$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft File: 4YMttqUeSiWekP7IHkfFRpxSpok.mft (raw, json) Hash identifier: W6tRDIe4zhcyfcyTyOjntPRkhBa5GKVinFQ568s35so= Subject key identifier: EB:BC:E6:E4:E9:8C:9A:07:9D:64:8D:0D:E4:DF:D6:D1:8A:34:C0:EC Authority key identifier: E1:83:2D:B6:A5:1E:4A:25:9E:90:FE:C8:1E:47:C5:46:9C:52:A6:89 Certificate issuer: /CN=A916814B/serialNumber=E1832DB6A51E4A259E90FEC81E47C5469C52A689 Certificate serial: 15FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft Manifest number: 15F3 Signing time: Fri 18 Apr 2025 16:51:18 +0000 Manifest this update: Fri 18 Apr 2025 16:51:18 +0000 Manifest next update: Fri 25 Apr 2025 16:51:18 +0000 Files and hashes: 1: 4YMttqUeSiWekP7IHkfFRpxSpok.crl (hash: CH7yXPTm32R5C9R6TmBNrR3CC6YLgBD5EcYXNHW7soI=) 2: B4FED5FC8E5311EBB81E6C70C4F9AE02.roa (hash: kDacZR8moKTX56aD4xPOhhoyt0qIcn1U0w7VaT9wQjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.crl rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 16:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5631 (0x15ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916814B, serialNumber=E1832DB6A51E4A259E90FEC81E47C5469C52A689 Validity Not Before: Apr 18 16:51:18 2025 GMT Not After : Apr 25 16:51:18 2025 GMT Subject: CN=68028306-aed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:43:88:7c:b7:a2:e8:b1:9a:d8:b1:5d:f4:36: 20:82:03:0b:7e:91:4e:44:19:db:01:55:86:1d:98: e0:6c:04:ef:00:c6:65:56:67:e8:e6:d3:2e:7b:b8: fc:60:d3:89:e0:59:cb:b0:29:16:2a:43:4e:ca:16: 5d:fe:eb:b1:f4:bd:09:a2:6c:ac:5b:9b:7d:e3:ad: 88:51:e6:18:53:df:18:eb:c2:03:70:00:67:aa:89: be:6c:80:43:bf:c8:a5:50:0d:22:e3:23:6e:d8:71: 03:55:ec:46:c3:d2:b8:6b:35:3e:ef:d2:34:29:1e: d2:ee:44:8e:8e:0b:64:7c:e1:5f:b8:7f:76:99:ff: c4:44:59:d7:5d:3d:1b:62:d5:5a:44:0f:3c:66:89: 4c:e1:6d:6a:68:a2:d0:38:34:57:59:27:ca:a1:98: 9e:65:e0:59:72:5c:71:57:64:51:dd:f6:d8:e0:6b: 93:32:1b:2c:de:60:97:8b:02:be:82:f7:0a:c7:ff: 34:f0:e1:bc:a9:11:12:e1:6a:3d:d9:8a:39:af:6e: e9:43:c6:b3:56:5b:91:ed:23:d9:29:a7:f2:8a:05: d8:c6:77:92:7a:cc:98:a3:42:09:4b:ff:58:5d:28: e2:f4:e7:a5:7f:93:37:81:63:3b:75:36:3a:d5:97: e7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BC:E6:E4:E9:8C:9A:07:9D:64:8D:0D:E4:DF:D6:D1:8A:34:C0:EC X509v3 Authority Key Identifier: keyid:E1:83:2D:B6:A5:1E:4A:25:9E:90:FE:C8:1E:47:C5:46:9C:52:A6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:6c:4b:c5:e9:68:8a:38:d1:b6:ed:27:7a:10:b9:f4:62:d6: 