$ rpki-client -vvf rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft File: 4RvPp2LU9ssvatCdA6lA4P6qAfg.mft (raw, json) Hash identifier: L2OBxn3ge3e+nRReb2Y8bNgeo7LXQh1iYI3kzByPzBA= Subject key identifier: F7:38:65:10:0A:FB:0A:42:7D:3B:26:5F:20:97:69:29:FA:C4:E3:4F Authority key identifier: E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8 Certificate issuer: /CN=A91200F5/serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8 Certificate serial: 1ECE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft Manifest number: 1EC8 Signing time: Fri 02 May 2025 16:11:34 +0000 Manifest this update: Fri 02 May 2025 16:11:34 +0000 Manifest next update: Fri 09 May 2025 16:11:34 +0000 Files and hashes: 1: 4RvPp2LU9ssvatCdA6lA4P6qAfg.crl (hash: nRLtZh2IcHCWi4eo2PpH1TODF5a2az4Z8BU6c9VWqN4=) 2: DB92DE200AEF11ECB7243C0FC4F9AE02.roa (hash: CB1eekjTDQ9QiOipedsLBe3aoXdOQXADQNZiMtdPABM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 16:11:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7886 (0x1ece) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91200F5, serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8 Validity Not Before: May 2 16:11:34 2025 GMT Not After : May 9 16:11:34 2025 GMT Subject: CN=6814eeb6-94a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:85:08:4e:ce:cc:67:11:1d:8b:e1:25:ee:ae: e7:7a:83:ef:19:05:17:02:3f:f7:6c:0f:f1:67:e2: dc:e1:e0:f9:0a:59:8e:54:0c:16:89:1d:18:be:8c: 70:a1:08:d4:bf:97:76:f9:ed:49:23:1e:ff:b8:96: de:bb:fe:6a:73:ea:3c:3b:93:b6:d6:97:db:9c:f8: d0:52:9c:e2:4f:7d:4a:53:8e:b0:2a:71:bc:74:ce: b8:a6:7a:95:c0:eb:cf:a2:f2:bd:c7:70:a1:dc:ee: b3:8d:4d:ad:8f:18:60:74:c2:ec:47:e3:f3:67:bf: 0b:75:7a:a1:51:c8:dd:bf:f2:5d:09:8b:ef:96:4b: 20:4d:5e:71:7d:98:ca:c4:8d:67:fd:68:ec:77:ec: 70:a8:17:ef:d4:e8:fa:68:1b:8c:ad:ac:03:f1:51: c6:b7:39:28:ed:26:5a:d3:9c:e8:98:84:72:b9:c7: 8f:29:4d:2c:10:13:f6:78:28:9d:48:1a:db:09:cf: 12:6c:10:e6:81:bd:a0:e3:25:70:bb:15:c4:28:2b: 43:28:2e:ba:0c:58:8c:8a:a9:d9:c4:53:8d:95:1e: 81:5d:93:4b:9d:24:ba:76:e3:dc:18:9e:99:32:3e: f8:7c:26:18:e5:90:75:d9:7e:a6:54:bb:60:46:74: a2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:38:65:10:0A:FB:0A:42:7D:3B:26:5F:20:97:69:29:FA:C4:E3:4F X509v3 Authority Key Identifier: keyid:E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:cc:ab:16:92:ef:75:37:5d:d0:39:a8:06:53:01:d9:9b:ff: 