$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft File: R4tJDpOd3d8hrKx4y5MZinuBRIU.mft (raw, json) Hash identifier: /nJPYg30hnlJCy0q7V6LCdmbM3rZYe7ExLw9JoqKs2I= Subject key identifier: 9A:32:68:77:A8:E9:0A:DE:87:34:42:BF:24:AB:20:F7:A2:23:17:B7 Authority key identifier: 47:8B:49:0E:93:9D:DD:DF:21:AC:AC:78:CB:93:19:8A:7B:81:44:85 Certificate issuer: /CN=A91427E2/serialNumber=478B490E939DDDDF21ACAC78CB93198A7B814485 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft Manifest number: 60 Signing time: Fri 25 Apr 2025 06:04:58 +0000 Manifest this update: Fri 25 Apr 2025 06:04:58 +0000 Manifest next update: Fri 02 May 2025 06:04:58 +0000 Files and hashes: 1: R4tJDpOd3d8hrKx4y5MZinuBRIU.crl (hash: zLJzsCoUU+NwZ/DW8ZAO95j94YRmmdHfkwdcgSCJRIk=) 2: 534DAEB2935111EF98AA8C86C4F9AE02.roa (hash: uOl4+NzZB6fPlXrYszF0PeNPfsE4Pp9BL5TML7ATF7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.crl rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91427E2, serialNumber=478B490E939DDDDF21ACAC78CB93198A7B814485 Validity Not Before: Apr 25 06:04:58 2025 GMT Not After : May 2 06:04:58 2025 GMT Subject: CN=680b260a-f41b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:80:20:c4:cf:39:7d:b4:2c:8e:fb:8f:92:37: da:a7:3c:82:62:a8:ca:67:08:9e:81:d0:3c:2b:23: 35:97:b1:c4:e4:65:71:c8:14:02:d5:71:8e:8c:6f: 3a:1f:ee:a6:78:d0:a2:76:c5:59:7d:bc:75:36:2c: 12:3b:ed:70:06:c3:18:f2:75:14:8f:b9:75:4b:c2: 5b:7f:fc:52:3c:fe:d5:07:44:2e:21:08:55:64:94: 03:12:d7:b0:e3:24:6e:49:18:a2:1f:4f:d7:1f:60: 8d:26:45:d0:64:f6:8c:21:46:33:b5:03:5c:b5:d8: 9f:c9:5e:e1:61:4d:ef:c9:7d:68:43:a7:d1:a4:0c: 5b:04:b6:55:29:ee:37:5b:47:c5:67:5f:20:cc:3c: 08:44:77:3c:89:14:57:08:1b:e1:24:ee:51:83:3c: f6:3d:5a:73:5d:c3:47:88:c4:07:25:83:e3:45:eb: 00:fa:c0:36:49:36:54:87:b2:d5:1e:89:57:de:f3: 35:a0:67:be:9a:fe:87:98:86:30:52:d0:56:c2:02: 68:6e:a6:7b:7a:df:60:95:5e:72:df:2c:68:e9:df: e0:8e:12:54:25:8f:50:07:4b:5b:ad:55:75:d8:9d: 7d:63:e2:e8:3a:f4:c4:71:a7:69:3f:4c:a8:70:6a: af:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:32:68:77:A8:E9:0A:DE:87:34:42:BF:24:AB:20:F7:A2:23:17:B7 X509v3 Authority Key Identifier: keyid:47:8B:49:0E:93:9D:DD:DF:21:AC:AC:78:CB:93:19:8A:7B:81:44:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:93:24:12:52:c2:1c:a5:d8:02:04:cb:b0:bb:e3:71:b7:01: