c9:14:ec:8b:e8:af:ca:8a:ad:e0:fe:00:d0:69: 4e:12:e1:5d:96:a7:93:c0:22:09:73:4c:58:39:73:2b:8c:ad: 02:2d:26:97:53:ec:72:dd:55:e8:dc:17:d3:6f:a5:b5:ac:c9: 4c:6b:87:c0:e9:ad:11:ee:f2:8a:9a:23:49:e6:f8:3e:e9:06: 38:3d:d4:7e:0f:a5:c1:d7:ee:67:9d:2f:39:f7:d7:17:19:ed: 2a:e6:b3:1c:74:70:59:1a:57:37:e7:8a:5a:87:42:f4:f3:a6: a7:39:50:43:29:dc:ba:f2:8d:c7:70:0a:01:dd:54:e7:32:6c: c7:1d:73:0c:9a:d6:32:86:1a:da:30:42:01:b2:cf:24:03:88: b6:10:ef:68:a8:f4:4e:58:f4:fc:bf:cd:dd:9f:d7:de:85:38: cf:23:f3:d1:5f:25:89:9e:76:fc:66:6a:d6:65:c5:5c:4c:89: d0:b8:10:b8:97:b5:fb:3e:96:d1:ae:5b:3a:d6:83:c0:d8:9f: 0d:40:a2:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY3RkMxMTAvBgNVBAUTKDA4RDlGNDgzRTQ1NDIxNThGNjJDQkU3MDU4NjlFQkVE NzdGQjkyN0YwHhcNMjUwNTE0MjM1NDM4WhcNMjUwNTIxMjM1NDM4WjAYMRYwFAYD VQQDEw02ODI1MmQzZS0xNjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2SeEPIuF4ITLFslIEMoGAnwmTLsuKOCqE3zH+4a03lME9pECizrJGNsDJeU abio87IU47FIL+m7VBebmiT7QrbaQ5XgqXNtzgYtCw5EQ2x9pZYE7V0Yiff1KdhQ Y7i0Ge6UnJ/ICkoApbUDNqqqALbeO2GxKaNqPMahHQ4KO4IoOufJU+pV3qkMwM1d 6g6XTUzNdgp+4gijjMQxIjKjc0EuPhOvgHpUBevkOu0BH3pcv6JMJw/PmY+rmrsy yjIkTS7KT/847nQuwV3B6MajzF0QIx8skqk8F56wrI9ak9Vow0/sabvfKYcBbox/ 1vXkdS+lKOrqtcN39WT8mWFMxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOQZo1i rXIvWzCOv+NLtnvRo0u5MB8GA1UdIwQYMBaAFAjZ9IPkVCFY9iy+cFhp6+13+5J/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjdGQy80RTIzQjM5QzJB NjIxMUVDQTlBNjdDMzBDNEY5QUUwMi9DTm4wZy1SVUlWajJMTDV3V0ducjdYZjdr bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NObjBnLVJVSVZqMkxMNXdXR25yN1hmN2tuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjdGQy80RTIzQjM5QzJBNjIxMUVDQTlBNjdDMzBDNEY5QUUwMi9DTm4wZy1SVUlW ajJMTDV3V0ducjdYZjdrbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQE05Lx2MNqxkU1/b6K5dUlUOzIpVSgxOdUSMsJzNw2KiD6xQSR5/g kmv5bMAwL8k+g7Krb2t823zDyRTsi+ivyoqt4P4A0GlOEuFdlqeTwCIJc0xYOXMr jK0CLSaXU+xy3VXo3BfTb6W1rMlMa4fA6a0R7vKKmiNJ5vg+6QY4PdR+D6XB1+5n nS8599cXGe0q5rMcdHBZGlc354pah0L086anOVBDKdy68o3HcAoB3VTnMmzHHXMM mtYyhhraMEIBss8kA4i2EO9oqPROWPT8v83dn9fehTjPI/PRXyWJnnb8ZmrWZcVc TInQuBC4l7X7PpbRrls61oPA2J8NQKLP -----END CERTIFICATE-----Generated at Thu May 15 19:03:32 2025 by rpki-client