$ rpki-client -vvf rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft File: MJk4cOkSzRkdgKzvMDV6VP80-C4.mft (raw, json) Hash identifier: QHUfU8Xo8oZFOVnM598XKZRb+1wVEwRF0QKzTzegMnc= Subject key identifier: FA:4D:26:F1:B9:E8:0E:1B:A4:9F:66:3B:30:8C:A8:1A:25:3C:9D:CB Authority key identifier: 30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E Certificate issuer: /CN=A91E84A9/serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E Certificate serial: 11FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft Manifest number: 11F8 Signing time: Thu 24 Apr 2025 17:10:29 +0000 Manifest this update: Thu 24 Apr 2025 17:10:29 +0000 Manifest next update: Thu 01 May 2025 17:10:29 +0000 Files and hashes: 1: MJk4cOkSzRkdgKzvMDV6VP80-C4.crl (hash: 85fC14QdUtgTQIBrtlWMT7bnVe3QdDZ6fFvwOGNNqNk=) 2: DA7E3CA6E19811E8822B8E5CC4F9AE02.roa (hash: nEHygU0iQ55kYxCvR5kzgzTy6GI2Ua1TfbgvO9Q4FhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4607 (0x11ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E84A9, serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E Validity Not Before: Apr 24 17:10:29 2025 GMT Not After : May 1 17:10:29 2025 GMT Subject: CN=680a7085-b191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ce:54:98:8b:29:5c:d6:f6:4b:40:b9:06:1f: ca:67:fe:76:81:fc:65:ba:bf:a9:2e:cc:cc:80:77: e1:98:45:84:d7:1d:12:a5:9e:a2:f4:5c:a8:50:5e: bc:62:d1:47:61:b3:eb:ed:33:8b:83:9b:30:53:16: 10:8e:1e:9a:bc:87:db:96:b2:2e:e4:df:ba:31:dc: 9f:09:c4:af:5b:8b:d7:ff:ed:04:e4:97:65:5d:45: 92:da:0f:b3:3f:bf:72:f5:dd:6d:c4:3b:ab:f3:5f: e5:45:08:a5:40:b9:4b:b2:ab:ce:57:37:45:6a:4d: 95:f7:b0:bb:13:9f:6d:af:20:d3:e2:ce:95:82:9b: d6:81:94:86:23:19:28:31:9c:8b:38:f7:68:f6:a5: 5a:a1:93:95:20:30:9f:d3:1c:92:83:8f:24:65:3d: a7:2a:56:e9:a5:91:20:b4:51:bc:a0:96:ee:05:85: 58:ee:e4:47:16:81:e6:6a:d9:5d:b5:3c:3a:93:41: 7a:7e:ac:0f:30:cd:1f:ec:7e:40:5c:e6:37:6d:e3: 33:61:af:be:ba:aa:be:ca:e2:3a:4d:a9:b9:5e:ff: 9d:20:14:76:62:c6:b1:76:dc:e2:61:62:19:65:96: ab:da:4c:89:1e:84:05:83:18:52:66:d0:fb:1d:c9: 31:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4D:26:F1:B9:E8:0E:1B:A4:9F:66:3B:30:8C:A8:1A:25:3C:9D:CB X509v3 Authority Key Identifier: keyid:30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:00:2b:ef:98:f6:6a:6f:88:20:b6:d1:1a:6d:49:23:78:f1: d3:85:b8:b7:28:5c:93:41:86:54:7a:fb:b8:c3:76:39:c1:b3: a4:7a:2e:7f:6f:78:d3:6b:60:08:7e:c3:3c:ba:d9:56:73:65: 8c:08:fa:a3:1a:8e:08:6b:6e:ff:36:d3:76:2c:c9:2d:65:94: 29:07:96:60:0a:d3:e1:30:db:e2:50:c7:3f:1c:ee:e8:6a:50: 8b:95:c5:32:ff:7c:38:39:f7:88:e3:88:45:c8:3c:80:1f:07: a6:b9:0e:c0:d8:c7:71:4a:eb:67:43:79:c7:ca:6c:27:86:cd: a6:be:78:25:84:8b:2b:fa:f8:19:16:25:c0:cb:e8:c1:f7:8c: af:98:c5:ce:81:1f:eb:e9:ad:af:b8:af:c9:26:8c:82:00:ad: 0f:5f:55:2a:ad:cc:6f:cf:8a:a1:76:f3:c2:fc:de:59:87:a9: 94:60:3c:fd:1e:91:42:e9:b0:2e:25:7e:2d:84:61:28:95:db: e2:4e:27:7a:8e:ad:12:b5:76:81:8b:ba:86:d3:b6:87:dc:e1: 15:3e:24:bf:db:39:50:ce:27:80:b8:5a:16:2a:7e:ae:df:5a: 94:7f:40:19:57:bd:f6:5b:3e:a9:34:65:32:9e:4a:64:7e:84: 3a:6f:f1:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg0QTkxMTAvBgNVBAUTKDMwOTkzODcwRTkxMkNEMTkxRDgwQUNFRjMwMzU3QTU0 RkYzNEY4MkUwHhcNMjUwNDI0MTcxMDI5WhcNMjUwNTAxMTcxMDI5WjAYMRYwFAYD VQQDEw02ODBhNzA4NS1iMTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwc5UmIspXNb2S0C5Bh/KZ/52gfxlur+pLszMgHfhmEWE1x0SpZ6i9FyoUF68 YtFHYbPr7TOLg5swUxYQjh6avIfblrIu5N+6MdyfCcSvW4vX/+0E5JdlXUWS2g+z P79y9d1txDur81/lRQilQLlLsqvOVzdFak2V97C7E59tryDT4s6VgpvWgZSGIxko MZyLOPdo9qVaoZOVIDCf0xySg48kZT2nKlbppZEgtFG8oJbuBYVY7uRHFoHmatld tTw6k0F6fqwPMM0f7H5AXOY3beMzYa++uqq+yuI6Tam5Xv+dIBR2YsaxdtziYWIZ ZZar2kyJHoQFgxhSZtD7HckxZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpNJvG5 6A4bpJ9mOzCMqBolPJ3LMB8GA1UdIwQYMBaAFDCZOHDpEs0ZHYCs7zA1elT/NPgu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODRBOS82QTkwQTlDMEUx OTcxMUU4Qjk0QzA1NThDNEY5QUUwMi9NSms0Y09rU3pSa2RnS3p2TURWNlZQODAt QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01KazRjT2tTelJrZGdLenZNRFY2VlA4MC1DNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODRBOS82QTkwQTlDMEUxOTcxMUU4Qjk0QzA1NThDNEY5QUUwMi9NSms0Y09rU3pS a2RnS3p2TURWNlZQODAtQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQACvvmPZqb4ggttEabUkjePHThbi3KFyTQYZUevu4w3Y5wbOkei5/ b3jTa2AIfsM8utlWc2WMCPqjGo4Ia27/NtN2LMktZZQpB5ZgCtPhMNviUMc/HO7o alCLlcUy/3w4OfeI44hFyDyAHwemuQ7A2MdxSutnQ3nHymwnhs2mvnglhIsr+vgZ FiXAy+jB94yvmMXOgR/r6a2vuK/JJoyCAK0PX1Uqrcxvz4qhdvPC/N5Zh6mUYDz9 HpFC6bAuJX4thGEoldviTid6jq0StXaBi7qG07aH3OEVPiS/2zlQzieAuFoWKn6u 31qUf0AZV732Wz6pNGUynkpkfoQ6b/Ez -----END CERTIFICATE-----Generated at Sat Apr 26 14:29:05 2025 by rpki-client