$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft File: 44pe3hloyTdeUVUfrpiIigu1RJA.mft (raw, json) Hash identifier: 42UY3CXS5EvvnmUvaJAn3aL7paQsORWZTodC0InhrBo= Subject key identifier: 1E:AB:38:C7:29:1E:A8:C0:50:C0:FC:25:C6:2A:B2:1D:02:95:CE:AA Authority key identifier: E3:8A:5E:DE:19:68:C9:37:5E:51:55:1F:AE:98:88:8A:0B:B5:44:90 Certificate issuer: /CN=A91AAC4B/serialNumber=E38A5EDE1968C9375E51551FAE98888A0BB54490 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft Manifest number: 39 Signing time: Fri 25 Apr 2025 06:31:49 +0000 Manifest this update: Fri 25 Apr 2025 06:31:48 +0000 Manifest next update: Fri 02 May 2025 06:31:48 +0000 Files and hashes: 1: 44pe3hloyTdeUVUfrpiIigu1RJA.crl (hash: ldJ9cb7Ut8R3vDa68TYUEr6N+FFOEx9gXYgKC7bZc2U=) 2: B6A31094CD7E11EFBBAE2137C4F9AE02.roa (hash: f1IFYkIgMkQ3+JyMSl70ACqIsH3T9EI7K8/rW2krDH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.crl rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAC4B, serialNumber=E38A5EDE1968C9375E51551FAE98888A0BB54490 Validity Not Before: Apr 25 06:31:48 2025 GMT Not After : May 2 06:31:48 2025 GMT Subject: CN=680b2c55-c28d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2c:13:44:89:7f:47:79:07:5e:1b:4b:19:f0: b2:d0:39:d5:8a:15:0f:48:54:40:48:08:a5:31:ea: c8:2b:6f:a9:de:a8:30:06:8e:fb:cf:c9:1a:44:57: 07:22:79:b4:d5:ff:70:cb:0f:52:38:4c:70:7c:82: 0e:a0:c5:2a:69:3a:22:b3:67:9d:66:1d:b2:19:19: d9:6a:d8:ea:6e:08:41:f4:d0:25:ed:c1:ff:27:94: 7c:b4:ad:5b:a9:23:08:49:71:c1:bb:90:d3:0a:d6: 81:16:e1:29:df:8a:7c:ec:b2:76:98:2f:75:b9:82: b4:41:6f:54:8c:ed:80:4c:2f:87:61:d0:65:00:64: d0:96:be:17:58:97:b9:76:0a:64:cc:87:aa:14:61: f7:66:47:d5:e7:6f:87:6c:a2:4e:ae:7c:79:95:5c: 73:b7:4f:53:82:5d:49:c9:9d:ac:8f:b7:a6:7a:79: 2d:93:d7:5d:a7:30:92:c8:bd:3c:09:5e:ed:ac:3d: e0:3a:9c:e6:7b:88:39:c5:4f:42:3c:0c:8e:43:14: 18:3d:db:2d:fb:aa:42:a1:af:e9:79:87:a2:d3:85: af:d1:56:55:7e:86:41:44:9e:e7:7d:d1:64:45:fd: c9:50:ae:ae:c1:64:35:eb:f0:2f:ed:de:64:9b:48: df:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:AB:38:C7:29:1E:A8:C0:50:C0:FC:25:C6:2A:B2:1D:02:95:CE:AA X509v3 Authority Key Identifier: keyid:E3:8A:5E:DE:19:68:C9:37:5E:51:55:1F:AE:98:88:8A:0B:B5:44:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:2f:2b:38:99:a5:eb:4b:db:32:73:01:60:9f:f4:b0:a7:6d: 