$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft File: tii4qSXEXjrDpxvkEUZimYv0s-A.mft (raw, json) Hash identifier: VuU6yVqw9Jio6zMurIp3GuC6PQbbCqOUzK8/70ouEUg= Subject key identifier: 4E:33:A8:80:7E:B9:FF:5E:56:0B:8A:25:7D:28:0A:67:29:7D:E8:46 Authority key identifier: B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0 Certificate issuer: /CN=A91CA8EA/serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0 Certificate serial: 0487 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft Manifest number: 047B Signing time: Thu 24 Apr 2025 23:51:48 +0000 Manifest this update: Thu 24 Apr 2025 23:51:48 +0000 Manifest next update: Thu 01 May 2025 23:51:48 +0000 Files and hashes: 1: tii4qSXEXjrDpxvkEUZimYv0s-A.crl (hash: Eun0/muxqY0XQ352cq/RL6OLTkxFES7QVjTc7Ky70ao=) 2: 14A07422D45E11EEB37CB639C4F9AE02.roa (hash: jYyif5XzvidlG1gkLHEZCka6sLKHMVLL3uaZPQUQSWU=) 3: 207388F2D45E11EE8D29793EC4F9AE02.roa (hash: aIqnIQInPJrCMj5K0+1zGOgCOM0xLmrh4KbjkSzgqVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:51:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1159 (0x487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA8EA, serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0 Validity Not Before: Apr 24 23:51:48 2025 GMT Not After : May 1 23:51:48 2025 GMT Subject: CN=680ace94-498a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8d:18:6a:ea:b1:f6:37:b1:7c:7e:a2:37:83: 1e:ea:08:06:0c:6f:87:ca:51:ce:5d:5b:6c:a8:c5: 56:a9:10:46:00:53:6c:4c:94:67:31:5d:43:c2:83: 9c:c2:12:47:5c:a5:1f:f0:b8:65:3c:bd:02:f9:68: 74:1c:ac:90:3f:dd:af:c4:49:c8:d4:10:e6:85:13: bf:45:92:67:d4:07:9f:99:c9:4d:8f:36:da:7a:ee: b7:56:21:e4:e1:6b:f0:34:4e:0f:2e:8b:ec:a1:de: 2c:ff:54:9a:2e:ca:db:35:8c:0b:dd:91:26:bc:37: 5e:05:f0:4a:d7:5f:ee:8b:b0:62:39:65:dd:68:50: 7a:25:a7:11:9a:40:5b:c7:23:bf:72:cf:65:93:e6: f3:1b:e7:37:76:3e:31:1e:2b:c7:4e:f0:96:d2:d4: 1a:da:16:8e:ea:3a:98:0d:c8:f4:61:1b:53:61:23: 6a:53:4c:ba:4c:49:26:b6:30:67:e9:ef:6e:93:49: ea:37:34:36:21:95:6f:72:04:60:dd:e2:90:c8:5f: d0:16:5e:e1:f0:0f:4b:41:3d:25:cc:de:6d:be:3f: f6:65:31:23:1e:d6:1c:c6:3e:03:12:ea:c9:d1:2e: 01:9d:2d:c7:64:92:fd:00:3c:a4:ce:40:5b:6f:36: 7a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:33:A8:80:7E:B9:FF:5E:56:0B:8A:25:7D:28:0A:67:29:7D:E8:46 X509v3 Authority Key Identifier: keyid:B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:60:82:8e:d7:33:7b:23:27:a7:0e:47:15:61:be:e7:ec:e2: 