$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft File: 4PPPvfp9B0J0-nSdQCnO41iPd8M.mft (raw, json) Hash identifier: cr8wJHfpQpQSYXvIspNczN+/KZ2qnrbFfi77U49WJ/Y= Subject key identifier: 90:AD:A5:4C:A1:0C:EC:5F:DA:AD:9C:4A:6C:74:E2:BC:AC:52:D6:40 Authority key identifier: E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3 Certificate issuer: /CN=A91D0853/serialNumber=E0F3CFBDFA7D074274FA749D4029CEE3588F77C3 Certificate serial: 079E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft Manifest number: 0795 Signing time: Thu 24 Apr 2025 21:08:15 +0000 Manifest this update: Thu 24 Apr 2025 21:08:14 +0000 Manifest next update: Thu 01 May 2025 21:08:14 +0000 Files and hashes: 1: 4PPPvfp9B0J0-nSdQCnO41iPd8M.crl (hash: /HJ1aNSUYzlCjG+abLEuYflYXmzCQoKb3/Ky+KbiWNA=) 2: 3DAD522E1D7611EB8673F476C4F9AE02.roa (hash: e5b3DDJ+5AdBpB+VVjYybf9HAu4lpvnirB8lehNH2gE=) 3: 01F74A7EBFAC11EE89B0182DC4F9AE02.roa (hash: v+Wfr9mdwprqPsB/fgoxNe7MPi3W3bX6rDgX0OFI/s8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.crl rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1950 (0x79e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0853, serialNumber=E0F3CFBDFA7D074274FA749D4029CEE3588F77C3 Validity Not Before: Apr 24 21:08:14 2025 GMT Not After : May 1 21:08:14 2025 GMT Subject: CN=680aa83e-7c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:13:5c:0c:56:04:f6:fb:f8:87:5c:0c:70:4b: c3:9f:fd:97:41:ca:ac:98:71:28:69:47:e8:d2:41: 02:42:a0:6b:ea:5f:71:67:24:28:58:be:71:6a:ff: 4a:b3:7b:37:44:a8:29:eb:7c:54:57:a2:9e:24:7e: ae:e0:c5:67:23:fb:bd:7c:a7:73:55:4a:2f:3f:34: 92:5e:9c:75:c6:ff:e4:8c:ff:53:a9:bd:ec:f6:14: e3:03:9e:94:d2:f6:ca:d5:fc:2f:e5:16:80:84:77: a1:79:72:42:79:e1:12:0b:8d:75:59:0d:55:2b:7a: 16:c6:6e:d2:c6:6d:f9:39:bb:74:b2:2f:eb:af:27: 23:46:e7:45:77:f3:73:36:1c:30:42:ee:95:2a:22: 28:c2:43:5c:45:65:3f:6d:97:dd:70:84:19:24:29: dd:09:4b:fc:55:39:2a:69:0e:3c:be:7f:8a:22:da: f5:9c:e2:aa:58:c2:4d:97:40:a6:a3:98:67:cd:ea: e6:99:1f:08:be:ce:41:3a:6b:20:07:c7:11:86:84: 1f:7b:40:0a:8a:13:59:a3:9f:e4:8c:35:23:53:fb: 16:b2:32:92:48:21:bc:b5:fe:d6:57:4b:b5:4b:73: 48:e7:ad:47:ff:de:a8:e4:bd:d7:e9:24:2c:16:79: a0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AD:A5:4C:A1:0C:EC:5F:DA:AD:9C:4A:6C:74:E2:BC:AC:52:D6:40 X509v3 Authority Key Identifier: keyid:E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:2b:02:ea:dd:36:95:8c:a0:29:8d:6b:2f:da:f9:18:cf:06: ec:90:c7:ea:f5:7c:fc:f8:cb:9d:ce:7a:cc:68:b5:a2:4f:4c: b4:a1:06:48:21:62:1c:62:a1:ff:54:09:e2:d0:b5:d3:58:02: 59:c5:b3:f9:2d:3f:e1:30:0b:60:c4:09:08:2c:bf:87:95:23: 06:98:98:0f:94:af:ee:ba:96:f1:71:fc:51:77:6b:c6:85:9b: 22:2b:8e:5d:6e:70:d8:27:6c:39:79:d6:86:d7:2c:bf:1d:65: 18:47:3d:1a:d6:70:b7:7f:42:15:75:63:e1:da:cb:1c:8c:c2: 09:2b:f7:ff:38:68:2e:60:e5:9a:49:4d:bc:61:49:dc:50:82: 6f:60:48:0e:af:cd:83:73:d9:a9:88:0a:23:2d:ee:7a:80:ee: b5:7a:3d:7d:2a:92:41:7c:8e:cf:d5:64:2f:7c:b7:41:cc:82: f5:cd:87:3f:fd:46:ad:62:9e:49:31:26:4f:43:ef:78:50:28: 06:66:68:d0:0f:7b:e4:50:68:b4:c6:df:c7:50:d4:d1:ab:b2: 6f:4a:86:a9:ec:7e:7a:b4:b5:97:c8:29:4a:d4:0d:bd:9b:e4: b6:56:27:66:4f:1b:1e:4d:c5:2e:b2:6a:4d:9f:c7:aa:13:1c: 7d:59:02:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA4NTMxMTAvBgNVBAUTKEUwRjNDRkJERkE3RDA3NDI3NEZBNzQ5RDQwMjlDRUUz NTg4Rjc3QzMwHhcNMjUwNDI0MjEwODE0WhcNMjUwNTAxMjEwODE0WjAYMRYwFAYD VQQDEw02ODBhYTgzZS03YzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4RNcDFYE9vv4h1wMcEvDn/2XQcqsmHEoaUfo0kECQqBr6l9xZyQoWL5xav9K s3s3RKgp63xUV6KeJH6u4MVnI/u9fKdzVUovPzSSXpx1xv/kjP9Tqb3s9hTjA56U 0vbK1fwv5RaAhHeheXJCeeESC411WQ1VK3oWxm7Sxm35Obt0si/rrycjRudFd/Nz NhwwQu6VKiIowkNcRWU/bZfdcIQZJCndCUv8VTkqaQ48vn+KItr1nOKqWMJNl0Cm o5hnzermmR8Ivs5BOmsgB8cRhoQfe0AKihNZo5/kjDUjU/sWsjKSSCG8tf7WV0u1 S3NI561H/96o5L3X6SQsFnmgCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCtpUyh DOxf2q2cSmx04rysUtZAMB8GA1UdIwQYMBaAFODzz736fQdCdPp0nUApzuNYj3fD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDg1My81Qjk0MzkwRTA0 NDExMUVCOTFDNDNFNDVDNEY5QUUwMi80UFBQdmZwOUIwSjAtblNkUUNuTzQxaVBk OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRQUFB2ZnA5QjBKMC1uU2RRQ25PNDFpUGQ4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDg1My81Qjk0MzkwRTA0NDExMUVCOTFDNDNFNDVDNEY5QUUwMi80UFBQdmZwOUIw SjAtblNkUUNuTzQxaVBkOE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYKwLq3TaVjKApjWsv2vkYzwbskMfq9Xz8+MudznrMaLWiT0y0oQZI IWIcYqH/VAni0LXTWAJZxbP5LT/hMAtgxAkILL+HlSMGmJgPlK/uupbxcfxRd2vG hZsiK45dbnDYJ2w5edaG1yy/HWUYRz0a1nC3f0IVdWPh2sscjMIJK/f/OGguYOWa SU28YUncUIJvYEgOr82Dc9mpiAojLe56gO61ej19KpJBfI7P1WQvfLdBzIL1zYc/ /UatYp5JMSZPQ+94UCgGZmjQD3vkUGi0xt/HUNTRq7JvSoap7H56tLWXyClK1A29 m+S2VidmTxseTcUusmpNn8eqExx9WQJk -----END CERTIFICATE-----Generated at Sat Apr 26 17:02:24 2025 by rpki-client