$ rpki-client -vvf rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft File: 4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft (raw, json) Hash identifier: J46zwBTFkusBaw2sLqt8VCSk0P3ufTSOVbjDEXKsexE= Subject key identifier: 5E:01:72:1A:C4:6D:90:65:D5:00:B2:59:35:AF:2F:48:6C:A0:29:07 Authority key identifier: E0:C8:92:8F:94:51:52:0E:64:D1:DE:D5:8F:07:19:6B:58:61:B2:86 Certificate issuer: /CN=A917D4C4/serialNumber=E0C8928F9451520E64D1DED58F07196B5861B286 Certificate serial: 0647 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft Manifest number: 0643 Signing time: Sat 26 Apr 2025 14:47:29 +0000 Manifest this update: Sat 26 Apr 2025 14:47:28 +0000 Manifest next update: Sat 03 May 2025 14:47:28 +0000 Files and hashes: 1: 4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl (hash: k7WFGQvywemxx3X4XBtQQYi2wo7DseVQIzdSJATXbVM=) 2: 6E325DBC0E2F11EDB4659653C4F9AE02.roa (hash: NS8IXL+/osy1aonTB1YcjpMFwDzkEpu3g9yC5lM136w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1607 (0x647) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D4C4, serialNumber=E0C8928F9451520E64D1DED58F07196B5861B286 Validity Not Before: Apr 26 14:47:28 2025 GMT Not After : May 3 14:47:28 2025 GMT Subject: CN=680cf201-c9f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4c:fc:86:8d:79:df:5d:9f:a6:16:c0:87:fe: a4:c4:7f:e8:b7:57:80:7a:a9:ba:35:06:ae:b0:40: 54:c3:45:0b:98:4e:76:6f:29:5b:1e:a7:91:cb:9e: 71:75:11:75:27:ad:0e:fd:db:5c:64:00:08:3c:7f: 81:e9:3f:1a:ca:1e:1a:46:08:e9:56:b3:82:6e:a9: 75:8b:0b:a4:97:69:10:fe:fe:d6:0c:4a:94:e1:09: 07:66:6a:5b:9e:e0:03:c3:e5:59:b5:28:e7:ea:e2: 1a:db:73:b0:75:ea:8f:f7:c7:76:1b:dc:10:f2:f8: 1a:65:58:ef:00:e8:94:93:6c:0a:6f:36:fc:9c:73: 27:a4:07:e2:77:18:bf:5a:00:e3:64:15:6c:f5:c7: 41:1a:f5:17:77:7c:a6:ac:b1:ea:f3:a6:38:40:df: 96:52:24:79:ee:35:91:68:6b:16:44:9e:95:91:1d: 6a:66:11:07:3e:0f:85:e9:31:9b:45:8e:50:84:27: c8:ab:ad:ae:ce:4b:79:5a:bb:3e:85:bd:d5:67:c9: df:f6:1f:b5:cc:b4:09:4f:cf:ce:ac:09:0b:d3:2a: 92:ed:c4:90:0a:6a:3a:95:f6:97:de:c3:32:f6:0b: bb:3e:cf:e0:65:54:ce:b0:f0:45:48:c9:3a:45:77: 4e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:01:72:1A:C4:6D:90:65:D5:00:B2:59:35:AF:2F:48:6C:A0:29:07 X509v3 Authority Key Identifier: keyid:E0:C8:92:8F:94:51:52:0E:64:D1:DE:D5:8F:07:19:6B:58:61:B2:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:22:83:04:4d:20:2f:5e:5f:4d:dd:99:9a:15:3c:1e:92:6f: 