$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft File: 4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft (raw, json) Hash identifier: 9VKZWAvllH3QUelSbILNE/Zx11cYLsWv/iaQo8PUtUs= Subject key identifier: BD:BC:88:7B:69:DB:A8:B2:69:3B:D9:10:F4:5D:59:DB:0F:50:12:5B Authority key identifier: E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24 Certificate issuer: /CN=A91E0CA1/serialNumber=E1D95A3CBDD92029AEBE1E1308099E6249CD3624 Certificate serial: 0AAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft Manifest number: 0AA5 Signing time: Thu 24 Apr 2025 19:24:49 +0000 Manifest this update: Thu 24 Apr 2025 19:24:48 +0000 Manifest next update: Thu 01 May 2025 19:24:48 +0000 Files and hashes: 1: 4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl (hash: cyCRzATUMhCBAtXfNzqKgv29n8eMIxsBfSDGxIiuRzM=) 2: 29B9D5B8524111EABEF0A119C4F9AE02.roa (hash: XgnhviRQUKAkeu4itRmlPhHlV4kxqNIZcBKK2pdxl3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2732 (0xaac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CA1, serialNumber=E1D95A3CBDD92029AEBE1E1308099E6249CD3624 Validity Not Before: Apr 24 19:24:48 2025 GMT Not After : May 1 19:24:48 2025 GMT Subject: CN=680a9000-6377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:67:5c:32:e7:23:dd:69:f7:4b:9b:d1:e0:d2: d8:18:0c:b0:52:81:eb:c3:09:81:20:bc:12:31:df: 62:1c:cc:b7:53:c9:38:50:23:64:11:9a:50:c6:22: d0:9f:dc:cb:ef:95:ef:83:1f:bf:4f:ba:1d:7f:34: 01:eb:3a:08:c2:40:b0:33:39:6a:50:1e:77:43:32: 24:1f:aa:a1:d4:fe:af:4d:06:6b:c4:53:b6:9a:29: 41:ea:a7:5d:23:8d:7a:ff:42:3f:ba:c7:f2:f1:01: 2e:c6:01:d6:c2:c6:c0:1b:f8:46:63:ad:06:18:04: 18:2d:35:e7:a8:b9:6b:47:15:b4:cd:3d:fb:02:07: 95:fb:e8:af:e5:a6:e8:51:db:30:ed:16:6f:67:2b: 10:63:43:07:b2:98:c1:a6:69:d5:9e:7b:78:9f:6d: e5:11:44:52:be:c7:01:1c:fa:30:db:58:7f:8a:c9: 75:15:43:b0:00:9a:02:19:82:c2:c7:2c:c2:2f:ef: 6f:41:6e:23:fc:7a:5e:6f:6c:08:3e:40:30:96:d1: c1:23:0d:c9:b7:f0:0e:ea:fa:21:02:45:6b:97:43: 6f:59:0e:2d:20:23:f0:ae:25:35:43:f5:37:b2:70: 16:8f:cb:94:10:d2:15:74:79:fc:da:f9:7f:a0:8f: ed:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:BC:88:7B:69:DB:A8:B2:69:3B:D9:10:F4:5D:59:DB:0F:50:12:5B X509v3 Authority Key Identifier: keyid:E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:37:0e:5b:c8:35:9b:9f:14:a5:1c:d0:3c:6f:0f:54:da:8d: 