$ rpki-client -vvf rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft File: IwN4FncHnC-7R0lkDwZXociO20Q.mft (raw, json) Hash identifier: yGit14DdIn/6Ut2KVtG+vDJhjHN00g8mLcj2NKzzxAs= Subject key identifier: 35:A4:83:EF:0B:1D:C6:10:4C:43:D1:26:BB:BC:61:BF:F4:A3:CC:E8 Authority key identifier: 23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44 Certificate issuer: /CN=A911E0B4/serialNumber=2303781677079C2FBB4749640F0657A1C88EDB44 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft Manifest number: 4C Signing time: Fri 25 Apr 2025 06:19:00 +0000 Manifest this update: Fri 25 Apr 2025 06:19:00 +0000 Manifest next update: Fri 02 May 2025 06:19:00 +0000 Files and hashes: 1: IwN4FncHnC-7R0lkDwZXociO20Q.crl (hash: laI4kXTE/ABkniSR+4xwWnFiOyeDFy2eJapRyzqtIrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.crl rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E0B4, serialNumber=2303781677079C2FBB4749640F0657A1C88EDB44 Validity Not Before: Apr 25 06:19:00 2025 GMT Not After : May 2 06:19:00 2025 GMT Subject: CN=680b2954-930b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8c:35:28:31:2d:9a:32:f4:aa:cd:b4:01:62: f2:f7:7b:8d:14:be:e7:22:c7:8f:af:9a:b4:61:ed: 30:c6:1d:44:2c:68:55:43:18:9b:de:38:b2:9b:3a: f9:b4:8f:05:a2:c5:73:59:e1:33:b1:6c:30:0a:14: 95:ec:7a:83:fa:39:27:8d:29:44:c9:c6:bf:77:1a: b5:c2:4b:f4:c8:75:86:f9:6d:9d:3d:20:13:23:d1: 95:db:c5:1f:6c:db:84:29:0c:91:83:cf:5b:5b:89: 45:1c:b0:60:e1:1e:f3:b2:49:23:ef:7b:39:64:4e: 04:e2:12:5b:c6:bc:0e:1b:69:e0:f9:5f:e1:a1:9a: 87:a1:b8:36:59:b5:08:96:b6:75:d3:2b:14:f5:a6: df:9e:db:5c:88:a7:a5:f9:01:1f:2c:1d:5b:44:23: 54:6d:46:81:48:08:41:2d:a1:14:5f:16:e0:be:4f: 80:0b:ef:5d:4c:2d:a2:81:e1:45:a9:ab:be:61:81: 31:e3:d2:ab:3e:55:9f:70:e5:13:60:d4:e7:68:8b: c6:81:bd:e4:9c:42:82:99:2e:57:0b:5f:7d:f9:11: bd:2f:ed:7e:a2:29:6c:e3:e7:d5:3e:d7:67:e1:92: b5:d3:c1:63:c0:d7:64:3a:3d:87:41:41:02:99:89: 66:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A4:83:EF:0B:1D:C6:10:4C:43:D1:26:BB:BC:61:BF:F4:A3:CC:E8 X509v3 Authority Key Identifier: keyid:23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ad:7d:92:08:cd:c5:46:66:74:bb:b2:e0:f7:a8:c4:e6:2f: cd:f1:6e:0c:fa:28:e0:f1:47:00:7a:e8:ab:61:79:c6:89:a0: 82:0c:40:97:05:5e:eb:94:07:b6:2d:8c:75:c9:98:a0:e0:8e: fd:24:d3:36:1d:ab:3d:e1:6e:d3:f5:88:68:79:b4:8f:06:81: 08:fc:d6:b8:ae:48:c3:ec:37:dd:86:8e:8c:e7:ca:53:be:a7: a6:3f:b1:95:e8:14:c7:ce:e7:a7:48:c7:56:33:0e:d5:86:1b: 24:aa:08:7d:54:05:ef:2b:6d:d7:d1:ec:4a:db:a8:2d:4c:61: 03:1c:96:e2:d0:70:e4:8f:35:8f:52:40:19:0c:1e:af:21:51: ba:22:c0:45:82:73:eb:38:df:80:ad:7d:e5:8c:a8:ad:f8:ac: 86:9d:03:c8:28:d8:3f:0f:32:e6:58:5a:ef:d0:36:44:9a:6e: f7:37:c2:20:66:21:54:6d:fc:e3:54:11:62:0f:ac:31:49:3e: e8:56:67:d6:99:99:44:77:b7:68:19:05:c4:bb:4b:17:4e:0c: 37:95:45:d3:94:8e:bd:20:94:39:f7:6f:70:26:e1:b7:e3:f2: 98:fa:94:bb:ed:76:c5:07:28:07:e7:35:f8:0c:4d:6f:60:30: 55:f4:32:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTBCNDExMC8GA1UEBRMoMjMwMzc4MTY3NzA3OUMyRkJCNDc0OTY0MEYwNjU3QTFD ODhFREI0NDAeFw0yNTA0MjUwNjE5MDBaFw0yNTA1MDIwNjE5MDBaMBgxFjAUBgNV BAMTDTY4MGIyOTU0LTkzMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXjDUoMS2aMvSqzbQBYvL3e40Uvucix4+vmrRh7TDGHUQsaFVDGJveOLKbOvm0 jwWixXNZ4TOxbDAKFJXseoP6OSeNKUTJxr93GrXCS/TIdYb5bZ09IBMj0ZXbxR9s 24QpDJGDz1tbiUUcsGDhHvOySSPvezlkTgTiElvGvA4baeD5X+GhmoehuDZZtQiW tnXTKxT1pt+e21yIp6X5AR8sHVtEI1RtRoFICEEtoRRfFuC+T4AL711MLaKB4UWp q75hgTHj0qs+VZ9w5RNg1Odoi8aBveScQoKZLlcLX335Eb0v7X6iKWzj59U+12fh krXTwWPA12Q6PYdBQQKZiWajAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNaSD7wsd xhBMQ9Emu7xhv/SjzOgwHwYDVR0jBBgwFoAUIwN4FncHnC+7R0lkDwZXociO20Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFMEI0L0YyMjMxREU0QUYz ODExRUZBMjBERDAxM0M0RjlBRTAyL0l3TjRGbmNIbkMtN1IwbGtEd1pYb2NpTzIw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSXdONEZuY0huQy03UjBsa0R3WlhvY2lPMjBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF MEI0L0YyMjMxREU0QUYzODExRUZBMjBERDAxM0M0RjlBRTAyL0l3TjRGbmNIbkMt N1IwbGtEd1pYb2NpTzIwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAutfZIIzcVGZnS7suD3qMTmL83xbgz6KODxRwB66KthecaJoIIMQJcF XuuUB7YtjHXJmKDgjv0k0zYdqz3hbtP1iGh5tI8GgQj81riuSMPsN92GjoznylO+ p6Y/sZXoFMfO56dIx1YzDtWGGySqCH1UBe8rbdfR7ErbqC1MYQMcluLQcOSPNY9S QBkMHq8hUboiwEWCc+s434CtfeWMqK34rIadA8go2D8PMuZYWu/QNkSabvc3wiBm IVRt/ONUEWIPrDFJPuhWZ9aZmUR3t2gZBcS7SxdODDeVRdOUjr0glDn3b3Am4bfj 8pj6lLvtdsUHKAfnNfgMTW9gMFX0Mk4= -----END CERTIFICATE-----Generated at Sat Apr 26 13:10:41 2025 by rpki-client