$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft File: F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft (raw, json) Hash identifier: vf5Sp6Xvh1NHjSoEC6a+ggd7DhAED7NbLcSsTsnVFbE= Subject key identifier: C9:11:F4:33:F0:66:35:2A:97:B8:58:05:DF:E1:48:01:25:C3:65:3B Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 Certificate issuer: /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Certificate serial: 08C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft Manifest number: 1903 Signing time: Thu 24 Apr 2025 17:22:13 +0000 Manifest this update: Thu 24 Apr 2025 17:22:13 +0000 Manifest next update: Thu 01 May 2025 17:22:13 +0000 Files and hashes: 1: F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl (hash: SsSJJiLuDGtOernfHZ5CiHVQxidhIu/zzssFMZJH+R8=) 2: 8CB86F5AC21A11EFAB75870CC4F9AE02.roa (hash: WQb8lcNBaBBkPoF6ncdjgRAg3hdCvuxgxSDRSWRx1cY=) 3: E62A9F32CA6611EFAA521732C4F9AE02.roa (hash: SRGrWvEKnqS2fW0dxExdAox7hHbXysmPC91QCe7MKXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:22:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2248 (0x8c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5073, serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01 Validity Not Before: Apr 24 17:22:13 2025 GMT Not After : May 1 17:22:13 2025 GMT Subject: CN=680a7345-a9f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b8:03:3f:3f:cf:68:51:33:50:48:e5:95:6a: 0a:88:4b:41:e4:b5:38:8c:ed:e5:ab:46:5d:02:94: f3:ee:19:2c:be:a9:bb:ba:d5:c4:fb:9c:fc:9e:77: e3:d6:1e:f1:ba:4f:41:76:be:ff:8b:70:11:f9:b9: 44:c5:78:b7:b8:27:02:90:82:f0:73:b4:0f:fd:60: 90:5d:4a:72:63:59:fc:ac:0a:8c:d1:39:ef:18:d5: 4d:0e:8c:1c:58:0b:ec:63:8f:d8:89:2f:c1:8b:7a: a4:ee:ef:3c:59:34:c8:69:7d:f5:4d:ac:3d:c9:74: c8:a8:c2:17:05:1c:4c:89:9d:45:e2:27:64:86:ef: c4:3c:9d:7c:d6:8b:c1:7d:f8:e2:03:dd:d4:33:14: d2:36:29:25:bf:71:e2:f2:e0:32:e0:13:6a:6c:fd: 4a:ee:7c:de:b1:07:19:e6:7e:11:87:4f:62:91:41: 8a:fe:94:0f:15:56:09:77:3e:53:4c:fb:89:9d:e8: 03:9d:e5:59:6f:35:29:8a:bc:09:ec:d0:db:59:be: bf:3d:1d:bf:7d:7c:2a:21:ca:fe:ad:f4:50:9c:04: 54:4d:d0:65:4b:79:7a:aa:11:51:4c:6c:35:6d:dc: 0f:39:05:df:9d:2a:33:a5:6b:b6:2e:a9:8a:b1:bd: df:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:11:F4:33:F0:66:35:2A:97:B8:58:05:DF:E1:48:01:25:C3:65:3B X509v3 Authority Key Identifier: keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:04:9d:65:cf:31:ca:95:a0:c6:46:d9:a2:fb:0f:8a:36:50: ce:99:c0:6d:4e:d8:05:03:17:68:d6:f0:96:90:d1:9a:88:49: ab:cb:ac:27:f5:93:cb:67:64:04:ae:11:0e:0f:92:81:a8:5e: 10:81:f9:7f:8c:5a:d2:16:6d:b0:8d:60:2a:1b:78:4f:f4:98: b4:57:c4:af:b1:73:e4:93:9e:76:4b:a0:b4:d2:a1:6d:9d:7d: 17:d0:8d:76:d6:fa:38:97:64:21:bb:21:8e:f3:92:ad:2e:4a: 8a:c6:62:6c:38:34:61:0f:a5:6c:8d:47:8b:26:96:38:02:cc: 8f:b0:92:67:f9:98:90:6d:5c:bf:1e:76:29:d4:4b:7f:ed:0c: 2e:e2:02:38:aa:2a:94:45:78:a4:23:3b:27:6d:9a:bb:6c:a3: 29:cc:35:d0:48:cd:06:9b:13:1a:db:0f:0c:3b:80:12:4b:33: 80:43:13:f8:b4:f7:a5:dc:44:01:1a:8e:62:d6:da:07:92:94: 8b:e6:38:bb:e4:30:de:a3:bb:09:7b:25:b7:7c:29:b9:b2:7b: c8:6a:cd:f7:60:e2:29:87:ff:fc:5e:8c:19:8b:67:2c:33:c7: 32:6a:d1:92:16:5d:84:8e:59:94:c0:0f:b6:85:90:c7:51:cd: 73:d7:f6:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUwNzMxMTAvBgNVBAUTKDE3ODE3Q0I4Mjg5MjMxQjQ3MDdFOUQ1QjQwNkQ1OEFG Rjc5RDFFMDEwHhcNMjUwNDI0MTcyMjEzWhcNMjUwNTAxMTcyMjEzWjAYMRYwFAYD VQQDEw02ODBhNzM0NS1hOWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrgDPz/PaFEzUEjllWoKiEtB5LU4jO3lq0ZdApTz7hksvqm7utXE+5z8nnfj 1h7xuk9Bdr7/i3AR+blExXi3uCcCkILwc7QP/WCQXUpyY1n8rAqM0TnvGNVNDowc WAvsY4/YiS/Bi3qk7u88WTTIaX31Taw9yXTIqMIXBRxMiZ1F4idkhu/EPJ181ovB ffjiA93UMxTSNiklv3Hi8uAy4BNqbP1K7nzesQcZ5n4Rh09ikUGK/pQPFVYJdz5T TPuJnegDneVZbzUpirwJ7NDbWb6/PR2/fXwqIcr+rfRQnARUTdBlS3l6qhFRTGw1 bdwPOQXfnSozpWu2LqmKsb3fjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkR9DPw ZjUql7hYBd/hSAElw2U7MB8GA1UdIwQYMBaAFBeBfLgokjG0cH6dW0BtWK/3nR4B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTA3My80M0YxNjI2NDMz OTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01iUndmcDFiUUcxWXJfZWRI Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y0Rjh1Q2lTTWJSd2ZwMWJRRzFZcl9lZEhnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTA3My80M0YxNjI2NDMzOTUxMUU5QkZCMUMyMUFDNEY5QUUwMi9GNEY4dUNpU01i UndmcDFiUUcxWXJfZWRIZ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChBJ1lzzHKlaDGRtmi+w+KNlDOmcBtTtgFAxdo1vCWkNGaiEmry6wn 9ZPLZ2QErhEOD5KBqF4Qgfl/jFrSFm2wjWAqG3hP9Ji0V8SvsXPkk552S6C00qFt nX0X0I121vo4l2QhuyGO85KtLkqKxmJsODRhD6VsjUeLJpY4AsyPsJJn+ZiQbVy/ HnYp1Et/7Qwu4gI4qiqURXikIzsnbZq7bKMpzDXQSM0GmxMa2w8MO4ASSzOAQxP4 tPel3EQBGo5i1toHkpSL5ji75DDeo7sJeyW3fCm5snvIas33YOIph//8XowZi2cs M8cyatGSFl2EjlmUwA+2hZDHUc1z1/Zm -----END CERTIFICATE-----Generated at Sat Apr 26 08:45:07 2025 by rpki-client