$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft File: p4emPknujsb5dRFgfxt8Ww3xFk4.mft (raw, json) Hash identifier: dj+rhPjhMS5b3wvJOwIfBm56+tZi5eC1h8oqfJI7C5g= Subject key identifier: D0:21:9B:5A:F5:FA:A0:D6:DC:88:9A:4B:CB:34:B6:25:FA:0F:F0:CD Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E Certificate issuer: /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E Certificate serial: 09BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft Manifest number: 09B0 Signing time: Thu 24 Apr 2025 19:53:43 +0000 Manifest this update: Thu 24 Apr 2025 19:53:42 +0000 Manifest next update: Thu 01 May 2025 19:53:42 +0000 Files and hashes: 1: p4emPknujsb5dRFgfxt8Ww3xFk4.crl (hash: U5LcGsxSwHPlaG3Tw9xNIUzZApUzUZ0zeLotcSXKEUs=) 2: CFDF8B8A5B5D11EE967F161DC4F9AE02.roa (hash: /KN4Le3BcyLgzqHmFT/XiG9LlFk89B6INXp50IfH424=) 3: B13B2E5A5B5D11EEADF5C61CC4F9AE02.roa (hash: dJLvj8H+OzZAi8s6DdJIU3wM9EnuCPBO5qhQ8TBHFMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2491 (0x9bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0A6C, serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E Validity Not Before: Apr 24 19:53:42 2025 GMT Not After : May 1 19:53:42 2025 GMT Subject: CN=680a96c6-39d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:af:02:3a:ce:8a:10:25:1d:38:80:ad:c2:5f: 80:9f:37:c1:50:b4:8d:ad:0b:12:1a:84:ff:27:c5: 0d:42:2e:95:3d:17:32:c3:e9:64:97:7a:3c:33:cd: 32:61:a2:3a:a3:78:56:08:ef:72:e1:65:2b:7e:7e: 43:f6:05:db:5d:ea:38:83:41:b2:0a:d5:a5:f3:08: 68:a9:9c:9c:13:f8:99:a5:fd:6c:08:db:2a:d1:d7: 5b:63:67:7b:41:a5:96:a5:8c:c7:a4:ff:8f:47:55: 93:bb:f3:f9:a8:cc:7e:62:01:e7:7a:5c:e0:e0:b9: 81:09:e9:ba:47:49:31:1a:9c:7a:e8:44:cf:3b:3d: e4:9c:9b:90:04:6d:9a:6f:f6:49:44:38:9c:aa:8f: 8c:13:62:dc:26:72:42:27:07:27:6e:0c:ea:ec:2f: 24:c2:86:0b:2e:27:df:12:02:0d:5d:c7:5d:15:d4: 59:01:49:6b:d3:b1:c2:4e:33:93:d1:63:a0:27:e3: 23:de:4d:f0:32:34:c8:fc:28:d2:7c:7e:fa:05:f0: ab:f4:9c:b1:28:ef:e2:7c:40:3a:ca:ed:84:f7:fa: e8:dc:30:ac:a4:44:5e:ed:cb:5d:2e:e6:9b:f3:e1: 5a:d8:8f:bd:d2:ee:18:36:dd:b9:23:78:fd:a9:97: dd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:21:9B:5A:F5:FA:A0:D6:DC:88:9A:4B:CB:34:B6:25:FA:0F:F0:CD X509v3 Authority Key Identifier: keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:65:10:4c:df:d3:87:02:c8:00:f5:e1:7c:1a:21:e6:65:e8: f7:32:1b:78:eb:ce:a0:c9:20:77:a3:11:96:fc:93:9d:f5:b1: ca:ce:17:42:0c:f0:60:85:79:82:5a:9d:2a:01:0d:b0:6d:70: 84:28:5c:52:23:7e:51:96:2c:24:fe:ef:50:f2:e2:b3:6f:17: 4c:ec:94:af:57:49:b2:10:1d:fc:6a:a3:50:7f:e5:35:93:2a: 3e:4f:24:1c:4a:16:46:87:bf:db:ca:ec:27:a6:94:fd:63:b1: 79:bd:fd:76:8c:d8:79:f0:98:49:dd:b0:97:43:d2:a0:1e:4d: 5e:4f:a0:0c:07:20:c9:e5:d6:66:c1:99:14:a1:14:af:df:7f: 15:69:4c:b5:94:52:25:a1:08:44:5b:ad:4d:de:6e:cb:51:e0: da:d3:76:e1:7e:0e:9e:29:e9:aa:b1:17:e8:9f:2d:da:e7:5c: f8:2c:a2:7c:69:8d:dd:e2:5a:15:cf:dc:a1:3c:26:84:79:bb: 86:02:0f:6d:1e:a1:31:e8:3d:b4:b3:44:23:35:d5:1a:6f:e6: 88:93:7f:bd:b5:2f:27:df:ee:ed:f6:a8:8a:c8:5c:a0:34:52: d3:50:cf:32:28:a9:45:c8:4e:b8:bf:a1:52:50:fd:ed:0e:ee: 49:91:28:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBBNkMxMTAvBgNVBAUTKEE3ODdBNjNFNDlFRThFQzZGOTc1MTE2MDdGMUI3QzVC MERGMTE2NEUwHhcNMjUwNDI0MTk1MzQyWhcNMjUwNTAxMTk1MzQyWjAYMRYwFAYD VQQDEw02ODBhOTZjNi0zOWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxq8COs6KECUdOICtwl+AnzfBULSNrQsSGoT/J8UNQi6VPRcyw+lkl3o8M80y YaI6o3hWCO9y4WUrfn5D9gXbXeo4g0GyCtWl8whoqZycE/iZpf1sCNsq0ddbY2d7 QaWWpYzHpP+PR1WTu/P5qMx+YgHnelzg4LmBCem6R0kxGpx66ETPOz3knJuQBG2a b/ZJRDicqo+ME2LcJnJCJwcnbgzq7C8kwoYLLiffEgINXcddFdRZAUlr07HCTjOT 0WOgJ+Mj3k3wMjTI/CjSfH76BfCr9JyxKO/ifEA6yu2E9/ro3DCspERe7ctdLuab 8+Fa2I+90u4YNt25I3j9qZfd7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAhm1r1 +qDW3IiaS8s0tiX6D/DNMB8GA1UdIwQYMBaAFKeHpj5J7o7G+XURYH8bfFsN8RZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEE2Qy9COTE2RjM4ODgy QzIxMUVBOUE1MTQ2MzlDNEY5QUUwMi9wNGVtUGtudWpzYjVkUkZnZnh0OFd3M3hG azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A0ZW1Qa251anNiNWRSRmdmeHQ4V3czeEZrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEE2Qy9COTE2RjM4ODgyQzIxMUVBOUE1MTQ2MzlDNEY5QUUwMi9wNGVtUGtudWpz YjVkUkZnZnh0OFd3M3hGazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeZRBM39OHAsgA9eF8GiHmZej3Mht4686gySB3oxGW/JOd9bHKzhdC DPBghXmCWp0qAQ2wbXCEKFxSI35Rliwk/u9Q8uKzbxdM7JSvV0myEB38aqNQf+U1 kyo+TyQcShZGh7/byuwnppT9Y7F5vf12jNh58JhJ3bCXQ9KgHk1eT6AMByDJ5dZm wZkUoRSv338VaUy1lFIloQhEW61N3m7LUeDa03bhfg6eKemqsRfony3a51z4LKJ8 aY3d4loVz9yhPCaEebuGAg9tHqEx6D20s0QjNdUab+aIk3+9tS8n3+7t9qiKyFyg NFLTUM8yKKlFyE64v6FSUP3tDu5JkSij -----END CERTIFICATE-----Generated at Sat Apr 26 13:04:36 2025 by rpki-client