$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft File: 4deDfrzHqaTRdRZXhgR2OivQQnI.mft (raw, json) Hash identifier: Gjc4OWWM26k6hIvleUc+0t9P4J7l5C8UkrNveqtGOSo= Subject key identifier: 3B:F9:5C:FF:DD:A0:A9:77:9F:E2:96:91:32:49:98:37:77:39:B9:32 Authority key identifier: E1:D7:83:7E:BC:C7:A9:A4:D1:75:16:57:86:04:76:3A:2B:D0:42:72 Certificate issuer: /CN=A91EE92F/serialNumber=E1D7837EBCC7A9A4D17516578604763A2BD04272 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft Manifest number: 75 Signing time: Fri 25 Apr 2025 05:48:05 +0000 Manifest this update: Fri 25 Apr 2025 05:48:04 +0000 Manifest next update: Fri 02 May 2025 05:48:04 +0000 Files and hashes: 1: 4deDfrzHqaTRdRZXhgR2OivQQnI.crl (hash: BLpFEYKeawG0x+axi1QwC+bDqo59E4w8CSOyEAnBu8A=) 2: 2EC0897A740C11EFB881CE37C4F9AE02.roa (hash: jK7WeiMtYEjncK+3WbHQbUVCOX5jz02RAdo98TCxxKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.crl rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE92F, serialNumber=E1D7837EBCC7A9A4D17516578604763A2BD04272 Validity Not Before: Apr 25 05:48:04 2025 GMT Not After : May 2 05:48:04 2025 GMT Subject: CN=680b2215-eff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d9:b3:58:6f:eb:db:f2:16:4a:e0:f5:fd:0c: ce:71:46:28:17:01:99:92:4c:68:74:c0:32:01:3b: 78:57:78:a5:51:9a:bb:0f:f9:22:31:2d:d0:b3:12: 22:f1:ad:b3:16:15:79:aa:58:46:5c:48:18:ae:20: 4a:68:3c:71:b0:e2:a5:50:e0:3a:96:18:e1:7c:ac: eb:d7:a4:92:1e:bc:4b:d0:ba:8d:e1:dc:31:bb:b5: 48:6c:9e:d1:dc:a3:8d:91:44:69:89:af:1e:dc:97: 1c:c6:1f:6c:59:07:cf:c7:88:65:44:43:d4:ee:ef: 81:47:fa:f2:bf:3a:e1:0b:bf:dd:de:f7:33:60:92: 8c:87:bd:c6:cd:78:af:c8:c7:2b:de:04:67:82:c6: a8:47:4d:30:d5:93:9f:6c:8f:f0:72:75:c8:9e:43: 06:6a:c4:5a:06:f2:10:ca:c3:f2:54:c2:2e:f0:ed: 20:96:f2:7f:36:0c:41:04:3c:ec:21:be:cd:26:5f: ad:7a:82:c9:bf:19:43:a4:06:59:c2:b3:be:1e:d9: 5a:fa:e8:f5:ce:58:06:4d:7b:53:98:15:2f:95:86: fc:6d:92:ef:a6:50:8c:37:1a:26:f3:b3:07:c5:a3: 2c:fc:3e:d1:17:b2:19:9a:ab:40:d6:ae:44:8c:ec: d7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F9:5C:FF:DD:A0:A9:77:9F:E2:96:91:32:49:98:37:77:39:B9:32 X509v3 Authority Key Identifier: keyid:E1:D7:83:7E:BC:C7:A9:A4:D1:75:16:57:86:04:76:3A:2B:D0:42:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:9a:9b:bd:5c:fa:94:c4:10:01:2f:ea:4e:1a:c7:fa:87:d4: 