$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft File: 7TFghH3ErtktjFnRmEZbHL7y3yI.mft (raw, json) Hash identifier: UU45KIiErXwE3sdFTFAboQa2yoF3NtLPnRC0SNbWGGg= Subject key identifier: C1:AF:F8:6A:70:24:40:5F:F0:97:72:78:0E:8A:17:AB:D4:B0:9B:5D Authority key identifier: ED:31:60:84:7D:C4:AE:D9:2D:8C:59:D1:98:46:5B:1C:BE:F2:DF:22 Certificate issuer: /CN=A91B6C85/serialNumber=ED3160847DC4AED92D8C59D198465B1CBEF2DF22 Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft Manifest number: A4 Signing time: Fri 25 Apr 2025 05:11:12 +0000 Manifest this update: Fri 25 Apr 2025 05:11:11 +0000 Manifest next update: Fri 02 May 2025 05:11:11 +0000 Files and hashes: 1: 7TFghH3ErtktjFnRmEZbHL7y3yI.crl (hash: uGCTtPaiHqDI4z+bHEEpb1mUrEtZ2uUVuTthj4TvZC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.crl rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:11:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6C85, serialNumber=ED3160847DC4AED92D8C59D198465B1CBEF2DF22 Validity Not Before: Apr 25 05:11:11 2025 GMT Not After : May 2 05:11:11 2025 GMT Subject: CN=680b1970-6414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e9:a2:f5:b0:04:27:b3:f1:10:0e:e6:f1:f4: 1d:f6:d9:b0:6e:73:d5:29:d0:39:d1:de:98:07:75: 45:68:89:2c:fa:e5:77:6c:78:04:d7:c3:ae:50:e3: 84:74:75:7c:77:d5:b6:87:08:e8:b5:20:1d:12:d6: 89:5b:50:db:35:15:7c:ae:e9:3c:27:14:ba:47:1b: cd:ad:62:29:ec:42:7c:24:4e:67:55:aa:a6:8d:e6: 2f:5a:d9:d9:25:24:15:f7:02:26:e5:60:e7:19:95: ff:b2:ae:cd:e2:ff:42:7d:71:ec:7e:40:9e:c4:f1: 22:57:f8:e5:0a:d6:a3:c8:29:b6:4d:6e:2d:6a:fa: 8d:86:06:04:b8:6c:cd:39:8c:80:44:d7:2b:0e:27: f6:cc:1e:e5:a6:88:d2:b4:58:17:62:69:45:8a:ee: 5f:e4:0d:ff:13:52:e7:d6:66:03:92:43:3a:86:dd: 87:67:fd:2c:7b:9e:73:69:2a:7c:fd:ec:e3:b9:00: 4b:a3:66:18:d9:d5:1f:6b:4f:f2:a2:a6:6d:b9:37: 70:35:53:ab:a2:20:a2:35:64:07:78:e5:1c:42:c4: d4:a0:15:d2:a8:75:25:66:8b:ef:66:6f:63:91:44: 1e:23:6b:4f:d7:4a:93:29:f8:4a:f1:cb:3c:fa:f5: ed:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AF:F8:6A:70:24:40:5F:F0:97:72:78:0E:8A:17:AB:D4:B0:9B:5D X509v3 Authority Key Identifier: keyid:ED:31:60:84:7D:C4:AE:D9:2D:8C:59:D1:98:46:5B:1C:BE:F2:DF:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:01:5e:48:2c:f7:24:18:a2:ef:14:75:28:3a:51:5f:e3:b1: 8d:19:6d:49:3e:60:94:fb:70:4a:39:24:36:df:1e:bd:11:b5: 