$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft File: 4USmzKVqqTEokShNJidwYk784uw.mft (raw, json) Hash identifier: +Loyp8q02RngYLH9TgQIv5gZWO1FTBCmKFfaQv0io3c= Subject key identifier: 16:FF:6B:33:1C:C1:8E:A2:B8:52:68:04:45:28:CA:83:F7:E5:FD:20 Authority key identifier: E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC Certificate issuer: /CN=A91E3493/serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC Certificate serial: 048F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft Manifest number: 048B Signing time: Thu 24 Apr 2025 23:47:54 +0000 Manifest this update: Thu 24 Apr 2025 23:47:53 +0000 Manifest next update: Thu 01 May 2025 23:47:53 +0000 Files and hashes: 1: 4USmzKVqqTEokShNJidwYk784uw.crl (hash: qBHYWwLhGLvUK4qa9J5Az6yl7bcVrXRPW2jcJl+wwME=) 2: E7BC076E368A11EC9109BC30C4F9AE02.roa (hash: KvBasDBfRwAoH2EYsCxUrezIZS6Rx7LxrBNPNRo5D98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1167 (0x48f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3493, serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC Validity Not Before: Apr 24 23:47:53 2025 GMT Not After : May 1 23:47:53 2025 GMT Subject: CN=680acdaa-dca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f6:b4:6a:f6:01:ab:8e:e7:4d:90:1b:c6:ab: ab:b3:3a:67:ef:a8:6d:0e:b3:05:e1:59:0a:4b:83: 9f:e9:b0:b1:63:56:ce:4a:a3:52:0b:32:25:16:d8: 74:67:d4:cc:64:51:7a:63:66:3b:20:5a:c4:8d:c8: ca:78:ce:f1:03:78:42:22:16:d7:f5:f1:f7:31:d5: 69:54:1e:b9:05:2b:75:91:96:04:f3:a2:94:42:3b: 3e:f4:2b:12:fd:b6:81:52:de:65:5a:66:9d:5f:35: c5:ee:9d:bd:bc:16:a3:7e:6e:04:9a:c1:f5:cf:31: 43:73:c3:e6:ad:af:42:97:b6:05:ef:c0:a0:1e:d9: 0d:4e:40:65:4c:3f:4d:e0:1e:e6:bc:19:ff:0a:27: 23:8a:c9:4f:29:39:dc:7a:14:a3:bc:59:72:30:20: 93:7b:47:e7:4e:f6:46:c9:af:7b:c7:df:ca:82:8d: 7c:3b:c1:79:80:0e:9c:8c:55:c6:ce:dc:ed:2d:0b: 1d:cb:05:49:98:76:04:4e:05:43:fd:eb:26:de:94: a2:cc:6f:d2:58:a2:34:38:ce:bc:33:86:9f:21:a9: 83:2e:83:f9:42:69:e4:a0:34:71:4a:1d:88:f4:35: fa:09:d0:e5:a2:00:fd:a0:e6:5f:3f:90:92:47:67: 52:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:FF:6B:33:1C:C1:8E:A2:B8:52:68:04:45:28:CA:83:F7:E5:FD:20 X509v3 Authority Key Identifier: keyid:E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:16:61:6c:e3:22:04:b6:35:79:c7:34:3b:46:b2:58:0e:6f: 2d:1d:42:24:83:a4:81:cd:e5:3c:f0:67:b7:76:0f:4e:91:eb: 0e:b2:da:23:69:9e:81:c2:1e:59:73:25:10:d8:da:ef:c4:76: 00:db:af:75:12:ab:10:8f:19:bc:f5:bd:ca:be:b1:53:bf:5d: c3:03:13:aa:2e:34:9c:0a:e8:23:cf:c8:7d:a7:7f:77:65:d3: c5:93:16:e3:98:4e:fd:4b:ae:6e:cf:d2:f8:aa:86:9c:ad:16: 6a:86:cf:c2:e2:f4:2f:91:0f:1e:0b:98:52:cc:6c:4b:df:ec: fa:25:51:f4:b5:f4:60:cc:3d:6b:45:93:21:d1:7e:2c:c1:71: 15:80:1f:f5:4d:f4:01:cb:da:3d:f3:52:45:b5:90:7b:96:17: e2:04:5b:ab:5b:10:6f:26:5f:67:fa:ac:26:23:a4:04:82:6c: 69:bd:4a:2d:d4:e1:e4:2c:00:10:7f:e7:cc:38:5f:b5:46:7c: 3e:51:f4:ac:7f:0c:db:7f:8e:9c:63:f1:73:1c:72:30:25:41: e2:ac:33:66:9a:1e:4f:a1:29:cd:91:9a:df:82:70:1e:0b:f4: 5c:44:97:82:3b:77:8c:e9:41:05:07:eb:f2:84:c8:8d:a3:09: 00:6c:e0:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM0OTMxMTAvBgNVBAUTKEUxNDRBNkNDQTU2QUE5MzEyODkxMjg0RDI2Mjc3MDYy NEVGQ0UyRUMwHhcNMjUwNDI0MjM0NzUzWhcNMjUwNTAxMjM0NzUzWjAYMRYwFAYD VQQDEw02ODBhY2RhYS1kY2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfa0avYBq47nTZAbxqurszpn76htDrMF4VkKS4Of6bCxY1bOSqNSCzIlFth0 Z9TMZFF6Y2Y7IFrEjcjKeM7xA3hCIhbX9fH3MdVpVB65BSt1kZYE86KUQjs+9CsS /baBUt5lWmadXzXF7p29vBajfm4EmsH1zzFDc8Pmra9Cl7YF78CgHtkNTkBlTD9N 4B7mvBn/CicjislPKTncehSjvFlyMCCTe0fnTvZGya97x9/Kgo18O8F5gA6cjFXG ztztLQsdywVJmHYETgVD/esm3pSizG/SWKI0OM68M4afIamDLoP5QmnkoDRxSh2I 9DX6CdDlogD9oOZfP5CSR2dS9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBb/azMc wY6iuFJoBEUoyoP35f0gMB8GA1UdIwQYMBaAFOFEpsylaqkxKJEoTSYncGJO/OLs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzQ5My80OUEyRUU2QzM2 ODUxMUVDODBGNTIwMzVDNEY5QUUwMi80VVNtektWcXFURW9rU2hOSmlkd1lrNzg0 dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRVU216S1ZxcVRFb2tTaE5KaWR3WWs3ODR1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzQ5My80OUEyRUU2QzM2ODUxMUVDODBGNTIwMzVDNEY5QUUwMi80VVNtektWcXFU RW9rU2hOSmlkd1lrNzg0dXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/FmFs4yIEtjV5xzQ7RrJYDm8tHUIkg6SBzeU88Ge3dg9OkesOstoj aZ6Bwh5ZcyUQ2NrvxHYA2691EqsQjxm89b3KvrFTv13DAxOqLjScCugjz8h9p393 ZdPFkxbjmE79S65uz9L4qoacrRZqhs/C4vQvkQ8eC5hSzGxL3+z6JVH0tfRgzD1r RZMh0X4swXEVgB/1TfQBy9o981JFtZB7lhfiBFurWxBvJl9n+qwmI6QEgmxpvUot 1OHkLAAQf+fMOF+1Rnw+UfSsfwzbf46cY/FzHHIwJUHirDNmmh5PoSnNkZrfgnAe C/RcRJeCO3eM6UEFB+vyhMiNowkAbOAr -----END CERTIFICATE-----Generated at Sat Apr 26 12:25:33 2025 by rpki-client