$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft File: 72Z43AzrNBQcZKGKskv4bKsvvTU.mft (raw, json) Hash identifier: YlV85jcJXUt3dJGfHBGhFINJAV3Oq/ipvr1hYyj+PWE= Subject key identifier: 29:90:D4:84:31:53:DE:B5:90:C5:EB:0B:76:17:E9:82:8F:C1:C6:70 Authority key identifier: EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35 Certificate issuer: /CN=A91BAE34/serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35 Certificate serial: 04A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft Manifest number: 0499 Signing time: Wed 16 Apr 2025 23:38:30 +0000 Manifest this update: Wed 16 Apr 2025 23:38:29 +0000 Manifest next update: Wed 23 Apr 2025 23:38:29 +0000 Files and hashes: 1: 72Z43AzrNBQcZKGKskv4bKsvvTU.crl (hash: Y6zd6JUXXz349EJX0E3mMk7DukOWWJpS8its/BOnRoM=) 2: 7AAFF88446BA11ECB8463B6AC4F9AE02.roa (hash: 99qqJ/9zYRnGxyVxwuHlA7p9+YSeHXLL4eIfJ57Oqyk=) 3: DCEF2F3CFFD611EFA348445FC4F9AE02.roa (hash: itQJmN/dVP+mV48MgGkgS4f24QJYRTaFn3QelUYBhJw=) 4: EEBE377430C411ECBC8D1E20C4F9AE02.roa (hash: gELAt9yiLPHGU77JxUo41MHMLLX1cjc6sNjKaC37Byk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 23:38:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1188 (0x4a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAE34, serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35 Validity Not Before: Apr 16 23:38:29 2025 GMT Not After : Apr 23 23:38:29 2025 GMT Subject: CN=68003f76-5d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:53:35:b9:d3:72:11:f1:eb:50:e3:0f:bf:54: e9:97:7c:e0:1b:20:77:ca:10:f5:ea:21:29:12:9f: 80:20:11:18:07:98:f8:27:35:be:a9:37:a2:65:3c: bd:2b:e6:50:a7:15:b2:d1:c3:98:0f:99:81:79:c6: 58:b4:ad:7f:f2:4c:a8:fa:4b:42:a5:bc:e5:e7:a5: 15:93:c4:e9:b4:57:d6:a2:3b:0f:85:01:93:4e:60: a2:0d:3b:70:b5:71:44:57:25:ee:84:67:65:24:88: 34:a8:5b:6d:ca:a0:a5:8d:d2:23:b9:17:44:26:66: 7f:16:41:9c:88:62:13:81:e3:67:b9:e8:73:e7:07: ac:85:63:f4:3d:99:6e:ec:75:38:da:26:e5:a9:9b: 23:62:9b:02:05:71:61:39:a3:f4:69:8c:20:12:ed: 45:b8:de:d6:72:86:cf:ec:d9:a5:9a:85:09:d2:d5: 5a:96:74:95:83:b0:9e:c0:11:ce:ad:5a:57:8a:7d: 2a:67:96:e2:eb:d4:a6:93:1e:fa:25:30:2d:5a:e7: 4f:06:06:40:8e:f6:0e:56:28:04:ea:bf:de:9c:27: 7f:ed:06:fc:da:4a:35:29:cc:11:fa:b6:6c:f9:cc: 8d:2a:25:7a:5e:e6:4a:c8:c8:af:fc:d3:8f:2b:5d: 8b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:90:D4:84:31:53:DE:B5:90:C5:EB:0B:76:17:E9:82:8F:C1:C6:70 X509v3 Authority Key Identifier: