$ rpki-client -vvf rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft File: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft (raw, json) Hash identifier: 0w2jNugxLnxeZYkMPnhXKi4r1uGj7w4W/1gcG3/aLrw= Subject key identifier: 54:54:49:A8:62:E8:77:FB:5D:F2:CB:42:0F:01:5B:81:A0:B8:FB:6C Authority key identifier: E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62 Certificate issuer: /CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft Manifest number: 79 Signing time: Fri 25 Apr 2025 05:50:21 +0000 Manifest this update: Fri 25 Apr 2025 05:50:20 +0000 Manifest next update: Fri 02 May 2025 05:50:20 +0000 Files and hashes: 1: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl (hash: xI5I/L2e2oSBQRoioBuqnN73856Ovb/tgywZG2z3Y7o=) 2: DA21D1C8DF0711EFA13DFF77C4F9AE02.roa (hash: naM1jWBBF1HgB1gzetomIgtwuH6iwO3twg6Wvbh3nCU=) 3: 3C74C0E0799D11EF9547461CC4F9AE02.roa (hash: HEoFn428OSrwoj9FY9UBG8roOsE7KCgrYxU/d2SrcQg=) 4: 3CE9A810799D11EF9547461CC4F9AE02.roa (hash: LfnrEoRSy98kq5+Het7TGQh6Md9GIYKtrywQQ+4Cqlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F854, serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762 Validity Not Before: Apr 25 05:50:20 2025 GMT Not After : May 2 05:50:20 2025 GMT Subject: CN=680b229c-f5eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1e:04:56:56:b5:64:bf:19:30:42:13:2c:81: 40:9a:4f:b4:1e:b4:05:87:57:a0:f6:9b:a8:ea:90: 1e:e5:4d:04:8e:1c:85:3d:ee:cb:c2:71:48:af:f4: d3:74:ec:1d:55:ee:13:68:7f:f9:ce:90:18:66:65: fa:70:f1:9b:64:2d:7f:91:12:d4:1b:05:32:d2:2d: bd:eb:9c:85:9c:04:4b:e0:4e:7e:14:9c:83:1d:2e: aa:76:c9:3c:8e:23:7a:79:fd:ce:01:de:a1:5e:7c: 3b:47:ec:58:7f:6f:cc:fe:29:ab:a5:ab:2c:0c:14: 58:fc:13:9a:fd:2d:35:a6:09:f0:0f:eb:42:05:90: 75:f8:56:9d:b0:46:1d:63:9b:83:6f:a7:00:c3:5d: 41:a2:10:c8:8a:7c:b4:48:eb:52:59:d9:bb:54:7d: 87:3e:bc:60:81:f0:6c:5b:0b:c2:ba:c3:32:a2:09: e7:06:ee:08:1e:6e:84:41:60:06:a7:a9:e8:26:2b: b9:a3:95:11:de:59:5a:58:ec:c0:96:a3:72:24:d3: 55:9e:a8:74:1d:26:b2:d1:5c:51:31:72:1e:69:b7: 6f:54:b7:6c:13:2d:06:24:05:6e:9a:e5:f8:1b:56: e8:9a:19:dc:ba:24:99:15:a9:39:a6:af:5a:2c:b0: c0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:54:49:A8:62:E8:77:FB:5D:F2:CB:42:0F:01:5B:81:A0:B8:FB:6C X509v3 Authority Key Identifier: keyid:E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:ff:db:32:88:0d:c5:83:b1:14:a7:ae:49:5b:65:90:33:e7: 