$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft File: T8Rg8J-QqobK9GfCha149DEnILA.mft (raw, json) Hash identifier: tPcKwhgryK800KEKI73I8QUCylexTIjwwTKpfKhp+Zk= Subject key identifier: A8:49:73:32:27:17:D4:60:AD:5D:AB:6C:FE:4F:BD:AE:D3:FE:64:0A Authority key identifier: 4F:C4:60:F0:9F:90:AA:86:CA:F4:67:C2:85:AD:78:F4:31:27:20:B0 Certificate issuer: /CN=A91EDD99/serialNumber=4FC460F09F90AA86CAF467C285AD78F4312720B0 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft Manifest number: B4 Signing time: Fri 25 Apr 2025 05:04:45 +0000 Manifest this update: Fri 25 Apr 2025 05:04:45 +0000 Manifest next update: Fri 02 May 2025 05:04:45 +0000 Files and hashes: 1: T8Rg8J-QqobK9GfCha149DEnILA.crl (hash: 6LvCC7e48LGEVwOW0JXyxy8fAk5r2N7QFmBbXZemyvY=) 2: F394D822271911EF86EB1C09C4F9AE02.roa (hash: Qh8PjLgGSm0UikgzIoT2yOicsZXmat+tWnCt5geWY08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.crl rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDD99, serialNumber=4FC460F09F90AA86CAF467C285AD78F4312720B0 Validity Not Before: Apr 25 05:04:45 2025 GMT Not After : May 2 05:04:45 2025 GMT Subject: CN=680b17ed-142c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:63:b4:35:09:db:c9:77:93:1f:74:cf:23:19: 60:f2:1a:a8:6c:ac:ca:8c:07:96:1c:eb:e1:16:5e: 66:5e:25:65:aa:25:5c:99:f2:b1:ea:0a:5b:42:77: cb:b1:35:1b:32:42:47:57:80:2d:d0:de:72:04:fc: 1e:56:d6:88:a4:67:8d:41:60:de:05:47:aa:92:69: 6b:ce:e7:5d:2d:ee:a0:73:30:03:b2:96:e3:69:35: c3:b6:23:db:48:74:ba:04:2c:78:26:dd:00:ec:03: 40:79:cf:f4:01:f1:12:2a:ab:93:14:ee:f1:3a:72: ce:f6:49:b4:54:c5:e7:98:58:7b:03:a1:23:b8:a8: b3:91:80:55:09:28:01:2d:a4:00:a0:c1:c8:56:70: 4f:50:89:05:36:99:0a:29:a1:ae:60:40:33:4f:e2: 4b:4f:d7:f5:66:f5:02:63:48:f6:c5:a0:6f:42:1d: e3:08:2f:09:61:47:b5:f7:e9:6b:b9:d1:ba:bd:a7: 9f:5f:eb:aa:4d:12:27:65:38:7e:d8:63:5b:ca:5d: 1a:ae:2c:71:f2:7c:ee:6d:92:e4:dc:c8:05:0a:7f: 7c:30:78:11:e1:38:2b:f5:10:e3:73:dd:d4:84:86: cf:9b:4a:15:bf:be:26:2d:ea:79:da:b7:b6:5a:c8: 1d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:49:73:32:27:17:D4:60:AD:5D:AB:6C:FE:4F:BD:AE:D3:FE:64:0A X509v3 Authority Key Identifier: keyid:4F:C4:60:F0:9F:90:AA:86:CA:F4:67:C2:85:AD:78:F4:31:27:20:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:8d:0d:cc:9c:46:42:55:2f:5c:bb:4b:99:46:ca:26:b6:57: