$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft File: T4ElgrV_TBLHNl5qp_D_yncQlJE.mft (raw, json) Hash identifier: Pm59AFhviQw7OPFNYbZW3OuSWvUyiHVm+Y+E7/huNGI= Subject key identifier: B5:1B:70:AA:23:BE:E9:B6:31:D5:AC:16:DB:CC:62:EC:8D:FB:82:C4 Authority key identifier: 4F:81:25:82:B5:7F:4C:12:C7:36:5E:6A:A7:F0:FF:CA:77:10:94:91 Certificate issuer: /CN=A91B2D29/serialNumber=4F812582B57F4C12C7365E6AA7F0FFCA77109491 Certificate serial: 189D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft Manifest number: 4642 Signing time: Thu 24 Apr 2025 15:49:42 +0000 Manifest this update: Thu 24 Apr 2025 15:49:41 +0000 Manifest next update: Thu 01 May 2025 15:49:41 +0000 Files and hashes: 1: T4ElgrV_TBLHNl5qp_D_yncQlJE.crl (hash: 3YytG6tYcYWj1KCUaTUfZeROY5zStGdG4lK4uYXZUcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.crl rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:49:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6301 (0x189d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D29, serialNumber=4F812582B57F4C12C7365E6AA7F0FFCA77109491 Validity Not Before: Apr 24 15:49:41 2025 GMT Not After : May 1 15:49:41 2025 GMT Subject: CN=680a5d96-d053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:98:9a:c3:b7:cc:ab:ad:22:c4:cb:f3:59:a5: 68:29:e8:a4:8b:88:56:26:44:dc:44:76:c5:84:79: 25:ea:6c:45:e0:c6:d5:bb:12:7e:bb:ea:17:0c:87: 5d:aa:c3:06:0b:29:5c:9a:89:b2:5d:87:68:c7:d5: d4:e4:a3:6f:2f:c2:0e:99:36:57:60:9f:12:bd:21: db:70:d4:0f:41:f3:61:c3:17:29:e3:d1:bc:0e:5a: 3a:d3:b2:8f:06:a0:7b:f1:8d:45:f5:07:19:ff:ee: 91:83:d3:0a:43:11:66:cd:e8:c0:0e:3d:96:e7:fd: 35:54:4d:2b:2c:13:c9:38:66:4a:d1:80:1b:bd:e0: 75:97:0e:62:53:36:0a:4d:27:fa:51:b0:be:30:df: 15:61:fc:f8:30:35:cb:45:bd:72:b0:6c:ae:f2:be: 8a:08:20:07:4d:76:43:d7:32:ef:fb:ef:bc:8d:11: 71:29:39:88:03:da:00:55:48:37:34:52:5d:d8:fe: e1:2e:5a:f5:16:c5:1c:a6:c9:b4:14:67:52:a1:58: fd:3f:12:7a:8b:28:ef:86:97:f6:6a:9e:35:87:9c: d4:81:d2:91:b9:fc:5b:53:c4:33:ae:d4:e3:ef:f7: 0a:71:fa:af:90:70:36:27:51:78:2c:67:10:3d:bd: 2c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:1B:70:AA:23:BE:E9:B6:31:D5:AC:16:DB:CC:62:EC:8D:FB:82:C4 X509v3 Authority Key Identifier: keyid:4F:81:25:82:B5:7F:4C:12:C7:36:5E:6A:A7:F0:FF:CA:77:10:94:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:86:8f:46:31:0b:43:b3:7d:a0:50:87:3c:e8:48:30:21:ad: c7:9c:45:93:a4:2c:24:09:a3:fc:58:13:10:34:13:4f:33:db: 14:f9:40:8d:b0:1a:82:1e:32:3c:f7:a4:e2:d8:c6:71:56:e8: 13:7b:d5:b1:6e:bb:8e:52:0e:6e:c7:5a:e2:4d:bb:1a:07:06: 5b:a4:e6:13:c3:7b:5f:49:65:1e:97:bf:d2:c4:c4:9e:81:e2: 71:4d:6f:51:da:dd:f0:a6:a3:55:85:4e:cb:3d:2c:2c:17:99: 23:60:99:4c:0d:3e:f0:84:cf:8b:d4:6e:50:ca:2f:88:c8:45: c5:c1:91:90:30:71:e3:af:90:00:33:05:78:0d:aa:4c:d9:9e: d1:8a:e5:9a:69:8f:a9:de:02:b2:d2:6a:65:aa:36:48:fa:17: 60:32:4a:81:f0:b1:07:cd:21:ab:1f:70:2d:53:7e:e1:bd:49: a6:a7:21:86:f6:e6:ff:72:be:43:33:22:cc:f2:58:f8:91:17: 97:a6:e1:23:d8:84:40:2b:5a:05:87:96:31:27:57:b9:71:5c: ba:6d:aa:3d:f5:28:c6:1d:1c:97:e9:11:86:2d:a9:a7:42:1d: 87:7e:b0:00:69:0a:b3:f7:b1:21:64:e3:33:e1:e7:ae:d2:61: 81:f5:2b:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJEMjkxMTAvBgNVBAUTKDRGODEyNTgyQjU3RjRDMTJDNzM2NUU2QUE3RjBGRkNB NzcxMDk0OTEwHhcNMjUwNDI0MTU0OTQxWhcNMjUwNTAxMTU0OTQxWjAYMRYwFAYD VQQDEw02ODBhNWQ5Ni1kMDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5piaw7fMq60ixMvzWaVoKeiki4hWJkTcRHbFhHkl6mxF4MbVuxJ+u+oXDIdd qsMGCylcmomyXYdox9XU5KNvL8IOmTZXYJ8SvSHbcNQPQfNhwxcp49G8Dlo607KP BqB78Y1F9QcZ/+6Rg9MKQxFmzejADj2W5/01VE0rLBPJOGZK0YAbveB1lw5iUzYK TSf6UbC+MN8VYfz4MDXLRb1ysGyu8r6KCCAHTXZD1zLv+++8jRFxKTmIA9oAVUg3 NFJd2P7hLlr1FsUcpsm0FGdSoVj9PxJ6iyjvhpf2ap41h5zUgdKRufxbU8QzrtTj 7/cKcfqvkHA2J1F4LGcQPb0sqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUbcKoj vum2MdWsFtvMYuyN+4LEMB8GA1UdIwQYMBaAFE+BJYK1f0wSxzZeaqfw/8p3EJSR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQyOS9GNzFFNzE2NjU1 MjExMUU1QURCMjA5MkFDNEY5QUUwMi9UNEVsZ3JWX1RCTEhObDVxcF9EX3luY1Fs SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q0RWxnclZfVEJMSE5sNXFwX0RfeW5jUWxKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQyOS9GNzFFNzE2NjU1MjExMUU1QURCMjA5MkFDNEY5QUUwMi9UNEVsZ3JWX1RC TEhObDVxcF9EX3luY1FsSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuho9GMQtDs32gUIc86EgwIa3HnEWTpCwkCaP8WBMQNBNPM9sU+UCN sBqCHjI896Ti2MZxVugTe9WxbruOUg5ux1riTbsaBwZbpOYTw3tfSWUel7/SxMSe geJxTW9R2t3wpqNVhU7LPSwsF5kjYJlMDT7whM+L1G5Qyi+IyEXFwZGQMHHjr5AA MwV4DapM2Z7RiuWaaY+p3gKy0mplqjZI+hdgMkqB8LEHzSGrH3AtU37hvUmmpyGG 9ub/cr5DMyLM8lj4kReXpuEj2IRAK1oFh5YxJ1e5cVy6bao99SjGHRyX6RGGLamn Qh2HfrAAaQqz97EhZOMz4eeu0mGB9Sst -----END CERTIFICATE-----Generated at Sat Apr 26 08:24:47 2025 by rpki-client