$ rpki-client -vvf rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft File: 4OynvFsloMo3TZqDzEz5DdbPIgk.mft (raw, json) Hash identifier: NCKHJ6w5TrGEqf5wIzr1sKj7Zj1PhhPsj/seGPZIX3g= Subject key identifier: 9D:EC:87:67:56:D0:71:7D:4C:EC:E1:89:68:89:B7:16:51:93:A7:C7 Authority key identifier: E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 Certificate issuer: /CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft Manifest number: 0147 Signing time: Fri 25 Apr 2025 03:25:35 +0000 Manifest this update: Fri 25 Apr 2025 03:25:34 +0000 Manifest next update: Fri 02 May 2025 03:25:34 +0000 Files and hashes: 1: 4OynvFsloMo3TZqDzEz5DdbPIgk.crl (hash: iusgZYHsUqwMH+4NIrFVnBYpi05y33I2oPNVcL9ed5Y=) 2: FBCA5E628A4E11EE8EFFA44BC4F9AE02.roa (hash: n7d+wfVovpgFh/VPuHK0Be+tZJiAokXkxVBH6z58Cdo=) 3: 23E0203034AF11EE90E6263DC4F9AE02.roa (hash: qRwojUTlxnLhuw/Mk800h2tw73R4wHeoNMLoVaIWLSQ=) 4: FE53F0DE34AA11EE85FF0735C4F9AE02.roa (hash: FSryM40tOFsx9/9SakfMh/QfDHk+qmxC9WGqNR/nxQA=) 5: 2343647034AF11EE90E6263DC4F9AE02.roa (hash: O7wU5uPOsDFh8TlK1r/cSTqhuO+kftwlxz4zNibCfJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C74B5, serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Validity Not Before: Apr 25 03:25:34 2025 GMT Not After : May 2 03:25:34 2025 GMT Subject: CN=680b00ae-791f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:78:69:45:09:98:59:a6:bb:c2:b8:28:fb:13: 13:ec:1f:c2:21:1a:10:14:17:55:bb:0a:e2:48:37: f8:ee:fb:af:73:8b:84:b2:e4:7d:f7:cf:91:a4:ec: ad:cc:3b:6f:1f:b7:2a:d7:45:04:da:b4:9f:72:eb: ac:c5:75:3e:28:7f:e7:b4:b9:04:cc:8f:c8:7c:70: 98:ca:33:aa:07:2a:64:83:79:f8:0e:c4:5d:04:13: 28:a4:fd:a9:95:da:c7:27:db:cc:94:fa:bf:b8:15: b5:90:13:d1:9b:f1:6f:2a:4f:6f:f9:01:a8:c1:ba: 17:16:74:0b:91:f9:87:0f:b2:62:4b:95:22:47:69: b1:95:d5:d5:33:ed:3a:85:34:d1:81:ea:e4:e4:ba: 95:69:84:c5:9b:57:d9:91:0d:54:56:43:80:de:2e: 05:a4:9e:7c:a6:84:76:81:4e:44:b1:5d:66:d7:70: 3f:60:3e:65:e5:c0:e7:09:fe:bc:9c:38:16:90:a5: 6e:c4:ac:d1:4f:f0:f0:b9:6b:c5:3f:25:4b:3d:1d: 51:04:cc:37:9a:2f:5f:73:1c:05:ac:98:9d:c1:df: 98:6a:29:40:95:38:94:d9:ce:54:bf:9f:64:4b:3b: 03:96:df:5b:7a:24:fc:b5:f3:db:47:60:d2:aa:41: 9f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:EC:87:67:56:D0:71:7D:4C:EC:E1:89:68:89:B7:16:51:93:A7:C7 X509v3 Authority Key Identifier: keyid:E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:1e:50:ed:ae:23:f1:b7:af:ed:af:0c:19:31:a2:7c:0a:af: e1:72:65:dc:49:c9:67:60:36:83:45:c3:de:d9:18:65:a5:50: ea:28:da:6f:5e:42:a4:ce:de:1e:6d:83:bd:11:70:99:d8:30: b0:6a:3a:3a:d7:08:08:be:80:b7:3b:b7:f1:8f:e5:c3:4b:0d: 13:9c:25:19:6d:e5:0d:6a:a2:8f:c6:1b:11:60:16:5f:71:09: e8:8f:b3:de:ad:01:97:11:6c:83:53:ce:7c:73:c8:48:19:5d: c8:56:4e:4b:89:30:7b:01:26:9a:37:57:a6:0f:17:ad:6b:57: a0:0e:8f:fe:75:90:aa:2a:a5:95:a2:8c:3f:2d:83:f5:e0:bf: 74:ab:b9:9f:be:11:df:16:5a:00:86:28:6b:c9:86:a0:85:95: aa:a7:7c:1a:58:a2:ea:ee:f4:4e:e1:ff:20:ca:44:eb:dd:4e: 40:29:71:04:19:54:e5:61:26:9c:61:99:aa:28:4f:d9:4b:d9: cb:b5:7d:e1:cb:a4:0a:fa:a3:94:d0:e4:5e:9c:19:60:32:41: ad:0a:f3:e9:11:cb:bd:0a:e5:df:c5:a6:e3:9b:b7:82:c8:be: 5f:81:ba:20:ab:84:18:c3:10:52:80:f0:98:68:57:da:b6:4c: 39:51:9c:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0QjUxMTAvBgNVBAUTKEUwRUNBN0JDNUIyNUEwQ0EzNzREOUE4M0NDNENGOTBE RDZDRjIyMDkwHhcNMjUwNDI1MDMyNTM0WhcNMjUwNTAyMDMyNTM0WjAYMRYwFAYD VQQDEw02ODBiMDBhZS03OTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXhpRQmYWaa7wrgo+xMT7B/CIRoQFBdVuwriSDf47vuvc4uEsuR998+RpOyt zDtvH7cq10UE2rSfcuusxXU+KH/ntLkEzI/IfHCYyjOqBypkg3n4DsRdBBMopP2p ldrHJ9vMlPq/uBW1kBPRm/FvKk9v+QGowboXFnQLkfmHD7JiS5UiR2mxldXVM+06 hTTRgerk5LqVaYTFm1fZkQ1UVkOA3i4FpJ58poR2gU5EsV1m13A/YD5l5cDnCf68 nDgWkKVuxKzRT/DwuWvFPyVLPR1RBMw3mi9fcxwFrJidwd+YailAlTiU2c5Uv59k SzsDlt9beiT8tfPbR2DSqkGfpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3sh2dW 0HF9TOzhiWiJtxZRk6fHMB8GA1UdIwQYMBaAFODsp7xbJaDKN02ag8xM+Q3WzyIJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzRCNS85ODA0MzU2RTM0 QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9NbzNUWnFEekV6NURkYlBJ Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRPeW52RnNsb01vM1RacUR6RXo1RGRiUElnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzRCNS85ODA0MzU2RTM0QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9N bzNUWnFEekV6NURkYlBJZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8HlDtriPxt6/trwwZMaJ8Cq/hcmXcSclnYDaDRcPe2RhlpVDqKNpv XkKkzt4ebYO9EXCZ2DCwajo61wgIvoC3O7fxj+XDSw0TnCUZbeUNaqKPxhsRYBZf cQnoj7PerQGXEWyDU858c8hIGV3IVk5LiTB7ASaaN1emDxeta1egDo/+dZCqKqWV oow/LYP14L90q7mfvhHfFloAhihryYaghZWqp3waWKLq7vRO4f8gykTr3U5AKXEE GVTlYSacYZmqKE/ZS9nLtX3hy6QK+qOU0ORenBlgMkGtCvPpEcu9CuXfxabjm7eC yL5fgbogq4QYwxBSgPCYaFfatkw5UZxR -----END CERTIFICATE-----Generated at Sat Apr 26 13:04:16 2025 by rpki-client