62:1a:30:59:6e:ce:cd:5b:bb:fb:b9:34:db:fb:fe:f0:d2:9e: 82:8d:60:19:f7:36:c3:d7:ad:f8:e5:8a:c8:f0:18:b8:42:e3: a7:c5:14:c7:4a:b4:43:f5:bc:80:25:7c:6b:14:d4:3d:c5:2e: ab:0f:c0:82:45:c1:2e:e7:41:b1:97:fb:7d:ac:f1:2a:a1:4f: 36:78:84:c4:19:fc:c3:18:4b:91:e9:c5:6c:df:e5:9c:0c:a5: c4:d6:d6:b3:ab:6f:9b:05:5e:e6:1c:73:2e:21:33:a6:71:de: 40:9c:2f:41:d4:ac:97:6e:df:51:04:ba:f9:e4:af:0a:5c:31: 88:03:1d:f0:fd:6a:ba:71:fb:25:be:2c:3f:4a:c7:84:de:e0: b9:63:50:c1:8e:f5:77:0e:41:58:79:7c:c0:68:42:ff:de:c3: 5c:d8:8c:0b:b7:20:42:64:10:42:dc:5a:76:04:0c:3a:bc:5f: 90:9b:b4:a7:71:e6:58:78:34:52:57:2e:20:0c:42:a0:4d:ba: b5:45:38:46:43:cb:c9:2b:c4:77:e1:8f:02:84:ea:4b:22:c8: ac:d1:b8:0c:12:a0:fd:ce:a0:e3:72:cd:da:77:bf:88:5d:8d: b1:f6:fc:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDQTExMTAvBgNVBAUTKEUxRDk1QTNDQkREOTIwMjlBRUJFMUUxMzA4MDk5RTYy NDlDRDM2MjQwHhcNMjUwNDI0MTkyNDQ4WhcNMjUwNTAxMTkyNDQ4WjAYMRYwFAYD VQQDEw02ODBhOTAwMC02Mzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWdcMucj3Wn3S5vR4NLYGAywUoHrwwmBILwSMd9iHMy3U8k4UCNkEZpQxiLQ n9zL75Xvgx+/T7odfzQB6zoIwkCwMzlqUB53QzIkH6qh1P6vTQZrxFO2milB6qdd I416/0I/usfy8QEuxgHWwsbAG/hGY60GGAQYLTXnqLlrRxW0zT37AgeV++iv5abo Udsw7RZvZysQY0MHspjBpmnVnnt4n23lEURSvscBHPow21h/isl1FUOwAJoCGYLC xyzCL+9vQW4j/Hpeb2wIPkAwltHBIw3Jt/AO6vohAkVrl0NvWQ4tICPwriU1Q/U3 snAWj8uUENIVdHn82vl/oI/trwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL28iHtp 26iyaTvZEPRdWdsPUBJbMB8GA1UdIwQYMBaAFOHZWjy92SAprr4eEwgJnmJJzTYk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENBMS83MDYzRTQyNDUy M0YxMUVBOEM5Q0YwMTZDNEY5QUUwMi80ZGxhUEwzWklDbXV2aDRUQ0FtZVlrbk5O aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRkbGFQTDNaSUNtdXZoNFRDQW1lWWtuTk5pUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENBMS83MDYzRTQyNDUyM0YxMUVBOEM5Q0YwMTZDNEY5QUUwMi80ZGxhUEwzWklD bXV2aDRUQ0FtZVlrbk5OaVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGNw5byDWbnxSlHNA8bw9U2o1iGjBZbs7NW7v7uTTb+/7w0p6CjWAZ 9zbD16345YrI8Bi4QuOnxRTHSrRD9byAJXxrFNQ9xS6rD8CCRcEu50Gxl/t9rPEq oU82eITEGfzDGEuR6cVs3+WcDKXE1tazq2+bBV7mHHMuITOmcd5AnC9B1KyXbt9R BLr55K8KXDGIAx3w/Wq6cfslviw/SseE3uC5Y1DBjvV3DkFYeXzAaEL/3sNc2IwL tyBCZBBC3Fp2BAw6vF+Qm7SnceZYeDRSVy4gDEKgTbq1RThGQ8vJK8R34Y8ChOpL Isis0bgMEqD9zqDjcs3ad7+IXY2x9vym -----END CERTIFICATE-----Generated at Sat Apr 26 14:12:57 2025 by rpki-client