$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft File: B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft (raw, json) Hash identifier: q0IEkPAm+vvlqKrGPZ2mM+UvPq06tRF/pNjYFoKkwO0= Subject key identifier: 63:2E:52:06:60:AC:AD:FD:36:93:92:26:4C:FD:B8:40:64:9A:60:05 Authority key identifier: 07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67 Certificate issuer: /CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467 Certificate serial: 1E27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft Manifest number: 1E08 Signing time: Thu 24 Apr 2025 16:06:33 +0000 Manifest this update: Thu 24 Apr 2025 16:06:33 +0000 Manifest next update: Thu 01 May 2025 16:06:33 +0000 Files and hashes: 1: B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl (hash: 02FSM2ZVBYc6X/adA4hTEm7JxgggivGE6WFKmgJetyU=) 2: F0F97030612C11EF85AF817EC4F9AE02.roa (hash: 3kkH5EW9k5TTFg+XHHqI2feA7kJawsJC4SpKye1S2b4=) 3: BD314CEA619711EE81211277C4F9AE02.roa (hash: pyylUNX9LlmDbhjQ7Mn/l8NCaA1ACQcAW5FWWwcceq0=) 4: 48471CAE611811EEB2B1C077C4F9AE02.roa (hash: 01F6A8KAEiWwfIj9UacQjLscVPBcvyK/XHWq85nJWZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7719 (0x1e27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDCB6, serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467 Validity Not Before: Apr 24 16:06:33 2025 GMT Not After : May 1 16:06:33 2025 GMT Subject: CN=680a6189-38bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:42:a2:f4:f1:6a:16:6b:31:c4:7b:20:92:4b: cb:e0:f1:6b:0a:ab:13:9b:14:00:40:d1:7f:d3:d2: e2:3b:d0:a5:bf:ea:8d:a2:a2:b7:74:0f:40:82:4a: 79:08:ae:b4:7d:f0:b4:40:53:1f:96:43:7c:bf:f8: b6:9c:ef:d3:5f:32:52:6f:de:8f:78:57:74:02:36: b0:4a:2f:09:17:10:99:37:7f:69:49:3a:41:3a:de: a4:2d:b2:13:e6:88:c2:7a:86:bd:24:56:d3:df:87: d5:91:c2:ba:98:3f:8b:ad:2a:4b:f1:61:42:9b:46: 2e:87:36:cd:ca:93:30:ea:be:32:e0:78:34:2a:9a: 7f:40:fb:aa:6a:1e:02:9d:0e:0a:7b:dc:c8:ce:af: 7c:40:59:51:17:c8:aa:a9:10:fa:45:97:61:ae:3c: bc:4c:18:cb:3e:38:26:ef:8c:f4:c7:59:10:23:f0: 41:2e:4d:a8:39:22:c6:22:4d:17:c9:5f:56:49:ef: be:84:02:4d:27:56:2b:22:07:02:94:71:2e:d0:ab: 59:3a:8c:4a:bf:70:e1:99:d4:22:eb:30:a9:47:82: 7e:b0:f5:f6:bf:1f:42:f2:3f:80:09:32:24:fe:11: b8:3d:a1:9f:5c:a3:20:b4:68:18:5f:67:23:73:ec: 6f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:2E:52:06:60:AC:AD:FD:36:93:92:26:4C:FD:B8:40:64:9A:60:05 X509v3 Authority Key Identifier: keyid:07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:c1:24:c6:dd:6b:d0:22:e9:92:5f:d2:70:f3:c1:4e:78:74: 17:b3:a0:51:85:c9:eb:95:c6:c0:ab:4e:6b:f5:ba:37:07:09: e7:1b:95:9b:aa:b8:9a:07:f2:49:7c:64:bb:de:46:70:3b:65: 81:3c:bb:89:94:d3:10:39:5e:a7:e7:cd:d0:45:af:bb:08:33: e9:4c:66:d6:cc:cf:eb:55:50:e4:84:27:17:1e:e8:10:31:9f: 43:36:09:1f:97:42:ae:ef:4c:7c:d6:e4:1a:49:d0:f9:1e:7c: a4:e0:d9:05:76:4c:13:c0:fa:ff:8e:09:ef:1f:d7:7a:26:4a: ab:50:d1:d2:66:32:3e:51:d7:3f:7f:5a:1a:80:0e:25:3a:52: e2:55:49:84:97:59:2c:90:f8:1e:a2:96:80:6a:57:5e:b9:6d: 3d:d7:38:35:df:23:10:54:ab:fe:26:1d:6f:fe:2f:30:d4:9a: 7d:e8:0d:c1:8f:21:5d:9f:0b:8d:eb:39:de:66:0a:31:e2:38: f2:9e:84:0b:72:08:80:35:ce:0d:a5:68:6a:b0:89:83:f1:87: 6a:d3:c1:7d:18:79:d6:df:92:08:6f:bb:02:bf:a5:da:fb:af: 6d:77:c4:3d:0f:34:64:be:01:5d:a8:07:49:4f:95:49:63:22: 5b:3e:1a:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RDQjYxMTAvBgNVBAUTKDA3ODE2NzVDQzY0RkFCMkI4NDVEQTdGNTExNTU0OTgw NDJFQ0U0NjcwHhcNMjUwNDI0MTYwNjMzWhcNMjUwNTAxMTYwNjMzWjAYMRYwFAYD VQQDEw02ODBhNjE4OS0zOGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykKi9PFqFmsxxHsgkkvL4PFrCqsTmxQAQNF/09LiO9Clv+qNoqK3dA9Agkp5 CK60ffC0QFMflkN8v/i2nO/TXzJSb96PeFd0AjawSi8JFxCZN39pSTpBOt6kLbIT 5ojCeoa9JFbT34fVkcK6mD+LrSpL8WFCm0YuhzbNypMw6r4y4Hg0Kpp/QPuqah4C nQ4Ke9zIzq98QFlRF8iqqRD6RZdhrjy8TBjLPjgm74z0x1kQI/BBLk2oOSLGIk0X yV9WSe++hAJNJ1YrIgcClHEu0KtZOoxKv3DhmdQi6zCpR4J+sPX2vx9C8j+ACTIk /hG4PaGfXKMgtGgYX2cjc+xvNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMuUgZg rK39NpOSJkz9uEBkmmAFMB8GA1UdIwQYMBaAFAeBZ1zGT6srhF2n9RFVSYBC7ORn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRENCNi82N0M2QUE0QThB RjExMUU2OTgwNzgzNTVDNEY5QUUwMi9CNEZuWE1aUHF5dUVYYWYxRVZWSmdFTHM1 R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I0Rm5YTVpQcXl1RVhhZjFFVlZKZ0VMczVHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RENCNi82N0M2QUE0QThBRjExMUU2OTgwNzgzNTVDNEY5QUUwMi9CNEZuWE1aUHF5 dUVYYWYxRVZWSmdFTHM1R2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAywSTG3WvQIumSX9Jw88FOeHQXs6BRhcnrlcbAq05r9bo3BwnnG5Wb qriaB/JJfGS73kZwO2WBPLuJlNMQOV6n583QRa+7CDPpTGbWzM/rVVDkhCcXHugQ MZ9DNgkfl0Ku70x81uQaSdD5Hnyk4NkFdkwTwPr/jgnvH9d6JkqrUNHSZjI+Udc/ f1oagA4lOlLiVUmEl1kskPgeopaAaldeuW091zg13yMQVKv+Jh1v/i8w1Jp96A3B jyFdnwuN6zneZgox4jjynoQLcgiANc4NpWhqsImD8Ydq08F9GHnW35IIb7sCv6Xa +69td8Q9DzRkvgFdqAdJT5VJYyJbPhoM -----END CERTIFICATE-----Generated at Sat Apr 26 16:16:48 2025 by rpki-client