$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft File: 4bmm6wyPr_f1TGjAViSijP0_rew.mft (raw, json) Hash identifier: tiJ5N0HOu6f54wNXwrxmsVimgNClPXD0a06yGKVAgp8= Subject key identifier: EE:14:3B:34:7D:BF:C8:79:78:80:9D:E9:7E:56:21:1B:5D:DE:5F:A6 Authority key identifier: E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC Certificate issuer: /CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft Manifest number: 012A Signing time: Fri 25 Apr 2025 03:46:54 +0000 Manifest this update: Fri 25 Apr 2025 03:46:53 +0000 Manifest next update: Fri 02 May 2025 03:46:53 +0000 Files and hashes: 1: 4bmm6wyPr_f1TGjAViSijP0_rew.crl (hash: lbiJ/UsTOTyCyYg6m4XZIXzbmIQ1l3jtpPCh9pBnS6s=) 2: B0D084CC9AAB11EFAEA9A178C4F9AE02.roa (hash: fjyX2RfOmg6f9yVXW0sBxbxsI7qZZGdjm0T3kgyFLM4=) 3: 17FCF7A0CE7011EF928B4F3BC4F9AE02.roa (hash: CQbFQYBGgN4cPicwihuMngPy/DYvAdUX5/XQle8VCXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:46:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F39EC, serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC Validity Not Before: Apr 25 03:46:53 2025 GMT Not After : May 2 03:46:53 2025 GMT Subject: CN=680b05ae-111e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:50:30:b8:34:36:ee:0b:7a:07:1a:ae:88:ac: db:8a:92:54:74:d9:5f:8d:d1:70:94:dd:56:cb:a6: 9a:9d:30:51:c5:c0:ac:ad:b7:68:e8:02:4b:1a:91: a1:b0:88:4f:15:a7:d5:ab:6e:9b:35:30:4d:34:a4: 82:b6:3a:a8:45:7a:15:e9:2e:31:17:d3:1c:e5:6b: 3b:95:bc:13:39:8f:ff:f4:01:f9:fa:a2:50:7b:cf: 70:9a:a3:6f:a4:17:98:e8:79:80:15:13:f1:a3:e8: 5b:9c:96:e3:98:ff:37:9d:48:63:de:e7:8b:77:e7: f4:2f:a2:c9:7e:02:e1:6c:1f:88:b3:be:91:29:d6: ee:32:a1:32:8b:ad:78:1e:38:1c:f9:c8:73:bd:b0: 4a:84:5a:d7:b2:ea:48:c4:56:3c:f7:16:24:31:1e: ef:10:16:2f:56:b3:d2:a9:0c:25:a9:f7:d4:0a:23: d7:46:1d:9d:3e:a9:0d:c0:7c:a6:98:c4:cc:07:ed: 6a:fa:74:46:3c:6a:70:79:aa:a4:99:61:4f:72:84: 6a:2a:11:0f:16:81:1c:0f:a8:be:bd:3f:9c:4b:0a: 96:0d:42:82:b1:f5:1d:44:e0:4f:fd:48:6c:48:da: 11:2e:39:3f:15:c9:22:41:b8:5c:d4:03:da:54:cf: 67:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:14:3B:34:7D:BF:C8:79:78:80:9D:E9:7E:56:21:1B:5D:DE:5F:A6 X509v3 Authority Key Identifier: keyid:E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:d7:c2:54:d1:ca:1c:9a:3f:e4:14:97:29:be:15:d6:f4:7c: