$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft File: 4-snntAeg57yRYBuBFH8FVAJJqI.mft (raw, json) Hash identifier: zMr1FsuwYO5WvTuidty/IzqBlHhSEnTLKsseS+KxgJo= Subject key identifier: FC:45:3B:EE:A9:50:76:21:AE:BF:67:F4:CA:F3:84:0C:D3:E2:C6:46 Authority key identifier: E3:EB:27:9E:D0:1E:83:9E:F2:45:80:6E:04:51:FC:15:50:09:26:A2 Certificate issuer: /CN=A91B2C53/serialNumber=E3EB279ED01E839EF245806E0451FC15500926A2 Certificate serial: 07A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft Manifest number: 0798 Signing time: Thu 24 Apr 2025 21:08:36 +0000 Manifest this update: Thu 24 Apr 2025 21:08:35 +0000 Manifest next update: Thu 01 May 2025 21:08:35 +0000 Files and hashes: 1: 4-snntAeg57yRYBuBFH8FVAJJqI.crl (hash: B9YGZmNH7Hj7kugGQkuKO5CkUoyJakHdTO9Efv0J+AI=) 2: EBD94A14049A11EBB73A8663C4F9AE02.roa (hash: wMcaf6KjNyS0A+6aPLv02H8xkgAGjk1qWQXSXwZEtXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.crl rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:08:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1954 (0x7a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2C53, serialNumber=E3EB279ED01E839EF245806E0451FC15500926A2 Validity Not Before: Apr 24 21:08:35 2025 GMT Not After : May 1 21:08:35 2025 GMT Subject: CN=680aa853-2130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:91:b4:b5:84:69:0b:b0:60:e9:72:36:34:19: e7:2a:a6:8b:fd:80:11:f9:4e:30:49:e4:7d:b2:3b: 5f:2e:ee:84:aa:96:e5:3d:e2:06:4c:22:e0:d8:04: 71:9d:bc:66:9a:a4:ee:a3:f8:4f:78:39:ae:9a:c5: 2b:cf:f9:7e:1b:56:ff:d8:77:58:ec:1c:f9:36:73: 51:fc:ee:df:c6:0c:51:89:57:e4:dd:66:bf:53:5f: 5a:37:50:ff:39:6a:f6:80:67:74:4f:3f:dd:d4:db: 64:57:79:a3:70:8d:02:9b:fd:23:e1:9f:bf:16:e5: cc:7e:da:f3:c0:8b:f4:f3:4c:91:7b:20:a4:e9:63: 3f:e4:ea:32:8b:76:e3:e1:59:17:bd:23:e9:87:40: 8c:c9:3d:e8:ef:01:41:cd:1d:b0:85:ba:91:5e:91: f5:05:11:86:38:06:c1:6f:47:90:f1:ee:74:43:7d: 9a:9a:43:07:64:51:2a:e6:ec:58:3c:86:27:44:a3: 84:56:51:cc:7b:37:d7:77:09:05:7d:65:00:d0:0a: cf:85:0d:f8:b5:51:ce:26:b3:68:3a:d2:67:09:ba: 29:f5:2d:e6:ac:ef:2f:40:c3:11:65:7b:cd:99:fb: c1:1a:58:3e:46:0e:7b:00:42:3d:72:58:84:c8:32: e6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:45:3B:EE:A9:50:76:21:AE:BF:67:F4:CA:F3:84:0C:D3:E2:C6:46 X509v3 Authority Key Identifier: keyid:E3:EB:27:9E:D0:1E:83:9E:F2:45:80:6E:04:51:FC:15:50:09:26:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c5:f4:d8:39:45:53:24:f5:b9:16:c1:28:ad:cb:49:4c:e5: 