7b:74:36:5b:12:6e:6a:c3:9b:78:cd:5b:41:dd:57:14:a5:aa: fe:43:77:b1:1a:a3:69:10:59:90:21:90:42:3b:3e:be:22:e3: b4:44:a2:2b:9d:a7:a4:81:2d:9c:f5:9a:3e:06:bc:3f:30:2b: 72:75:dc:49:fe:63:15:4f:a1:47:3c:29:29:d1:8b:c5:10:9c: 7a:8d:10:b7:dd:26:ab:61:73:c8:46:60:d3:3c:c0:0f:2c:ff: cc:e4:fc:b4:42:b6:1a:6b:a8:03:2a:83:82:b5:d7:2b:7b:d9: 5e:fd:1b:a5:c0:88:7c:4b:2a:bc:5c:59:b8:98:f2:e3:6f:ff: 19:d1:20:69:fc:d7:96:61:02:41:4c:1f:15:02:cd:0f:08:03: af:a7:e8:4f:ce:de:d5:14:68:8c:29:73:3e:80:d0:a0:2a:e1: 49:96:86:0a:c9:d6:53:4a:5c:3a:3f:ef:73:3b:a8:84:3d:65: 4f:0f:ec:d8:7d:00:65:36:bc:56:8a:23:38:c9:54:2f:3d:48: 0a:0a:94:1d:ac:c9:ff:e1:72:fe:f5:c7:08:c5:cc:77:38:d7: 34:ab:8b:d0:4d:aa:11:0e:98:cf:53:2f:69:d7:6e:54:3d:14: f6:e0:18:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAwRjUxMTAvBgNVBAUTKEUxMUJDRkE3NjJENEY2Q0IyRjZBRDA5RDAzQTk0MEUw RkVBQTAxRjgwHhcNMjUwNTAyMTYxMTM0WhcNMjUwNTA5MTYxMTM0WjAYMRYwFAYD VQQDEw02ODE0ZWViNi05NGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IUITs7MZxEdi+El7q7neoPvGQUXAj/3bA/xZ+Lc4eD5ClmOVAwWiR0Yvoxw oQjUv5d2+e1JIx7/uJbeu/5qc+o8O5O21pfbnPjQUpziT31KU46wKnG8dM64pnqV wOvPovK9x3Ch3O6zjU2tjxhgdMLsR+PzZ78LdXqhUcjdv/JdCYvvlksgTV5xfZjK xI1n/Wjsd+xwqBfv1Oj6aBuMrawD8VHGtzko7SZa05zomIRyucePKU0sEBP2eCid SBrbCc8SbBDmgb2g4yVwuxXEKCtDKC66DFiMiqnZxFONlR6BXZNLnSS6duPcGJ6Z Mj74fCYY5ZB12X6mVLtgRnSibwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPc4ZRAK +wpCfTsmXyCXaSn6xONPMB8GA1UdIwQYMBaAFOEbz6di1PbLL2rQnQOpQOD+qgH4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDBGNS9EOUU5NTJGNDVF RjQxMUU2OUY1MjlDMkVDNEY5QUUwMi80UnZQcDJMVTlzc3ZhdENkQTZsQTRQNnFB ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRSdlBwMkxVOXNzdmF0Q2RBNmxBNFA2cUFmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDBGNS9EOUU5NTJGNDVFRjQxMUU2OUY1MjlDMkVDNEY5QUUwMi80UnZQcDJMVTlz c3ZhdENkQTZsQTRQNnFBZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBizKsWku91N13QOagGUwHZm/97dDZbEm5qw5t4zVtB3VcUpar+Q3ex GqNpEFmQIZBCOz6+IuO0RKIrnaekgS2c9Zo+Brw/MCtyddxJ/mMVT6FHPCkp0YvF EJx6jRC33SarYXPIRmDTPMAPLP/M5Py0QrYaa6gDKoOCtdcre9le/RulwIh8Syq8 XFm4mPLjb/8Z0SBp/NeWYQJBTB8VAs0PCAOvp+hPzt7VFGiMKXM+gNCgKuFJloYK ydZTSlw6P+9zO6iEPWVPD+zYfQBlNrxWiiM4yVQvPUgKCpQdrMn/4XL+9ccIxcx3 ONc0q4vQTaoRDpjPUy9p125UPRT24BgV -----END CERTIFICATE-----Generated at Fri May 2 19:06:16 2025 by rpki-client