03:9e:9f:9d:73:23:e0:68:bf:b8:38:48:90:cc:6e:e0:03:26: 51:91:f5:17:a5:a8:c4:be:e9:76:86:f8:63:17:f3:1e:2f:cf: 84:96:1e:ed:e6:a4:24:86:24:d2:7f:13:19:f6:44:44:31:57: d5:ef:cf:f5:01:d0:df:63:72:36:4d:94:f1:db:d7:67:d7:f7: d9:2b:ce:bc:09:77:47:31:44:c6:8b:27:30:4a:8a:09:2c:d8: 20:c2:6e:59:4f:49:c0:8a:0e:79:b9:65:2a:bd:99:3d:d3:95: 9a:bf:49:07:6e:74:8d:de:31:fb:29:c4:b2:81:15:74:ca:28: ed:ff:79:d6:8a:85:51:74:5c:cb:85:76:d0:ba:aa:02:ad:39: a9:ae:c0:2a:0d:7f:b7:29:75:94:4a:9a:1f:22:2e:e9:3a:d4: fb:f7:8e:d6:53:ce:ed:89:f5:8f:7e:7a:0c:64:dc:14:ac:49: 75:0d:4b:a7:c2:1e:6d:ab:07:09:08:af:62:99:5d:f3:81:2c: 71:54:fa:1f:90:57:fa:b6:38:17:2a:4b:b4:21:e7:cb:b3:b7: 4a:68:31:72:35:3b:b7:af:95:ac:ad:48:ca:e1:5d:6e:80:79: 11:da:a8:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxNEIxMTAvBgNVBAUTKEUxODMyREI2QTUxRTRBMjU5RTkwRkVDODFFNDdDNTQ2 OUM1MkE2ODkwHhcNMjUwNDE4MTY1MTE4WhcNMjUwNDI1MTY1MTE4WjAYMRYwFAYD VQQDEw02ODAyODMwNi1hZWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kOIfLei6LGa2LFd9DYgggMLfpFORBnbAVWGHZjgbATvAMZlVmfo5tMue7j8 YNOJ4FnLsCkWKkNOyhZd/uux9L0JomysW5t9462IUeYYU98Y68IDcABnqom+bIBD v8ilUA0i4yNu2HEDVexGw9K4azU+79I0KR7S7kSOjgtkfOFfuH92mf/ERFnXXT0b YtVaRA88ZolM4W1qaKLQODRXWSfKoZieZeBZclxxV2RR3fbY4GuTMhss3mCXiwK+ gvcKx/808OG8qRES4Wo92Yo5r27pQ8azVluR7SPZKafyigXYxneSesyYo0IJS/9Y XSji9Oelf5M3gWM7dTY61ZfnZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOu85uTp jJoHnWSNDeTf1tGKNMDsMB8GA1UdIwQYMBaAFOGDLbalHkolnpD+yB5HxUacUqaJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODE0Qi8wMkEyRDk3MDE2 MkYxMUU4QjhERTI2NjlDNEY5QUUwMi80WU10dHFVZVNpV2VrUDdJSGtmRlJweFNw b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRZTXR0cVVlU2lXZWtQN0lIa2ZGUnB4U3Bvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODE0Qi8wMkEyRDk3MDE2MkYxMUU4QjhERTI2NjlDNEY5QUUwMi80WU10dHFVZVNp V2VrUDdJSGtmRlJweFNwb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBebEvF6WiKONG27Sd6ELn0YtYDnp+dcyPgaL+4OEiQzG7gAyZRkfUX pajEvul2hvhjF/MeL8+Elh7t5qQkhiTSfxMZ9kREMVfV78/1AdDfY3I2TZTx29dn 1/fZK868CXdHMUTGiycwSooJLNggwm5ZT0nAig55uWUqvZk905Wav0kHbnSN3jH7 KcSygRV0yijt/3nWioVRdFzLhXbQuqoCrTmprsAqDX+3KXWUSpofIi7pOtT7947W U87tifWPfnoMZNwUrEl1DUunwh5tqwcJCK9imV3zgSxxVPofkFf6tjgXKku0IefL s7dKaDFyNTu3r5WsrUjK4V1ugHkR2qgn -----END CERTIFICATE-----Generated at Sat Apr 19 00:58:51 2025 by rpki-client