$ rpki-client -vvf rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft File: 4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft (raw, json) Hash identifier: 77AkCRII++x6G4yPv5+YipVaPqXkeOxyyQ3pCcQOTdw= Subject key identifier: 67:DA:45:82:C6:D3:84:05:E7:97:DE:95:60:4D:12:D9:02:22:2C:F7 Authority key identifier: E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE Certificate issuer: /CN=A91273A9/serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft Manifest number: 0167 Signing time: Fri 25 Apr 2025 03:02:33 +0000 Manifest this update: Fri 25 Apr 2025 03:02:33 +0000 Manifest next update: Fri 02 May 2025 03:02:33 +0000 Files and hashes: 1: 4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl (hash: PKloTXBOwEUYf7p4cX5cVs1B7NOXXVE3Qoj2ruuvnFA=) 2: 831C2D12FAD711EDBF5E232DC4F9AE02.roa (hash: xOIBDojCa/AhVm9mCjiREx1MnKn4cRQ1FEtf62lnznw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91273A9, serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE Validity Not Before: Apr 25 03:02:33 2025 GMT Not After : May 2 03:02:33 2025 GMT Subject: CN=680afb49-fc36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:77:5e:10:eb:c7:2d:1a:59:08:86:1c:ab:03: 7c:b6:18:b9:07:0f:9c:90:b4:43:a9:c7:d6:97:48: ac:d4:77:e5:09:1b:30:14:2a:63:e7:c7:3f:c1:4e: 3c:c3:22:05:bc:58:99:02:d4:ae:c3:5b:a5:c3:a1: 7a:31:7b:18:5b:aa:f5:7f:c9:7e:25:13:5b:d7:8c: 8b:ae:16:00:18:65:4c:dc:6c:f9:3e:be:93:4d:66: e8:e3:d8:04:79:c9:11:26:4a:37:e4:79:51:c6:1c: 7a:0b:3d:ff:94:17:61:64:36:f3:92:b1:bd:09:6c: e9:28:17:35:ca:c5:dc:8f:2b:51:31:17:43:fd:09: f0:0f:b4:36:e1:00:ef:0e:78:1d:85:69:62:7f:23: da:e3:a1:02:0a:e1:89:a5:9d:7b:a9:c8:95:5c:9a: d3:5c:eb:02:dc:cb:aa:b9:40:3a:42:a3:f2:e2:cb: 1d:01:21:e9:05:a7:4e:0e:6a:40:a6:a6:4b:d7:c6: dd:50:7d:f2:6a:70:76:81:ab:82:c5:a1:44:fe:22: d2:e9:a3:90:fe:fb:12:ab:03:ec:42:77:76:4e:42: 32:61:8c:82:34:00:dc:b1:aa:87:5f:d7:fd:67:31: 16:fc:6a:3a:c7:5e:0a:84:c8:dd:6b:7f:03:47:64: f7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:DA:45:82:C6:D3:84:05:E7:97:DE:95:60:4D:12:D9:02:22:2C:F7 X509v3 Authority Key Identifier: keyid:E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:05:82:a9:36:87:c5:7c:ed:33:79:53:f3:f4:3b:40:8d:82: 4a:60:c7:58:5a:4f:20:d7:03:6e:b3:22:05:be:35:8a:28:a1: b0:4a:ce:77:bf:3c:9d:85:a1:46:94:e9:35:7a:97:d7:49:01: 9c:be:fc:96:01:3f:af:f4:3d:59:3a:86:8c:9b:19:0b:4b:54: 0e:dd:78:f0:f2:97:99:f2:1c:5d:ae:12:21:00:a6:ac:eb:fe: ac:64:08:8f:d4:26:fb:32:37:f6:ea:54:ff:a0:29:74:50:78: e5:32:d9:7b:46:ce:24:23:46:d9:3b:68:3c:e0:76:9d:55:dc: df:04:3a:c8:e5:33:d1:da:1f:02:56:5c:ef:9d:bf:69:42:fa: f8:3d:dc:c5:04:44:54:59:71:89:de:27:e2:14:dd:52:d6:6c: 18:49:ed:37:19:6e:11:0d:88:be:3b:92:90:d6:16:c1:36:cf: 81:d2:db:80:dd:ec:11:49:8c:ab:ca:ad:57:4b:9a:d5:0c:cd: 5b:cf:3a:45:23:56:70:2f:be:50:bb:4c:4d:1e:8b:10:44:32: 6f:22:a6:7d:2e:41:0f:0b:af:7a:09:2c:98:4d:49:6d:96:95: 09:50:d6:a9:f8:8f:e3:69:7a:44:57:ed:a2:e3:8e:a8:a2:42: f8:69:65:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczQTkxMTAvBgNVBAUTKEUwQjQ0NThCOUFCRDMyMDM1MTczNTNFQzgwQkUzMTBD MzY1NTREQUUwHhcNMjUwNDI1MDMwMjMzWhcNMjUwNTAyMDMwMjMzWjAYMRYwFAYD VQQDEw02ODBhZmI0OS1mYzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXdeEOvHLRpZCIYcqwN8thi5Bw+ckLRDqcfWl0is1HflCRswFCpj58c/wU48 wyIFvFiZAtSuw1ulw6F6MXsYW6r1f8l+JRNb14yLrhYAGGVM3Gz5Pr6TTWbo49gE eckRJko35HlRxhx6Cz3/lBdhZDbzkrG9CWzpKBc1ysXcjytRMRdD/QnwD7Q24QDv DngdhWlifyPa46ECCuGJpZ17qciVXJrTXOsC3MuquUA6QqPy4ssdASHpBadODmpA pqZL18bdUH3yanB2gauCxaFE/iLS6aOQ/vsSqwPsQnd2TkIyYYyCNADcsaqHX9f9 ZzEW/Go6x14KhMjda38DR2T33wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGfaRYLG 04QF55felWBNEtkCIiz3MB8GA1UdIwQYMBaAFOC0RYuavTIDUXNT7IC+MQw2VU2u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNBOS9EOEVGMTNDMkZB Q0MxMUVEQjU1QUJFODdDNEY5QUUwMi80TFJGaTVxOU1nTlJjMVBzZ0w0eEREWlZU YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRMUkZpNXE5TWdOUmMxUHNnTDR4RERaVlRhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzNBOS9EOEVGMTNDMkZBQ0MxMUVEQjU1QUJFODdDNEY5QUUwMi80TFJGaTVxOU1n TlJjMVBzZ0w0eEREWlZUYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdBYKpNofFfO0zeVPz9DtAjYJKYMdYWk8g1wNusyIFvjWKKKGwSs53 vzydhaFGlOk1epfXSQGcvvyWAT+v9D1ZOoaMmxkLS1QO3Xjw8peZ8hxdrhIhAKas 6/6sZAiP1Cb7Mjf26lT/oCl0UHjlMtl7Rs4kI0bZO2g84HadVdzfBDrI5TPR2h8C Vlzvnb9pQvr4PdzFBERUWXGJ3ifiFN1S1mwYSe03GW4RDYi+O5KQ1hbBNs+B0tuA 3ewRSYyryq1XS5rVDM1bzzpFI1ZwL75Qu0xNHosQRDJvIqZ9LkEPC696CSyYTUlt lpUJUNap+I/jaXpEV+2i446ookL4aWWT -----END CERTIFICATE-----Generated at Sat Apr 26 15:02:48 2025 by rpki-client