39:70:b5:8c:db:7c:08:11:bb:ff:50:b9:59:73:60:5a:93:33: d0:bf:3d:f4:71:93:a4:bf:ed:98:1e:54:66:40:e7:86:33:57: d0:29:20:9a:9c:bb:91:8e:98:c9:bd:a2:5b:2a:cd:1f:52:f6: 49:c0:d1:f8:51:75:94:ac:05:30:2b:53:2b:c1:82:64:62:bf: f1:7d:f9:5e:92:5c:05:67:1d:09:ea:c5:d1:19:d8:f2:86:3d: 0e:2c:e9:0a:b8:33:b7:e5:e4:22:6a:76:21:df:0e:c0:09:be: 0b:84:66:54:89:df:e3:e7:14:5f:60:d4:d0:ae:bc:e0:fa:cb: 71:be:47:7e:21:c4:86:7e:5c:b3:ab:bc:53:0c:ef:80:47:80: be:99:92:11:34:e2:00:ff:0b:9c:e0:e2:e4:53:6f:22:91:21: 9a:66:ed:86:24:87:94:29:ec:02:06:e0:e1:2a:ef:33:56:b9: f3:b8:a5:fe:67:0b:3d:e8:44:a3:f7:14:0e:49:bd:87:9f:28: eb:6f:16:0b:1a:de:fe:0a:6e:65:00:67:52:5d:7a:c2:a7:7d: 5d:70:a3:bf:ab:cd:a4:8d:a3:df:9e:bf:c0:6f:1f:6c:72:cf: 0c:1f:9d:ce -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 Rjg1NDExMC8GA1UEBRMoRTExQTQ3MkY4NDlGQTNENjYzQ0E4N0NBNjYzM0VDRTdE OEQwMDc2MjAeFw0yNTA0MjUwNTUwMjBaFw0yNTA1MDIwNTUwMjBaMBgxFjAUBgNV BAMTDTY4MGIyMjljLWY1ZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnHgRWVrVkvxkwQhMsgUCaT7QetAWHV6D2m6jqkB7lTQSOHIU97svCcUiv9NN0 7B1V7hNof/nOkBhmZfpw8ZtkLX+REtQbBTLSLb3rnIWcBEvgTn4UnIMdLqp2yTyO I3p5/c4B3qFefDtH7Fh/b8z+KaulqywMFFj8E5r9LTWmCfAP60IFkHX4Vp2wRh1j m4NvpwDDXUGiEMiKfLRI61JZ2btUfYc+vGCB8GxbC8K6wzKiCecG7ggeboRBYAan qegmK7mjlRHeWVpY7MCWo3Ik01WeqHQdJrLRXFExch5pt29Ut2wTLQYkBW6a5fgb VuiaGdy6JJkVqTmmr1ossMC9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVFRJqGLo d/td8stCDwFbgaC4+2wwHwYDVR0jBBgwFoAU4RpHL4Sfo9ZjyofKZjPs59jQB2Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGODU0L0E4OTY0NjYwNzk5 QjExRUY4MTFGOTAxOUM0RjlBRTAyLzRScEhMNFNmbzlaanlvZktaalBzNTlqUUIy SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNFJwSEw0U2ZvOVpqeW9mS1pqUHM1OWpRQjJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG ODU0L0E4OTY0NjYwNzk5QjExRUY4MTFGOTAxOUM0RjlBRTAyLzRScEhMNFNmbzla anlvZktaalBzNTlqUUIySS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK7/2zKIDcWDsRSnrklbZZAz5zlwtYzbfAgRu/9QuVlzYFqTM9C/PfRx k6S/7ZgeVGZA54YzV9ApIJqcu5GOmMm9olsqzR9S9knA0fhRdZSsBTArUyvBgmRi v/F9+V6SXAVnHQnqxdEZ2PKGPQ4s6Qq4M7fl5CJqdiHfDsAJvguEZlSJ3+PnFF9g 1NCuvOD6y3G+R34hxIZ+XLOrvFMM74BHgL6ZkhE04gD/C5zg4uRTbyKRIZpm7YYk h5Qp7AIG4OEq7zNWufO4pf5nCz3oRKP3FA5JvYefKOtvFgsa3v4KbmUAZ1JdesKn fV1wo7+rzaSNo9+ev8BvH2xyzwwfnc4= -----END CERTIFICATE-----Generated at Sat Apr 26 15:26:04 2025 by rpki-client