$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft File: U4JkLr15mg-ChtBlSCntdoQw-eQ.mft (raw, json) Hash identifier: wFMJT5eCq+zu94jMrYra1DUhnwBAJi9tdIygqErAQbg= Subject key identifier: 3F:35:82:5C:9A:28:90:A3:94:23:E5:75:AB:BD:5B:80:80:1B:BF:78 Authority key identifier: 53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4 Certificate issuer: /CN=A91E6856/serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4 Certificate serial: 0E41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft Manifest number: 0E3C Signing time: Thu 24 Apr 2025 17:44:29 +0000 Manifest this update: Thu 24 Apr 2025 17:44:29 +0000 Manifest next update: Thu 01 May 2025 17:44:28 +0000 Files and hashes: 1: U4JkLr15mg-ChtBlSCntdoQw-eQ.crl (hash: mQ6fdABCiJrY3sTfND/cyvRHHyt6xcL6GwGp/HUXKnE=) 2: 350711FA881211EE9710F928C4F9AE02.roa (hash: /AJd6poS8Ng5rehLy7t+jOBIXVOshJArXBaFYmXY69Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3649 (0xe41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6856, serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4 Validity Not Before: Apr 24 17:44:29 2025 GMT Not After : May 1 17:44:28 2025 GMT Subject: CN=680a787d-3b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:19:47:48:36:b9:8a:6a:ec:d0:10:6a:90:07: 82:46:ac:d4:a8:17:e6:8e:74:65:83:78:37:6c:af: 60:96:1f:49:b6:78:2f:11:e3:30:79:ff:d3:43:54: 5c:a0:4a:bf:04:83:3a:be:fd:d7:14:4e:59:99:80: d0:ce:bb:a5:6d:a4:90:68:a2:8e:eb:a6:ae:5c:c4: 5c:92:cd:75:df:0f:57:e0:83:1f:f7:bd:8c:ec:6a: 51:94:d6:4f:3a:f3:ec:eb:e9:52:6e:d3:61:e2:af: 74:44:a3:54:10:09:4d:0c:e3:76:cf:2b:78:fe:8e: bf:58:4d:d8:c5:3d:51:00:ef:5a:e4:e0:39:3e:5d: 02:a9:8d:00:0e:94:f2:f0:82:23:b8:e2:36:56:cc: de:46:e8:9e:40:19:27:14:5c:9d:9c:cc:33:45:53: fb:d4:ea:b2:24:f8:e0:73:10:01:d8:09:cf:de:fc: eb:25:25:ab:ef:84:17:7b:5c:aa:3e:67:1e:f1:7a: f3:5e:12:7e:74:da:2d:31:13:b8:86:c9:bd:dc:5c: a6:51:61:56:61:91:9c:91:f1:1a:13:ee:af:63:de: 6d:ea:19:e6:16:e1:58:fb:1d:f6:63:7a:47:2d:5b: f0:52:f7:97:2c:1f:80:77:94:6a:29:7b:71:c6:54: 96:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:35:82:5C:9A:28:90:A3:94:23:E5:75:AB:BD:5B:80:80:1B:BF:78 X509v3 Authority Key Identifier: keyid:53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:da:c3:79:76:3a:3d:67:c0:8c:29:43:2a:d8:f8:43:0b:52: f6:92:aa:98:ff:78:cc:7e:04:82:e2:64:5d:73:27:03:fb:58: 18:c0:dd:7a:82:36:25:a5:d8:c8:a9:c6:91:64:49:4c:69:fe: a6:aa:9a:46:c3:f3:0d:88:12:76:51:91:96:dc:5d:89:48:bf: b1:74:97:a8:d4:6b:50:68:fd:9a:69:c7:d0:09:ea:ed:08:0e: 2d:62:a1:9c:6f:7f:bc:4d:9b:0c:76:c5:1c:f8:3d:34:4d:de: 35:48:1b:f7:1d:9e:43:c4:cf:e5:bc:61:26:6f:83:6e:7c:71: 72:fa:16:c3:57:d1:c2:9d:5b:bd:85:a2:a3:76:8b:69:9e:76: 95:01:fd:88:63:5e:da:bf:42:e2:b5:bb:8e:8f:d0:76:87:44: d8:cb:ef:a9:d2:a4:4b:1a:92:d2:c1:7c:08:0b:63:bd:4f:2a: 20:f9:d2:2c:c8:a1:bf:e6:07:6a:96:da:ae:eb:df:bc:84:fa: 43:30:cb:45:3b:4c:9d:21:f4:ec:8d:54:c9:96:5c:97:08:ca: 2f:3a:56:a9:ec:3d:f3:8b:59:e8:6f:8a:75:ed:7b:bd:53:0f: a3:27:27:ed:5e:4d:20:ed:ef:b2:3a:0f:e3:df:ab:b2:48:7d: f5:6a:36:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4NTYxMTAvBgNVBAUTKDUzODI2NDJFQkQ3OTlBMEY4Mjg2RDA2NTQ4MjlFRDc2 ODQzMEY5RTQwHhcNMjUwNDI0MTc0NDI5WhcNMjUwNTAxMTc0NDI4WjAYMRYwFAYD VQQDEw02ODBhNzg3ZC0zYjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmRlHSDa5imrs0BBqkAeCRqzUqBfmjnRlg3g3bK9glh9JtngvEeMwef/TQ1Rc oEq/BIM6vv3XFE5ZmYDQzrulbaSQaKKO66auXMRcks113w9X4IMf972M7GpRlNZP OvPs6+lSbtNh4q90RKNUEAlNDON2zyt4/o6/WE3YxT1RAO9a5OA5Pl0CqY0ADpTy 8IIjuOI2VszeRuieQBknFFydnMwzRVP71OqyJPjgcxAB2AnP3vzrJSWr74QXe1yq Pmce8XrzXhJ+dNotMRO4hsm93FymUWFWYZGckfEaE+6vY95t6hnmFuFY+x32Y3pH LVvwUveXLB+Ad5RqKXtxxlSWkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD81glya KJCjlCPldau9W4CAG794MB8GA1UdIwQYMBaAFFOCZC69eZoPgobQZUgp7XaEMPnk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg1Ni8yQ0Q0NUZCQTlF MjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1nLUNodEJsU0NudGRvUXct ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0SmtMcjE1bWctQ2h0QmxTQ250ZG9Rdy1lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg1Ni8yQ0Q0NUZCQTlFMjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1n LUNodEJsU0NudGRvUXctZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh2sN5djo9Z8CMKUMq2PhDC1L2kqqY/3jMfgSC4mRdcycD+1gYwN16 gjYlpdjIqcaRZElMaf6mqppGw/MNiBJ2UZGW3F2JSL+xdJeo1GtQaP2aacfQCert CA4tYqGcb3+8TZsMdsUc+D00Td41SBv3HZ5DxM/lvGEmb4NufHFy+hbDV9HCnVu9 haKjdotpnnaVAf2IY17av0LitbuOj9B2h0TYy++p0qRLGpLSwXwIC2O9Tyog+dIs yKG/5gdqltqu69+8hPpDMMtFO0ydIfTsjVTJllyXCMovOlap7D3zi1nob4p17Xu9 Uw+jJyftXk0g7e+yOg/j36uySH31ajZI -----END CERTIFICATE-----Generated at Sat Apr 26 04:38:46 2025 by rpki-client