$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft File: Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft (raw, json) Hash identifier: Cum4C1b14i4wBxBZDR85/qBkT4ejUFmtNpCY9OMZyFE= Subject key identifier: CB:4F:3D:66:74:46:29:C3:1F:12:69:00:86:69:2A:44:9C:B1:A3:6D Authority key identifier: 32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19 Certificate issuer: /CN=A91F7AC9/serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219 Certificate serial: 04F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft Manifest number: 04F4 Signing time: Thu 24 Apr 2025 23:29:33 +0000 Manifest this update: Thu 24 Apr 2025 23:29:32 +0000 Manifest next update: Thu 01 May 2025 23:29:32 +0000 Files and hashes: 1: Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl (hash: 6kJjRumWKySk1lcIMYc8vf0UxnWOtbovgisNTxCpLYs=) 2: 66CA9E0C0C5C11ECBD37E846C4F9AE02.roa (hash: 9KrFu8rfuzGcElTJ+SW1V8KTmVUFQFDwJgp8Mmol+WA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1273 (0x4f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7AC9, serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219 Validity Not Before: Apr 24 23:29:32 2025 GMT Not After : May 1 23:29:32 2025 GMT Subject: CN=680ac95c-636f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:99:5e:63:03:fd:a9:88:2c:fc:fb:9c:3f:d8: 77:5c:95:5c:73:cd:2f:5d:8f:24:48:12:ca:71:77: a2:b6:be:5b:31:82:ac:a3:d6:58:3e:1f:db:f5:a3: e8:e3:fd:c1:0b:38:a1:03:8b:77:47:7a:6f:bb:a4: 40:e2:a5:7c:9b:f5:06:db:c7:6f:0c:9a:c9:fc:ba: 28:c5:61:57:57:b2:de:f6:1a:d1:f9:d5:93:ed:10: 95:46:83:80:0c:4d:e0:cf:f5:52:0e:c1:99:56:06: 5e:f0:17:87:9b:07:97:21:85:6d:08:b6:f6:f8:b8: 92:59:1e:1e:f6:60:36:eb:e7:8c:e6:69:e5:c5:cd: d5:bd:5f:7c:18:22:d5:0b:23:42:98:a8:93:de:77: eb:e7:bb:b6:9c:ff:11:71:59:d9:b8:23:66:61:b2: 1e:46:20:42:b1:db:22:40:cd:e8:2a:f6:a2:f2:19: cd:74:89:05:82:2f:5f:88:e4:40:78:ee:f1:37:c1: 3a:f8:16:c4:2e:dd:f4:3d:97:6a:f9:bf:8b:81:bb: db:dc:87:fe:ae:a0:52:5d:ce:2a:19:6f:33:52:4e: 15:d4:de:cf:cf:05:55:b8:ca:bc:4f:d1:70:45:1c: 1e:b6:43:76:5b:be:cd:52:74:73:20:c1:34:82:f4: 41:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:4F:3D:66:74:46:29:C3:1F:12:69:00:86:69:2A:44:9C:B1:A3:6D X509v3 Authority Key Identifier: keyid:32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:e0:2a:0b:6f:35:10:c6:04:65:87:ec:01:ef:2d:1e:4b:27: 7c:ee:95:58:91:7b:5f:31:53:f8:61:e9:6e:7e:83:97:fb:3e: 8c:ad:ea:d8:81:dc:05:f9:86:68:b0:b8:34:59:de:eb:70:8c: 5f:87:c8:92:63:b3:fd:b8:a1:7e:69:c0:11:30:23:75:58:ce: 58:f8:4a:58:a0:96:ea:c3:b8:b7:b3:db:d3:d9:1f:b4:3b:63: 23:5e:e8:d8:2e:c5:b2:1b:28:f3:36:ba:1b:eb:b4:d2:72:0b: b8:e7:0a:32:fc:36:12:2a:e5:a1:eb:da:cd:8d:ff:32:b3:a0: a0:b8:79:20:bf:9f:b6:99:34:6a:10:ac:c0:a1:1b:d9:1c:c2: 6f:f8:4b:cd:b4:f1:52:c9:ff:02:a1:51:29:6b:a7:82:b3:f4: f2:56:81:5c:f8:49:8f:a8:08:39:cd:be:2d:61:5c:08:44:97: 0a:77:e7:7d:48:31:97:47:06:8c:06:5a:27:56:bc:3e:0e:3e: 92:8c:d8:7f:d5:25:7f:b6:d5:58:36:33:62:8b:0c:50:b9:f6: c3:eb:f5:ad:76:1a:22:a2:67:50:a2:45:7d:37:01:c3:6e:54: 62:45:19:a9:76:5c:eb:c1:32:de:82:f6:4f:3a:84:8a:57:50: 82:95:16:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdBQzkxMTAvBgNVBAUTKDMyNkU1NUU3NEIwNkNEODNGOTk0Q0MxREE2NjU2NTQy MUNDOUUyMTkwHhcNMjUwNDI0MjMyOTMyWhcNMjUwNTAxMjMyOTMyWjAYMRYwFAYD VQQDEw02ODBhYzk1Yy02MzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1pleYwP9qYgs/PucP9h3XJVcc80vXY8kSBLKcXeitr5bMYKso9ZYPh/b9aPo 4/3BCzihA4t3R3pvu6RA4qV8m/UG28dvDJrJ/LooxWFXV7Le9hrR+dWT7RCVRoOA DE3gz/VSDsGZVgZe8BeHmweXIYVtCLb2+LiSWR4e9mA26+eM5mnlxc3VvV98GCLV CyNCmKiT3nfr57u2nP8RcVnZuCNmYbIeRiBCsdsiQM3oKvai8hnNdIkFgi9fiORA eO7xN8E6+BbELt30PZdq+b+Lgbvb3If+rqBSXc4qGW8zUk4V1N7PzwVVuMq8T9Fw RRwetkN2W77NUnRzIME0gvRBcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtPPWZ0 RinDHxJpAIZpKkScsaNtMB8GA1UdIwQYMBaAFDJuVedLBs2D+ZTMHaZlZUIcyeIZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0FDOS8wRDlGNDBFNjBD NUExMUVDOUY0MTUzNDVDNEY5QUUwMi9NbTVWNTBzR3pZUDVsTXdkcG1WbFFoeko0 aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tNVY1MHNHellQNWxNd2RwbVZsUWh6SjRoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0FDOS8wRDlGNDBFNjBDNUExMUVDOUY0MTUzNDVDNEY5QUUwMi9NbTVWNTBzR3pZ UDVsTXdkcG1WbFFoeko0aGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC44CoLbzUQxgRlh+wB7y0eSyd87pVYkXtfMVP4YelufoOX+z6MrerY gdwF+YZosLg0Wd7rcIxfh8iSY7P9uKF+acARMCN1WM5Y+EpYoJbqw7i3s9vT2R+0 O2MjXujYLsWyGyjzNrob67TScgu45woy/DYSKuWh69rNjf8ys6CguHkgv5+2mTRq EKzAoRvZHMJv+EvNtPFSyf8CoVEpa6eCs/TyVoFc+EmPqAg5zb4tYVwIRJcKd+d9 SDGXRwaMBlonVrw+Dj6SjNh/1SV/ttVYNjNiiwxQufbD6/WtdhoiomdQokV9NwHD blRiRRmpdlzrwTLegvZPOoSKV1CClRY3 -----END CERTIFICATE-----Generated at Sat Apr 26 12:28:22 2025 by rpki-client