$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft File: 4XI0Y4kx9DllENfQutUfivTrhrY.mft (raw, json) Hash identifier: hlbWFEmkD/knKf0vOZiCtGFlDsxyXgEY282UNznsT8Y= Subject key identifier: EC:32:21:87:95:7C:4D:4D:2A:7B:4F:95:EF:3E:A5:78:3E:7B:45:20 Authority key identifier: E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 Certificate issuer: /CN=A91F34FA/serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Certificate serial: 01CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft Manifest number: 01C8 Signing time: Fri 25 Apr 2025 02:05:10 +0000 Manifest this update: Fri 25 Apr 2025 02:05:10 +0000 Manifest next update: Fri 02 May 2025 02:05:10 +0000 Files and hashes: 1: 4XI0Y4kx9DllENfQutUfivTrhrY.crl (hash: jKw29tHn+crzUkWYhgwW0E51/b2A3XUisLKrVwODhMA=) 2: 8256A692444A11EFB043DE36C4F9AE02.roa (hash: Ple4OYydaAojanyJwx7ZWPyKox9DD4lFfc6gQi2CwTI=) 3: 81B847F4444A11EFB043DE36C4F9AE02.roa (hash: iBZ0Vc5oqFw84Bi0mykH6jGLVo3+N0cmUjqo5T+vIIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:05:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F34FA, serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Validity Not Before: Apr 25 02:05:10 2025 GMT Not After : May 2 02:05:10 2025 GMT Subject: CN=680aedd6-86f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:99:3d:80:4a:bd:3c:85:d3:02:5e:59:1e:a2: 04:71:14:41:d6:39:5f:34:07:e7:7e:07:ae:c6:26: 74:6a:0c:ed:aa:05:8e:9d:86:c0:a5:16:33:05:74: 37:32:a2:38:a9:2a:25:b0:01:b7:bf:6e:fe:77:c1: 2f:72:e3:61:35:41:57:6a:38:88:dc:04:b6:0e:9b: bf:e1:9b:d8:8a:ae:8d:7d:b9:92:7b:a7:94:ce:7a: 53:b8:04:e9:93:61:88:fa:27:a2:0a:00:fb:77:9b: bf:c3:8c:08:32:b7:b4:b5:f2:bd:02:dd:05:4d:9a: 49:b5:b4:14:00:9f:09:8f:86:04:89:d3:06:fd:ce: dc:62:b2:75:0f:fb:99:20:73:62:94:27:58:71:3e: 05:15:22:1e:95:b7:47:cc:31:60:15:4b:8c:26:08: 25:2e:dc:96:e0:93:a9:d6:0b:52:b9:51:ed:24:ed: 77:07:83:0d:da:be:56:92:20:a2:4c:a3:27:90:f1: 09:be:ae:e1:e2:9a:dd:78:f6:30:79:03:a7:da:b5: 10:cb:89:06:14:db:06:0c:8c:9a:57:21:b8:fa:9d: e2:05:6e:68:3c:83:db:fc:c7:3e:b5:6b:b9:9a:7e: 17:ef:8f:03:a2:85:be:3f:46:b7:2a:8f:bc:f2:6d: c1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:32:21:87:95:7C:4D:4D:2A:7B:4F:95:EF:3E:A5:78:3E:7B:45:20 X509v3 Authority Key Identifier: keyid:E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:8e:d3:32:d9:85:25:2e:ba:13:e0:2d:02:f1:cb:dd:85:be: 58:16:a6:b8:cc:46:67:d0:a3:8d:9e:08:c4:80:2c:9f:fc:9d: 06:e5:bb:61:a3:4d:80:b5:11:e7:90:54:60:c5:73:bd:18:d5: 1e:07:bd:1f:22:2a:96:73:3f:0b:74:28:f5:87:84:64:be:69: 91:ae:c8:29:77:f9:c9:08:79:8c:d5:9d:27:96:02:6c:4a:75: a3:d4:e1:5b:e3:93:4d:55:9d:53:8c:6d:19:b7:c4:5c:c5:e0: ba:d4:ab:b8:cc:25:9a:69:9b:c4:f9:54:7b:4b:ce:b1:36:e6: 07:53:5c:29:be:af:95:56:f3:c6:05:b4:e5:4e:6c:8d:d5:cb: 7d:f3:15:7a:fa:04:49:d2:bc:d8:96:9a:86:77:5b:fb:d4:dc: 62:85:06:70:24:5b:46:7d:80:88:8a:0e:cb:92:df:0f:51:5d: f7:cf:bb:e4:b1:2e:dc:85:de:1e:57:57:84:ea:62:06:9b:25: f5:85:51:3f:78:b8:79:be:9d:88:70:79:b3:07:2d:f6:85:1e: d7:17:59:fc:b4:78:27:ce:7b:23:2b:f1:68:de:44:0f:57:7a: fa:fc:f3:6e:5c:df:bb:4e:1b:ac:a1:6c:e8:55:3e:c3:fb:c7: 40:e0:af:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM0RkExMTAvBgNVBAUTKEUxNzIzNDYzODkzMUY0Mzk2NTEwRDdEMEJBRDUxRjhB RjRFQjg2QjYwHhcNMjUwNDI1MDIwNTEwWhcNMjUwNTAyMDIwNTEwWjAYMRYwFAYD VQQDEw02ODBhZWRkNi04NmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5k9gEq9PIXTAl5ZHqIEcRRB1jlfNAfnfgeuxiZ0agztqgWOnYbApRYzBXQ3 MqI4qSolsAG3v27+d8EvcuNhNUFXajiI3AS2Dpu/4ZvYiq6NfbmSe6eUznpTuATp k2GI+ieiCgD7d5u/w4wIMre0tfK9At0FTZpJtbQUAJ8Jj4YEidMG/c7cYrJ1D/uZ IHNilCdYcT4FFSIelbdHzDFgFUuMJgglLtyW4JOp1gtSuVHtJO13B4MN2r5WkiCi TKMnkPEJvq7h4prdePYweQOn2rUQy4kGFNsGDIyaVyG4+p3iBW5oPIPb/Mc+tWu5 mn4X748DooW+P0a3Ko+88m3BFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwyIYeV fE1NKntPle8+pXg+e0UgMB8GA1UdIwQYMBaAFOFyNGOJMfQ5ZRDX0LrVH4r064a2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRGQS80NUU5RTE2QTY1 OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlEbGxFTmZRdXRVZml2VHJo clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYSTBZNGt4OURsbEVOZlF1dFVmaXZUcmhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzRGQS80NUU5RTE2QTY1OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlE bGxFTmZRdXRVZml2VHJoclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCajtMy2YUlLroT4C0C8cvdhb5YFqa4zEZn0KONngjEgCyf/J0G5bth o02AtRHnkFRgxXO9GNUeB70fIiqWcz8LdCj1h4RkvmmRrsgpd/nJCHmM1Z0nlgJs SnWj1OFb45NNVZ1TjG0Zt8RcxeC61Ku4zCWaaZvE+VR7S86xNuYHU1wpvq+VVvPG BbTlTmyN1ct98xV6+gRJ0rzYlpqGd1v71NxihQZwJFtGfYCIig7Lkt8PUV33z7vk sS7chd4eV1eE6mIGmyX1hVE/eLh5vp2IcHmzBy32hR7XF1n8tHgnznsjK/Fo3kQP V3r6/PNuXN+7ThusoWzoVT7D+8dA4K+H -----END CERTIFICATE-----Generated at Sat Apr 26 04:38:38 2025 by rpki-client