82:df:ee:5f:ff:34:57:14:fc:9c:17:55:67:f3:29:6e:14:64: ea:07:58:15:3c:52:97:07:fc:5a:0f:fa:78:20:3e:ad:8d:82: bd:d9:cb:f1:28:9c:97:ff:6f:ff:44:51:e3:a3:cd:41:bd:da: 5c:96:ae:b8:36:3c:d9:67:bb:8e:2f:33:8d:02:14:ca:32:fa: d6:04:15:4b:3f:37:7a:d6:04:36:61:08:97:fd:67:b1:d5:0a: 80:81:38:d1:93:f9:85:fa:ed:ed:17:7e:56:1f:23:8f:40:9d: 1f:ca:ec:11:0e:5a:ff:b4:f9:95:08:ef:14:20:54:03:8b:d4: bd:b3:b8:f5:00:c0:aa:94:5e:73:4c:c5:64:f3:9c:35:39:86: 46:f8:bf:1f:88:d7:1b:35:e4:c5:d2:44:37:70:9e:27:7d:7b: 60:2a:61:71:0c:95:56:fb:08:3f:7f:26:58:d8:c8:86:3d:53: 41:e6:9d:a1:b6:91:22:e2:9b:56:1f:29:cc:9c:be:36:d6:04: fb:b8:b2:3e:76:63:34:e7:8a:3e:d1:ea:ec:1c:ee:0d:78:49: c5:f9:29:f8:3c:92:e5:80:89:ec:fe:19:8a:1e:e0:d1:74:e4: cc:27:7c:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E4RUExMTAvBgNVBAUTKEI2MjhCOEE5MjVDNDVFM0FDM0E3MUJFNDExNDY2Mjk5 OEJGNEIzRTAwHhcNMjUwNDI0MjM1MTQ4WhcNMjUwNTAxMjM1MTQ4WjAYMRYwFAYD VQQDEw02ODBhY2U5NC00OThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyY0Yauqx9jexfH6iN4Me6ggGDG+HylHOXVtsqMVWqRBGAFNsTJRnMV1DwoOc whJHXKUf8LhlPL0C+Wh0HKyQP92vxEnI1BDmhRO/RZJn1AefmclNjzbaeu63ViHk 4WvwNE4PLovsod4s/1SaLsrbNYwL3ZEmvDdeBfBK11/ui7BiOWXdaFB6JacRmkBb xyO/cs9lk+bzG+c3dj4xHivHTvCW0tQa2haO6jqYDcj0YRtTYSNqU0y6TEkmtjBn 6e9uk0nqNzQ2IZVvcgRg3eKQyF/QFl7h8A9LQT0lzN5tvj/2ZTEjHtYcxj4DEurJ 0S4BnS3HZJL9ADykzkBbbzZ6jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4zqIB+ uf9eVguKJX0oCmcpfehGMB8GA1UdIwQYMBaAFLYouKklxF46w6cb5BFGYpmL9LPg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQThFQS9EOENBMTNDMjQw NDkxMUVDOUI2RUZFN0JDNEY5QUUwMi90aWk0cVNYRVhqckRweHZrRVVaaW1ZdjBz LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpaTRxU1hFWGpyRHB4dmtFVVppbVl2MHMtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QThFQS9EOENBMTNDMjQwNDkxMUVDOUI2RUZFN0JDNEY5QUUwMi90aWk0cVNYRVhq ckRweHZrRVVaaW1ZdjBzLUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8YIKO1zN7IyenDkcVYb7n7OKC3+5f/zRXFPycF1Vn8yluFGTqB1gV PFKXB/xaD/p4ID6tjYK92cvxKJyX/2//RFHjo81Bvdpclq64NjzZZ7uOLzONAhTK MvrWBBVLPzd61gQ2YQiX/Wex1QqAgTjRk/mF+u3tF35WHyOPQJ0fyuwRDlr/tPmV CO8UIFQDi9S9s7j1AMCqlF5zTMVk85w1OYZG+L8fiNcbNeTF0kQ3cJ4nfXtgKmFx DJVW+wg/fyZY2MiGPVNB5p2htpEi4ptWHynMnL421gT7uLI+dmM054o+0ersHO4N eEnF+Sn4PJLlgIns/hmKHuDRdOTMJ3wq -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:38 2025 by rpki-client