45:ed:54:88:6a:aa:d7:0b:54:3e:65:2e:95:1c:30:93:9e:1d: 6d:87:7b:dc:5b:4d:40:8a:aa:37:87:03:42:5b:68:51:9b:c5: b9:09:5c:2d:04:91:dd:d3:1a:ea:62:41:35:2e:42:d1:ca:89: 02:e3:4c:25:d3:b9:4f:19:ad:51:7d:ac:8e:e1:52:29:9f:69: e6:e3:27:da:61:0c:34:ca:6e:2c:67:ea:73:6e:be:1e:76:0d: e5:b7:10:df:dd:48:ca:08:8f:99:2c:8a:9f:99:dc:a8:45:a7: 81:cb:11:ea:89:b9:4b:c5:5a:83:bf:51:49:28:ec:5d:ed:a2: 0b:7c:59:37:53:94:ac:e9:e1:51:90:96:53:5c:b1:68:58:8c: 62:7d:79:1d:a7:31:0e:70:92:ab:95:fc:2d:ea:d8:9f:34:a3: 97:31:7c:a0:bd:ba:db:2e:f7:e8:34:d2:3f:7c:c8:40:01:63: be:5c:ae:09:94:00:a7:c6:96:c8:2c:94:b1:82:00:01:6d:94: a5:7d:a2:40:38:08:57:2d:b5:df:b4:9d:3a:bd:2b:bf:7e:a6: 54:6f:f4:e3:84:ba:ab:64:e9:07:b7:ad:82:13:48:e1:16:3a: 49:53:b7:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDNTMxMTAvBgNVBAUTKEUzRUIyNzlFRDAxRTgzOUVGMjQ1ODA2RTA0NTFGQzE1 NTAwOTI2QTIwHhcNMjUwNDI0MjEwODM1WhcNMjUwNTAxMjEwODM1WjAYMRYwFAYD VQQDEw02ODBhYTg1My0yMTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ZG0tYRpC7Bg6XI2NBnnKqaL/YAR+U4wSeR9sjtfLu6EqpblPeIGTCLg2ARx nbxmmqTuo/hPeDmumsUrz/l+G1b/2HdY7Bz5NnNR/O7fxgxRiVfk3Wa/U19aN1D/ OWr2gGd0Tz/d1NtkV3mjcI0Cm/0j4Z+/FuXMftrzwIv080yReyCk6WM/5Ooyi3bj 4VkXvSPph0CMyT3o7wFBzR2whbqRXpH1BRGGOAbBb0eQ8e50Q32amkMHZFEq5uxY PIYnRKOEVlHMezfXdwkFfWUA0ArPhQ34tVHOJrNoOtJnCbop9S3mrO8vQMMRZXvN mfvBGlg+Rg57AEI9cliEyDLmnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPxFO+6p UHYhrr9n9MrzhAzT4sZGMB8GA1UdIwQYMBaAFOPrJ57QHoOe8kWAbgRR/BVQCSai MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkM1My9FNzhFNDE2RTA0 OTgxMUVCQjFGRUU4NURDNEY5QUUwMi80LXNubnRBZWc1N3lSWUJ1QkZIOEZWQUpK cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtc25udEFlZzU3eVJZQnVCRkg4RlZBSkpxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkM1My9FNzhFNDE2RTA0OTgxMUVCQjFGRUU4NURDNEY5QUUwMi80LXNubnRBZWc1 N3lSWUJ1QkZIOEZWQUpKcUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANxfTYOUVTJPW5FsEorctJTOVF7VSIaqrXC1Q+ZS6VHDCTnh1th3vc W01Aiqo3hwNCW2hRm8W5CVwtBJHd0xrqYkE1LkLRyokC40wl07lPGa1RfayO4VIp n2nm4yfaYQw0ym4sZ+pzbr4edg3ltxDf3UjKCI+ZLIqfmdyoRaeByxHqiblLxVqD v1FJKOxd7aILfFk3U5Ss6eFRkJZTXLFoWIxifXkdpzEOcJKrlfwt6tifNKOXMXyg vbrbLvfoNNI/fMhAAWO+XK4JlACnxpbILJSxggABbZSlfaJAOAhXLbXftJ06vSu/ fqZUb/TjhLqrZOkHt62CE0jhFjpJU7eC -----END CERTIFICATE-----Generated at Sat Apr 26 05:28:35 2025 by rpki-client