$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft File: c4TcZntNSaWs1QpYtIkWoVrCYWs.mft (raw, json) Hash identifier: uOjqJ+hCJ28XJhOx1N2mE3+QGfYD1RXXAgchDcBwyhc= Subject key identifier: C6:98:47:45:77:A1:47:C8:07:DB:AC:0E:86:A4:2A:D0:97:B2:1A:24 Authority key identifier: 73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B Certificate issuer: /CN=A91E8D07/serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft Manifest number: 011D Signing time: Fri 25 Apr 2025 03:51:23 +0000 Manifest this update: Fri 25 Apr 2025 03:51:22 +0000 Manifest next update: Fri 02 May 2025 03:51:22 +0000 Files and hashes: 1: c4TcZntNSaWs1QpYtIkWoVrCYWs.crl (hash: +lD/h8Dilm8MYUO5TVyFani7oFPPjIabyZppMa3NKjc=) 2: F1E9B236718E11EEAF67DB48C4F9AE02.roa (hash: 1MgG7WTwswH0kCn616eOpfwXJOyuod5SbIGbahzjBCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8D07, serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Validity Not Before: Apr 25 03:51:22 2025 GMT Not After : May 2 03:51:22 2025 GMT Subject: CN=680b06bb-fb97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f8:c1:f1:ea:01:8b:20:74:0a:71:22:9b:70: 40:78:2c:79:b5:5e:7d:17:aa:bc:03:a8:cf:af:b7: 73:31:14:59:bc:ad:dc:99:fc:db:77:b5:e7:cb:05: 39:e8:e4:fc:2c:1b:b7:26:45:6f:47:88:47:0a:cf: d0:16:bf:61:9f:fe:c8:c8:04:71:8b:ef:58:0c:25: 88:a3:30:f4:c7:9e:d2:17:2a:c7:97:19:57:2a:54: 33:cf:2f:94:ec:ca:1b:68:79:3e:d1:a8:e1:67:cc: eb:6a:f8:27:e4:9c:1e:75:fc:3f:5b:30:4a:19:31: 74:ec:ec:1a:6b:0f:5b:c0:ec:69:70:76:ca:49:a7: 57:c4:5e:b0:0e:a5:0c:26:b9:cd:0f:36:49:16:bb: c2:9f:96:69:c9:79:f0:3b:42:ab:54:f5:b6:86:9a: 02:10:de:f8:19:15:57:d8:81:9b:67:ca:ef:08:ed: 02:6f:fc:f5:a3:e7:25:a7:f0:de:37:b7:e5:2a:cc: a0:6c:f2:6e:7d:0e:16:15:c1:9d:50:d8:b0:62:67: 89:e3:e9:68:b8:fc:52:37:a8:29:bb:53:68:d8:d1: 6d:9a:a4:7d:89:32:37:06:09:9a:81:e4:fd:4b:b0: a4:67:e4:55:46:69:5f:19:2d:5c:7a:de:13:80:9d: 0d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:98:47:45:77:A1:47:C8:07:DB:AC:0E:86:A4:2A:D0:97:B2:1A:24 X509v3 Authority Key Identifier: keyid:73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:40:62:ad:58:cb:8e:90:e8:c1:a4:c6:5b:41:9f:ec:5a:ea: e2:21:5e:cf:1e:f9:59:89:d1:6b:cf:7a:8c:d5:9c:b6:b1:cb: ce:22:2b:da:ac:60:0f:27:df:22:e0:f0:d8:27:8b:34:d3:94: d6:85:b5:96:de:7d:36:07:ff:7d:3e:dd:9a:b4:16:d1:35:54: 14:5b:48:8f:9d:38:32:cf:bf:21:74:7d:e6:64:a9:18:da:88: f1:f4:bb:e9:31:6e:7f:bd:16:d6:ec:1d:bc:be:bd:3e:ca:43: af:eb:37:72:1f:32:8e:1d:85:a0:49:f7:8e:71:f7:7e:8b:43: 90:6e:ef:d9:80:a5:cb:18:cb:20:ed:b2:22:a1:7f:c6:91:ef: 08:62:ca:bc:2c:d0:06:09:99:05:c0:e1:f3:bd:20:ea:8e:64: 73:22:f7:30:76:0f:b7:66:22:9c:91:e0:e0:51:c9:25:d5:63: 9c:1f:28:8f:52:b1:04:23:d3:0a:3f:d7:84:aa:b7:c6:e2:f9: 36:5a:98:86:57:69:4e:21:22:12:a8:8c:08:5a:4e:29:29:0e: 5b:13:f4:d4:25:a0:de:f8:6c:1f:19:63:bd:07:fc:39:77:e2: a7:28:6b:6d:d5:ab:dd:7b:12:aa:9a:4e:5d:2d:e2:88:50:f1: 25:97:92:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThEMDcxMTAvBgNVBAUTKDczODREQzY2N0I0RDQ5QTVBQ0Q1MEE1OEI0ODkxNkEx NUFDMjYxNkIwHhcNMjUwNDI1MDM1MTIyWhcNMjUwNTAyMDM1MTIyWjAYMRYwFAYD VQQDEw02ODBiMDZiYi1mYjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/jB8eoBiyB0CnEim3BAeCx5tV59F6q8A6jPr7dzMRRZvK3cmfzbd7XnywU5 6OT8LBu3JkVvR4hHCs/QFr9hn/7IyARxi+9YDCWIozD0x57SFyrHlxlXKlQzzy+U 7MobaHk+0ajhZ8zravgn5Jwedfw/WzBKGTF07Owaaw9bwOxpcHbKSadXxF6wDqUM JrnNDzZJFrvCn5ZpyXnwO0KrVPW2hpoCEN74GRVX2IGbZ8rvCO0Cb/z1o+clp/De N7flKsygbPJufQ4WFcGdUNiwYmeJ4+louPxSN6gpu1No2NFtmqR9iTI3BgmageT9 S7CkZ+RVRmlfGS1cet4TgJ0NUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMaYR0V3 oUfIB9usDoakKtCXshokMB8GA1UdIwQYMBaAFHOE3GZ7TUmlrNUKWLSJFqFawmFr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQwNy81MDU1NjBCNjZF N0IxMUVFQjdFOTdENUZDNEY5QUUwMi9jNFRjWm50TlNhV3MxUXBZdElrV29WckNZ V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M0VGNabnROU2FXczFRcFl0SWtXb1ZyQ1lXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEQwNy81MDU1NjBCNjZFN0IxMUVFQjdFOTdENUZDNEY5QUUwMi9jNFRjWm50TlNh V3MxUXBZdElrV29WckNZV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADQGKtWMuOkOjBpMZbQZ/sWuriIV7PHvlZidFrz3qM1Zy2scvOIiva rGAPJ98i4PDYJ4s005TWhbWW3n02B/99Pt2atBbRNVQUW0iPnTgyz78hdH3mZKkY 2ojx9LvpMW5/vRbW7B28vr0+ykOv6zdyHzKOHYWgSfeOcfd+i0OQbu/ZgKXLGMsg 7bIioX/Gke8IYsq8LNAGCZkFwOHzvSDqjmRzIvcwdg+3ZiKckeDgUckl1WOcHyiP UrEEI9MKP9eEqrfG4vk2WpiGV2lOISISqIwIWk4pKQ5bE/TUJaDe+GwfGWO9B/w5 d+KnKGtt1avdexKqmk5dLeKIUPEll5K+ -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:56 2025 by rpki-client