$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft File: 4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft (raw, json) Hash identifier: NiDoyijJ5A//qS5crbUMhiOsPyM2h9dnw5h6XY7rBqs= Subject key identifier: DF:09:60:60:C6:9E:7C:BF:DD:69:D8:23:19:2A:6C:91:19:48:77:D5 Authority key identifier: E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6 Certificate issuer: /CN=A91BAE1C/serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6 Certificate serial: 0365 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft Manifest number: 0362 Signing time: Fri 25 Apr 2025 00:43:16 +0000 Manifest this update: Fri 25 Apr 2025 00:43:15 +0000 Manifest next update: Fri 02 May 2025 00:43:15 +0000 Files and hashes: 1: 4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl (hash: QX7ZcLZaUKkBNnTktm+ZU4AkTbUSjrRVl63idAzW2Qg=) 2: 4BD764E8AA6511EC9A354C33C4F9AE02.roa (hash: SdiEw5/7A1+mSQhjRwF+90L+XCu7NDNES7xMleeOJcw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 869 (0x365) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAE1C, serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6 Validity Not Before: Apr 25 00:43:15 2025 GMT Not After : May 2 00:43:15 2025 GMT Subject: CN=680adaa4-b55e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:52:e6:1e:5d:92:3b:74:44:d3:3f:aa:c2:21: 81:cc:06:1b:b1:b0:a4:24:0d:eb:53:ea:f8:8f:50: 06:c0:25:78:b9:ec:b4:4e:e3:12:a1:64:8b:e1:58: 95:01:f6:4e:82:51:38:19:74:8d:76:c3:53:34:c2: de:12:a3:11:2e:18:4d:04:7c:ce:4c:c5:20:c7:10: 58:46:ee:81:60:f8:36:6b:49:90:7f:ed:b5:32:79: f9:53:79:c0:6b:c7:32:59:dd:bf:09:82:df:3d:c7: ca:3f:d1:78:29:d0:d5:d8:da:8f:9b:70:dc:04:87: 3e:59:39:ff:83:f3:0c:72:c6:0e:3d:e6:c3:c0:d9: 60:e2:5e:10:43:5f:40:9b:20:8e:7d:62:eb:81:cd: f7:b1:e9:fb:dd:26:30:9c:fc:16:50:75:37:67:cd: 97:50:41:dc:ab:56:ac:3c:38:93:ea:30:54:06:4d: 9c:2f:56:ef:a9:09:61:06:01:05:29:c3:7e:3e:b6: a4:95:de:8f:b0:14:be:31:e0:bf:8b:49:f2:7e:9e: 52:ec:69:83:4d:30:7f:e6:a6:75:25:23:c6:de:f0: 31:8b:48:80:36:f3:9d:d8:70:89:96:3a:9a:18:77: 51:fc:3d:c9:ad:b2:26:62:06:7f:1a:c0:19:05:5d: 9e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:09:60:60:C6:9E:7C:BF:DD:69:D8:23:19:2A:6C:91:19:48:77:D5 X509v3 Authority Key Identifier: keyid:E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:2e:29:72:c9:4b:62:41:dc:47:b9:1f:42:a4:65:0b:c6:3e: 70:f3:6f:b9:cd:24:b2:6c:23:dc:b7:49:fe:3a:fc:68:6a:a3: 45:85:45:61:e4:7a:0b:07:cc:c9:2e:bd:98:51:bd:65:ba:83: da:c2:71:e5:2b:8a:ca:8a:a6:75:4e:8a:30:79:fa:1d:21:22: ce:f1:72:be:c2:95:55:73:b2:a5:b7:27:d1:97:76:4e:30:45: b0:3c:d8:8d:3c:cb:7c:bb:a2:52:05:ba:40:b6:55:0d:eb:5b: 7e:25:7b:12:25:a3:37:07:d2:98:a7:d8:89:9a:76:12:01:7b: 26:af:b9:1c:ae:81:08:c2:ef:db:b7:66:8a:14:92:2b:81:2f: 5b:5b:61:1f:75:14:26:c3:cf:83:75:56:5b:0b:c7:3f:01:bd: 42:87:f3:fd:4f:28:66:ff:78:3e:6f:0b:47:62:2f:9a:20:6d: 84:c4:e1:f0:dd:e1:f2:b0:ac:da:a4:5f:14:40:0b:7d:fd:24: 93:c6:c5:9a:f4:17:33:4c:20:2a:65:2e:cc:34:b7:89:ff:dc: b1:69:63:e7:89:cd:bf:95:f8:d4:61:0c:a1:a1:11:9d:9d:01: d2:97:95:a0:a5:01:26:28:dd:84:70:75:59:67:27:99:a4:b6: 83:e4:ec:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFMUMxMTAvBgNVBAUTKEUyRTA0M0E5MzJFQ0UwNDM5RTJBOEVGMURDNDA2NEQz MjE0QzI3RTYwHhcNMjUwNDI1MDA0MzE1WhcNMjUwNTAyMDA0MzE1WjAYMRYwFAYD VQQDEw02ODBhZGFhNC1iNTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVLmHl2SO3RE0z+qwiGBzAYbsbCkJA3rU+r4j1AGwCV4uey0TuMSoWSL4ViV AfZOglE4GXSNdsNTNMLeEqMRLhhNBHzOTMUgxxBYRu6BYPg2a0mQf+21Mnn5U3nA a8cyWd2/CYLfPcfKP9F4KdDV2NqPm3DcBIc+WTn/g/MMcsYOPebDwNlg4l4QQ19A myCOfWLrgc33sen73SYwnPwWUHU3Z82XUEHcq1asPDiT6jBUBk2cL1bvqQlhBgEF KcN+Prakld6PsBS+MeC/i0nyfp5S7GmDTTB/5qZ1JSPG3vAxi0iANvOd2HCJljqa GHdR/D3JrbImYgZ/GsAZBV2eXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8JYGDG nny/3WnYIxkqbJEZSHfVMB8GA1UdIwQYMBaAFOLgQ6ky7OBDniqO8dxAZNMhTCfm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUUxQy9GMDc0NzNBRUFB NjIxMUVDQjhFMTE4MzJDNEY5QUUwMi80dUJEcVRMczRFT2VLbzd4M0VCazB5Rk1K LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR1QkRxVExzNEVPZUtvN3gzRUJrMHlGTUotWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUUxQy9GMDc0NzNBRUFBNjIxMUVDQjhFMTE4MzJDNEY5QUUwMi80dUJEcVRMczRF T2VLbzd4M0VCazB5Rk1KLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJLilyyUtiQdxHuR9CpGULxj5w82+5zSSybCPct0n+OvxoaqNFhUVh 5HoLB8zJLr2YUb1luoPawnHlK4rKiqZ1ToowefodISLO8XK+wpVVc7KltyfRl3ZO MEWwPNiNPMt8u6JSBbpAtlUN61t+JXsSJaM3B9KYp9iJmnYSAXsmr7kcroEIwu/b t2aKFJIrgS9bW2EfdRQmw8+DdVZbC8c/Ab1Ch/P9Tyhm/3g+bwtHYi+aIG2ExOHw 3eHysKzapF8UQAt9/SSTxsWa9BczTCAqZS7MNLeJ/9yxaWPnic2/lfjUYQyhoRGd nQHSl5WgpQEmKN2EcHVZZyeZpLaD5OxG -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:47 2025 by rpki-client