$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft File: 4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft (raw, json) Hash identifier: WWmZSGfa+X8r1GCCB1C0pS0hd5EZTX738vIpYuYTTHw= Subject key identifier: B4:59:7F:95:7D:A3:17:4F:1D:41:9A:37:D0:FE:24:8A:38:1C:7C:6D Authority key identifier: E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 Certificate issuer: /CN=A91F59A6/serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Certificate serial: 0863 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft Manifest number: 084C Signing time: Thu 24 Apr 2025 18:06:06 +0000 Manifest this update: Thu 24 Apr 2025 18:06:06 +0000 Manifest next update: Thu 01 May 2025 18:06:06 +0000 Files and hashes: 1: 4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl (hash: CKZB1ozo8lkbiYhHoxvcEU7TsmRa/ctfpKp556Y37WU=) 2: 18B1B5361CE611EBB543881CC4F9AE02.roa (hash: qnuam7WR9nNoSALeN6aIELormJYa9PcytIxvW+OP1aE=) 3: 19B0BAAE1CE611EBB543881CC4F9AE02.roa (hash: /kIJQGWq5uSGzv2Hlgx55daJuqaTWlcXb9ZHCo//sns=) 4: D385E420314711EBA579873DC4F9AE02.roa (hash: o1Hw/spcKOOb0VVRRR+YO5Yydeov4PBZjAAS3/6uAVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2147 (0x863) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59A6, serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Validity Not Before: Apr 24 18:06:06 2025 GMT Not After : May 1 18:06:06 2025 GMT Subject: CN=680a7d8e-6655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a6:55:b8:44:62:9b:52:c2:c0:27:5a:6a:8f: cb:d2:45:88:00:d9:3b:ff:c2:8c:b9:b9:07:af:08: ba:4a:c0:6e:32:87:62:48:e7:19:ed:b5:f4:18:f1: 9b:88:0d:4e:42:e8:62:25:a0:06:42:25:c0:09:da: 01:f1:d3:78:e2:99:3b:9c:cd:46:40:b1:ff:66:47: b4:4b:11:b5:0b:70:5c:80:c5:6f:35:96:9c:f6:47: 84:53:9b:11:a2:f6:b6:b9:b7:32:e9:91:eb:19:41: 19:54:0e:c0:ba:43:68:f2:95:b4:32:60:4c:03:56: 0b:bd:c3:25:a8:d0:05:79:4c:6f:b2:56:3c:bd:97: 34:2d:e6:64:e1:84:6c:aa:69:1d:67:5f:75:cf:37: b7:4e:ce:45:9c:28:3d:75:bf:e4:84:cc:fd:99:dc: 7d:b6:8b:01:53:c7:7c:27:8e:30:71:73:95:54:fc: ba:28:b5:f2:13:87:fe:81:b2:17:70:7d:e9:09:71: b4:cf:1f:d9:4f:83:5f:e4:11:a9:4e:17:e2:5f:48: 90:07:c7:30:b4:ff:59:fd:10:e8:93:14:73:f1:e9: 93:b3:d5:91:9a:2c:90:a8:26:ec:da:38:a1:1a:b4: 15:d1:bc:e4:0d:d7:82:5c:95:46:49:96:e3:11:96: c7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:59:7F:95:7D:A3:17:4F:1D:41:9A:37:D0:FE:24:8A:38:1C:7C:6D X509v3 Authority Key Identifier: keyid:E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:f5:a0:32:0b:5f:6b:18:f3:6c:0c:87:64:ef:d4:41:60:96: f9:85:63:27:fd:40:9c:1c:62:cb:3d:d6:5d:f0:86:19:0b:3a: d9:d4:7e:0c:bd:e6:0a:fd:6f:60:2f:8a:37:4f:cf:2e:08:61: cb:d3:cb:7f:13:58:41:31:c1:b2:65:57:10:ca:3f:32:ce:c2: f3:4b:41:88:85:99:c5:fd:ed:37:83:c1:9f:ab:ee:8a:c2:53: 6a:20:b6:11:b5:34:63:89:ec:09:b5:94:4f:57:42:2a:89:6a: 91:fa:72:93:b6:32:86:90:56:df:94:2e:8a:4e:0c:d8:55:fb: c4:d3:31:2b:99:87:19:5d:be:fa:d5:e2:30:90:52:f9:10:99: 19:30:e3:e7:97:d6:1d:68:e7:91:fe:2e:16:7c:de:80:a0:01: 11:3a:19:e4:bd:bb:ea:6e:ff:fc:80:27:dd:60:61:dc:35:32: 0f:d8:b3:90:e3:1b:80:a0:5e:38:8a:e4:01:b2:a1:92:59:bf: 2a:1e:0d:bf:6d:3b:3d:1d:4c:c8:be:4f:3d:8a:1e:84:ca:e5: 27:74:b9:84:4f:fa:c7:4d:6d:7d:9b:e1:72:48:40:b4:27:ee: 15:e7:d1:77:e2:77:8c:5b:82:ca:94:30:90:c9:18:c4:2c:42: 69:8d:e2:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5QTYxMTAvBgNVBAUTKEUyNUZDRDlCNzcyNTg1Mzk0Mjc5MUE2MkQ0NzVFQ0ZF RDdDMDNGNjQwHhcNMjUwNDI0MTgwNjA2WhcNMjUwNTAxMTgwNjA2WjAYMRYwFAYD VQQDEw02ODBhN2Q4ZS02NjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqZVuERim1LCwCdaao/L0kWIANk7/8KMubkHrwi6SsBuModiSOcZ7bX0GPGb iA1OQuhiJaAGQiXACdoB8dN44pk7nM1GQLH/Zke0SxG1C3BcgMVvNZac9keEU5sR ova2ubcy6ZHrGUEZVA7AukNo8pW0MmBMA1YLvcMlqNAFeUxvslY8vZc0LeZk4YRs qmkdZ191zze3Ts5FnCg9db/khMz9mdx9tosBU8d8J44wcXOVVPy6KLXyE4f+gbIX cH3pCXG0zx/ZT4Nf5BGpThfiX0iQB8cwtP9Z/RDokxRz8emTs9WRmiyQqCbs2jih GrQV0bzkDdeCXJVGSZbjEZbHUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRZf5V9 oxdPHUGaN9D+JIo4HHxtMB8GA1UdIwQYMBaAFOJfzZt3JYU5QnkaYtR17P7XwD9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi9FNEVEQUMxOENC MUExMUVBODdDRDU1NDRDNEY5QUUwMi80bF9ObTNjbGhUbENlUnBpMUhYc190ZkFQ MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRsX05tM2NsaFRsQ2VScGkxSFhzX3RmQVAyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlBNi9FNEVEQUMxOENCMUExMUVBODdDRDU1NDRDNEY5QUUwMi80bF9ObTNjbGhU bENlUnBpMUhYc190ZkFQMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB9aAyC19rGPNsDIdk79RBYJb5hWMn/UCcHGLLPdZd8IYZCzrZ1H4M veYK/W9gL4o3T88uCGHL08t/E1hBMcGyZVcQyj8yzsLzS0GIhZnF/e03g8Gfq+6K wlNqILYRtTRjiewJtZRPV0IqiWqR+nKTtjKGkFbflC6KTgzYVfvE0zErmYcZXb76 1eIwkFL5EJkZMOPnl9YdaOeR/i4WfN6AoAEROhnkvbvqbv/8gCfdYGHcNTIP2LOQ 4xuAoF44iuQBsqGSWb8qHg2/bTs9HUzIvk89ih6EyuUndLmET/rHTW19m+FySEC0 J+4V59F34neMW4LKlDCQyRjELEJpjeL2 -----END CERTIFICATE-----Generated at Sat Apr 26 13:00:21 2025 by rpki-client