$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft File: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft (raw, json) Hash identifier: 4fKLo6z+d9Y0wYk1AfT59+g4/CTabKvGx8EMgUIUPJg= Subject key identifier: FC:B1:29:02:28:E0:5C:45:44:17:09:ED:77:2C:59:06:8B:D8:7A:A2 Authority key identifier: D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89 Certificate issuer: /CN=A91A8B67/serialNumber=D459D267525234A0535EC38D8CCC8990194DE189 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft Manifest number: 45 Signing time: Tue 15 Apr 2025 06:17:30 +0000 Manifest this update: Tue 15 Apr 2025 06:17:29 +0000 Manifest next update: Tue 22 Apr 2025 06:17:29 +0000 Files and hashes: 1: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl (hash: joNA7e5QqtyEQAEsql0Pthi/q9jBIXaRTVmM6UOQHM8=) 2: 1363F5E60E8E11F082304B42C4F9AE02.roa (hash: hu1JiBFiyTnMySrt80yNdScgCjSfSkHINTEYjzYfdUg=) 3: E90F04F4114711F0B6E44E12C4F9AE02.roa (hash: PlQx8+H4QWwRWOJyC7w29KW+ohdqt59u/vmKToMRgGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 06:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B67, serialNumber=D459D267525234A0535EC38D8CCC8990194DE189 Validity Not Before: Apr 15 06:17:29 2025 GMT Not After : Apr 22 06:17:29 2025 GMT Subject: CN=67fdf9fa-e47f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:24:d9:73:28:22:19:c7:5e:a9:46:cb:ed:52: de:44:a4:bc:55:f7:d6:b1:99:9f:6b:f8:f2:5a:4c: c2:ff:e2:7b:7f:72:97:6a:f0:9d:42:c7:44:85:0d: 6e:cb:c2:96:29:a7:f3:ee:0e:40:4f:86:3c:64:1c: 61:ce:f5:f0:62:0e:ef:b3:ab:10:1c:71:da:d1:ec: 0c:91:bc:92:3b:13:be:b6:54:fd:3b:ad:39:91:b8: ec:83:58:b7:af:48:5e:6a:6c:4e:b3:94:69:6f:89: b1:64:65:ac:2b:bd:72:4d:91:78:5d:ea:53:78:02: 21:48:5c:3b:d9:6b:f7:96:2c:de:0c:c4:2d:8d:81: 39:6f:e0:d2:48:70:46:0b:8f:e4:b5:98:d5:ee:48: 63:d1:74:24:e7:4c:a5:7b:c9:74:ef:f9:fa:ff:ba: e6:70:3e:55:da:64:0b:e3:76:88:70:24:1e:20:08: c0:29:74:ba:69:d7:24:92:2b:2f:04:ee:64:c8:b7: 24:90:12:88:c4:42:0e:d6:05:d1:00:61:e0:f0:fd: ba:88:7d:7f:30:7f:d7:5a:b4:da:4a:49:34:bf:8f: 1e:03:50:f0:e7:fb:16:6f:bd:0e:53:1b:47:9d:aa: 11:2d:e0:6c:c9:78:a5:6c:35:1b:4a:94:11:9b:d7: 4f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B1:29:02:28:E0:5C:45:44:17:09:ED:77:2C:59:06:8B:D8:7A:A2 X509v3 Authority Key Identifier: keyid:D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:14:11:f1:14:80:8f:37:8d:ce:d7:a8:48:4e:de:5d:ce:71: dd:ca:34:52:02:5e:3d:3d:aa:09:17:5e:4f:e1:a6:47:55:6c: 6c:8c:fb:e5:6c:79:20:8b:05:54:78:c5:5e:01:f7:05:8d:91: 4d:8f:a5:44:f5:d1:3f:f2:52:aa:e3:f0:11:50:1e:21:d6:69: 35:c3:47:e4:1c:e9:af:32:89:0e:5c:14:28:ca:5f:64:b5:e3: 13:8b:0e:20:0a:af:e8:bd:2e:17:e2:ca:36:49:74:47:23:0d: 41:6e:7f:a3:a5:83:e6:2c:82:ea:da:4b:5c:17:40:3d:2b:dd: d4:b4:66:7f:80:78:7e:e1:a6:14:41:ce:b0:bd:72:8a:96:c1: bd:c9:65:33:ec:b9:d9:ca:a0:85:09:f9:41:e6:15:e6:43:fe: 3f:4b:7e:6a:77:5e:be:3d:b5:6a:61:ee:bd:2b:21:a1:99:59: d0:d0:d4:14:46:14:f4:13:b8:28:18:b1:98:00:3f:c4:55:ef: df:fa:dc:70:6c:32:2a:c2:a3:a3:e3:c8:16:f0:b6:8f:2e:ad: 05:24:bd:99:79:6a:5d:54:32:2a:88:02:a9:0a:95:ad:35:1e: 0b:7b:8e:d7:cb:1e:d3:e3:21:b0:f4:31:30:ce:5f:54:5e:ef: ef:66:ab:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OEI2NzExMC8GA1UEBRMoRDQ1OUQyNjc1MjUyMzRBMDUzNUVDMzhEOENDQzg5OTAx OTRERTE4OTAeFw0yNTA0MTUwNjE3MjlaFw0yNTA0MjIwNjE3MjlaMBgxFjAUBgNV BAMTDTY3ZmRmOWZhLWU0N2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+JNlzKCIZx16pRsvtUt5EpLxV99axmZ9r+PJaTML/4nt/cpdq8J1Cx0SFDW7L wpYpp/PuDkBPhjxkHGHO9fBiDu+zqxAccdrR7AyRvJI7E762VP07rTmRuOyDWLev SF5qbE6zlGlvibFkZawrvXJNkXhd6lN4AiFIXDvZa/eWLN4MxC2NgTlv4NJIcEYL j+S1mNXuSGPRdCTnTKV7yXTv+fr/uuZwPlXaZAvjdohwJB4gCMApdLpp1ySSKy8E 7mTItySQEojEQg7WBdEAYeDw/bqIfX8wf9datNpKSTS/jx4DUPDn+xZvvQ5TG0ed qhEt4GzJeKVsNRtKlBGb108ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/LEpAijg XEVEFwntdyxZBovYeqIwHwYDVR0jBBgwFoAU1FnSZ1JSNKBTXsONjMyJkBlN4Ykw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4QjY3LzJGQTAwRDNFQzZB QTExRUY4NEZCMEQwREM0RjlBRTAyLzFGblNaMUpTTktCVFhzT05qTXlKa0JsTjRZ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMUZuU1oxSlNOS0JUWHNPTmpNeUprQmxONFlrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4 QjY3LzJGQTAwRDNFQzZBQTExRUY4NEZCMEQwREM0RjlBRTAyLzFGblNaMUpTTktC VFhzT05qTXlKa0JsTjRZay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKoUEfEUgI83jc7XqEhO3l3Ocd3KNFICXj09qgkXXk/hpkdVbGyM++Vs eSCLBVR4xV4B9wWNkU2PpUT10T/yUqrj8BFQHiHWaTXDR+Qc6a8yiQ5cFCjKX2S1 4xOLDiAKr+i9LhfiyjZJdEcjDUFuf6Olg+YsguraS1wXQD0r3dS0Zn+AeH7hphRB zrC9coqWwb3JZTPsudnKoIUJ+UHmFeZD/j9Lfmp3Xr49tWph7r0rIaGZWdDQ1BRG FPQTuCgYsZgAP8RV79/63HBsMirCo6PjyBbwto8urQUkvZl5al1UMiqIAqkKla01 Hgt7jtfLHtPjIbD0MTDOX1Re7+9mq3c= -----END CERTIFICATE-----Generated at Wed Apr 16 15:51:36 2025 by rpki-client