$ rpki-client -vvf rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft File: 4JyfckW5hJiukjOxmA17T0xzjQ8.mft (raw, json) Hash identifier: s/4Sr9PXtaZpDS3lxwIDMK7lS9c2/4LhUlLwGMsJIwM= Subject key identifier: EE:EC:EB:4E:65:15:35:C5:72:B3:9A:BF:E8:94:F8:06:9C:4F:11:0A Authority key identifier: E0:9C:9F:72:45:B9:84:98:AE:92:33:B1:98:0D:7B:4F:4C:73:8D:0F Certificate issuer: /CN=A914287F/serialNumber=E09C9F7245B98498AE9233B1980D7B4F4C738D0F Certificate serial: 0737 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft Manifest number: 0731 Signing time: Thu 24 Apr 2025 21:35:15 +0000 Manifest this update: Thu 24 Apr 2025 21:35:14 +0000 Manifest next update: Thu 01 May 2025 21:35:14 +0000 Files and hashes: 1: 4JyfckW5hJiukjOxmA17T0xzjQ8.crl (hash: cG3a/N5/HMGqITcNkM63TvJZloxvCc7TjC/x6a1myvg=) 2: 45CED05E2D2511EBAA63DE82C4F9AE02.roa (hash: MMDW5GKNwb6UBpTQg+bN7/Wer/8y34uE+hwA4JCHhWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.crl rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1847 (0x737) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914287F, serialNumber=E09C9F7245B98498AE9233B1980D7B4F4C738D0F Validity Not Before: Apr 24 21:35:14 2025 GMT Not After : May 1 21:35:14 2025 GMT Subject: CN=680aae93-f8f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c5:c3:90:6e:b8:02:58:92:03:ff:96:88:75: 78:32:fa:15:da:34:87:ac:cd:98:22:93:3f:bb:64: bc:ab:de:06:0a:4b:17:2f:5f:91:72:1c:4a:31:a2: 59:80:17:67:bb:74:de:15:b9:3d:2f:da:45:90:51: 6d:86:8e:b9:82:5d:97:61:a2:22:d2:9f:66:b4:21: 7e:3d:53:84:94:ec:2c:70:26:4a:db:41:46:4e:60: cf:5d:0b:65:99:e4:e7:2b:9d:33:06:57:e0:cd:d5: 0b:bc:77:e3:e2:4b:db:f0:76:75:8a:ff:81:2d:aa: fc:62:11:77:46:27:b1:b2:71:d7:66:8c:a2:60:40: a3:05:f2:d2:a3:39:77:50:75:cf:63:79:a2:a5:ac: 0a:24:37:29:fd:7e:14:44:e3:9c:5f:8f:b3:02:9b: 9d:48:98:3a:66:64:f0:2b:f1:87:95:e3:31:4e:08: ba:8e:38:a7:d9:2c:59:83:4f:1c:6d:bb:95:b5:92: 81:13:f0:0d:62:38:cf:36:11:7a:11:71:c0:7c:6b: cd:36:b2:50:10:62:1f:d2:5d:0f:52:60:19:99:85: 60:01:ea:48:d8:d5:15:d4:19:2d:93:ba:f3:e6:cf: 35:55:f0:98:b4:37:a8:d7:d2:fa:89:ab:4b:70:4e: 0d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:EC:EB:4E:65:15:35:C5:72:B3:9A:BF:E8:94:F8:06:9C:4F:11:0A X509v3 Authority Key Identifier: keyid:E0:9C:9F:72:45:B9:84:98:AE:92:33:B1:98:0D:7B:4F:4C:73:8D:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:68:c1:0a:67:e9:8c:a0:e8:8a:d4:9e:20:66:68:fa:95:ac: