$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft File: M_iOrx5M4PGhh31J75fA5_7cA5o.mft (raw, json) Hash identifier: +g0XO0yszR8Cr88SLUbmFkOWBYKlvgepK9iebxD3hdg= Subject key identifier: 34:41:C6:38:87:D0:06:AC:9F:83:FB:02:A0:2A:E1:3E:22:CE:88:4D Authority key identifier: 33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A Certificate issuer: /CN=A91758DF/serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A Certificate serial: 047E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft Manifest number: 0474 Signing time: Mon 28 Apr 2025 21:21:14 +0000 Manifest this update: Mon 28 Apr 2025 21:21:13 +0000 Manifest next update: Mon 05 May 2025 21:21:13 +0000 Files and hashes: 1: M_iOrx5M4PGhh31J75fA5_7cA5o.crl (hash: jVhmV9e9/b+VmWbCCXyy8UsW0uaNzg1QejPq0fBcqVA=) 2: E763AA76A3E811EC8665D621C4F9AE02.roa (hash: Ao2xYTosLdprmQ1iWk+n5IxTYfK7aKOeNtfro7ROk4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 21:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1150 (0x47e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91758DF, serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A Validity Not Before: Apr 28 21:21:13 2025 GMT Not After : May 5 21:21:13 2025 GMT Subject: CN=680ff149-49bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1b:5b:4d:9f:5a:10:42:13:d7:58:0b:cd:77: e3:81:d5:aa:89:e1:cf:72:ee:d9:b0:13:97:ad:a1: 0b:b9:39:b6:a4:ad:03:76:4d:e8:a5:bb:80:d3:38: fa:90:fa:dc:b7:85:aa:c1:f6:00:9f:07:6d:22:b4: 13:e4:04:c5:31:9a:4f:0b:3a:b2:9a:71:8f:a5:f5: 8b:ae:38:3a:e2:a3:07:97:5d:4c:5f:aa:58:ca:13: ec:3c:28:38:01:4d:b0:03:50:d0:e8:db:2e:3f:b9: 74:21:a2:cb:ea:fc:c4:5b:23:37:e0:cc:ef:82:98: 5f:6e:ce:51:0b:e7:70:9d:dc:14:e0:a9:90:f0:a8: d1:d8:18:68:a4:cb:a3:c0:f7:84:79:3d:11:e7:65: 88:f6:1c:e6:4d:1c:7f:ee:37:c9:0d:76:2c:5d:a3: b4:b5:68:ce:ea:bf:96:9e:ba:29:4d:72:15:53:82: ae:bd:29:a5:34:bb:a7:9e:7e:08:67:bb:b6:93:70: c7:51:3a:c6:fe:9c:84:48:26:3a:26:1b:ca:de:95: dc:46:cc:23:ee:48:54:82:69:f2:69:04:1f:a6:b3: 35:1f:6c:cc:2c:d6:44:39:2e:8f:e6:a2:2e:f3:6d: 3b:98:a4:0c:32:4b:db:e6:1b:c2:de:fe:8e:17:0d: 7a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:41:C6:38:87:D0:06:AC:9F:83:FB:02:A0:2A:E1:3E:22:CE:88:4D X509v3 Authority Key Identifier: keyid:33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:c7:95:f6:69:a0:28:27:5b:21:a9:72:29:f4:93:f2:75:64: d1:fd:fd:c8:7d:97:2a:dd:fb:c0:7a:46:fd:b1:94:4e:98:1a: a9:55:1a:51:45:2d:9f:18:72:b2:3a:db:dd:1a:d8:b0:6e:d3: fe:db:2f:f2:b7:18:d2:bb:c2:33:d0:dc:ad:22:0a:e7:61:00: 75:4e:b4:da:51:73:0a:d4:38:cc:60:b9:7b:35:ab:0d:16:40: ed:34:39:f0:e8:93:5d:ef:0c:d7:02:1e:8a:2c:d8:33:7f:64: aa:7e:03:49:7b:eb:46:c8:96:b8:c9:0d:13:0a:be:d2:00:0a: 65:c9:fe:db:4d:56:61:fd:61:a2:e0:f8:9c:31:ed:0e:6d:27: fc:a3:40:70:20:89:01:aa:c5:c1:f7:85:9c:ea:9c:29:99:76: 0c:92:0e:84:86:ed:2d:ac:18:32:d9:a1:8f:29:e2:d6:b7:89: 39:09:c3:ec:3a:a4:d7:75:91:27:67:ed:84:31:ad:b2:39:55: 5f:56:17:3a:69:14:82:57:64:49:31:1e:dd:6c:5b:b2:8c:4f: 44:48:2f:a6:3a:40:6a:4a:0a:0a:4b:4f:e2:c7:f7:c0:55:41: ee:92:7c:f5:a2:02:a1:19:93:ac:a2:fb:90:32:f3:35:ae:3e: 94:6f:65:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4REYxMTAvBgNVBAUTKDMzRjg4RUFGMUU0Q0UwRjFBMTg3N0Q0OUVGOTdDMEU3 RkVEQzAzOUEwHhcNMjUwNDI4MjEyMTEzWhcNMjUwNTA1MjEyMTEzWjAYMRYwFAYD VQQDEw02ODBmZjE0OS00OWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRtbTZ9aEEIT11gLzXfjgdWqieHPcu7ZsBOXraELuTm2pK0Ddk3opbuA0zj6 kPrct4WqwfYAnwdtIrQT5ATFMZpPCzqymnGPpfWLrjg64qMHl11MX6pYyhPsPCg4 AU2wA1DQ6NsuP7l0IaLL6vzEWyM34Mzvgphfbs5RC+dwndwU4KmQ8KjR2BhopMuj wPeEeT0R52WI9hzmTRx/7jfJDXYsXaO0tWjO6r+WnropTXIVU4KuvSmlNLunnn4I Z7u2k3DHUTrG/pyESCY6JhvK3pXcRswj7khUgmnyaQQfprM1H2zMLNZEOS6P5qIu 8207mKQMMkvb5hvC3v6OFw161wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRBxjiH 0Aasn4P7AqAq4T4izohNMB8GA1UdIwQYMBaAFDP4jq8eTODxoYd9Se+XwOf+3AOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NThERi84NjczNjA4MDQ3 RkUxMUVDOUNERjRCMEFDNEY5QUUwMi9NX2lPcng1TTRQR2hoMzFKNzVmQTVfN2NB NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01faU9yeDVNNFBHaGgzMUo3NWZBNV83Y0E1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NThERi84NjczNjA4MDQ3RkUxMUVDOUNERjRCMEFDNEY5QUUwMi9NX2lPcng1TTRQ R2hoMzFKNzVmQTVfN2NBNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1x5X2aaAoJ1shqXIp9JPydWTR/f3IfZcq3fvAekb9sZROmBqpVRpR RS2fGHKyOtvdGtiwbtP+2y/ytxjSu8Iz0NytIgrnYQB1TrTaUXMK1DjMYLl7NasN FkDtNDnw6JNd7wzXAh6KLNgzf2SqfgNJe+tGyJa4yQ0TCr7SAAplyf7bTVZh/WGi 4PicMe0ObSf8o0BwIIkBqsXB94Wc6pwpmXYMkg6Ehu0trBgy2aGPKeLWt4k5CcPs OqTXdZEnZ+2EMa2yOVVfVhc6aRSCV2RJMR7dbFuyjE9ESC+mOkBqSgoKS0/ix/fA VUHuknz1ogKhGZOsovuQMvM1rj6Ub2XX -----END CERTIFICATE-----Generated at Tue Apr 29 10:21:03 2025 by rpki-client