fc:dc:07:6c:d1:64:74:ef:a5:29:17:66:9f:ae:73:b1:93:ef: 1d:47:58:7c:bf:36:b1:7c:57:b6:b9:ce:1e:e3:07:fd:1c:33: 46:ae:dc:77:27:f6:01:15:a5:ab:d2:56:2d:94:6b:7f:b1:4b: a5:88:a0:9f:81:68:05:ef:22:49:93:79:bd:d8:74:be:88:d2: 87:e9:e6:00:20:20:a9:6d:2b:43:74:6d:54:23:6e:b6:5d:15: 4a:50:84:d0:6d:1a:39:0d:0d:40:86:3b:ab:f6:a5:dc:64:e8: d5:ee:b8:6b:3e:58:3e:b7:2e:86:22:ea:95:4d:16:25:bc:8e: 3b:91:f6:69:d3:7c:9d:42:3b:62:2c:f1:ee:4f:3b:ef:70:4f: ee:c3:3f:44:52:ce:54:23:29:1e:e8:95:e6:68:a3:bc:ea:3a: 9a:1e:13:16:05:f2:45:29:1c:5b:1c:d4:4d:92:68:46:36:1d: da:2b:6c:2f:8e:6e:4a:40:52:c4:44:dc:18:85:f6:d1:9f:89: 51:02:8d:e9:27:29:c9:a4:e9:84:b1:de:59:b2:6b:9e:19:00: e3:3c:ae:ed:97:1a:f6:59:0c:b9:e8:af:3b:85:ae:9b:5e:ba: 05:b6:12:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5RUMxMTAvBgNVBAUTKEUxQjlBNkVCMEM4RkFGRjdGNTRDNjhDMDU2MjRBMjhD RkQzRkFERUMwHhcNMjUwNDI1MDM0NjUzWhcNMjUwNTAyMDM0NjUzWjAYMRYwFAYD VQQDEw02ODBiMDVhZS0xMTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4lAwuDQ27gt6BxquiKzbipJUdNlfjdFwlN1Wy6aanTBRxcCsrbdo6AJLGpGh sIhPFafVq26bNTBNNKSCtjqoRXoV6S4xF9Mc5Ws7lbwTOY//9AH5+qJQe89wmqNv pBeY6HmAFRPxo+hbnJbjmP83nUhj3ueLd+f0L6LJfgLhbB+Is76RKdbuMqEyi614 Hjgc+chzvbBKhFrXsupIxFY89xYkMR7vEBYvVrPSqQwlqffUCiPXRh2dPqkNwHym mMTMB+1q+nRGPGpweaqkmWFPcoRqKhEPFoEcD6i+vT+cSwqWDUKCsfUdROBP/Uhs SNoRLjk/FckiQbhc1APaVM9n9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4UOzR9 v8h5eICd6X5WIRtd3l+mMB8GA1UdIwQYMBaAFOG5pusMj6/39UxowFYkooz9P63s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzlFQy8xMzU1RTc1MjY2 QkIxMUVFODQ2MkVFODRDNEY5QUUwMi80Ym1tNnd5UHJfZjFUR2pBVmlTaWpQMF9y ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRibW02d3lQcl9mMVRHakFWaVNpalAwX3Jldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzlFQy8xMzU1RTc1MjY2QkIxMUVFODQ2MkVFODRDNEY5QUUwMi80Ym1tNnd5UHJf ZjFUR2pBVmlTaWpQMF9yZXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy18JU0cocmj/kFJcpvhXW9Hz83Ads0WR076UpF2afrnOxk+8dR1h8 vzaxfFe2uc4e4wf9HDNGrtx3J/YBFaWr0lYtlGt/sUuliKCfgWgF7yJJk3m92HS+ iNKH6eYAICCpbStDdG1UI262XRVKUITQbRo5DQ1Ahjur9qXcZOjV7rhrPlg+ty6G IuqVTRYlvI47kfZp03ydQjtiLPHuTzvvcE/uwz9EUs5UIyke6JXmaKO86jqaHhMW BfJFKRxbHNRNkmhGNh3aK2wvjm5KQFLERNwYhfbRn4lRAo3pJynJpOmEsd5Zsmue GQDjPK7tlxr2WQy56K87ha6bXroFthKx -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:42 2025 by rpki-client