b3:0e:2b:c3:e0:cb:d9:6c:cf:b4:ea:96:98:13:fc:57:8a:f6: 33:31:b0:74:da:8c:1b:83:52:99:75:4b:d0:16:9d:e8:57:2f: c3:0b:d1:82:27:bc:8f:ee:11:a3:5c:b5:2a:05:ca:75:ae:29: d6:7c:ab:29:b1:b0:d8:28:08:3c:4e:e4:f4:f6:2a:e9:58:d7: bd:3b:ec:16:cd:27:ab:c7:34:28:7b:70:e8:f6:f5:e2:9b:9e: dd:dc:9a:68:6d:d1:4a:01:00:7e:01:be:b0:33:4f:44:03:2f: aa:1d:a4:29:1f:b9:78:33:7d:a0:62:71:5f:52:61:4b:1a:40: 33:2b:af:f0:97:fc:86:1b:0b:5e:2b:b5:15:d5:1c:2c:74:6e: 54:3b:9f:82:c5:85:17:3e:e8:fd:b7:23:02:ae:c4:bd:b1:3c: b1:08:c7:f9:fe:f2:db:c8:7d:11:40:17:89:c3:91:76:58:bc: 56:a3:e2:94:99:46:d2:2c:87:46:d5:9e:eb:bb:18:81:cf:41: 01:22:3d:9a:50:d9:fe:52:5b:f0:aa:7d:3d:59:ec:e6:f7:a3: ea:6f:8a:4f:54:53:a5:8a:6c:4f:65:90:e4:ad:e0:70:eb:75: 6c:5a:06:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUREOTkxMTAvBgNVBAUTKDRGQzQ2MEYwOUY5MEFBODZDQUY0NjdDMjg1QUQ3OEY0 MzEyNzIwQjAwHhcNMjUwNDI1MDUwNDQ1WhcNMjUwNTAyMDUwNDQ1WjAYMRYwFAYD VQQDEw02ODBiMTdlZC0xNDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn2O0NQnbyXeTH3TPIxlg8hqobKzKjAeWHOvhFl5mXiVlqiVcmfKx6gpbQnfL sTUbMkJHV4At0N5yBPweVtaIpGeNQWDeBUeqkmlrzuddLe6gczADspbjaTXDtiPb SHS6BCx4Jt0A7ANAec/0AfESKquTFO7xOnLO9km0VMXnmFh7A6EjuKizkYBVCSgB LaQAoMHIVnBPUIkFNpkKKaGuYEAzT+JLT9f1ZvUCY0j2xaBvQh3jCC8JYUe19+lr udG6vaefX+uqTRInZTh+2GNbyl0arixx8nzubZLk3MgFCn98MHgR4Tgr9RDjc93U hIbPm0oVv74mLep52re2WsgdewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhJczIn F9RgrV2rbP5Pva7T/mQKMB8GA1UdIwQYMBaAFE/EYPCfkKqGyvRnwoWtePQxJyCw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREQ5OS8wNTcyOUI0QzE5 QjkxMUVGOEUwREZFM0VDNEY5QUUwMi9UOFJnOEotUXFvYks5R2ZDaGExNDlERW5J TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q4Umc4Si1RcW9iSzlHZkNoYTE0OURFbklMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REQ5OS8wNTcyOUI0QzE5QjkxMUVGOEUwREZFM0VDNEY5QUUwMi9UOFJnOEotUXFv Yks5R2ZDaGExNDlERW5JTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDjQ3MnEZCVS9cu0uZRsomtlezDivD4MvZbM+06paYE/xXivYzMbB0 2owbg1KZdUvQFp3oVy/DC9GCJ7yP7hGjXLUqBcp1rinWfKspsbDYKAg8TuT09irp WNe9O+wWzSerxzQoe3Do9vXim57d3JpobdFKAQB+Ab6wM09EAy+qHaQpH7l4M32g YnFfUmFLGkAzK6/wl/yGGwteK7UV1RwsdG5UO5+CxYUXPuj9tyMCrsS9sTyxCMf5 /vLbyH0RQBeJw5F2WLxWo+KUmUbSLIdG1Z7ruxiBz0EBIj2aUNn+Ulvwqn09Wezm 96Pqb4pPVFOlimxPZZDkreBw63VsWgb0 -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:27 2025 by rpki-client