$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft File: 41zkTnGXKXWROY2C8z0RhhdN6Do.mft (raw, json) Hash identifier: MRkKPSqc+BAD4dpfzxF6zJd3D+UDYLw2In06+FyRHEk= Subject key identifier: F4:45:44:93:F5:CD:9E:15:6E:F4:84:65:35:86:B9:06:FD:A2:20:40 Authority key identifier: E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A Certificate issuer: /CN=A91A9E55/serialNumber=E35CE44E7197297591398D82F33D1186174DE83A Certificate serial: 0785 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft Manifest number: 077D Signing time: Thu 24 Apr 2025 21:15:41 +0000 Manifest this update: Thu 24 Apr 2025 21:15:40 +0000 Manifest next update: Thu 01 May 2025 21:15:40 +0000 Files and hashes: 1: 41zkTnGXKXWROY2C8z0RhhdN6Do.crl (hash: a6RSDWvscXlaKw+EANnZ9StDLtLT6VqLeP4ONQbv+oE=) 2: 6D7F22A60DF511EBA2098D67C4F9AE02.roa (hash: Sy432PhWarPbK2JtP9nP+Bmc/mIHDONttgOLY2annhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.crl rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1925 (0x785) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9E55, serialNumber=E35CE44E7197297591398D82F33D1186174DE83A Validity Not Before: Apr 24 21:15:40 2025 GMT Not After : May 1 21:15:40 2025 GMT Subject: CN=680aa9fd-431f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:43:e0:25:c2:c4:62:f2:37:b4:40:77:c9:dd: 87:ab:20:d9:7a:62:0b:5e:d9:e6:a7:c4:4d:fa:ce: 34:ac:d2:fa:15:75:ea:30:02:7e:db:82:b1:89:74: 86:85:23:ed:8c:c9:e2:1e:cc:2f:b9:76:f8:db:3f: ed:5f:97:ca:af:19:37:ab:24:ac:31:92:fc:9f:1d: 3d:3a:7d:56:26:7a:c0:21:14:e8:d7:7e:b7:0b:eb: 49:5c:36:b6:2e:82:e9:64:5f:2c:2b:dc:5f:3e:4c: 52:53:28:12:36:46:55:6c:1f:e1:fd:2e:b6:d7:53: c0:12:ea:a5:77:b7:92:99:37:93:c9:dc:27:71:ec: 6c:f4:35:d6:2d:c6:26:ba:82:57:ca:ed:aa:ea:d9: 15:63:94:40:70:fe:ae:57:ed:52:ca:a5:ac:00:f5: 98:fb:d0:b3:63:96:ff:8f:0a:ec:85:71:c0:46:62: 52:f0:38:fe:3e:b2:0b:20:a9:c4:44:cd:93:70:8e: 58:1e:dd:46:f9:46:84:39:b4:3d:30:57:42:26:03: 50:db:0d:01:ef:3f:bb:04:bd:58:d5:f5:d5:8b:a2: 05:c2:7c:f7:d6:a2:7b:33:d3:e3:71:83:3e:76:79: 67:6e:32:7c:e2:c8:a7:b7:53:50:85:d0:5c:6e:b1: 07:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:45:44:93:F5:CD:9E:15:6E:F4:84:65:35:86:B9:06:FD:A2:20:40 X509v3 Authority Key Identifier: keyid:E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:76:8f:f9:78:45:f7:c1:ef:00:26:2c:c4:72:c7:73:58:4e: ae:5c:92:b0:d2:da:8a:96:9e:b3:6d:f7:5a:b9:eb:82:1b:59: 0d:0c:a6:8b:08:62:97:54:13:fb:01:b1:7a:17:49:c2:46:e5: 53:d9:98:3c:a9:c4:e2:e8:b7:42:b6:e6:18:b1:14:d6:88:75: 1e:ba:04:62:d9:9f:6b:57:c8:f6:28:c6:9e:5e:2f:6d:40:7c: 90:d9:bf:29:5c:38:f8:05:31:e6:3d:0b:85:51:94:65:38:79: 7d:73:25:2c:bd:3c:d7:99:88:0d:ca:cc:fe:5a:21:bc:7d:e6: 71:95:17:85:72:49:42:01:31:1a:c5:60:31:4f:17:f2:ce:ab: c2:99:20:a0:b0:32:21:e7:e4:88:05:bb:8b:69:b8:1d:da:46: 79:47:24:32:c0:c3:cd:73:21:c7:6d:47:c7:4e:f0:a5:ba:99: e5:71:2d:ec:74:df:d8:f3:61:9b:07:1e:66:11:72:b3:85:56: 2f:6b:36:ef:0a:d0:ac:0f:0f:b4:80:69:77:a0:b2:f9:5f:f5: 00:64:9d:18:2a:cd:a6:b5:47:cb:d5:40:ec:83:96:46:13:44: a7:3f:03:e6:82:c5:51:54:45:44:85:ca:45:95:fb:dc:5b:d3: 40:3e:d6:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlFNTUxMTAvBgNVBAUTKEUzNUNFNDRFNzE5NzI5NzU5MTM5OEQ4MkYzM0QxMTg2 MTc0REU4M0EwHhcNMjUwNDI0MjExNTQwWhcNMjUwNTAxMjExNTQwWjAYMRYwFAYD VQQDEw02ODBhYTlmZC00MzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2EPgJcLEYvI3tEB3yd2HqyDZemILXtnmp8RN+s40rNL6FXXqMAJ+24KxiXSG hSPtjMniHswvuXb42z/tX5fKrxk3qySsMZL8nx09On1WJnrAIRTo1363C+tJXDa2 LoLpZF8sK9xfPkxSUygSNkZVbB/h/S6211PAEuqld7eSmTeTydwncexs9DXWLcYm uoJXyu2q6tkVY5RAcP6uV+1SyqWsAPWY+9CzY5b/jwrshXHARmJS8Dj+PrILIKnE RM2TcI5YHt1G+UaEObQ9MFdCJgNQ2w0B7z+7BL1Y1fXVi6IFwnz31qJ7M9PjcYM+ dnlnbjJ84sint1NQhdBcbrEHfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRFRJP1 zZ4VbvSEZTWGuQb9oiBAMB8GA1UdIwQYMBaAFONc5E5xlyl1kTmNgvM9EYYXTeg6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUU1NS9EOTUxNzY4NDBE RjMxMUVCOTMwNzZGNjVDNEY5QUUwMi80MXprVG5HWEtYV1JPWTJDOHowUmhoZE42 RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQxemtUbkdYS1hXUk9ZMkM4ejBSaGhkTjZEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUU1NS9EOTUxNzY4NDBERjMxMUVCOTMwNzZGNjVDNEY5QUUwMi80MXprVG5HWEtY V1JPWTJDOHowUmhoZE42RG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6do/5eEX3we8AJizEcsdzWE6uXJKw0tqKlp6zbfdaueuCG1kNDKaL CGKXVBP7AbF6F0nCRuVT2Zg8qcTi6LdCtuYYsRTWiHUeugRi2Z9rV8j2KMaeXi9t QHyQ2b8pXDj4BTHmPQuFUZRlOHl9cyUsvTzXmYgNysz+WiG8feZxlReFcklCATEa xWAxTxfyzqvCmSCgsDIh5+SIBbuLabgd2kZ5RyQywMPNcyHHbUfHTvClupnlcS3s dN/Y82GbBx5mEXKzhVYvazbvCtCsDw+0gGl3oLL5X/UAZJ0YKs2mtUfL1UDsg5ZG E0SnPwPmgsVRVEVEhcpFlfvcW9NAPtZG -----END CERTIFICATE-----Generated at Sat Apr 26 05:13:47 2025 by rpki-client