$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft File: cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft (raw, json) Hash identifier: R0QhQLsXr7kZMlxoJOZYPdlQkrEyCmT92JbiFBqSWmM= Subject key identifier: B2:6F:5D:B9:76:5E:7B:01:C7:D9:7C:76:A6:4E:75:57:04:D7:BE:95 Authority key identifier: 70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82 Certificate issuer: /CN=A91B1DCF/serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482 Certificate serial: 04A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft Manifest number: 049C Signing time: Thu 24 Apr 2025 23:45:28 +0000 Manifest this update: Thu 24 Apr 2025 23:45:28 +0000 Manifest next update: Thu 01 May 2025 23:45:27 +0000 Files and hashes: 1: cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl (hash: bO44N2pFILnuYjgdWnilyphZD1BbUco7cqXbt6rAoqo=) 2: 40565FA23C8311ECA86D031EC4F9AE02.roa (hash: 4ooeZLcPwkHZ/ZShvap31EsyiH4g04EjDdlB/3H2WWc=) 3: 3F3532743C8311ECA86D031EC4F9AE02.roa (hash: IONLpqLbIWNcEINYfdYWnA0lQhPUSCbB7gozoJAI8ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1192 (0x4a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1DCF, serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482 Validity Not Before: Apr 24 23:45:28 2025 GMT Not After : May 1 23:45:27 2025 GMT Subject: CN=680acd18-5eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a8:2c:a6:14:c7:4c:48:e6:01:1e:cb:67:1f: d3:7d:f1:cd:df:26:82:88:4e:3c:96:0e:4f:ad:b8: 86:50:85:f2:64:c5:5a:ff:51:ab:c6:df:74:f0:0e: 24:8c:43:f9:18:3a:db:19:73:09:8b:dd:1a:45:08: 4f:6f:0d:3e:60:b5:f6:12:c4:4d:21:f2:09:2e:d6: f1:b4:0e:01:0d:6b:ad:7e:8d:09:21:c2:0f:17:30: a3:50:8e:df:de:a0:53:3a:ba:fa:01:5d:75:88:39: 49:59:fc:40:42:04:c2:28:23:7c:ce:09:5e:ba:d3: 3e:ee:cc:91:dc:89:0a:a1:d0:52:23:0e:ab:92:1c: 6e:ff:49:76:3c:01:f0:58:ca:97:4e:95:00:9c:84: 42:84:f1:a1:12:db:cc:53:9c:2f:8f:bc:c1:5d:7d: 16:68:bc:1f:18:da:e3:56:21:9a:39:fe:df:81:0e: ae:44:16:7c:60:7e:21:50:d6:89:31:38:d5:46:61: 44:ff:5d:58:90:f7:b5:e8:27:83:8c:65:c4:0d:00: db:d4:a6:f8:34:75:90:36:45:09:84:2c:7b:70:3b: 2f:87:59:51:ac:fe:2d:64:36:f2:4b:f5:0f:a7:ae: 3a:b2:28:9e:d3:44:22:e4:fb:91:8c:a4:a5:d8:54: 44:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:6F:5D:B9:76:5E:7B:01:C7:D9:7C:76:A6:4E:75:57:04:D7:BE:95 X509v3 Authority Key Identifier: keyid:70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:57:74:ad:73:51:96:3a:0d:04:1d:79:36:72:2a:3b:3a:39: dc:90:d1:2a:6c:e1:4e:81:d5:b8:ca:8f:cd:a0:9f:6a:98:a0: ad:f8:b4:0f:87:8b:9b:87:56:09:3d:c3:0e:a0:48:2e:44:68: ae:30:ea:e3:a9:3d:70:a8:94:87:f0:fb:28:10:db:75:37:2c: f1:2a:0e:0f:7a:de:14:7a:93:cf:79:a7:24:3c:2e:6d:f7:ec: 9a:ef:e7:e5:99:0c:a9:3c:a1:a1:1c:94:0b:4e:1c:58:ca:f8: 35:13:de:cb:81:91:be:51:43:6e:08:b6:54:30:8f:ad:f8:fc: cd:ce:71:5b:be:65:44:61:94:cb:99:28:25:e1:b9:d4:51:7d: 88:8f:79:09:5b:b9:de:31:90:d4:8b:ed:bd:1a:5c:97:0e:07: 7c:b9:47:3e:54:2f:6a:1b:2d:ab:b1:97:be:b7:c7:e8:e1:bf: 09:41:fb:bd:42:03:e3:ef:d0:37:d7:4a:2e:eb:0e:a2:2d:d5: 16:f2:63:d4:c2:36:43:04:4f:5b:4f:9a:dc:2c:b4:dd:c5:28: 0f:39:b2:84:4b:f5:bb:32:db:37:e4:b4:b2:f5:26:a6:ff:44: 18:e8:a1:4c:7a:fc:cb:4c:1e:85:0b:74:4f:4a:7a:7d:68:5b: 4a:41:fd:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFEQ0YxMTAvBgNVBAUTKDcwNEJGRjRFQ0FBOURDOEE4QjcyMDkyNjRDNjA3REI1 RjIyRjI0ODIwHhcNMjUwNDI0MjM0NTI4WhcNMjUwNTAxMjM0NTI3WjAYMRYwFAYD VQQDEw02ODBhY2QxOC01ZWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqgsphTHTEjmAR7LZx/TffHN3yaCiE48lg5PrbiGUIXyZMVa/1Grxt908A4k jEP5GDrbGXMJi90aRQhPbw0+YLX2EsRNIfIJLtbxtA4BDWutfo0JIcIPFzCjUI7f 3qBTOrr6AV11iDlJWfxAQgTCKCN8zgleutM+7syR3IkKodBSIw6rkhxu/0l2PAHw WMqXTpUAnIRChPGhEtvMU5wvj7zBXX0WaLwfGNrjViGaOf7fgQ6uRBZ8YH4hUNaJ MTjVRmFE/11YkPe16CeDjGXEDQDb1Kb4NHWQNkUJhCx7cDsvh1lRrP4tZDbyS/UP p646siie00Qi5PuRjKSl2FREFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJvXbl2 XnsBx9l8dqZOdVcE176VMB8GA1UdIwQYMBaAFHBL/07KqdyKi3IJJkxgfbXyLySC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMURDRi8zNjk3OEE3QzMw QkMxMUVDQTMwM0VGODZDNEY5QUUwMi9jRXZfVHNxcDNJcUxjZ2ttVEdCOXRmSXZK SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NFdl9Uc3FwM0lxTGNna21UR0I5dGZJdkpJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MURDRi8zNjk3OEE3QzMwQkMxMUVDQTMwM0VGODZDNEY5QUUwMi9jRXZfVHNxcDNJ cUxjZ2ttVEdCOXRmSXZKSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLV3Stc1GWOg0EHXk2cio7OjnckNEqbOFOgdW4yo/NoJ9qmKCt+LQP h4ubh1YJPcMOoEguRGiuMOrjqT1wqJSH8PsoENt1NyzxKg4Pet4UepPPeackPC5t 9+ya7+flmQypPKGhHJQLThxYyvg1E97LgZG+UUNuCLZUMI+t+PzNznFbvmVEYZTL mSgl4bnUUX2Ij3kJW7neMZDUi+29GlyXDgd8uUc+VC9qGy2rsZe+t8fo4b8JQfu9 QgPj79A310ou6w6iLdUW8mPUwjZDBE9bT5rcLLTdxSgPObKES/W7Mts35LSy9Sam /0QY6KFMevzLTB6FC3RPSnp9aFtKQf2R -----END CERTIFICATE-----Generated at Sat Apr 26 04:07:18 2025 by rpki-client