d2:13:15:9c:53:6a:8d:dc:8b:3e:0f:72:7a:bf:02:6f:f3:53: c7:46:c7:2f:3a:a8:5f:55:7e:d1:e3:d9:b7:38:15:a6:ca:40: 75:ae:33:1f:78:3d:af:76:3c:f1:8e:42:79:87:c9:78:dc:b2: ca:a4:be:77:51:ee:9e:e4:f2:c5:c2:ad:de:b1:b4:c2:1c:1c: 9b:20:c4:c2:d6:3a:f1:53:c3:9c:79:e3:09:b6:10:ed:88:6f: 01:eb:e2:ce:62:16:98:39:d1:9c:89:4b:4e:45:19:95:00:08: 5e:10:e2:5a:e0:dc:f8:14:d3:87:b7:df:9c:df:ed:ca:c9:d9: dd:2a:a0:64:00:27:c0:b2:d3:35:34:ab:6c:9c:ea:d3:79:80: 41:ed:2e:b9:19:ea:d0:ff:32:a4:91:04:97:c1:1e:0d:67:06: 5d:93:aa:77:88:f6:a1:a0:20:d6:4d:0f:45:49:a6:b8:64:ac: 51:5b:52:c4:5d:76:51:d3:d6:06:a8:61:10:c3:68:cf:5b:bf: 38:77:12:b3:fa:60:7f:dc:0a:61:08:b8:9a:1e:8b:b8:ee:56: a5:73:cd:ae:91:60:81:fa:84:ae:14:ae:3e:fe:3d:88:2d:51: 44:f8:29:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI4N0YxMTAvBgNVBAUTKEUwOUM5RjcyNDVCOTg0OThBRTkyMzNCMTk4MEQ3QjRG NEM3MzhEMEYwHhcNMjUwNDI0MjEzNTE0WhcNMjUwNTAxMjEzNTE0WjAYMRYwFAYD VQQDEw02ODBhYWU5My1mOGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssXDkG64AliSA/+WiHV4MvoV2jSHrM2YIpM/u2S8q94GCksXL1+RchxKMaJZ gBdnu3TeFbk9L9pFkFFtho65gl2XYaIi0p9mtCF+PVOElOwscCZK20FGTmDPXQtl meTnK50zBlfgzdULvHfj4kvb8HZ1iv+BLar8YhF3RiexsnHXZoyiYECjBfLSozl3 UHXPY3mipawKJDcp/X4UROOcX4+zApudSJg6ZmTwK/GHleMxTgi6jjin2SxZg08c bbuVtZKBE/ANYjjPNhF6EXHAfGvNNrJQEGIf0l0PUmAZmYVgAepI2NUV1Bktk7rz 5s81VfCYtDeo19L6iatLcE4NswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7s605l FTXFcrOav+iU+AacTxEKMB8GA1UdIwQYMBaAFOCcn3JFuYSYrpIzsZgNe09Mc40P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjg3Ri82NDQ4OUVFMDJE MjMxMUVCOTE5MTg0ODBDNEY5QUUwMi80SnlmY2tXNWhKaXVrak94bUExN1QweHpq UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRKeWZja1c1aEppdWtqT3htQTE3VDB4empROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mjg3Ri82NDQ4OUVFMDJEMjMxMUVCOTE5MTg0ODBDNEY5QUUwMi80SnlmY2tXNWhK aXVrak94bUExN1QweHpqUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeaMEKZ+mMoOiK1J4gZmj6lazSExWcU2qN3Is+D3J6vwJv81PHRscv OqhfVX7R49m3OBWmykB1rjMfeD2vdjzxjkJ5h8l43LLKpL53Ue6e5PLFwq3esbTC HBybIMTC1jrxU8OceeMJthDtiG8B6+LOYhaYOdGciUtORRmVAAheEOJa4Nz4FNOH t9+c3+3KydndKqBkACfAstM1NKtsnOrTeYBB7S65GerQ/zKkkQSXwR4NZwZdk6p3 iPahoCDWTQ9FSaa4ZKxRW1LEXXZR09YGqGEQw2jPW784dxKz+mB/3AphCLiaHou4 7lalc82ukWCB+oSuFK4+/j2ILVFE+Cnq -----END CERTIFICATE-----Generated at Sat Apr 26 17:00:03 2025 by rpki-client