$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft File: RrT_jckWend9mNhfL1Id0TZwc7M.mft (raw, json) Hash identifier: AUQv1qEKYV0+9/15xIVtuEH1JAZN5wwjRLrAzgKm9oM= Subject key identifier: 3A:E2:4B:AC:A6:AB:1D:15:7C:E7:E8:1C:7B:B2:A0:C5:A5:D7:72:6F Authority key identifier: 46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3 Certificate issuer: /CN=A91ADE0A/serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3 Certificate serial: 0490 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft Manifest number: 0488 Signing time: Sat 26 Apr 2025 15:51:57 +0000 Manifest this update: Sat 26 Apr 2025 15:51:56 +0000 Manifest next update: Sat 03 May 2025 15:51:56 +0000 Files and hashes: 1: RrT_jckWend9mNhfL1Id0TZwc7M.crl (hash: ggO/uAxX1PNCkVtzDUl77hTbpIvr6Lq99DQDviC5NGQ=) 2: B3789882F23211EC9A7DB924C4F9AE02.roa (hash: mHbYCPxnBj3PWJdh7qbfDGDK73T1pf2kWSW1uT2gXIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:51:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1168 (0x490) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADE0A, serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3 Validity Not Before: Apr 26 15:51:56 2025 GMT Not After : May 3 15:51:56 2025 GMT Subject: CN=680d011d-3f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:83:71:4e:43:e8:46:ad:47:d6:24:da:ae:19: b2:2e:ce:da:4f:b9:c3:e0:6d:bb:19:05:de:80:f8: f1:94:4f:75:e6:25:70:01:5b:06:44:24:b8:06:d1: 5e:82:4f:9a:e1:cd:7e:c0:92:8a:53:75:4b:19:ff: af:57:1f:6c:21:8a:37:45:6f:5b:ca:ff:1f:f7:0d: b1:76:34:6d:49:02:56:d2:21:cf:73:61:8e:ac:72: 06:91:11:3f:2d:c1:59:85:0c:4b:95:69:87:c9:57: 27:46:92:a1:1c:50:b3:69:11:fa:ca:f1:a5:0a:9c: 67:ae:66:2b:cb:37:fd:a9:b2:d0:e4:97:c7:f0:d4: 3a:12:f7:48:56:95:7b:d8:5f:60:e7:ab:8b:18:ce: a3:a3:5a:71:43:8b:c0:e4:a3:ee:af:01:40:3f:c3: 29:49:f6:8d:6f:50:8d:5d:fc:94:5a:eb:20:d4:74: c8:89:d8:75:ba:50:6e:06:1b:5b:46:e1:30:94:43: a3:16:db:0b:c7:a2:55:c6:35:ab:30:77:2c:d7:30: 47:2a:0d:78:55:be:7a:a4:8b:80:9e:0b:38:89:92: c0:74:af:96:fe:85:fd:08:11:2c:c0:e5:b5:64:42: 64:f3:dc:83:09:b6:a2:a1:98:02:07:8f:3d:e8:18: 42:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E2:4B:AC:A6:AB:1D:15:7C:E7:E8:1C:7B:B2:A0:C5:A5:D7:72:6F X509v3 Authority Key Identifier: keyid:46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:4d:c9:b0:a1:83:49:c8:ab:d7:7f:a0:ff:7d:50:ce:ee:18: ac:23:0c:8a:7b:23:b2:ee:e3:cc:bd:1c:64:f5:f0:38:91:bf: 98:10:f2:2a:11:37:73:52:39:21:d9:b0:9a:7e:39:4d:9d:d7: 33:42:b7:7b:d5:04:08:df:8b:3e:28:32:c6:5b:f6:79:a2:55: ae:e7:62:71:0e:5a:74:f8:f7:36:94:16:4f:e5:be:61:4e:77: a1:8e:40:a1:93:e6:5d:89:a5:91:ed:d1:c5:ba:3d:56:04:e9: aa:f7:99:31:1d:50:8d:d5:de:7a:29:76:fe:d3:63:73:f7:45: ee:75:52:2e:ef:0e:b0:8f:fb:e9:ba:bc:5c:53:2d:42:75:1b: 71:2c:21:d9:82:fe:b4:4c:77:e4:95:8c:e1:57:af:91:c9:ad: 89:fc:bc:c5:eb:b1:a7:29:f2:3a:af:d0:d3:49:3f:dc:94:56: de:cc:af:4d:7d:78:36:c2:d3:21:93:74:bb:0a:a7:2c:a5:f8: cf:3e:7b:93:7d:8a:1f:42:fa:f3:7e:db:2b:ea:68:b4:7d:aa: 5a:d4:d5:eb:43:e2:da:ba:0f:6e:bc:f1:17:25:c3:e4:0e:5a: 55:95:25:c4:49:d9:15:ae:1b:72:a1:9b:25:e0:ab:8e:8c:1e: 06:ab:8d:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURFMEExMTAvBgNVBAUTKDQ2QjRGRjhEQzkxNjdBNzc3RDk4RDg1RjJGNTIxREQx MzY3MDczQjMwHhcNMjUwNDI2MTU1MTU2WhcNMjUwNTAzMTU1MTU2WjAYMRYwFAYD VQQDEw02ODBkMDExZC0zZjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA04NxTkPoRq1H1iTarhmyLs7aT7nD4G27GQXegPjxlE915iVwAVsGRCS4BtFe gk+a4c1+wJKKU3VLGf+vVx9sIYo3RW9byv8f9w2xdjRtSQJW0iHPc2GOrHIGkRE/ LcFZhQxLlWmHyVcnRpKhHFCzaRH6yvGlCpxnrmYryzf9qbLQ5JfH8NQ6EvdIVpV7 2F9g56uLGM6jo1pxQ4vA5KPurwFAP8MpSfaNb1CNXfyUWusg1HTIidh1ulBuBhtb RuEwlEOjFtsLx6JVxjWrMHcs1zBHKg14Vb56pIuAngs4iZLAdK+W/oX9CBEswOW1 ZEJk89yDCbaioZgCB4896BhCPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDriS6ym qx0VfOfoHHuyoMWl13JvMB8GA1UdIwQYMBaAFEa0/43JFnp3fZjYXy9SHdE2cHOz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREUwQS80MzU2N0VFNDNE MjgxMUVDQkVGNzdDNzZDNEY5QUUwMi9SclRfamNrV2VuZDltTmhmTDFJZDBUWndj N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1JyVF9qY2tXZW5kOW1OaGZMMUlkMFRad2M3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REUwQS80MzU2N0VFNDNEMjgxMUVDQkVGNzdDNzZDNEY5QUUwMi9SclRfamNrV2Vu ZDltTmhmTDFJZDBUWndjN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQTcmwoYNJyKvXf6D/fVDO7hisIwyKeyOy7uPMvRxk9fA4kb+YEPIq ETdzUjkh2bCafjlNndczQrd71QQI34s+KDLGW/Z5olWu52JxDlp0+Pc2lBZP5b5h TnehjkChk+ZdiaWR7dHFuj1WBOmq95kxHVCN1d56KXb+02Nz90XudVIu7w6wj/vp urxcUy1CdRtxLCHZgv60THfklYzhV6+Rya2J/LzF67GnKfI6r9DTST/clFbezK9N fXg2wtMhk3S7CqcspfjPPnuTfYofQvrzftsr6mi0fapa1NXrQ+Laug9uvPEXJcPk DlpVlSXESdkVrhtyoZsl4KuOjB4Gq42y -----END CERTIFICATE-----Generated at Sun Apr 27 03:57:53 2025 by rpki-client