0f:5b:13:05:eb:77:c8:bf:a8:05:66:eb:14:f2:a7:84:dc:29: f7:93:8d:6e:7d:39:e2:5d:a1:b9:19:59:6c:9c:b5:99:84:92: b3:44:16:df:79:5a:63:86:cc:35:fc:d8:b3:31:82:9f:84:ba: 9d:e4:6a:1b:f3:8f:3c:2d:b1:60:8e:eb:1c:8f:51:60:5b:cb: cf:eb:c9:7c:75:ce:60:00:fb:a7:32:83:9e:32:97:1d:21:64: c8:7e:a3:24:60:31:6d:3e:84:79:5d:27:9e:53:e3:75:74:3b: 3b:20:2b:24:50:91:9c:ac:85:69:4e:97:bf:32:d2:53:bc:ef: 72:60:f5:fa:58:38:77:7a:92:19:48:6b:86:af:6c:90:ec:50: db:39:61:ae:4a:30:e5:e4:b6:a4:9c:03:29:14:69:a6:72:0a: b7:e1:85:0a:38:c8:20:56:11:0c:25:0c:c2:ad:a8:b5:59:96: c7:f1:22:f4:7d:6b:5b:4b:da:dd:76:67:82:44:dc:8a:e6:1a: c5:f7:66:d4:78:de:fd:03:02:8f:5a:0f:9d:36:04:49:d8:96: 95:4b:c1:dc:73:d3:2d:87:2e:20:31:d6:24:38:a6:b5:4e:fb: 7f:18:43:ec -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RTkyRjExMC8GA1UEBRMoRTFENzgzN0VCQ0M3QTlBNEQxNzUxNjU3ODYwNDc2M0Ey QkQwNDI3MjAeFw0yNTA0MjUwNTQ4MDRaFw0yNTA1MDIwNTQ4MDRaMBgxFjAUBgNV BAMTDTY4MGIyMjE1LWVmZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDm2bNYb+vb8hZK4PX9DM5xRigXAZmSTGh0wDIBO3hXeKVRmrsP+SIxLdCzEiLx rbMWFXmqWEZcSBiuIEpoPHGw4qVQ4DqWGOF8rOvXpJIevEvQuo3h3DG7tUhsntHc o42RRGmJrx7clxzGH2xZB8/HiGVEQ9Tu74FH+vK/OuELv93e9zNgkoyHvcbNeK/I xyveBGeCxqhHTTDVk59sj/BydcieQwZqxFoG8hDKw/JUwi7w7SCW8n82DEEEPOwh vs0mX616gsm/GUOkBlnCs74e2Vr66PXOWAZNe1OYFS+Vhvxtku+mUIw3GibzswfF oyz8PtEXshmaq0DWrkSM7NefAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUO/lc/92g qXef4paRMkmYN3c5uTIwHwYDVR0jBBgwFoAU4deDfrzHqaTRdRZXhgR2OivQQnIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFOTJGLzFCMjkwQjVFNzQw QjExRUY5RTlDMDMzNkM0RjlBRTAyLzRkZURmcnpIcWFUUmRSWlhoZ1IyT2l2UVFu SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNGRlRGZyekhxYVRSZFJaWGhnUjJPaXZRUW5JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF OTJGLzFCMjkwQjVFNzQwQjExRUY5RTlDMDMzNkM0RjlBRTAyLzRkZURmcnpIcWFU UmRSWlhoZ1IyT2l2UVFuSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALSam71c+pTEEAEv6k4ax/qH1A9bEwXrd8i/qAVm6xTyp4TcKfeTjW59 OeJdobkZWWyctZmEkrNEFt95WmOGzDX82LMxgp+Eup3kahvzjzwtsWCO6xyPUWBb y8/ryXx1zmAA+6cyg54ylx0hZMh+oyRgMW0+hHldJ55T43V0OzsgKyRQkZyshWlO l78y0lO873Jg9fpYOHd6khlIa4avbJDsUNs5Ya5KMOXktqScAykUaaZyCrfhhQo4 yCBWEQwlDMKtqLVZlsfxIvR9a1tL2t12Z4JE3IrmGsX3ZtR43v0DAo9aD502BEnY lpVLwdxz0y2HLiAx1iQ4prVO+38YQ+w= -----END CERTIFICATE-----Generated at Sat Apr 26 03:24:58 2025 by rpki-client