keyid:EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:54:7e:93:6a:95:dc:a6:93:51:d7:98:3a:2a:c8:f0:aa:f3: cb:04:d9:6b:9b:5c:6f:e0:79:ea:d0:c3:e7:be:96:a4:e1:92: e2:1f:9f:f1:cd:3c:82:71:0e:9d:de:52:bb:b7:4c:99:b8:7b: a1:b3:41:79:7e:8b:ff:bf:ec:b9:74:d5:d6:3c:6b:2e:6e:a9: 92:f7:4d:95:33:96:ea:7f:e7:db:f4:ae:a1:23:5c:6e:4a:81: bd:db:71:99:6b:9e:54:0a:b4:33:18:56:a4:59:d1:e3:4c:cf: 9b:2a:8c:0e:5e:3f:4c:f4:03:ee:cc:46:85:5b:71:94:67:ad: 11:2c:f2:49:15:ba:00:0d:9c:26:9c:92:75:57:f5:92:aa:8a: 4f:50:81:92:82:72:d2:2d:88:6d:18:f8:d8:ba:f8:22:9f:57: f0:b1:53:ea:f0:a1:75:27:8a:95:02:da:f0:19:6c:64:a7:9e: 4a:41:de:e7:ef:13:d6:de:6c:a5:e8:36:21:d1:c8:5e:35:ce: 29:4d:03:9f:7a:45:fb:a7:5a:c8:30:ca:a5:59:f2:96:58:5a: 1f:9f:a9:b1:56:81:ff:36:fc:66:8d:53:71:cd:d7:fa:df:09: eb:88:75:0e:42:5b:50:b3:c3:05:74:b5:7a:15:7c:90:6f:0b: 32:41:10:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFMzQxMTAvBgNVBAUTKEVGNjY3OERDMENFQjM0MTQxQzY0QTE4QUIyNEJGODZD QUIyRkJEMzUwHhcNMjUwNDE2MjMzODI5WhcNMjUwNDIzMjMzODI5WjAYMRYwFAYD VQQDEw02ODAwM2Y3Ni01ZDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApFM1udNyEfHrUOMPv1Tpl3zgGyB3yhD16iEpEp+AIBEYB5j4JzW+qTeiZTy9 K+ZQpxWy0cOYD5mBecZYtK1/8kyo+ktCpbzl56UVk8TptFfWojsPhQGTTmCiDTtw tXFEVyXuhGdlJIg0qFttyqCljdIjuRdEJmZ/FkGciGITgeNnuehz5weshWP0PZlu 7HU42iblqZsjYpsCBXFhOaP0aYwgEu1FuN7WcobP7NmlmoUJ0tValnSVg7CewBHO rVpXin0qZ5bi69Smkx76JTAtWudPBgZAjvYOVigE6r/enCd/7Qb82ko1KcwR+rZs +cyNKiV6XuZKyMiv/NOPK12LYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmQ1IQx U961kMXrC3YX6YKPwcZwMB8GA1UdIwQYMBaAFO9meNwM6zQUHGShirJL+GyrL701 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUUzNC80QkVGQkVDQTMw QzIxMUVDOTFBMTcwMURDNEY5QUUwMi83Mlo0M0F6ck5CUWNaS0dLc2t2NGJLc3Z2 VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyWjQzQXpyTkJRY1pLR0tza3Y0YktzdnZUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUUzNC80QkVGQkVDQTMwQzIxMUVDOTFBMTcwMURDNEY5QUUwMi83Mlo0M0F6ck5C UWNaS0dLc2t2NGJLc3Z2VFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNVH6TapXcppNR15g6KsjwqvPLBNlrm1xv4Hnq0MPnvpak4ZLiH5/x zTyCcQ6d3lK7t0yZuHuhs0F5fov/v+y5dNXWPGsubqmS902VM5bqf+fb9K6hI1xu SoG923GZa55UCrQzGFakWdHjTM+bKowOXj9M9APuzEaFW3GUZ60RLPJJFboADZwm nJJ1V/WSqopPUIGSgnLSLYhtGPjYuvgin1fwsVPq8KF1J4qVAtrwGWxkp55KQd7n 7xPW3myl6DYh0cheNc4pTQOfekX7p1rIMMqlWfKWWFofn6mxVoH/NvxmjVNxzdf6 3wnriHUOQltQs8MFdLV6FXyQbwsyQRCJ -----END CERTIFICATE-----Generated at Fri Apr 18 16:43:54 2025 by rpki-client