$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft File: 4uYwZnXV9U0ge2eCqWx6qWex_JE.mft (raw, json) Hash identifier: 0Owin7Hl7bs/PK7pNwmF+KB+vi01t8p04tMGvddhi+w= Subject key identifier: C7:77:7D:D8:6B:F0:F8:35:13:52:68:C4:4F:7C:23:B1:10:72:84:B5 Authority key identifier: E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91 Certificate issuer: /CN=A91B8AC8/serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft Manifest number: 50 Signing time: Fri 25 Apr 2025 06:20:30 +0000 Manifest this update: Fri 25 Apr 2025 06:20:30 +0000 Manifest next update: Fri 02 May 2025 06:20:30 +0000 Files and hashes: 1: 4uYwZnXV9U0ge2eCqWx6qWex_JE.crl (hash: ricsTsfYSHWU2TQrVfDnQsHLeIiT6DLjhoWEHLrWTWY=) 2: 9074B02EB13D11EF9EFDE433C4F9AE02.roa (hash: +DamE3tU9Fo7eBYdyyuSzK/6/nm5KtgHW7yUMIG6MHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8AC8, serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91 Validity Not Before: Apr 25 06:20:30 2025 GMT Not After : May 2 06:20:30 2025 GMT Subject: CN=680b29ae-674a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:05:01:55:90:3d:24:e1:52:e5:0a:ef:b3:3e: 4f:c3:a4:00:36:8c:fc:10:34:17:24:f0:f1:03:a0: 3a:28:48:e5:74:02:28:78:e8:f2:98:76:66:f0:d7: 81:6f:5d:db:89:41:8d:61:31:a2:53:41:1d:f4:1d: 6a:55:1f:bf:90:83:a3:d7:97:89:57:52:02:ec:9f: 83:05:7c:76:da:47:a4:fe:d7:8e:c2:2d:89:84:86: 05:b2:41:a6:2b:1f:6b:5a:f9:c6:1c:1e:a5:5f:04: f4:8a:6b:e0:b0:e8:4c:5a:17:ae:c8:eb:fa:c9:dc: 39:74:25:e7:12:7e:32:23:7d:3d:b7:d8:78:4c:a2: ad:1f:0c:8f:1f:ec:92:57:f2:a6:ff:7d:2e:ae:9b: 48:5b:70:35:ff:e9:1c:91:88:04:70:c9:44:d2:7f: 74:46:4f:53:8f:d4:c3:37:87:dc:fa:50:f1:43:41: 33:a2:67:05:35:7f:65:8d:4d:a1:70:57:f8:65:39: 02:0f:04:d3:62:49:77:7b:46:42:a8:d5:69:0a:c7: 07:62:35:25:a3:b2:63:ab:06:2b:14:63:36:a5:64: 9e:6c:26:cb:6f:bb:78:63:7a:a9:e8:44:3f:08:0d: 4a:24:53:13:d3:fd:74:08:96:03:c1:37:85:cd:55: 85:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:77:7D:D8:6B:F0:F8:35:13:52:68:C4:4F:7C:23:B1:10:72:84:B5 X509v3 Authority Key Identifier: keyid:E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:41:f1:f6:c7:6d:56:69:b7:61:97:20:0f:16:29:4b:ec:b2: d1:be:ff:54:e8:71:68:bd:7f:51:f2:23:17:5c:36:75:2c:6c: bd:f7:74:ab:bd:ca:a5:e8:c1:f4:ce:88:5d:af:b8:e7:72:31: c4:dc:e7:87:f0:55:75:24:93:21:1c:55:f3:e4:5e:3e:96:c2: f2:ea:84:9f:82:cc:fa:a9:b4:61:cb:82:21:9e:50:dc:d5:6f: 72:64:7b:29:ee:8f:57:9f:4b:e1:06:b0:83:66:16:e0:c8:0b: 43:07:d4:99:fb:b4:d6:ca:9b:38:26:05:c3:56:fe:ba:7b:c3: ce:0b:78:92:60:ab:b5:1e:7d:1f:a2:34:8e:70:91:6b:e1:f6: c5:51:79:b8:f4:f8:5c:76:c5:6f:13:d6:9f:1b:09:0c:b5:00: 6e:a7:f5:47:74:09:84:8e:ce:26:52:6f:48:02:06:c1:21:c6: 4d:2c:5e:ec:e0:e8:77:ac:a3:22:3e:43:11:b9:85:79:15:3f: 10:82:01:60:3e:97:4d:89:03:df:17:a6:0f:cb:37:e9:c2:30: 1c:1b:09:4a:40:4d:c0:f4:6b:c7:f2:fc:8a:85:c4:d7:87:90: fd:8c:d8:ed:32:8d:84:42:74:71:b7:11:92:3d:54:80:b0:28: 36:db:b6:c7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEFDODExMC8GA1UEBRMoRTJFNjMwNjY3NUQ1RjU0RDIwN0I2NzgyQTk2QzdBQTk2 N0IxRkM5MTAeFw0yNTA0MjUwNjIwMzBaFw0yNTA1MDIwNjIwMzBaMBgxFjAUBgNV BAMTDTY4MGIyOWFlLTY3NGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgBQFVkD0k4VLlCu+zPk/DpAA2jPwQNBck8PEDoDooSOV0Aih46PKYdmbw14Fv XduJQY1hMaJTQR30HWpVH7+Qg6PXl4lXUgLsn4MFfHbaR6T+147CLYmEhgWyQaYr H2ta+cYcHqVfBPSKa+Cw6ExaF67I6/rJ3Dl0JecSfjIjfT232HhMoq0fDI8f7JJX 8qb/fS6um0hbcDX/6RyRiARwyUTSf3RGT1OP1MM3h9z6UPFDQTOiZwU1f2WNTaFw V/hlOQIPBNNiSXd7RkKo1WkKxwdiNSWjsmOrBisUYzalZJ5sJstvu3hjeqnoRD8I DUokUxPT/XQIlgPBN4XNVYWjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUx3d92Gvw +DUTUmjET3wjsRByhLUwHwYDVR0jBBgwFoAU4uYwZnXV9U0ge2eCqWx6qWex/JEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4QUM4L0U5QkUwNURDQjEz QzExRUZBQUY5RDczMUM0RjlBRTAyLzR1WXdablhWOVUwZ2UyZUNxV3g2cVdleF9K RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNHVZd1puWFY5VTBnZTJlQ3FXeDZxV2V4X0pFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 QUM4L0U5QkUwNURDQjEzQzExRUZBQUY5RDczMUM0RjlBRTAyLzR1WXdablhWOVUw Z2UyZUNxV3g2cVdleF9KRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFJB8fbHbVZpt2GXIA8WKUvsstG+/1TocWi9f1HyIxdcNnUsbL33dKu9 yqXowfTOiF2vuOdyMcTc54fwVXUkkyEcVfPkXj6WwvLqhJ+CzPqptGHLgiGeUNzV b3Jkeynuj1efS+EGsINmFuDIC0MH1Jn7tNbKmzgmBcNW/rp7w84LeJJgq7UefR+i NI5wkWvh9sVRebj0+Fx2xW8T1p8bCQy1AG6n9Ud0CYSOziZSb0gCBsEhxk0sXuzg 6HesoyI+QxG5hXkVPxCCAWA+l02JA98Xpg/LN+nCMBwbCUpATcD0a8fy/IqFxNeH kP2M2O0yjYRCdHG3EZI9VICwKDbbtsc= -----END CERTIFICATE-----Generated at Sat Apr 26 15:18:39 2025 by rpki-client