73:e0:59:b8:13:2b:d4:7e:df:29:12:30:13:45:f5:57:a3:9e: 3f:43:fa:95:d0:8f:a3:8c:e8:15:fd:94:b3:76:13:37:16:5f: ce:b6:37:1b:b4:1e:f0:ec:cd:8a:d0:08:ea:a4:78:f3:40:fd: 3e:73:ce:73:50:7c:08:75:d8:67:bf:d5:5d:e0:e4:85:d7:be: b6:91:26:f2:81:df:c2:cc:b0:5f:d1:32:c1:6c:0d:f4:6d:0b: da:0e:d6:e0:8d:70:f9:78:e0:5c:26:1e:10:83:c2:6d:9b:ae: da:6e:53:2b:0b:3a:ed:d5:45:45:40:1e:0d:f4:84:e3:a6:2e: db:70:fd:92:29:50:d8:23:0b:9f:20:17:e4:93:96:34:e1:1d: dc:f5:2f:19:02:9f:1b:a3:93:a8:55:1d:f1:f1:53:92:0d:9f: 32:9a:29:46:6a:cd:1f:ea:b9:aa:fa:ea:4b:7b:4a:3c:db:00: 20:bd:38:15:41:00:15:2e:8b:59:a8:2d:74:1a:c3:35:fa:08: 45:82:d2:44:82:c1:7d:bc:b3:61:9f:db:82:b0:b5:fd:e5:d8: 95:93:51:0c:fb:54:da:62:cc:9d:1a:7f:24:ce:8a:d4:1f:1f: f2:73:fd:64 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QUM0QjExMC8GA1UEBRMoRTM4QTVFREUxOTY4QzkzNzVFNTE1NTFGQUU5ODg4OEEw QkI1NDQ5MDAeFw0yNTA0MjUwNjMxNDhaFw0yNTA1MDIwNjMxNDhaMBgxFjAUBgNV BAMTDTY4MGIyYzU1LWMyOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/LBNEiX9HeQdeG0sZ8LLQOdWKFQ9IVEBICKUx6sgrb6neqDAGjvvPyRpEVwci ebTV/3DLD1I4THB8gg6gxSppOiKzZ51mHbIZGdlq2OpuCEH00CXtwf8nlHy0rVup IwhJccG7kNMK1oEW4SnfinzssnaYL3W5grRBb1SM7YBML4dh0GUAZNCWvhdYl7l2 CmTMh6oUYfdmR9Xnb4dsok6ufHmVXHO3T1OCXUnJnayPt6Z6eS2T112nMJLIvTwJ Xu2sPeA6nOZ7iDnFT0I8DI5DFBg92y37qkKhr+l5h6LTha/RVlV+hkFEnud90WRF /clQrq7BZDXr8C/t3mSbSN+RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHqs4xyke qMBQwPwlxiqyHQKVzqowHwYDVR0jBBgwFoAU44pe3hloyTdeUVUfrpiIigu1RJAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBQzRCL0RFM0Y4ODlBQ0Q3 RDExRUZBQTA3MjMwQUM0RjlBRTAyLzQ0cGUzaGxveVRkZVVWVWZycGlJaWd1MVJK QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNDRwZTNobG95VGRlVVZVZnJwaUlpZ3UxUkpBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFB QzRCL0RFM0Y4ODlBQ0Q3RDExRUZBQTA3MjMwQUM0RjlBRTAyLzQ0cGUzaGxveVRk ZVVWVWZycGlJaWd1MVJKQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAYvKziZpetL2zJzAWCf9LCnbXPgWbgTK9R+3ykSMBNF9Vejnj9D+pXQ j6OM6BX9lLN2EzcWX862Nxu0HvDszYrQCOqkePNA/T5zznNQfAh12Ge/1V3g5IXX vraRJvKB38LMsF/RMsFsDfRtC9oO1uCNcPl44FwmHhCDwm2brtpuUysLOu3VRUVA Hg30hOOmLttw/ZIpUNgjC58gF+STljThHdz1LxkCnxujk6hVHfHxU5INnzKaKUZq zR/quar66kt7SjzbACC9OBVBABUui1moLXQawzX6CEWC0kSCwX28s2Gf24Kwtf3l 2JWTUQz7VNpizJ0afyTOitQfH/Jz/WQ= -----END CERTIFICATE-----Generated at Sat Apr 26 12:36:44 2025 by rpki-client