$ rpki-client -vvf rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft File: q4PFkhuEDFQXM78Ucyl13UlzP_w.mft (raw, json) Hash identifier: pc8g6A2LcnbbslX1cQgp1aFki1lwx1Y3clu+Eg5jALI= Subject key identifier: 14:88:8C:3E:B3:F8:D2:91:D1:6B:BB:B3:77:E5:C2:10:5F:61:D0:4C Authority key identifier: AB:83:C5:92:1B:84:0C:54:17:33:BF:14:73:29:75:DD:49:73:3F:FC Certificate issuer: /CN=A91F523F/serialNumber=AB83C5921B840C541733BF14732975DD49733FFC Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft Manifest number: 4C Signing time: Fri 25 Apr 2025 06:19:39 +0000 Manifest this update: Fri 25 Apr 2025 06:19:39 +0000 Manifest next update: Fri 02 May 2025 06:19:39 +0000 Files and hashes: 1: q4PFkhuEDFQXM78Ucyl13UlzP_w.crl (hash: xhWOm56su5+fMZdm0tum8OaViWFKbvNF11Fic3h98DQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.crl rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F523F, serialNumber=AB83C5921B840C541733BF14732975DD49733FFC Validity Not Before: Apr 25 06:19:39 2025 GMT Not After : May 2 06:19:39 2025 GMT Subject: CN=680b297b-2db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:37:53:f9:5e:83:b9:4d:8e:cc:68:13:44:f7: fa:fb:25:3d:36:4b:3e:ba:05:b2:c1:41:da:f0:a1: 7c:9b:27:8d:10:4c:e0:48:e1:e8:01:c3:d8:fd:03: 3a:0d:0b:31:43:b6:11:d8:2f:e2:bc:c0:18:d6:ca: 5b:c9:7b:e3:fc:fd:e0:c4:7f:1b:33:f7:28:f9:9a: 9a:a1:86:ad:13:b0:83:35:e2:58:ec:50:b9:11:d4: 68:d1:81:6c:a6:26:9d:b7:bf:08:0b:17:4c:41:ae: 67:50:aa:23:46:45:36:40:d4:bf:23:d2:82:0c:c1: 91:d2:41:40:b4:67:3c:3a:d3:83:5d:a0:f5:cf:f9: 7c:a2:61:f3:da:3d:93:9b:77:ae:05:f8:57:4a:40: 44:2e:55:44:4b:e2:ff:fa:c5:c3:37:e3:ce:4c:ca: f3:bf:3b:42:a3:e0:7d:35:74:a7:46:d6:1e:f0:8e: f0:a5:70:dd:c9:3c:c6:e8:49:a5:4e:f5:5f:69:6c: f9:e3:6c:8b:bb:72:a7:a6:6c:ba:b0:de:ba:69:68: 22:45:1d:27:2f:0c:e4:c7:ce:82:4c:38:7b:f0:69: e5:51:5f:43:c9:a8:76:44:36:1e:a3:47:14:5f:03: ab:d1:56:55:5e:70:74:05:e2:53:81:95:ab:b7:cc: 02:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:88:8C:3E:B3:F8:D2:91:D1:6B:BB:B3:77:E5:C2:10:5F:61:D0:4C X509v3 Authority Key Identifier: keyid:AB:83:C5:92:1B:84:0C:54:17:33:BF:14:73:29:75:DD:49:73:3F:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:7b:38:90:1f:7e:77:42:3b:1f:62:ad:13:d4:aa:49:ee:71: fb:18:99:00:ce:a4:5f:0d:bd:76:47:96:29:d0:db:e8:bd:82: b1:37:78:50:63:ba:49:25:c5:05:ae:f5:29:3f:ad:ec:1a:c9: a9:04:bd:05:43:14:19:c8:be:0b:1c:87:61:54:38:a1:86:40: 3b:fb:c8:70:b0:4c:6e:59:46:9b:67:37:43:c4:6e:8f:52:2e: 30:10:0f:17:40:a5:b2:7f:cc:ec:f3:19:73:de:de:b9:c5:6d: e6:dc:9c:57:98:33:c0:57:2e:73:c7:dc:c4:bc:d4:03:28:5c: a0:93:db:8e:f6:44:70:26:46:a6:78:03:d9:64:ab:61:8f:ac: b6:f6:7e:9f:4f:80:83:f1:b4:0e:ca:96:5c:07:7f:44:1a:60: 85:08:3c:3b:a6:87:48:fd:69:94:41:d1:98:1b:94:1f:38:e9: d2:39:bd:ba:71:18:71:ba:d4:1b:62:5f:a8:2e:3b:77:ae:e2: d9:64:75:61:67:80:67:ba:e3:a1:3f:ee:df:54:d8:f9:ce:7f: 94:e5:11:54:af:f7:7c:46:e1:1f:d3:1d:0d:24:2a:63:61:ac: 5e:66:a0:25:7c:a6:4b:72:e2:a9:c7:d9:ed:cc:71:75:08:0d: cc:a6:a2:7d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTIzRjExMC8GA1UEBRMoQUI4M0M1OTIxQjg0MEM1NDE3MzNCRjE0NzMyOTc1REQ0 OTczM0ZGQzAeFw0yNTA0MjUwNjE5MzlaFw0yNTA1MDIwNjE5MzlaMBgxFjAUBgNV BAMTDTY4MGIyOTdiLTJkYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIN1P5XoO5TY7MaBNE9/r7JT02Sz66BbLBQdrwoXybJ40QTOBI4egBw9j9AzoN CzFDthHYL+K8wBjWylvJe+P8/eDEfxsz9yj5mpqhhq0TsIM14ljsULkR1GjRgWym Jp23vwgLF0xBrmdQqiNGRTZA1L8j0oIMwZHSQUC0Zzw604NdoPXP+XyiYfPaPZOb d64F+FdKQEQuVURL4v/6xcM3485MyvO/O0Kj4H01dKdG1h7wjvClcN3JPMboSaVO 9V9pbPnjbIu7cqembLqw3rppaCJFHScvDOTHzoJMOHvwaeVRX0PJqHZENh6jRxRf A6vRVlVecHQF4lOBlau3zAL7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFIiMPrP4 0pHRa7uzd+XCEF9h0EwwHwYDVR0jBBgwFoAUq4PFkhuEDFQXM78Ucyl13UlzP/ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1MjNGLzU2QTRDQjhBQjA1 MzExRUY5QzJCOEQzRkM0RjlBRTAyL3E0UEZraHVFREZRWE03OFVjeWwxM1VselBf dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcTRQRmtodUVERlFYTTc4VWN5bDEzVWx6UF93LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 MjNGLzU2QTRDQjhBQjA1MzExRUY5QzJCOEQzRkM0RjlBRTAyL3E0UEZraHVFREZR WE03OFVjeWwxM1VselBfdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANh7OJAffndCOx9irRPUqknucfsYmQDOpF8NvXZHlinQ2+i9grE3eFBj ukklxQWu9Sk/rewayakEvQVDFBnIvgsch2FUOKGGQDv7yHCwTG5ZRptnN0PEbo9S LjAQDxdApbJ/zOzzGXPe3rnFbebcnFeYM8BXLnPH3MS81AMoXKCT2472RHAmRqZ4 A9lkq2GPrLb2fp9PgIPxtA7KllwHf0QaYIUIPDumh0j9aZRB0ZgblB846dI5vbpx GHG61BtiX6guO3eu4tlkdWFngGe646E/7t9U2PnOf5TlEVSv93xG4R/THQ0kKmNh rF5moCV8pkty4qnH2e3McXUIDcymon0= -----END CERTIFICATE-----Generated at Sat Apr 26 05:01:19 2025 by rpki-client