e1:2a:90:5e:0a:56:48:b7:83:93:4d:e8:34:24:ab:99:61:12: 6b:77:c2:0b:27:25:49:ec:00:e3:af:bd:02:62:61:86:19:06: b0:0e:ee:20:eb:81:6d:e1:7e:79:d5:84:e9:73:ba:e3:6e:20: 0e:6d:f9:75:ba:c3:72:97:46:94:f2:84:a6:36:14:df:f8:6e: 6e:f7:b6:94:9b:7b:de:cc:69:f0:73:a0:bb:20:38:f1:ce:d0: 6a:d5:06:30:df:4d:ba:d7:ab:4c:ca:e8:66:09:80:06:60:b2: a7:75:9e:17:2d:dd:7b:9a:c3:83:ff:57:10:61:42:17:30:87: b1:5d:a1:bf:5b:8b:00:ab:fa:d8:27:98:9c:80:82:d5:4d:86: 0a:55:03:39:46:ac:fd:d4:98:fb:f4:c8:5f:04:00:12:6f:8f: c6:b2:07:ee:27:e9:eb:ad:b9:9c:cf:a3:ea:22:b8:52:af:dd: 7f:99:ac:82:c2:4f:fc:75:82:c5:c3:6d:22:b0:9e:d5:e6:1c: c2:0a:c9:63:60:eb:ae:45:e1:3d:c0:3a:b8:e7:20:ae:99:1b: 5e:d4:e5:a9:48:2f:f6:b9:06:b9:88:7c:cd:39:8c:e4:c1:3f: 74:04:b0:50 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjdFMjExMC8GA1UEBRMoNDc4QjQ5MEU5MzlERERERjIxQUNBQzc4Q0I5MzE5OEE3 QjgxNDQ4NTAeFw0yNTA0MjUwNjA0NThaFw0yNTA1MDIwNjA0NThaMBgxFjAUBgNV BAMTDTY4MGIyNjBhLWY0MWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHgCDEzzl9tCyO+4+SN9qnPIJiqMpnCJ6B0DwrIzWXscTkZXHIFALVcY6Mbzof 7qZ40KJ2xVl9vHU2LBI77XAGwxjydRSPuXVLwlt//FI8/tUHRC4hCFVklAMS17Dj JG5JGKIfT9cfYI0mRdBk9owhRjO1A1y12J/JXuFhTe/JfWhDp9GkDFsEtlUp7jdb R8VnXyDMPAhEdzyJFFcIG+Ek7lGDPPY9WnNdw0eIxAclg+NF6wD6wDZJNlSHstUe iVfe8zWgZ76a/oeYhjBS0FbCAmhupnt632CVXnLfLGjp3+COElQlj1AHS1utVXXY nX1j4ug69MRxp2k/TKhwaq8JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmjJod6jp Ct6HNEK/JKsg96IjF7cwHwYDVR0jBBgwFoAUR4tJDpOd3d8hrKx4y5MZinuBRIUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyN0UyLzc4M0RGQkM0OTM1 MDExRUZCQUNFMDA0Q0M0RjlBRTAyL1I0dEpEcE9kM2Q4aHJLeDR5NU1aaW51QlJJ VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUjR0SkRwT2QzZDhockt4NHk1TVppbnVCUklVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy N0UyLzc4M0RGQkM0OTM1MDExRUZCQUNFMDA0Q0M0RjlBRTAyL1I0dEpEcE9kM2Q4 aHJLeDR5NU1aaW51QlJJVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABqTJBJSwhyl2AIEy7C743G3AeEqkF4KVki3g5NN6DQkq5lhEmt3wgsn JUnsAOOvvQJiYYYZBrAO7iDrgW3hfnnVhOlzuuNuIA5t+XW6w3KXRpTyhKY2FN/4 bm73tpSbe97MafBzoLsgOPHO0GrVBjDfTbrXq0zK6GYJgAZgsqd1nhct3Xuaw4P/ VxBhQhcwh7Fdob9biwCr+tgnmJyAgtVNhgpVAzlGrP3UmPv0yF8EABJvj8ayB+4n 6eutuZzPo+oiuFKv3X+ZrILCT/x1gsXDbSKwntXmHMIKyWNg665F4T3AOrjnIK6Z G17U5alIL/a5BrmIfM05jOTBP3QEsFA= -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:45 2025 by rpki-client