0f:86:21:59:eb:5c:13:7a:06:0a:c0:7b:b5:46:c7:fb:ed:d4: 25:d4:bd:6a:ca:2e:39:1b:81:75:8f:7f:b4:7d:71:20:4b:0d: 23:c8:d9:07:01:4a:f3:11:6f:b2:a4:cd:29:e3:1a:e4:c9:8a: a8:99:98:f8:1e:3e:8d:f2:53:2d:b5:d5:06:c8:21:81:96:f5: 5d:cb:58:1a:7f:8f:10:f1:7b:2a:8f:7b:50:64:ff:96:cd:b5: 75:2f:96:a8:ab:d4:e8:07:26:b1:ed:47:60:95:a8:80:a4:1b: 45:91:d2:ef:a7:f3:8d:14:2c:ad:30:eb:e9:ba:6a:a3:b9:a2: c6:5a:1c:10:68:d0:d0:71:64:b8:1c:8d:92:93:82:60:b1:34: c0:fa:4e:76:40:a7:f6:ee:d8:f2:ba:c5:12:9d:d6:57:95:93: 00:93:0a:c3:9f:94:70:44:3b:44:cf:37:00:06:ca:2d:c6:4c: 24:9c:ee:84:05:31:f7:03:7f:28:69:4c:10:b5:fb:e3:51:29: 39:1c:f9:6b:25:68:1d:b4:e1:4b:ce:af:ac:25:c1:4b:a1:b9: 65:86:63:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZDODUxMTAvBgNVBAUTKEVEMzE2MDg0N0RDNEFFRDkyRDhDNTlEMTk4NDY1QjFD QkVGMkRGMjIwHhcNMjUwNDI1MDUxMTExWhcNMjUwNTAyMDUxMTExWjAYMRYwFAYD VQQDEw02ODBiMTk3MC02NDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+mi9bAEJ7PxEA7m8fQd9tmwbnPVKdA50d6YB3VFaIks+uV3bHgE18OuUOOE dHV8d9W2hwjotSAdEtaJW1DbNRV8ruk8JxS6RxvNrWIp7EJ8JE5nVaqmjeYvWtnZ JSQV9wIm5WDnGZX/sq7N4v9CfXHsfkCexPEiV/jlCtajyCm2TW4tavqNhgYEuGzN OYyARNcrDif2zB7lpojStFgXYmlFiu5f5A3/E1Ln1mYDkkM6ht2HZ/0se55zaSp8 /ezjuQBLo2YY2dUfa0/yoqZtuTdwNVOroiCiNWQHeOUcQsTUoBXSqHUlZovvZm9j kUQeI2tP10qTKfhK8cs8+vXtiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGv+Gpw JEBf8JdyeA6KF6vUsJtdMB8GA1UdIwQYMBaAFO0xYIR9xK7ZLYxZ0ZhGWxy+8t8i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkM4NS8yODcwN0NCRTI4 ODYxMUVGOEYxRkIxODVDNEY5QUUwMi83VEZnaEgzRXJ0a3RqRm5SbUVaYkhMN3kz eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdURmdoSDNFcnRrdGpGblJtRVpiSEw3eTN5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkM4NS8yODcwN0NCRTI4ODYxMUVGOEYxRkIxODVDNEY5QUUwMi83VEZnaEgzRXJ0 a3RqRm5SbUVaYkhMN3kzeUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcAV5ILPckGKLvFHUoOlFf47GNGW1JPmCU+3BKOSQ23x69EbUPhiFZ 61wTegYKwHu1Rsf77dQl1L1qyi45G4F1j3+0fXEgSw0jyNkHAUrzEW+ypM0p4xrk yYqomZj4Hj6N8lMttdUGyCGBlvVdy1gaf48Q8Xsqj3tQZP+WzbV1L5aoq9ToByax 7UdglaiApBtFkdLvp/ONFCytMOvpumqjuaLGWhwQaNDQcWS4HI2Sk4JgsTTA+k52 QKf27tjyusUSndZXlZMAkwrDn5RwRDtEzzcABsotxkwknO6EBTH3A38oaUwQtfvj USk5HPlrJWgdtOFLzq+sJcFLobllhmNk -----END CERTIFICATE-----Generated at Sat Apr 26 04:37:32 2025 by rpki-client