$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft File: C4E-K7qEBp60NNZWZn_s4fYbSUs.mft (raw, json) Hash identifier: E1iKHpC/dKUWpb//P1IZM1qD9krEeVlYePN4O8UiQ3M= Subject key identifier: B1:55:44:0C:5D:1A:69:C6:B6:8A:B5:33:5A:C9:6E:B9:6A:46:8F:8D Authority key identifier: 0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B Certificate issuer: /CN=A91E7A8E/serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft Manifest number: 010E Signing time: Fri 25 Apr 2025 03:59:35 +0000 Manifest this update: Fri 25 Apr 2025 03:59:34 +0000 Manifest next update: Fri 02 May 2025 03:59:34 +0000 Files and hashes: 1: C4E-K7qEBp60NNZWZn_s4fYbSUs.crl (hash: vmlis/ZkpZI6DsByYxQELAamf0xUwykU8aJEKf5QKJU=) 2: 0120C296835D11EEA3484166C4F9AE02.roa (hash: 7OzrwZ3Ky/gjMPnFBCcju8Q1dBXI74VmazgiOgPzNsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7A8E, serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B Validity Not Before: Apr 25 03:59:34 2025 GMT Not After : May 2 03:59:34 2025 GMT Subject: CN=680b08a7-e91a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:01:86:80:b5:67:af:b7:40:2d:1c:f2:a5:66: 9d:8d:a8:11:9e:91:2a:e7:da:d8:cc:46:0a:7f:f0: ec:c2:99:a7:84:c5:9c:fb:72:1c:0a:c7:d5:4d:29: 48:6b:26:79:3f:28:e3:54:79:82:78:08:db:3e:c3: 5e:39:4c:f2:20:2d:69:ef:f0:18:78:00:e5:ee:68: 1e:15:e7:54:39:f7:3e:f6:26:c3:8a:89:5d:90:46: e9:9a:4f:0b:9c:88:bf:04:05:ca:bc:e6:f9:7e:12: fb:8a:f3:66:35:9a:68:7f:76:51:ab:7c:6b:34:d0: 89:d0:e4:8c:1a:1d:bc:42:ec:dd:9f:d9:70:b6:7f: 1d:4c:b8:c9:42:b9:20:b5:2e:31:4d:e3:cb:c7:67: 98:13:36:df:c7:72:1e:d6:c0:b6:34:4d:2a:22:54: 1e:37:a4:0a:ba:3c:44:1e:eb:d2:70:39:b6:c7:3e: e9:15:13:ab:89:db:80:48:35:c2:36:df:90:36:ad: 7b:84:0c:6d:63:cf:cd:39:52:97:21:ec:9d:26:47: 88:c9:50:0f:da:3a:80:9b:f1:b6:a5:f3:c2:ed:c2: 39:cd:47:07:1c:3a:04:e2:1e:71:04:37:97:54:27: 8b:ee:7e:cf:5e:5b:57:c2:e6:17:3c:9b:ab:98:cf: 2c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:55:44:0C:5D:1A:69:C6:B6:8A:B5:33:5A:C9:6E:B9:6A:46:8F:8D X509v3 Authority Key Identifier: keyid:0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:69:e7:fb:05:e3:54:61:79:df:d0:e8:db:51:5d:0b:64:2a: c9:cd:a1:02:c2:b1:75:17:d4:a9:81:c3:c8:9a:9b:7c:35:68: 63:dc:0a:97:6c:6d:44:c3:b8:10:1d:0f:aa:b5:ad:78:1c:99: 2f:16:7d:45:33:84:0a:83:8d:c0:9e:3c:64:2c:f2:f2:c1:cd: 74:2a:ef:4e:39:34:e6:8a:05:9e:75:42:92:e3:3a:ae:d4:69: 4a:e2:ac:21:fe:c6:29:ff:d0:dd:00:2b:47:79:45:9b:fa:df: 01:4b:dc:25:21:81:08:76:07:91:46:b8:75:10:f4:09:fa:17: bb:2c:c2:42:e4:ca:b7:61:c0:38:99:ad:23:2f:4c:92:95:f9: 11:1b:9e:b8:ee:de:0b:87:43:49:77:c5:13:46:79:84:c9:c5: 19:d2:c9:8f:ba:f2:ed:31:c4:cc:f9:9b:c4:54:f2:8b:84:4a: bb:98:75:db:7f:16:f0:84:d2:cf:23:43:9a:69:44:e7:3a:51: e0:ff:ef:9d:ba:6e:ae:b7:e8:58:5f:d5:8a:4d:4d:1d:06:c6: 5c:5d:99:61:aa:ea:5c:30:59:69:3d:0e:f9:08:89:c3:71:56: 2e:3c:80:ad:2e:ca:69:2f:ed:c1:04:6c:bd:32:5e:6d:c5:56: b9:dd:f7:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdBOEUxMTAvBgNVBAUTKDBCODEzRTJCQkE4NDA2OUVCNDM0RDY1NjY2N0ZFQ0Ux RjYxQjQ5NEIwHhcNMjUwNDI1MDM1OTM0WhcNMjUwNTAyMDM1OTM0WjAYMRYwFAYD VQQDEw02ODBiMDhhNy1lOTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAGGgLVnr7dALRzypWadjagRnpEq59rYzEYKf/DswpmnhMWc+3IcCsfVTSlI ayZ5PyjjVHmCeAjbPsNeOUzyIC1p7/AYeADl7mgeFedUOfc+9ibDioldkEbpmk8L nIi/BAXKvOb5fhL7ivNmNZpof3ZRq3xrNNCJ0OSMGh28Quzdn9lwtn8dTLjJQrkg tS4xTePLx2eYEzbfx3Ie1sC2NE0qIlQeN6QKujxEHuvScDm2xz7pFROriduASDXC Nt+QNq17hAxtY8/NOVKXIeydJkeIyVAP2jqAm/G2pfPC7cI5zUcHHDoE4h5xBDeX VCeL7n7PXltXwuYXPJurmM8shQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFVRAxd GmnGtoq1M1rJbrlqRo+NMB8GA1UdIwQYMBaAFAuBPiu6hAaetDTWVmZ/7OH2G0lL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0E4RS9BMDUxNTZBNjgz NUMxMUVFODhFQUI4NEZDNEY5QUUwMi9DNEUtSzdxRUJwNjBOTlpXWm5fczRmWWJT VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M0RS1LN3FFQnA2ME5OWldabl9zNGZZYlNVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0E4RS9BMDUxNTZBNjgzNUMxMUVFODhFQUI4NEZDNEY5QUUwMi9DNEUtSzdxRUJw NjBOTlpXWm5fczRmWWJTVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAaef7BeNUYXnf0OjbUV0LZCrJzaECwrF1F9SpgcPImpt8NWhj3AqX bG1Ew7gQHQ+qta14HJkvFn1FM4QKg43AnjxkLPLywc10Ku9OOTTmigWedUKS4zqu 1GlK4qwh/sYp/9DdACtHeUWb+t8BS9wlIYEIdgeRRrh1EPQJ+he7LMJC5Mq3YcA4 ma0jL0ySlfkRG5647t4Lh0NJd8UTRnmEycUZ0smPuvLtMcTM+ZvEVPKLhEq7mHXb fxbwhNLPI0OaaUTnOlHg/++dum6ut+hYX9WKTU0dBsZcXZlhqupcMFlpPQ75CInD cVYuPICtLsppL+3BBGy9Ml5txVa53ff5 -----END CERTIFICATE-----Generated at Sat Apr 26 12:58:35 2025 by rpki-client