$ rpki-client -vvf rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft File: 4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft (raw, json) Hash identifier: FgQfTW9xBH4YZk+aZyppAYfTz5ptnKz46FHJcJT7Mlw= Subject key identifier: 8A:43:B5:B6:44:1C:92:13:CF:0E:61:7F:33:1F:EC:AB:02:28:DD:24 Authority key identifier: E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F Certificate issuer: /CN=A91471DA/serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F Certificate serial: 04E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft Manifest number: 04E6 Signing time: Thu 24 Apr 2025 23:30:49 +0000 Manifest this update: Thu 24 Apr 2025 23:30:48 +0000 Manifest next update: Thu 01 May 2025 23:30:48 +0000 Files and hashes: 1: 4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl (hash: fKXf3AAzjrHqRVS2MvDW99bXbMhENkqLbUA4ba9Ae78=) 2: 914E7A440FE611EC8DD2020EC4F9AE02.roa (hash: mjyt1YwDNmlbVB+s1ceKNJUb36Gp/fdDhWoek/UDCZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1256 (0x4e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91471DA, serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F Validity Not Before: Apr 24 23:30:48 2025 GMT Not After : May 1 23:30:48 2025 GMT Subject: CN=680ac9a9-8a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9c:25:d3:d9:1a:62:73:44:13:4c:57:89:5c: ff:6d:d3:f7:5e:4a:73:d7:af:0d:fc:84:3f:2a:ea: 4f:e8:8e:34:7e:09:2a:67:76:90:e5:ee:12:cd:83: f6:b6:fd:46:11:81:7f:18:a8:d7:16:69:cd:39:24: 6a:0b:82:38:51:07:c1:42:ec:6e:40:72:9c:df:f8: 8a:73:02:b4:1d:1b:8e:0d:38:80:9c:c1:85:cb:99: fc:33:ee:75:19:11:a3:b4:b8:07:2c:60:9e:d1:f2: f9:78:13:9c:8f:98:b6:d1:13:ac:1e:70:61:32:c8: 4e:20:da:2f:3a:cd:db:31:03:1d:eb:0e:9b:4e:3e: c2:17:2f:34:57:c9:35:03:88:04:bd:83:de:53:1c: ad:79:ca:79:9f:e3:53:e5:79:ef:e2:9e:d2:d7:ad: 4e:48:6c:96:f9:06:1b:ca:e2:a7:7c:e8:9a:0f:d5: 4d:a3:ca:9e:e7:8e:e9:45:e3:ec:01:a8:03:e4:67: 25:f6:55:f7:64:04:ca:7e:92:1b:de:5c:6c:2f:70: 03:a9:8f:0b:09:b0:4d:15:52:73:ca:4c:8d:9b:1a: c1:07:a1:14:eb:5f:e5:6f:7d:17:92:4e:c6:87:b3: 73:88:1b:b2:a7:7b:66:75:f8:0c:fa:42:7d:de:f0: 57:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:43:B5:B6:44:1C:92:13:CF:0E:61:7F:33:1F:EC:AB:02:28:DD:24 X509v3 Authority Key Identifier: keyid:E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:20:22:92:3d:d4:e8:68:64:1a:b9:45:69:d8:97:31:6d:90: 89:ed:92:e1:2b:35:9d:a5:78:fa:18:bf:0f:6a:ae:10:49:50: d1:70:2e:cf:8c:15:66:42:6d:28:c7:10:b5:1e:d4:fb:29:a4: e7:2b:cd:a1:5f:8c:37:77:0b:b3:be:ec:c4:18:b5:54:3c:d5: c7:51:ac:7b:43:9d:f0:bf:c4:e5:7a:d2:55:2b:fa:6f:8b:e3: 72:49:a2:dc:6b:ea:c1:43:2f:a1:8c:34:98:22:a9:8b:85:52: 40:cc:bb:29:47:d4:27:12:1b:ba:b0:48:15:84:d4:c0:32:87: bb:50:71:c3:5c:3f:ec:12:d8:9b:95:0f:3b:06:f2:e8:f3:d8: d3:ac:76:37:b0:fb:9f:8a:50:e2:f9:ae:c9:50:d7:09:fe:f2: cc:e5:2b:5b:f7:fe:b8:7d:d2:a8:15:a9:af:cc:b4:a2:11:f3: 99:a2:78:89:9a:93:52:6c:bd:87:48:d3:2a:1d:56:d5:76:7d: 7c:23:9e:78:c5:66:c7:0a:2a:f8:73:cf:4d:5b:aa:05:bf:25: 91:36:be:30:9a:47:12:cc:7a:7a:95:21:4b:5f:77:11:5d:80: a9:85:fc:31:05:8e:b5:9f:4b:80:9c:e1:31:96:b9:18:7b:26: 13:4d:c4:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcxREExMTAvBgNVBAUTKEUyNEQwOTU0MTA2MkM2MDhCRTM2M0ZGNjE5Q0NCODQ0 NEREQzNDMkYwHhcNMjUwNDI0MjMzMDQ4WhcNMjUwNTAxMjMzMDQ4WjAYMRYwFAYD VQQDEw02ODBhYzlhOS04YTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3pwl09kaYnNEE0xXiVz/bdP3Xkpz168N/IQ/KupP6I40fgkqZ3aQ5e4SzYP2 tv1GEYF/GKjXFmnNOSRqC4I4UQfBQuxuQHKc3/iKcwK0HRuODTiAnMGFy5n8M+51 GRGjtLgHLGCe0fL5eBOcj5i20ROsHnBhMshOINovOs3bMQMd6w6bTj7CFy80V8k1 A4gEvYPeUxytecp5n+NT5Xnv4p7S161OSGyW+QYbyuKnfOiaD9VNo8qe547pRePs AagD5Gcl9lX3ZATKfpIb3lxsL3ADqY8LCbBNFVJzykyNmxrBB6EU61/lb30Xkk7G h7NziBuyp3tmdfgM+kJ93vBXhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpDtbZE HJITzw5hfzMf7KsCKN0kMB8GA1UdIwQYMBaAFOJNCVQQYsYIvjY/9hnMuERN3Dwv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzFEQS81MUQ1Nzk0ODBG RTIxMUVDQTREREM5MDlDNEY5QUUwMi80azBKVkJCaXhnaS1Oal8yR2N5NFJFM2NQ QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRrMEpWQkJpeGdpLU5qXzJHY3k0UkUzY1BDOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzFEQS81MUQ1Nzk0ODBGRTIxMUVDQTREREM5MDlDNEY5QUUwMi80azBKVkJCaXhn aS1Oal8yR2N5NFJFM2NQQzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIICKSPdToaGQauUVp2JcxbZCJ7ZLhKzWdpXj6GL8Paq4QSVDRcC7P jBVmQm0oxxC1HtT7KaTnK82hX4w3dwuzvuzEGLVUPNXHUax7Q53wv8TletJVK/pv i+NySaLca+rBQy+hjDSYIqmLhVJAzLspR9QnEhu6sEgVhNTAMoe7UHHDXD/sEtib lQ87BvLo89jTrHY3sPufilDi+a7JUNcJ/vLM5Stb9/64fdKoFamvzLSiEfOZoniJ mpNSbL2HSNMqHVbVdn18I554xWbHCir4c89NW6oFvyWRNr4wmkcSzHp6lSFLX3cR XYCphfwxBY61n0uAnOExlrkYeyYTTcRZ -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:22 2025 by rpki-client