$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft File: 4JI7Cl99XGi66s5BQV9CpSDXSyo.mft (raw, json) Hash identifier: TI9HUbp7RF3vmtfg/w1buOHgCrENfSOcKVdCyLykuxw= Subject key identifier: 02:AC:4B:E3:2F:12:02:4F:43:45:39:4E:45:47:E9:A3:7D:06:C4:07 Authority key identifier: E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A Certificate issuer: /CN=A91D9E49/serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A Certificate serial: 0B01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft Manifest number: 0AF9 Signing time: Thu 24 Apr 2025 19:12:53 +0000 Manifest this update: Thu 24 Apr 2025 19:12:53 +0000 Manifest next update: Thu 01 May 2025 19:12:53 +0000 Files and hashes: 1: 4JI7Cl99XGi66s5BQV9CpSDXSyo.crl (hash: MG68WknkGk2ZIDqTksisxD0/bNmKFt4mX1JpO7XKvyQ=) 2: 4CC0341641A311EABAADCE0AC4F9AE02.roa (hash: NcQf930jPATr+5XDKM18U6rSGEkKZ2yaCI8MgpUcALY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:12:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2817 (0xb01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9E49, serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A Validity Not Before: Apr 24 19:12:53 2025 GMT Not After : May 1 19:12:53 2025 GMT Subject: CN=680a8d35-bf22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:93:b5:e4:f9:2c:4f:25:7f:bc:65:ae:08:0c: 58:f5:4c:34:d3:96:54:02:fd:72:06:28:db:68:91: d9:cf:c5:ef:3d:73:7d:d7:bf:07:49:39:72:6e:02: b2:c0:77:9c:12:c3:1e:58:19:e4:83:be:f3:28:e5: d0:5a:aa:ff:4b:e2:d6:33:bb:1e:bd:ab:82:c9:78: 92:62:e6:bc:af:f7:3d:ad:28:b2:06:40:a3:ed:36: 61:43:9d:12:7e:06:7f:a2:93:7e:d8:30:e4:3f:95: 6e:e4:02:9a:5a:60:e8:1e:fb:65:ea:aa:59:f4:bb: f1:81:54:db:5c:7e:15:d7:3c:50:84:73:b7:93:0b: f5:06:05:2e:5b:b6:29:03:81:b5:f2:c3:b1:65:7e: cf:40:13:95:cc:67:9e:48:92:1a:b9:df:be:2f:44: c7:19:b3:f4:ce:70:16:fd:5e:66:20:42:ba:3d:33: c2:94:73:5b:a4:8b:ad:fb:cd:f6:cf:74:24:f8:04: bd:06:57:0b:ca:0c:13:40:ff:0a:72:72:8e:03:22: c4:79:99:be:e4:37:6f:e8:4e:ae:cd:3f:b3:d9:e5: 7e:cf:bd:3c:33:66:10:dd:06:87:a2:4e:03:23:06: 94:f3:f9:41:0b:7a:37:85:66:4c:79:20:7a:ff:d3: 50:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AC:4B:E3:2F:12:02:4F:43:45:39:4E:45:47:E9:A3:7D:06:C4:07 X509v3 Authority Key Identifier: keyid:E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:db:55:ad:ea:1a:8d:a4:9c:8d:d8:dd:8a:b9:9d:39:85:36: 02:91:ae:c3:be:45:7a:63:9e:36:76:29:09:83:bd:60:da:23: b9:36:a5:0e:d4:f1:70:95:94:7c:04:3d:c8:04:48:28:d8:74: ae:02:18:20:3b:c5:71:95:c8:27:44:dc:c7:39:7d:61:ac:4b: e0:fa:76:2a:e9:15:a4:da:e0:48:fd:c6:16:3c:bb:75:e2:24: 7c:ff:31:ac:b2:a7:fe:73:31:ca:49:c7:0b:3f:22:86:b2:c3: 84:f6:73:13:84:12:c8:42:7d:87:f2:02:b7:1d:1d:26:bc:84: 6b:6c:e9:73:6a:53:c8:5b:a8:bc:51:0c:11:3b:97:6d:5d:74: 11:f2:59:03:53:18:f9:76:3d:43:4f:41:4b:a1:f5:a7:dd:47: e8:df:9b:c5:b3:87:8e:49:f8:a0:9b:bd:65:c9:78:ba:14:14: 10:9e:c9:17:e1:76:76:d1:d7:4d:fe:16:59:d1:1e:ab:8d:7a: 44:cd:43:f5:c0:4d:2f:03:21:21:b1:41:ca:0f:9c:d3:64:ef: f0:5a:53:25:71:e7:3e:34:38:9c:d6:00:5a:c9:7a:57:b1:d8: 80:d4:f2:bb:82:1f:f5:6d:d7:ad:af:5f:cf:fc:3a:38:5d:eb: cc:b7:83:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlFNDkxMTAvBgNVBAUTKEUwOTIzQjBBNUY3RDVDNjhCQUVBQ0U0MTQxNUY0MkE1 MjBENzRCMkEwHhcNMjUwNDI0MTkxMjUzWhcNMjUwNTAxMTkxMjUzWjAYMRYwFAYD VQQDEw02ODBhOGQzNS1iZjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZO15PksTyV/vGWuCAxY9Uw005ZUAv1yBijbaJHZz8XvPXN9178HSTlybgKy wHecEsMeWBnkg77zKOXQWqr/S+LWM7sevauCyXiSYua8r/c9rSiyBkCj7TZhQ50S fgZ/opN+2DDkP5Vu5AKaWmDoHvtl6qpZ9LvxgVTbXH4V1zxQhHO3kwv1BgUuW7Yp A4G18sOxZX7PQBOVzGeeSJIaud++L0THGbP0znAW/V5mIEK6PTPClHNbpIut+832 z3Qk+AS9BlcLygwTQP8KcnKOAyLEeZm+5Ddv6E6uzT+z2eV+z708M2YQ3QaHok4D IwaU8/lBC3o3hWZMeSB6/9NQSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKsS+Mv EgJPQ0U5TkVH6aN9BsQHMB8GA1UdIwQYMBaAFOCSOwpffVxouurOQUFfQqUg10sq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUU0OS8wNDA0OUQwODQx QTIxMUVBOUYyNjk1ODdDNEY5QUUwMi80Skk3Q2w5OVhHaTY2czVCUVY5Q3BTRFhT eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRKSTdDbDk5WEdpNjZzNUJRVjlDcFNEWFN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUU0OS8wNDA0OUQwODQxQTIxMUVBOUYyNjk1ODdDNEY5QUUwMi80Skk3Q2w5OVhH aTY2czVCUVY5Q3BTRFhTeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC321Wt6hqNpJyN2N2KuZ05hTYCka7DvkV6Y542dikJg71g2iO5NqUO 1PFwlZR8BD3IBEgo2HSuAhggO8VxlcgnRNzHOX1hrEvg+nYq6RWk2uBI/cYWPLt1 4iR8/zGssqf+czHKSccLPyKGssOE9nMThBLIQn2H8gK3HR0mvIRrbOlzalPIW6i8 UQwRO5dtXXQR8lkDUxj5dj1DT0FLofWn3Ufo35vFs4eOSfigm71lyXi6FBQQnskX 4XZ20ddN/hZZ0R6rjXpEzUP1wE0vAyEhsUHKD5zTZO/wWlMlcec+NDic1gBayXpX sdiA1PK7gh/1bdetr1/P/Do4XevMt4MJ -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:02 2025 by rpki-client