$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft File: 4kPzvoJVabsWrLN0vJjavmkLF8E.mft (raw, json) Hash identifier: XRaCpqicqdJBTHrSoeRz/15uIaoargV9+5FjX512g1Q= Subject key identifier: 33:94:1D:06:28:14:88:B7:F7:67:F3:29:88:BA:44:49:6E:11:9A:91 Authority key identifier: E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1 Certificate issuer: /CN=A917E678/serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1 Certificate serial: 068F Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft Manifest number: 066C Signing time: Thu 24 Apr 2025 16:55:19 +0000 Manifest this update: Thu 24 Apr 2025 16:55:18 +0000 Manifest next update: Thu 01 May 2025 16:55:18 +0000 Files and hashes: 1: 4kPzvoJVabsWrLN0vJjavmkLF8E.crl (hash: 1Ur1SKUcnVqY7knf1bfwxjeVcj6vQBGQ8V2sBc0IEWo=) 2: 91E868D4902B11EF87435A54C4F9AE02.roa (hash: M9JBLSmTZK+WGHWP4PBl4vCGB8OpE/d5KiAWANLVB54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:55:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1679 (0x68f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1 Validity Not Before: Apr 24 16:55:18 2025 GMT Not After : May 1 16:55:18 2025 GMT Subject: CN=680a6cf6-5bbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ea:30:40:7f:ea:aa:5d:4f:ca:68:73:d0:cd: 44:fa:91:32:a3:83:8c:1b:83:2f:8e:16:8b:0e:d0: fe:10:ae:f1:43:3f:ef:ac:e2:1b:18:2b:33:ee:27: e1:76:e6:6d:02:9a:91:49:4b:a0:38:bd:4c:b9:22: cb:7f:6c:b5:b0:25:c8:03:7a:78:d2:81:9b:6f:14: 40:8d:49:e8:aa:bd:43:8d:5d:f5:3e:f4:62:cd:49: 53:29:8d:a6:86:35:ee:43:52:d3:80:25:46:0b:d0: 34:c1:78:94:c7:24:f1:67:3f:d0:20:13:e4:25:64: 86:ba:c5:9f:fb:fe:59:21:62:31:cb:ec:c5:7b:36: fb:e9:9f:f4:64:aa:82:06:02:45:4e:4a:7d:4f:94: c3:7e:a1:33:83:15:c5:f5:11:c2:f3:1a:f7:34:09: 03:62:fc:95:ab:b5:cb:2e:68:36:a1:b2:f8:e9:74: ca:3f:0c:97:69:b5:a4:a4:1e:e2:36:5c:54:16:03: 00:f5:ed:04:c6:c3:67:78:63:b2:c0:b8:07:8f:e0: ac:c4:57:10:4b:a7:09:09:0d:91:94:9e:ef:ca:ed: 85:86:1c:9b:5c:61:97:b8:1c:2d:c3:0b:31:4a:e6: c6:6d:ae:22:91:c9:87:03:0a:d0:69:e9:c7:b2:1f: 39:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:94:1D:06:28:14:88:B7:F7:67:F3:29:88:BA:44:49:6E:11:9A:91 X509v3 Authority Key Identifier: keyid:E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:e3:11:ff:5f:b2:d6:90:77:7e:b4:a8:f5:dc:7d:9d:bb:1a: 69:4b:c6:f8:df:67:dd:5d:5d:40:42:6e:2d:f6:9d:1d:48:d5: 9c:e9:81:d6:23:ad:24:4c:73:00:2a:aa:4b:2d:03:2a:99:c9: f3:96:a0:ee:11:3a:d1:2c:85:29:50:3c:9a:82:c1:f5:aa:d1: 01:9f:60:1c:ec:61:e5:fd:a4:02:f9:df:06:a7:ac:d5:7d:59: 82:36:82:4c:2a:17:11:af:41:94:da:fe:9f:8e:9e:c6:00:6c: 04:22:cd:9c:51:51:50:fb:dd:3e:fd:bf:9a:df:b8:44:87:64: e2:5d:2d:de:89:5b:95:f1:4d:ec:f5:db:7e:c6:78:52:37:07: fb:2c:7b:b4:6e:27:1b:30:24:37:f7:31:cd:35:65:2b:3e:64: 5c:3b:61:ec:9b:83:a6:97:3e:3e:67:c2:5e:8e:fa:29:58:dd: ac:8c:12:3d:f7:25:02:8d:08:65:34:d5:bd:3f:ba:77:e9:3f: ae:bc:87:7a:19:f0:7a:c6:23:e0:50:4a:09:ed:da:c7:bb:db: 8c:17:b2:0e:d0:80:5d:d3:17:29:fa:ff:0f:5a:c8:15:e1:c8: 89:36:85:31:95:58:43:96:bc:db:ce:85:2b:82:1b:ff:6c:01: 1d:23:74:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKEUyNDNGM0JFODI1NTY5QkIxNkFDQjM3NEJDOThEQUJF NjkwQjE3QzEwHhcNMjUwNDI0MTY1NTE4WhcNMjUwNTAxMTY1NTE4WjAYMRYwFAYD VQQDEw02ODBhNmNmNi01YmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmuowQH/qql1Pymhz0M1E+pEyo4OMG4MvjhaLDtD+EK7xQz/vrOIbGCsz7ifh duZtApqRSUugOL1MuSLLf2y1sCXIA3p40oGbbxRAjUnoqr1DjV31PvRizUlTKY2m hjXuQ1LTgCVGC9A0wXiUxyTxZz/QIBPkJWSGusWf+/5ZIWIxy+zFezb76Z/0ZKqC BgJFTkp9T5TDfqEzgxXF9RHC8xr3NAkDYvyVq7XLLmg2obL46XTKPwyXabWkpB7i NlxUFgMA9e0ExsNneGOywLgHj+CsxFcQS6cJCQ2RlJ7vyu2FhhybXGGXuBwtwwsx SubGba4ikcmHAwrQaenHsh85uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOUHQYo FIi392fzKYi6REluEZqRMB8GA1UdIwQYMBaAFOJD876CVWm7FqyzdLyY2r5pCxfB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC9CODk3QzU4MkEx OUMxMUVCOTJBMkRGMjlDNEY5QUUwMi80a1B6dm9KVmFic1dyTE4wdkpqYXZta0xG OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy RkQxRkYyLzRrUHp2b0pWYWJzV3JMTjB2Smphdm1rTEY4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC9CODk3QzU4MkExOUMxMUVCOTJBMkRGMjlDNEY5QUUwMi80a1B6dm9KVmFi c1dyTE4wdkpqYXZta0xGOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj4xH/X7LWkHd+tKj13H2duxppS8b432fdXV1AQm4t9p0dSNWc6YHW I60kTHMAKqpLLQMqmcnzlqDuETrRLIUpUDyagsH1qtEBn2Ac7GHl/aQC+d8Gp6zV fVmCNoJMKhcRr0GU2v6fjp7GAGwEIs2cUVFQ+90+/b+a37hEh2TiXS3eiVuV8U3s 9dt+xnhSNwf7LHu0bicbMCQ39zHNNWUrPmRcO2Hsm4Omlz4+Z8JejvopWN2sjBI9 9yUCjQhlNNW9P7p36T+uvId6GfB6xiPgUEoJ7drHu9uMF7IO0IBd0xcp+v8PWsgV 4ciJNoUxlVhDlrzbzoUrghv/bAEdI3Rt -----END CERTIFICATE-----Generated at Sat Apr 26 12:32:14 2025 by rpki-client