$ rpki-client -vvf rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft File: phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft (raw, json) Hash identifier: Jzd3Bx3EkVJOrKfUZ5qhA89k/i2IrEGsW7Ic3Xc0HGc= Subject key identifier: 34:60:C9:E7:1B:51:4D:35:9B:47:DC:30:5D:51:7D:1F:D5:A1:50:9D Authority key identifier: A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E Certificate issuer: /CN=A91456E2/serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E Certificate serial: 044D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft Manifest number: 0448 Signing time: Fri 25 Apr 2025 00:00:44 +0000 Manifest this update: Fri 25 Apr 2025 00:00:44 +0000 Manifest next update: Fri 02 May 2025 00:00:44 +0000 Files and hashes: 1: phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl (hash: Hxi562nn/ASTWwgyxvjQl2l8Wn4DQG9KWSh7B7rowO4=) 2: 28E9FEB86F0511EDAF35FA28C4F9AE02.roa (hash: HeEMxWbEp596Nl2YyjBu7WmXC2Fx4dfVT+MEH+2m8Ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1101 (0x44d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91456E2, serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E Validity Not Before: Apr 25 00:00:44 2025 GMT Not After : May 2 00:00:44 2025 GMT Subject: CN=680ad0ac-c94e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a5:ef:c0:b2:e4:f1:d1:37:86:39:46:01:55: ad:96:ff:33:41:4d:4a:b9:35:22:11:57:ab:b3:75: 10:8c:d1:b9:b6:10:52:51:4c:26:6e:53:66:6b:3c: 72:1c:6c:21:fc:65:68:36:5d:f1:df:27:eb:19:31: 20:7c:a5:92:87:cc:ea:05:c9:7e:3c:5a:4b:75:00: 70:81:34:f3:fc:77:8c:8e:f9:4e:54:93:e6:f8:80: 37:88:9f:ca:c4:59:fd:d3:5e:9c:b7:73:4f:84:44: e9:a5:a3:ad:7c:ae:9e:12:8b:24:aa:61:3f:2e:a1: a2:bd:86:e8:8d:75:12:f2:3b:b7:ae:00:70:78:19: 91:40:34:ae:bb:90:79:43:74:58:26:a0:e5:c7:86: 90:e0:b9:7e:32:01:3a:d8:0f:88:c3:6e:4d:d0:2b: c2:0a:ff:c0:d1:27:4b:51:84:2f:67:84:02:92:cd: f9:53:21:c1:37:56:85:21:4f:f1:2a:cc:a1:f1:ca: 10:9a:e0:60:d4:eb:89:a8:07:89:28:d1:59:7f:d6: 9f:17:8d:46:ca:f5:7d:fe:f0:a9:e6:24:9b:86:f8: 52:7b:e0:19:6e:92:bd:21:1e:0c:bb:83:ab:d5:f2: 3a:09:55:cf:f1:9c:f2:0e:7c:be:e1:80:9f:9c:1a: bb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:60:C9:E7:1B:51:4D:35:9B:47:DC:30:5D:51:7D:1F:D5:A1:50:9D X509v3 Authority Key Identifier: keyid:A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:40:be:2b:28:df:a4:18:b5:8d:c7:17:13:d0:7c:d3:89:c6: 86:17:74:49:94:dc:2e:24:1a:71:94:67:1b:69:82:d1:22:4d: fb:88:84:ee:d7:5a:7b:f8:b1:8e:60:59:7b:fd:1d:99:eb:c2: f5:c5:a2:06:a3:05:69:8f:d2:e7:76:fc:c7:3e:b9:17:d5:08: 17:db:50:60:e6:db:a0:c8:f4:b0:be:f7:0f:45:ee:34:ba:ec: 94:87:e3:03:16:eb:64:56:40:44:3e:8c:73:0b:41:0c:85:7c: 8d:da:f1:8a:04:32:06:e4:de:52:9f:b5:a9:4c:a5:5d:ec:c0: a1:fc:cc:22:6c:33:3c:78:44:4c:18:31:ec:ff:5e:b4:53:22: bc:49:ea:1d:06:0c:e7:89:c5:9c:98:a9:38:92:b2:14:d5:63: 27:80:64:c8:4c:e9:6b:d5:fb:76:96:90:52:86:ce:4b:62:57: 7d:84:d9:54:e5:55:74:67:c6:d2:9c:99:b1:92:17:ec:6f:e9: e6:10:1e:06:4f:fb:18:5a:a6:94:ba:0e:24:00:a3:9e:bd:11: 69:ac:43:f6:14:ea:38:89:1d:34:08:d4:a9:ad:61:80:4d:15: dc:8c:64:1c:46:f1:4a:0c:f9:fd:34:f2:54:f8:f8:4f:77:b6: 14:6c:d8:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU2RTIxMTAvBgNVBAUTKEE2MTIwQUU5OUFBQURDMDBBMzVBMEM4QkY1MTY1RTBC NjNBMzhBMUUwHhcNMjUwNDI1MDAwMDQ0WhcNMjUwNTAyMDAwMDQ0WjAYMRYwFAYD VQQDEw02ODBhZDBhYy1jOTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaXvwLLk8dE3hjlGAVWtlv8zQU1KuTUiEVers3UQjNG5thBSUUwmblNmazxy HGwh/GVoNl3x3yfrGTEgfKWSh8zqBcl+PFpLdQBwgTTz/HeMjvlOVJPm+IA3iJ/K xFn9016ct3NPhETppaOtfK6eEoskqmE/LqGivYbojXUS8ju3rgBweBmRQDSuu5B5 Q3RYJqDlx4aQ4Ll+MgE62A+Iw25N0CvCCv/A0SdLUYQvZ4QCks35UyHBN1aFIU/x Ksyh8coQmuBg1OuJqAeJKNFZf9afF41GyvV9/vCp5iSbhvhSe+AZbpK9IR4Mu4Or 1fI6CVXP8ZzyDny+4YCfnBq7NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRgyecb UU01m0fcMF1RfR/VoVCdMB8GA1UdIwQYMBaAFKYSCumaqtwAo1oMi/UWXgtjo4oe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTZFMi9BMUZBQ0JGQzUy MDUxMUVDOTM2QUFCMjJDNEY5QUUwMi9waElLNlpxcTNBQ2pXZ3lMOVJaZUMyT2pp aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BoSUs2WnFxM0FDaldneUw5UlplQzJPamloNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTZFMi9BMUZBQ0JGQzUyMDUxMUVDOTM2QUFCMjJDNEY5QUUwMi9waElLNlpxcTNB Q2pXZ3lMOVJaZUMyT2ppaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUQL4rKN+kGLWNxxcT0HzTicaGF3RJlNwuJBpxlGcbaYLRIk37iITu 11p7+LGOYFl7/R2Z68L1xaIGowVpj9LndvzHPrkX1QgX21Bg5tugyPSwvvcPRe40 uuyUh+MDFutkVkBEPoxzC0EMhXyN2vGKBDIG5N5Sn7WpTKVd7MCh/MwibDM8eERM GDHs/160UyK8SeodBgznicWcmKk4krIU1WMngGTITOlr1ft2lpBShs5LYld9hNlU 5VV0Z8bSnJmxkhfsb+nmEB4GT/sYWqaUug4kAKOevRFprEP2FOo4iR00CNSprWGA TRXcjGQcRvFKDPn9NPJU+PhPd7YUbNhW -----END CERTIFICATE-----Generated at Sat Apr 26 13:39:02 2025 by rpki-client