3e:7b:3a:7b:80:76:67:ba:74:5b:76:a0:0d:e2:37:38:28:91: 9d:13:d1:7d:d4:72:a2:88:77:5a:a1:8c:79:0e:40:bb:38:f3: 46:d2:94:d6:18:db:54:f9:90:f2:e2:a3:1b:66:d5:f7:ca:8b: a4:3a:9f:20:48:43:06:23:4a:cb:9d:b3:2f:06:55:63:4a:13: 8e:34:e9:b2:a4:af:16:4c:92:01:15:39:90:2e:42:4a:43:ea: 89:38:4d:fa:4c:e3:62:9e:4f:40:c3:89:ec:e6:a1:96:4b:50: 5d:33:46:76:3a:70:49:b9:0f:ca:e1:f3:2b:47:35:92:b5:eb: aa:0c:ef:fd:d3:b6:70:ce:95:43:1e:7a:7a:e7:f0:08:63:74: 8f:70:c1:e5:ea:ce:64:b7:99:07:b5:e8:2a:c2:09:45:2d:93: f3:88:d4:b5:1b:24:de:4b:c8:59:23:b7:c3:b6:4b:f4:7c:1c: eb:d3:a6:d5:27:ef:00:4d:4b:2f:9b:a7:29:d4:b0:fd:5d:b3: 65:d3:97:ed:83:6b:1d:92:f2:c2:19:8a:99:aa:39:c9:09:cb: 76:41:c7:81:33:02:c2:4c:6e:d2:05:55:54:03:60:97:9b:1d: f2:12:4c:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q0QzQxMTAvBgNVBAUTKEUwQzg5MjhGOTQ1MTUyMEU2NEQxREVENThGMDcxOTZC NTg2MUIyODYwHhcNMjUwNDI2MTQ0NzI4WhcNMjUwNTAzMTQ0NzI4WjAYMRYwFAYD VQQDEw02ODBjZjIwMS1jOWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Ez8ho15312fphbAh/6kxH/ot1eAeqm6NQausEBUw0ULmE52bylbHqeRy55x dRF1J60O/dtcZAAIPH+B6T8ayh4aRgjpVrOCbql1iwukl2kQ/v7WDEqU4QkHZmpb nuADw+VZtSjn6uIa23OwdeqP98d2G9wQ8vgaZVjvAOiUk2wKbzb8nHMnpAfidxi/ WgDjZBVs9cdBGvUXd3ymrLHq86Y4QN+WUiR57jWRaGsWRJ6VkR1qZhEHPg+F6TGb RY5QhCfIq62uzkt5Wrs+hb3VZ8nf9h+1zLQJT8/OrAkL0yqS7cSQCmo6lfaX3sMy 9gu7Ps/gZVTOsPBFSMk6RXdOnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4BchrE bZBl1QCyWTWvL0hsoCkHMB8GA1UdIwQYMBaAFODIko+UUVIOZNHe1Y8HGWtYYbKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDRDNC80MzlDRjg3QzhE N0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi80TWlTajVSUlVnNWswZDdWandjWmExaGhz b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRNaVNqNVJSVWc1azBkN1Zqd2NaYTFoaHNvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDRDNC80MzlDRjg3QzhEN0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi80TWlTajVSUlVn NWswZDdWandjWmExaGhzb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAIoMETSAvXl9N3ZmaFTwekm8+ezp7gHZnunRbdqAN4jc4KJGdE9F9 1HKiiHdaoYx5DkC7OPNG0pTWGNtU+ZDy4qMbZtX3youkOp8gSEMGI0rLnbMvBlVj ShOONOmypK8WTJIBFTmQLkJKQ+qJOE36TONink9Aw4ns5qGWS1BdM0Z2OnBJuQ/K 4fMrRzWSteuqDO/907ZwzpVDHnp65/AIY3SPcMHl6s5kt5kHtegqwglFLZPziNS1 GyTeS8hZI7fDtkv0fBzr06bVJ+8ATUsvm6cp1LD9XbNl05ftg2sdkvLCGYqZqjnJ Cct2QceBMwLCTG7SBVVUA2CXmx3yEkw4 -----END CERTIFICATE-----Generated at Sat Apr 26 16:46:12 2025 by rpki-client