$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft File: c4wjqkznVV7qL8jCvtj0akiNyT0.mft (raw, json) Hash identifier: hKHUU58xc26HOvxwgP4TQYI0oV08gA9pQSNY3Wdf9sE= Subject key identifier: 12:A6:3A:CD:7A:75:C3:94:29:AE:EF:60:47:D3:33:1F:9D:5C:9D:DC Authority key identifier: 73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D Certificate issuer: /CN=A91B2D29/serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D Certificate serial: 2412 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft Manifest number: 4641 Signing time: Thu 24 Apr 2025 15:49:40 +0000 Manifest this update: Thu 24 Apr 2025 15:49:39 +0000 Manifest next update: Thu 01 May 2025 15:49:39 +0000 Files and hashes: 1: c4wjqkznVV7qL8jCvtj0akiNyT0.crl (hash: ybPunjC8PbUjHNRVl95ApwtGzci30P28rUXqXX242s4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:49:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9234 (0x2412) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D29, serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D Validity Not Before: Apr 24 15:49:39 2025 GMT Not After : May 1 15:49:39 2025 GMT Subject: CN=680a5d93-44ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e5:9c:39:86:86:07:15:59:bd:2f:3d:84:a4: 45:4c:12:63:e5:7b:45:13:b2:bc:d0:aa:25:7f:ac: ca:3f:7b:6c:cd:a7:88:67:6d:70:4c:f4:02:62:94: 2d:1d:99:fe:b3:10:8a:95:e1:87:f3:7c:96:85:d8: a1:19:a8:c6:fc:5d:03:05:48:59:0b:e5:69:e4:13: 35:10:c7:c7:b4:59:e7:37:fc:ad:c3:59:4e:6e:ad: 37:ad:64:95:17:56:b2:22:87:ae:04:5a:d2:77:6c: 9b:fc:9d:66:f7:05:9d:99:25:d1:c4:f0:51:6b:ab: 8c:4b:28:23:2b:16:2e:30:ba:ab:d3:04:98:2f:2f: 39:d1:71:4d:48:44:78:e3:ae:71:05:c5:58:b3:1f: ae:64:ba:b8:5f:84:c3:7f:73:e2:c6:92:c7:18:ce: ca:1d:2d:d9:84:5f:43:00:16:7b:10:c0:3e:54:ee: 4d:d2:bc:b8:72:ca:1d:db:70:bc:b6:ce:b1:4b:f2: 01:c8:66:4c:38:5a:37:06:ca:67:1e:ca:7b:82:43: ee:f8:20:af:de:0a:46:cb:e1:7a:21:26:ac:45:0f: 8b:75:e9:46:57:f9:84:a7:8c:9c:89:eb:6c:56:1f: 91:ec:6d:2a:e8:54:ed:85:ec:54:90:18:32:9e:6b: db:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A6:3A:CD:7A:75:C3:94:29:AE:EF:60:47:D3:33:1F:9D:5C:9D:DC X509v3 Authority Key Identifier: keyid:73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:87:8d:61:d4:82:ad:1a:b5:9a:35:52:b3:31:46:ce:e1:92: 80:8c:23:cf:71:13:d7:13:67:ef:71:77:42:51:07:2e:32:fa: 93:92:14:3d:a5:49:d8:22:2b:78:a3:c0:a7:5a:f1:c4:98:87: 73:f1:57:03:f8:a8:54:4c:f8:67:4c:8e:57:e9:a3:4c:b1:15: e7:43:68:fe:4e:4d:9e:07:b9:2d:31:8b:54:91:2a:5a:96:8e: 07:b3:8f:8a:5c:9f:55:0b:7f:f5:4d:eb:64:5a:e5:79:21:e2: 07:86:9a:27:91:d7:0c:c4:4c:91:66:e5:6c:f0:f5:2b:e3:1e: 4c:58:7e:59:e1:74:1f:54:00:4a:c7:55:74:4e:0a:81:88:03: 99:fa:bf:d0:c6:4b:84:04:29:f6:26:0a:65:d4:66:3d:21:0b: ef:83:a8:db:7c:77:d0:b2:4a:d6:3e:a5:4c:d6:36:2b:97:99: b9:8d:ae:8a:9a:09:21:94:78:47:13:dc:7f:4d:a8:0c:7d:1d: a2:07:a0:55:4c:87:e4:77:4a:ae:98:fd:71:b2:71:8c:ae:a4: 1a:e0:b9:bf:7a:29:48:8f:6e:70:05:7f:ac:e5:35:c7:81:95: 0d:57:fc:11:30:15:46:4b:37:ea:2c:fe:f8:9f:ba:9e:85:80: 20:a1:dd:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJEMjkxMTAvBgNVBAUTKDczOEMyM0FBNENFNzU1NUVFQTJGQzhDMkJFRDhGNDZB NDg4REM5M0QwHhcNMjUwNDI0MTU0OTM5WhcNMjUwNTAxMTU0OTM5WjAYMRYwFAYD VQQDEw02ODBhNWQ5My00NGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6uWcOYaGBxVZvS89hKRFTBJj5XtFE7K80Kolf6zKP3tszaeIZ21wTPQCYpQt HZn+sxCKleGH83yWhdihGajG/F0DBUhZC+Vp5BM1EMfHtFnnN/ytw1lObq03rWSV F1ayIoeuBFrSd2yb/J1m9wWdmSXRxPBRa6uMSygjKxYuMLqr0wSYLy850XFNSER4 465xBcVYsx+uZLq4X4TDf3PixpLHGM7KHS3ZhF9DABZ7EMA+VO5N0ry4csod23C8 ts6xS/IByGZMOFo3BspnHsp7gkPu+CCv3gpGy+F6ISasRQ+LdelGV/mEp4yciets Vh+R7G0q6FTthexUkBgynmvbSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKmOs16 dcOUKa7vYEfTMx+dXJ3cMB8GA1UdIwQYMBaAFHOMI6pM51Ve6i/Iwr7Y9GpIjck9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQyOS9GNzFFNzE2NjU1 MjExMUU1QURCMjA5MkFDNEY5QUUwMi9jNHdqcWt6blZWN3FMOGpDdnRqMGFraU55 VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M0d2pxa3puVlY3cUw4akN2dGowYWtpTnlUMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQyOS9GNzFFNzE2NjU1MjExMUU1QURCMjA5MkFDNEY5QUUwMi9jNHdqcWt6blZW N3FMOGpDdnRqMGFraU55VDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdh41h1IKtGrWaNVKzMUbO4ZKAjCPPcRPXE2fvcXdCUQcuMvqTkhQ9 pUnYIit4o8CnWvHEmIdz8VcD+KhUTPhnTI5X6aNMsRXnQ2j+Tk2eB7ktMYtUkSpa lo4Hs4+KXJ9VC3/1TetkWuV5IeIHhponkdcMxEyRZuVs8PUr4x5MWH5Z4XQfVABK x1V0TgqBiAOZ+r/QxkuEBCn2Jgpl1GY9IQvvg6jbfHfQskrWPqVM1jYrl5m5ja6K mgkhlHhHE9x/TagMfR2iB6BVTIfkd0qumP1xsnGMrqQa4Lm/eilIj25wBX+s5TXH gZUNV/wRMBVGSzfqLP74n7qehYAgod12 -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:11 2025 by rpki-client