$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft File: 4V0TCwuymA4b8RwBvMt1O0loSoA.mft (raw, json) Hash identifier: QMtNDGSaXnnCmgH/a6mxm6IL5rwaac5fh+qp1sTvt60= Subject key identifier: 0B:D5:6E:CB:35:9B:2D:04:4F:14:18:A4:D5:6F:2E:07:82:EC:A9:73 Authority key identifier: E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80 Certificate issuer: /CN=A91CE7BD/serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80 Certificate serial: 05FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft Manifest number: 05F8 Signing time: Thu 24 Apr 2025 22:42:14 +0000 Manifest this update: Thu 24 Apr 2025 22:42:14 +0000 Manifest next update: Thu 01 May 2025 22:42:14 +0000 Files and hashes: 1: 4V0TCwuymA4b8RwBvMt1O0loSoA.crl (hash: qmHwoSDypv4Yt8XWyI5Nk4GwjYz2q1y2VoNUZADJfrs=) 2: 6AE1616AA3F711EBBA757063C4F9AE02.roa (hash: mBt8RtcAAJ1E0qkhS2O17Qle9xp96BCyxe5ScaBrVUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1532 (0x5fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE7BD, serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80 Validity Not Before: Apr 24 22:42:14 2025 GMT Not After : May 1 22:42:14 2025 GMT Subject: CN=680abe46-6c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6a:6a:8c:0a:0e:5d:90:3f:3c:bb:8f:83:91: 8e:80:b2:3a:9d:4a:b7:09:6f:ab:40:45:9b:fc:90: 6b:0c:33:6b:15:be:df:61:7a:bb:fd:16:92:3f:a4: 8c:ce:6d:a5:94:c8:2c:67:84:e7:3c:9b:c8:5f:b7: 54:a3:80:d2:fd:24:55:ca:fb:68:e7:6a:d2:77:f6: fe:c1:0c:a7:52:f7:7a:72:ae:e0:d7:28:fc:90:02: a3:52:e8:ac:60:ab:0e:5c:01:00:28:14:83:da:34: a6:df:18:3f:9e:39:8b:29:ea:c2:b8:8a:26:af:c5: 3a:55:23:15:75:46:75:c8:53:15:90:0f:ad:1e:88: de:d2:de:93:6d:0c:89:44:24:89:c3:25:50:7f:de: cb:29:11:55:2c:7b:6e:cc:c6:a8:d0:48:9c:bf:2c: 80:16:3e:5d:a5:f8:0c:4c:92:93:63:49:da:65:19: 96:a3:d9:34:85:6d:06:0c:8e:9b:9a:75:0e:89:d5: b4:d7:bf:e0:33:f9:cc:60:23:a2:35:fe:91:54:f1: 29:f4:b5:1e:2c:0c:15:ad:47:4d:ec:82:ce:e9:83: f9:23:db:6c:cf:c3:25:d6:10:cc:ab:02:a6:6c:37: 58:28:16:38:6c:b6:86:4e:0d:dc:ca:86:39:c6:fb: 64:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D5:6E:CB:35:9B:2D:04:4F:14:18:A4:D5:6F:2E:07:82:EC:A9:73 X509v3 Authority Key Identifier: keyid:E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:9b:98:a0:38:75:36:aa:2c:0e:ab:87:b2:2a:73:ee:47:c7: 3f:fd:0e:70:27:e9:a0:ee:05:2e:09:5f:bb:d9:13:81:23:7d: b2:1b:35:a4:29:f9:0a:93:b9:2d:12:28:0f:bc:1d:6c:3e:e2: c4:55:df:5d:55:48:2c:ce:6f:17:db:97:9c:3b:f2:31:04:35: 39:5a:12:10:9e:29:1e:d0:c3:e2:29:a1:1f:1a:7f:34:92:1b: ab:94:74:3b:01:e5:4a:d5:b0:f9:44:10:cd:80:ea:94:b2:e5: 5b:55:4c:38:20:d4:df:1a:21:a7:73:7b:fd:58:b8:ff:54:69: ca:f3:ab:49:24:7c:d0:03:03:84:d6:54:bd:17:d0:44:2f:a8: 7b:18:93:66:1f:2f:e4:a6:5d:f7:2b:21:88:ee:e4:22:25:64: cc:3e:8b:00:a1:75:2e:25:31:06:67:a9:ee:2c:53:63:77:5f: 40:4c:8b:ed:e1:c8:dd:f2:05:67:24:d8:4b:97:bb:20:8e:29: 6c:19:be:ac:d6:c1:9e:e3:8e:1f:a0:84:d2:35:87:ec:da:4a: 17:ef:84:c4:2e:e8:0f:54:81:5c:91:33:95:5a:cd:d9:68:6a: df:0c:36:28:f3:a1:17:29:8a:cd:be:b2:ec:37:87:f7:48:36: 75:0d:22:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U3QkQxMTAvBgNVBAUTKEUxNUQxMzBCMEJCMjk4MEUxQkYxMUMwMUJDQ0I3NTNC NDk2ODRBODAwHhcNMjUwNDI0MjI0MjE0WhcNMjUwNTAxMjI0MjE0WjAYMRYwFAYD VQQDEw02ODBhYmU0Ni02YzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWpqjAoOXZA/PLuPg5GOgLI6nUq3CW+rQEWb/JBrDDNrFb7fYXq7/RaSP6SM zm2llMgsZ4TnPJvIX7dUo4DS/SRVyvto52rSd/b+wQynUvd6cq7g1yj8kAKjUuis YKsOXAEAKBSD2jSm3xg/njmLKerCuIomr8U6VSMVdUZ1yFMVkA+tHoje0t6TbQyJ RCSJwyVQf97LKRFVLHtuzMao0EicvyyAFj5dpfgMTJKTY0naZRmWo9k0hW0GDI6b mnUOidW017/gM/nMYCOiNf6RVPEp9LUeLAwVrUdN7ILO6YP5I9tsz8Ml1hDMqwKm bDdYKBY4bLaGTg3cyoY5xvtkpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvVbss1 my0ETxQYpNVvLgeC7KlzMB8GA1UdIwQYMBaAFOFdEwsLspgOG/EcAbzLdTtJaEqA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTdCRC9EMzAyNjAzNEEz RjUxMUVCOTJGOUM1NjFDNEY5QUUwMi80VjBUQ3d1eW1BNGI4UndCdk10MU8wbG9T b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWMFRDd3V5bUE0YjhSd0J2TXQxTzBsb1NvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTdCRC9EMzAyNjAzNEEzRjUxMUVCOTJGOUM1NjFDNEY5QUUwMi80VjBUQ3d1eW1B NGI4UndCdk10MU8wbG9Tb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXm5igOHU2qiwOq4eyKnPuR8c//Q5wJ+mg7gUuCV+72ROBI32yGzWk KfkKk7ktEigPvB1sPuLEVd9dVUgszm8X25ecO/IxBDU5WhIQnike0MPiKaEfGn80 khurlHQ7AeVK1bD5RBDNgOqUsuVbVUw4INTfGiGnc3v9WLj/VGnK86tJJHzQAwOE 1lS9F9BEL6h7GJNmHy/kpl33KyGI7uQiJWTMPosAoXUuJTEGZ6nuLFNjd19ATIvt 4cjd8gVnJNhLl7sgjilsGb6s1sGe444foITSNYfs2koX74TELugPVIFckTOVWs3Z aGrfDDYo86EXKYrNvrLsN4f3SDZ1DSJG -----END CERTIFICATE-----Generated at Sat Apr 26 17:22:38 2025 by rpki-client