$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft File: 4uYwZnXV9U0ge2eCqWx6qWex_JE.mft (raw, json) Hash identifier: hpy6To9Yczs5uTQuFVJEWWmeRHhrNyozRZiqBHueYNk= Subject key identifier: 90:AF:72:C6:15:FA:30:33:41:EA:93:1F:C3:24:59:CC:3A:11:6B:E3 Authority key identifier: E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91 Certificate issuer: /CN=A91B8AC8/serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft Manifest number: 49 Signing time: Fri 11 Apr 2025 06:39:33 +0000 Manifest this update: Fri 11 Apr 2025 06:39:33 +0000 Manifest next update: Fri 18 Apr 2025 06:39:33 +0000 Files and hashes: 1: 4uYwZnXV9U0ge2eCqWx6qWex_JE.crl (hash: IgQQwe0rZYbkRzzuXLFjvogEDXCNekceu6PrEn1f5NY=) 2: 9074B02EB13D11EF9EFDE433C4F9AE02.roa (hash: +DamE3tU9Fo7eBYdyyuSzK/6/nm5KtgHW7yUMIG6MHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 06:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8AC8, serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91 Validity Not Before: Apr 11 06:39:33 2025 GMT Not After : Apr 18 06:39:33 2025 GMT Subject: CN=67f8b925-5457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9f:0b:c2:9a:88:5d:aa:9b:f5:b7:d1:0a:52: c0:0f:1e:be:e1:ad:0d:b7:36:8b:4a:0e:0c:d9:89: fd:6f:8d:a0:8c:25:04:bc:44:86:16:8e:60:d2:c8: 12:a7:8c:b0:16:29:61:af:87:a8:eb:01:78:cd:f6: 45:2d:40:ed:c7:7d:b6:eb:08:de:5a:99:3b:c5:ac: 91:9b:e6:53:7e:0a:b6:ac:11:e7:07:6c:a8:65:91: 36:79:19:d4:75:78:94:c7:1d:ab:ba:7a:7b:3d:ca: 61:3e:50:76:de:94:f9:77:d3:cf:33:67:90:36:c6: 51:ee:1d:b7:f7:9b:a7:75:61:5a:97:f1:7c:f5:38: db:0f:b4:a3:54:be:c5:c0:4d:19:d6:a6:ad:da:83: 6e:ff:a1:84:1f:76:5a:87:09:f1:27:c9:2b:25:dd: 30:81:d0:5f:f6:08:f1:31:d4:0b:3e:54:e5:2b:aa: d1:ad:da:28:3a:b0:26:dc:eb:1e:9f:95:43:78:30: 33:33:a6:15:c6:d6:47:6b:7f:71:f2:16:f1:7d:27: 9e:70:fa:8c:bf:7e:7a:d7:1f:38:8c:a7:e6:d9:3f: 98:e2:a2:bf:0c:3f:5a:5f:94:a5:c5:f8:df:78:c8: 12:e1:4a:4f:ef:9a:e0:7e:b5:2a:61:c0:bd:ae:bf: 07:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AF:72:C6:15:FA:30:33:41:EA:93:1F:C3:24:59:CC:3A:11:6B:E3 X509v3 Authority Key Identifier: keyid:E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:29:4b:50:49:a5:e8:a0:c5:72:f9:59:1f:09:08:36:42:5d: 21:28:00:34:a2:93:f8:b7:e5:54:b1:84:32:73:9d:8e:45:d7: 81:f3:62:97:4e:f8:47:ba:f4:1e:26:c5:e2:c8:49:20:4c:c6: fb:23:db:29:95:f9:2c:7f:5a:24:c6:42:5e:a6:88:a0:a8:6e: 7e:d0:2f:1b:f1:2b:23:fa:d9:b5:54:c3:e7:fd:b2:20:76:c1: 86:5a:22:12:dc:8c:8a:92:ec:d4:24:6a:2f:b6:b5:53:0b:50: 5d:b6:90:dd:a1:2f:33:61:22:7d:47:75:fa:b6:7e:10:84:7c: 16:23:83:73:fe:d6:73:47:0e:9a:c6:2b:49:e7:6a:6f:c5:3e: 61:12:bb:60:f8:e0:fa:f8:b5:c1:81:c4:5e:49:c4:e1:2e:7a: dc:40:b7:8b:f7:52:aa:2b:6f:ae:7e:e1:62:45:9a:52:46:4c: d2:15:dc:af:fe:bc:a6:a8:7d:10:6e:7e:e0:d2:87:a1:46:2b: e0:d2:0b:5a:dc:81:5b:10:3f:f2:8b:04:56:d8:c0:0d:72:8e: d7:64:87:02:f7:63:64:7e:d7:26:0a:a7:fd:fd:6e:79:f6:fe: 95:cd:e8:7f:de:10:7e:5f:80:71:8c:b8:19:b9:d8:46:a9:3c: b6:95:6d:88 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEFDODExMC8GA1UEBRMoRTJFNjMwNjY3NUQ1RjU0RDIwN0I2NzgyQTk2QzdBQTk2 N0IxRkM5MTAeFw0yNTA0MTEwNjM5MzNaFw0yNTA0MTgwNjM5MzNaMBgxFjAUBgNV BAMTDTY3ZjhiOTI1LTU0NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCunwvCmohdqpv1t9EKUsAPHr7hrQ23NotKDgzZif1vjaCMJQS8RIYWjmDSyBKn jLAWKWGvh6jrAXjN9kUtQO3HfbbrCN5amTvFrJGb5lN+CrasEecHbKhlkTZ5GdR1 eJTHHau6ens9ymE+UHbelPl3088zZ5A2xlHuHbf3m6d1YVqX8Xz1ONsPtKNUvsXA TRnWpq3ag27/oYQfdlqHCfEnySsl3TCB0F/2CPEx1As+VOUrqtGt2ig6sCbc6x6f lUN4MDMzphXG1kdrf3HyFvF9J55w+oy/fnrXHziMp+bZP5jior8MP1pflKXF+N94 yBLhSk/vmuB+tSphwL2uvwdjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkK9yxhX6 MDNB6pMfwyRZzDoRa+MwHwYDVR0jBBgwFoAU4uYwZnXV9U0ge2eCqWx6qWex/JEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4QUM4L0U5QkUwNURDQjEz QzExRUZBQUY5RDczMUM0RjlBRTAyLzR1WXdablhWOVUwZ2UyZUNxV3g2cVdleF9K RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNHVZd1puWFY5VTBnZTJlQ3FXeDZxV2V4X0pFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 QUM4L0U5QkUwNURDQjEzQzExRUZBQUY5RDczMUM0RjlBRTAyLzR1WXdablhWOVUw Z2UyZUNxV3g2cVdleF9KRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHQpS1BJpeigxXL5WR8JCDZCXSEoADSik/i35VSxhDJznY5F14HzYpdO +Ee69B4mxeLISSBMxvsj2ymV+Sx/WiTGQl6miKCobn7QLxvxKyP62bVUw+f9siB2 wYZaIhLcjIqS7NQkai+2tVMLUF22kN2hLzNhIn1Hdfq2fhCEfBYjg3P+1nNHDprG K0nnam/FPmESu2D44Pr4tcGBxF5JxOEuetxAt4v3Uqorb65+4WJFmlJGTNIV3K/+ vKaofRBufuDSh6FGK+DSC1rcgVsQP/KLBFbYwA1yjtdkhwL3Y2R+1yYKp/39bnn2 /pXN6H/eEH5fgHGMuBm52EapPLaVbYg= -----END CERTIFICATE-----Generated at Sun Apr 13 05:31:37 2025 by rpki-client