$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft File: M_iOrx5M4PGhh31J75fA5_7cA5o.mft (raw, json) Hash identifier: eY/rc6/Kfz7fyOkw5CtckMwBC/fRMeiIFMC4BpEjZrs= Subject key identifier: 8D:A6:9F:75:49:87:D7:B1:2F:32:EF:DB:A6:14:14:51:68:0D:12:76 Authority key identifier: 33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A Certificate issuer: /CN=A91758DF/serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A Certificate serial: 047C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft Manifest number: 0472 Signing time: Thu 24 Apr 2025 20:45:50 +0000 Manifest this update: Thu 24 Apr 2025 20:45:49 +0000 Manifest next update: Thu 01 May 2025 20:45:49 +0000 Files and hashes: 1: M_iOrx5M4PGhh31J75fA5_7cA5o.crl (hash: /RdkONlVL2EN4F807UvivrQQ48D/sInPKvqbcGgQcFs=) 2: E763AA76A3E811EC8665D621C4F9AE02.roa (hash: Ao2xYTosLdprmQ1iWk+n5IxTYfK7aKOeNtfro7ROk4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1148 (0x47c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91758DF, serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A Validity Not Before: Apr 24 20:45:49 2025 GMT Not After : May 1 20:45:49 2025 GMT Subject: CN=680aa2fd-480b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a5:34:b6:d4:0b:41:57:b1:7c:fb:af:91:04: 45:1b:6a:23:5f:55:1f:92:72:d4:c3:be:93:e7:2b: c1:41:1d:0b:49:6a:b9:7e:0b:f6:94:21:4f:14:3c: 77:d9:31:8c:55:9f:e3:07:28:57:a5:83:b6:64:bc: 95:17:a8:3f:ef:73:d5:96:b4:d3:11:e8:ee:1f:a6: ee:a2:8a:a7:6b:fa:6b:62:80:33:e3:63:6d:81:76: d3:93:ae:d3:3f:ee:2d:c9:af:82:0d:0d:b8:72:cc: 31:db:a0:08:77:b6:22:26:58:8f:d1:6d:d2:25:6b: aa:aa:71:af:ae:9b:0b:c8:ed:36:cb:49:ea:1e:d6: cd:d1:a8:cf:ac:67:2b:ad:8a:38:e7:57:12:76:6d: a1:26:e6:79:a0:ae:c2:36:de:54:58:f3:2d:14:f4: b9:42:13:63:6d:c7:d3:be:97:34:30:cd:0a:c5:4e: be:66:ca:c4:37:57:42:46:e3:db:d5:7b:1b:48:30: 26:bd:c6:a3:f2:a9:b6:7f:ba:e7:73:60:7a:2c:2b: d6:cd:c8:58:c3:e6:01:e5:58:13:ac:90:96:79:33: 8f:c6:ad:15:27:f2:f0:63:da:b2:a2:d6:91:df:b0: a0:7a:c2:cf:92:70:a1:da:1c:03:12:b3:3a:22:1e: c3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A6:9F:75:49:87:D7:B1:2F:32:EF:DB:A6:14:14:51:68:0D:12:76 X509v3 Authority Key Identifier: keyid:33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:8c:5d:2f:24:0e:aa:54:df:32:b3:aa:d2:4c:ef:c9:17:a5: 2f:50:2c:79:75:b8:f3:53:8b:a1:19:95:e0:72:e8:ba:3f:20: 65:a8:d8:b4:ff:12:b6:c4:75:e5:94:92:a5:33:97:4e:7f:7e: d6:ff:62:be:11:70:d3:80:8d:c5:96:38:af:47:27:ea:bd:53: f2:10:ab:51:5d:3c:ba:08:fb:d0:6d:7c:cd:92:a5:50:98:4f: 03:3e:32:28:a5:0a:bb:bc:93:3d:1b:4e:82:c4:c3:2d:3f:d9: cf:f4:d9:e3:d4:b7:b9:9c:cc:cf:92:7e:82:ec:3c:42:18:19: 58:dc:43:42:6e:34:34:f4:0f:0b:4c:de:6c:64:b2:20:e6:66: 9c:79:7e:29:bc:f5:1c:23:4e:3e:cd:4f:9d:a9:e2:1c:cf:52: 14:29:fd:0f:c5:23:6c:4c:fe:07:59:22:2c:54:04:7c:c2:16: ff:f0:67:ed:bd:91:c0:37:9f:23:f8:5f:cc:99:b6:c7:15:56: 88:6a:e9:c7:20:39:54:34:d5:9f:58:6b:29:4e:dc:e2:73:f0: f9:3d:ae:03:f7:dc:2d:d3:9e:db:5c:c0:9f:da:68:00:d9:61: 38:94:cb:61:35:f5:1f:5e:5c:62:ca:dc:00:69:fe:a5:3b:44: 5e:d4:ad:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4REYxMTAvBgNVBAUTKDMzRjg4RUFGMUU0Q0UwRjFBMTg3N0Q0OUVGOTdDMEU3 RkVEQzAzOUEwHhcNMjUwNDI0MjA0NTQ5WhcNMjUwNTAxMjA0NTQ5WjAYMRYwFAYD VQQDEw02ODBhYTJmZC00ODBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzqU0ttQLQVexfPuvkQRFG2ojX1UfknLUw76T5yvBQR0LSWq5fgv2lCFPFDx3 2TGMVZ/jByhXpYO2ZLyVF6g/73PVlrTTEejuH6buooqna/prYoAz42NtgXbTk67T P+4tya+CDQ24cswx26AId7YiJliP0W3SJWuqqnGvrpsLyO02y0nqHtbN0ajPrGcr rYo451cSdm2hJuZ5oK7CNt5UWPMtFPS5QhNjbcfTvpc0MM0KxU6+ZsrEN1dCRuPb 1XsbSDAmvcaj8qm2f7rnc2B6LCvWzchYw+YB5VgTrJCWeTOPxq0VJ/LwY9qyotaR 37CgesLPknCh2hwDErM6Ih7DOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2mn3VJ h9exLzLv26YUFFFoDRJ2MB8GA1UdIwQYMBaAFDP4jq8eTODxoYd9Se+XwOf+3AOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NThERi84NjczNjA4MDQ3 RkUxMUVDOUNERjRCMEFDNEY5QUUwMi9NX2lPcng1TTRQR2hoMzFKNzVmQTVfN2NB NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01faU9yeDVNNFBHaGgzMUo3NWZBNV83Y0E1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NThERi84NjczNjA4MDQ3RkUxMUVDOUNERjRCMEFDNEY5QUUwMi9NX2lPcng1TTRQ R2hoMzFKNzVmQTVfN2NBNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBejF0vJA6qVN8ys6rSTO/JF6UvUCx5dbjzU4uhGZXgcui6PyBlqNi0 /xK2xHXllJKlM5dOf37W/2K+EXDTgI3FljivRyfqvVPyEKtRXTy6CPvQbXzNkqVQ mE8DPjIopQq7vJM9G06CxMMtP9nP9Nnj1Le5nMzPkn6C7DxCGBlY3ENCbjQ09A8L TN5sZLIg5maceX4pvPUcI04+zU+dqeIcz1IUKf0PxSNsTP4HWSIsVAR8whb/8Gft vZHAN58j+F/MmbbHFVaIaunHIDlUNNWfWGspTtzic/D5Pa4D99wt057bXMCf2mgA 2WE4lMthNfUfXlxiytwAaf6lO0Re1K3t -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:56 2025 by rpki-client