$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft File: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft (raw, json) Hash identifier: 0OmJL6WpfoBaOtaYZkYb0QCp0ktEQcN84dQP5OgAyPs= Subject key identifier: 49:6E:37:53:CE:F8:C1:68:82:F2:0C:FA:F6:07:D1:5B:0C:53:8D:28 Authority key identifier: E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4 Certificate issuer: /CN=A91B7F47/serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4 Certificate serial: 0D7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft Manifest number: 0D62 Signing time: Thu 24 Apr 2025 17:57:32 +0000 Manifest this update: Thu 24 Apr 2025 17:57:32 +0000 Manifest next update: Thu 01 May 2025 17:57:32 +0000 Files and hashes: 1: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl (hash: ZVWuxwrsOZbTH7F3GY5QUexumlmVuVZhXtLbdH797Io=) 2: 4E98421A162311EB90D1657AC4F9AE02.roa (hash: 1jUxwWAX6KnigOFs20Vg85yLzTjyxdO59rmGUv5qs2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:57:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3451 (0xd7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7F47, serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4 Validity Not Before: Apr 24 17:57:32 2025 GMT Not After : May 1 17:57:32 2025 GMT Subject: CN=680a7b8c-c923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:15:c7:ac:2a:da:aa:da:c8:f3:04:77:eb:9c: a4:c4:8a:8f:98:13:c3:15:03:63:d5:96:b7:8f:5b: fb:6c:60:70:01:1a:42:0a:83:89:8e:42:31:56:23: 5f:f1:e7:a8:c2:47:30:0b:84:47:8c:0d:ad:ec:14: ea:c5:76:77:15:61:29:c3:5a:77:91:e6:54:c6:14: 0a:ff:d6:e7:f6:32:05:4b:4b:c9:0a:b1:f4:af:a8: 4a:ae:3f:c0:06:15:de:de:2d:f8:65:94:b4:83:e6: d1:96:6d:dc:6b:00:10:f2:a5:ec:7e:84:d8:89:50: 2a:9e:c5:23:9f:07:ef:5c:35:c2:3a:7d:da:fb:8b: 2b:28:84:f3:ba:9b:9f:66:19:03:23:64:0c:4c:e1: 94:1a:cb:bd:48:62:78:b5:d2:e1:6c:60:20:b3:61: e2:81:41:15:3e:f3:da:ea:0a:e3:eb:74:0b:5b:2b: bc:f1:ea:e6:cc:91:8c:71:c2:71:b6:9d:87:89:ea: d6:01:05:0b:24:e5:20:74:d2:35:64:26:5e:9f:ae: 0a:07:3d:b2:f7:37:71:48:5d:8e:76:91:7a:79:9c: 88:7f:cf:fc:cd:46:5b:09:64:d6:f4:0d:22:2a:bf: c8:f0:21:d0:7e:d2:65:46:8b:3f:93:52:13:7c:07: 02:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:6E:37:53:CE:F8:C1:68:82:F2:0C:FA:F6:07:D1:5B:0C:53:8D:28 X509v3 Authority Key Identifier: keyid:E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:37:5e:4c:0a:ec:27:53:ae:5a:e5:e4:96:3d:2d:e5:06:6b: 4d:2e:db:7d:c2:8d:c0:58:e4:49:f1:cc:9e:03:a6:1f:d5:60: c4:63:3e:99:ed:49:fc:9b:e6:89:f6:ff:a9:e9:06:1d:5f:06: ff:9f:6a:17:bc:95:3b:57:21:26:4e:ae:de:35:f6:95:4e:5d: f5:7c:84:01:7b:5a:81:5e:08:4e:1d:0f:42:ff:5b:d0:60:20: f8:57:fe:42:50:40:b2:f8:9c:da:f2:05:6f:72:ef:4c:c3:9c: 0a:35:1f:9a:37:e4:3e:a3:90:b5:0f:c9:50:db:c9:8a:e3:a3: 28:08:86:52:a0:14:89:8f:dd:36:ef:d2:a6:40:59:9c:60:5d: 86:b9:60:49:52:e9:a1:f0:e4:5c:82:ac:de:b5:d5:96:dc:b6: 53:b8:b8:fe:e8:9a:ed:94:c6:bb:68:a6:77:eb:86:fc:45:b3: e4:a6:6a:83:33:07:a4:a9:b1:2c:08:16:e6:c0:39:e5:1c:d4: a9:17:c7:68:7f:af:87:3f:03:e3:25:5c:bf:d4:17:76:96:13: 88:0f:42:c3:91:d0:bf:95:75:f2:7d:7e:4a:6e:4d:0a:87:ac: 66:ba:5b:7c:17:a3:4b:54:e5:cd:80:a4:f9:03:ae:a4:7f:e5: e7:2b:d1:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdGNDcxMTAvBgNVBAUTKEUzMEE0Q0RERjZDMjY5QUNCQTM5Q0E1OEFBOTU5MkQ4 OTg2NDAxRjQwHhcNMjUwNDI0MTc1NzMyWhcNMjUwNTAxMTc1NzMyWjAYMRYwFAYD VQQDEw02ODBhN2I4Yy1jOTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBXHrCraqtrI8wR365ykxIqPmBPDFQNj1Za3j1v7bGBwARpCCoOJjkIxViNf 8eeowkcwC4RHjA2t7BTqxXZ3FWEpw1p3keZUxhQK/9bn9jIFS0vJCrH0r6hKrj/A BhXe3i34ZZS0g+bRlm3cawAQ8qXsfoTYiVAqnsUjnwfvXDXCOn3a+4srKITzupuf ZhkDI2QMTOGUGsu9SGJ4tdLhbGAgs2HigUEVPvPa6grj63QLWyu88ermzJGMccJx tp2HierWAQULJOUgdNI1ZCZen64KBz2y9zdxSF2OdpF6eZyIf8/8zUZbCWTW9A0i Kr/I8CHQftJlRos/k1ITfAcCyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEluN1PO +MFogvIM+vYH0VsMU40oMB8GA1UdIwQYMBaAFOMKTN32wmmsujnKWKqVktiYZAH0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0Y0Ny8zMzBBMDA4Q0NF NTkxMUU5QTA5MDgyODdDNEY5QUUwMi80d3BNM2ZiQ2FheTZPY3BZcXBXUzJKaGtB ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR3cE0zZmJDYWF5Nk9jcFlxcFdTMkpoa0FmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0Y0Ny8zMzBBMDA4Q0NFNTkxMUU5QTA5MDgyODdDNEY5QUUwMi80d3BNM2ZiQ2Fh eTZPY3BZcXBXUzJKaGtBZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxN15MCuwnU65a5eSWPS3lBmtNLtt9wo3AWORJ8cyeA6Yf1WDEYz6Z 7Un8m+aJ9v+p6QYdXwb/n2oXvJU7VyEmTq7eNfaVTl31fIQBe1qBXghOHQ9C/1vQ YCD4V/5CUECy+Jza8gVvcu9Mw5wKNR+aN+Q+o5C1D8lQ28mK46MoCIZSoBSJj902 79KmQFmcYF2GuWBJUumh8ORcgqzetdWW3LZTuLj+6JrtlMa7aKZ364b8RbPkpmqD MwekqbEsCBbmwDnlHNSpF8dof6+HPwPjJVy/1Bd2lhOID0LDkdC/lXXyfX5Kbk0K h6xmult8F6NLVOXNgKT5A66kf+XnK9Ec -----END CERTIFICATE-----Generated at Sat Apr 26 15:03:03 2025 by rpki-client