$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft File: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft (raw, json) Hash identifier: NYXWj6iX75urhy5CitMxZxlIX97sJTAJcqglPrgEiU8= Subject key identifier: 45:EA:FE:3F:6D:95:20:4A:2B:6A:66:04:16:E7:3E:7D:B1:B5:94:63 Authority key identifier: 52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 Certificate issuer: /CN=A91E9467/serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Certificate serial: 0472 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft Manifest number: 045C Signing time: Fri 25 Apr 2025 00:01:05 +0000 Manifest this update: Fri 25 Apr 2025 00:01:05 +0000 Manifest next update: Fri 02 May 2025 00:01:05 +0000 Files and hashes: 1: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl (hash: DbVwHX8uojCkT5DieqUiS+UI3+mm9ovUGUCRgkeLIXo=) 2: F63AA888900F11ED8B4CB41DC4F9AE02.roa (hash: SXmEoVAwCuv2S1VkQaBNQLi7h8OwZxPvKiz0YPbjYQg=) 3: 4BA245C01F3711F0BFC63D0BC4F9AE02.roa (hash: gBd3TD5jRUsWy0YPJTKEnjjS1ownDJ8N6YJxz3eedfo=) 4: 8120226CBEE111ECBFC4F882C4F9AE02.roa (hash: cKv5ZDuMTRB1GZ6qDVjyr/DKInN5ROhN7fMypCO2t9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1138 (0x472) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9467, serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Validity Not Before: Apr 25 00:01:05 2025 GMT Not After : May 2 00:01:05 2025 GMT Subject: CN=680ad0c1-8b7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b0:4b:bb:ce:94:c3:6c:da:05:94:75:c1:58: f6:76:65:4f:67:f4:16:30:e1:41:b9:ca:e0:02:b5: 10:47:ca:76:01:92:55:bb:f8:d9:d9:8a:e1:46:2a: 47:65:82:e0:e3:d0:96:d1:ef:53:5f:bd:8d:15:84: 50:60:6c:15:01:16:d3:56:ac:43:25:72:fe:c9:9c: 70:07:bc:34:89:e0:a8:64:2b:38:d9:61:98:80:92: 68:6f:60:4d:a8:1f:be:c6:40:08:6a:86:d3:8c:cc: c1:68:64:b9:11:35:30:98:9d:df:c9:86:37:18:da: 31:c3:64:ba:36:e4:dd:f7:eb:f0:03:30:00:c8:66: 94:2e:27:5e:26:fb:5f:e4:f9:6e:a2:51:9b:95:01: 84:f8:b5:25:8f:59:10:99:8b:51:f2:d5:87:bf:83: e3:b1:19:8c:c9:a9:3d:32:ee:54:7d:09:41:e2:66: 9e:b9:d1:2c:95:54:2f:75:b2:b8:5e:0d:ac:7c:6b: 9b:5a:32:70:5d:d5:3b:2b:d0:8b:aa:98:9a:9a:03: 5a:a0:8b:ec:61:cf:9b:a2:d9:d5:af:bd:65:66:9d: e4:5b:f1:5e:06:4c:2d:47:84:dd:fd:ba:6f:7f:37: 84:df:b4:dd:df:98:7b:6f:98:dc:a4:c6:12:28:af: 67:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:EA:FE:3F:6D:95:20:4A:2B:6A:66:04:16:E7:3E:7D:B1:B5:94:63 X509v3 Authority Key Identifier: keyid:52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:31:6f:9b:cf:82:7a:83:78:e6:af:3a:fd:dc:67:43:6e:17: be:69:b0:41:f7:b7:83:ac:2f:65:fa:25:15:a0:8f:15:82:fa: ce:c9:55:66:d6:45:ef:ff:44:ac:91:d5:44:56:cc:41:f6:c9: 33:f5:42:77:e8:19:72:3d:a7:75:c0:dd:e8:f5:2b:4a:af:e5: 96:0a:88:39:cc:66:e3:4d:38:01:86:10:65:0b:a3:c5:99:59: ee:2a:13:f1:1c:4e:d1:d9:0c:a4:e6:2e:e4:9b:2f:73:2f:37: 7d:d2:1e:30:a2:a5:5c:f6:87:02:49:87:b2:99:9f:de:34:0f: 2d:db:20:e1:46:6a:5f:21:7f:1e:25:16:02:b6:00:ca:3c:f2: ad:db:48:61:2a:6d:ce:d6:96:98:fb:fa:67:ea:03:ce:e2:13: 9d:46:a4:86:81:b5:52:ab:53:0c:b8:c2:9d:4d:35:6b:f8:5c: df:d8:03:a7:bd:d6:cd:37:91:fc:c1:ef:72:69:6d:e2:65:64: 3d:89:8e:0b:0b:44:0a:1d:19:ec:7b:bb:c4:ce:05:f7:95:00: ff:bb:69:f3:d7:ad:25:e1:3b:a9:f2:3b:28:95:29:a8:4f:1c: 49:15:c3:3d:e3:1c:ff:ec:9c:d6:ff:bc:06:b9:4b:d9:60:17: df:02:66:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0NjcxMTAvBgNVBAUTKDUyQkU5RERFOTU2OEZFNEFEQ0EwRjM0NUIzNjE3QTYz QzMwNzU4NDUwHhcNMjUwNDI1MDAwMTA1WhcNMjUwNTAyMDAwMTA1WjAYMRYwFAYD VQQDEw02ODBhZDBjMS04YjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLBLu86Uw2zaBZR1wVj2dmVPZ/QWMOFBucrgArUQR8p2AZJVu/jZ2YrhRipH ZYLg49CW0e9TX72NFYRQYGwVARbTVqxDJXL+yZxwB7w0ieCoZCs42WGYgJJob2BN qB++xkAIaobTjMzBaGS5ETUwmJ3fyYY3GNoxw2S6NuTd9+vwAzAAyGaULideJvtf 5PluolGblQGE+LUlj1kQmYtR8tWHv4PjsRmMyak9Mu5UfQlB4maeudEslVQvdbK4 Xg2sfGubWjJwXdU7K9CLqpiamgNaoIvsYc+botnVr71lZp3kW/FeBkwtR4Td/bpv fzeE37Td35h7b5jcpMYSKK9nCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXq/j9t lSBKK2pmBBbnPn2xtZRjMB8GA1UdIwQYMBaAFFK+nd6VaP5K3KDzRbNhemPDB1hF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTQ2Ny83NzBCNEYxQTUy NkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19rcmNvUE5GczJGNlk4TUhX RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyNmQzcFZvX2tyY29QTkZzMkY2WThNSFdFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTQ2Ny83NzBCNEYxQTUyNkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19r cmNvUE5GczJGNlk4TUhXRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtMW+bz4J6g3jmrzr93GdDbhe+abBB97eDrC9l+iUVoI8VgvrOyVVm 1kXv/0SskdVEVsxB9skz9UJ36BlyPad1wN3o9StKr+WWCog5zGbjTTgBhhBlC6PF mVnuKhPxHE7R2Qyk5i7kmy9zLzd90h4woqVc9ocCSYeymZ/eNA8t2yDhRmpfIX8e JRYCtgDKPPKt20hhKm3O1paY+/pn6gPO4hOdRqSGgbVSq1MMuMKdTTVr+Fzf2AOn vdbNN5H8we9yaW3iZWQ9iY4LC0QKHRnse7vEzgX3lQD/u2nz160l4Tup8jsolSmo TxxJFcM94xz/7JzW/7wGuUvZYBffAmbY -----END CERTIFICATE-----Generated at Sat Apr 26 16:59:52 2025 by rpki-client