$ rpki-client -vvf rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft File: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft (raw, json) Hash identifier: MpplTUX7BL5g/B18lojW9T4FQdso+Kuw9qcAeCszM68= Subject key identifier: 5F:7B:7E:32:A0:B2:0F:87:31:13:48:D8:F3:F5:93:1A:4A:28:9E:A6 Authority key identifier: E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C Certificate issuer: /CN=A913B0D6/serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C Certificate serial: 0791 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft Manifest number: 078A Signing time: Thu 24 Apr 2025 21:11:47 +0000 Manifest this update: Thu 24 Apr 2025 21:11:47 +0000 Manifest next update: Thu 01 May 2025 21:11:47 +0000 Files and hashes: 1: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl (hash: ymi+/JnbFYi288tPvqdNtlufxRzyaCHjPQbgj1vlQWE=) 2: A7501D94086B11EBB0FF1A43C4F9AE02.roa (hash: 04Yyac0X4yooHW+vSmS1SL3uVYlQ7JtEGZ1zzlU0iN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:11:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1937 (0x791) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B0D6, serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C Validity Not Before: Apr 24 21:11:47 2025 GMT Not After : May 1 21:11:47 2025 GMT Subject: CN=680aa913-5a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fa:5a:35:eb:69:e2:fb:ba:61:21:b9:4c:98: 5e:02:68:cb:60:d5:65:70:76:b3:b4:f8:12:d4:aa: b4:a9:9e:1c:9c:68:85:4f:cb:9d:cc:dc:8f:6c:09: 3b:12:2f:13:23:d8:0d:46:b6:5f:c3:8e:e5:98:1f: 9f:86:10:8e:35:cb:58:cb:2c:67:85:68:93:ff:11: 03:93:79:33:ae:a7:41:6f:2b:38:22:7d:63:ac:2e: 9b:1e:8b:00:33:c1:dc:cc:64:ae:95:3b:da:c8:5e: db:1c:ba:71:01:03:1b:7b:b7:c4:1b:eb:af:8c:c5: 3c:c8:8c:7a:a8:2c:67:6a:59:fb:30:19:d0:b2:df: 5d:e1:e9:15:61:fa:e3:2c:de:ee:29:5f:3e:f7:87: 82:98:9b:c6:11:f2:d6:7d:d7:a6:aa:2e:ba:98:f5: c8:b4:5d:48:7b:1d:ad:c4:26:80:22:a3:38:bf:6b: 7f:7c:24:af:f6:57:76:42:f6:87:27:a7:18:38:24: d2:e1:59:34:9a:a7:d5:76:38:ad:9d:57:93:eb:e9: 13:86:86:71:11:59:4a:49:ad:c9:48:8d:d1:10:44: 95:a7:5c:2e:41:38:ad:8a:ec:5f:91:33:9a:d3:48: 37:28:65:6e:97:5a:f8:b9:2b:4a:5e:9a:ab:49:ac: 89:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:7B:7E:32:A0:B2:0F:87:31:13:48:D8:F3:F5:93:1A:4A:28:9E:A6 X509v3 Authority Key Identifier: keyid:E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:1d:cd:39:1d:2a:eb:92:42:0d:0c:ec:0a:4d:ff:47:b7:ce: bd:92:63:31:5d:2e:5e:04:d2:a4:2c:08:21:66:51:cd:f3:11: 33:c7:02:96:01:90:a9:31:1f:04:f1:9f:64:21:83:54:2c:b5: 8c:fe:08:89:84:92:6b:04:5a:f0:d9:f5:29:62:76:11:f7:ac: 97:e1:31:be:9a:dd:41:43:43:7a:70:1f:3b:f4:81:b6:55:0e: c9:fd:24:1a:85:5a:c6:f2:d8:5c:a6:19:19:1e:82:1d:58:9d: c1:f8:36:ef:65:7d:41:22:bb:24:f4:38:60:21:f2:b9:d8:8c: a8:ce:ef:67:33:cd:44:7a:32:dc:5a:91:7c:4e:e7:d6:7f:e8: b9:35:c2:95:b4:74:f2:f6:96:e6:2b:ff:3f:0d:ec:c7:e5:20: 5f:e9:68:47:cd:82:c5:0c:e1:da:3e:a4:f0:ef:02:41:60:3f: d4:6c:3e:52:7a:78:1a:e9:7b:0a:80:40:7b:3a:4c:5a:44:85: ef:35:b7:6e:5f:2e:8f:2e:13:37:4f:07:07:c8:01:8c:02:32: 05:0f:99:a0:7c:2c:19:6a:29:93:95:b5:1e:4e:e0:1e:c3:db: 2b:3e:6d:28:19:ad:7f:af:a6:26:b0:35:81:e0:e0:4e:34:12: d6:c0:47:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IwRDYxMTAvBgNVBAUTKEUyRDgxM0Q2NkNFNTBERDkzOEZDM0E1MzJEQjhFREUy QzVCQTc5NUMwHhcNMjUwNDI0MjExMTQ3WhcNMjUwNTAxMjExMTQ3WjAYMRYwFAYD VQQDEw02ODBhYTkxMy01YTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PpaNetp4vu6YSG5TJheAmjLYNVlcHaztPgS1Kq0qZ4cnGiFT8udzNyPbAk7 Ei8TI9gNRrZfw47lmB+fhhCONctYyyxnhWiT/xEDk3kzrqdBbys4In1jrC6bHosA M8HczGSulTvayF7bHLpxAQMbe7fEG+uvjMU8yIx6qCxnaln7MBnQst9d4ekVYfrj LN7uKV8+94eCmJvGEfLWfdemqi66mPXItF1Iex2txCaAIqM4v2t/fCSv9ld2QvaH J6cYOCTS4Vk0mqfVdjitnVeT6+kThoZxEVlKSa3JSI3REESVp1wuQTitiuxfkTOa 00g3KGVul1r4uStKXpqrSayJgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF97fjKg sg+HMRNI2PP1kxpKKJ6mMB8GA1UdIwQYMBaAFOLYE9Zs5Q3ZOPw6Uy247eLFunlc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjBENi84OUEwRTdBMjA4 NkExMUVCOURGMzM4NDJDNEY5QUUwMi80dGdUMW16bERkazRfRHBUTGJqdDRzVzZl VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR0Z1QxbXpsRGRrNF9EcFRMYmp0NHNXNmVWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjBENi84OUEwRTdBMjA4NkExMUVCOURGMzM4NDJDNEY5QUUwMi80dGdUMW16bERk azRfRHBUTGJqdDRzVzZlVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcHc05HSrrkkINDOwKTf9Ht869kmMxXS5eBNKkLAghZlHN8xEzxwKW AZCpMR8E8Z9kIYNULLWM/giJhJJrBFrw2fUpYnYR96yX4TG+mt1BQ0N6cB879IG2 VQ7J/SQahVrG8thcphkZHoIdWJ3B+DbvZX1BIrsk9DhgIfK52Iyozu9nM81EejLc WpF8TufWf+i5NcKVtHTy9pbmK/8/DezH5SBf6WhHzYLFDOHaPqTw7wJBYD/UbD5S enga6XsKgEB7OkxaRIXvNbduXy6PLhM3TwcHyAGMAjIFD5mgfCwZaimTlbUeTuAe w9srPm0oGa1/r6YmsDWB4OBONBLWwEfh -----END CERTIFICATE-----Generated at Sat Apr 26 15:06:34 2025 by rpki-client