$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft File: 4PPPvfp9B0J0-nSdQCnO41iPd8M.mft (raw, json) Hash identifier: hwGHrJDytpAv8hvfceatNyPdjkVXk2Ui47uLYjsVGTQ= Subject key identifier: 01:58:81:79:6E:9B:5B:B3:CA:B7:F6:89:86:21:57:C5:90:8E:DF:02 Authority key identifier: E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3 Certificate issuer: /CN=A91D0853/serialNumber=E0F3CFBDFA7D074274FA749D4029CEE3588F77C3 Certificate serial: 0793 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft Manifest number: 078A Signing time: Wed 02 Apr 2025 21:19:30 +0000 Manifest this update: Wed 02 Apr 2025 21:19:29 +0000 Manifest next update: Wed 09 Apr 2025 21:19:29 +0000 Files and hashes: 1: 4PPPvfp9B0J0-nSdQCnO41iPd8M.crl (hash: 0IBuuAzPOWUq4W4EY0w/wFU2TaQoeuxvd4Raw2uFkNs=) 2: 3DAD522E1D7611EB8673F476C4F9AE02.roa (hash: e5b3DDJ+5AdBpB+VVjYybf9HAu4lpvnirB8lehNH2gE=) 3: 01F74A7EBFAC11EE89B0182DC4F9AE02.roa (hash: v+Wfr9mdwprqPsB/fgoxNe7MPi3W3bX6rDgX0OFI/s8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.crl rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:19:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1939 (0x793) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0853 Validity Not Before: Apr 2 21:19:29 2025 GMT Not After : Apr 9 21:19:29 2025 GMT Subject: CN=67eda9e2-a45b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:58:7f:82:73:00:87:0f:16:92:7e:b5:f6:d5: ee:d7:13:42:8a:19:00:a8:70:26:43:47:d8:53:60: d6:f4:e0:a1:62:e3:26:24:04:40:ad:49:7b:59:65: 08:53:8d:32:e1:9c:d7:f8:4c:d9:db:7e:4b:28:d6: d0:5d:c1:ea:0d:93:77:4d:2e:c9:23:50:52:b7:5a: 56:71:a4:ea:c5:d4:47:71:95:95:ba:fd:8a:8f:d7: 22:40:fe:9b:ad:67:98:18:75:4e:61:e9:e5:03:6d: b9:a8:1e:65:96:76:03:ba:19:2f:6a:bf:d8:4e:aa: 5a:2a:5a:a2:a0:9b:25:8c:92:84:47:91:7f:e5:ad: 00:db:ec:62:b4:fa:09:c8:9a:09:ab:cb:31:42:a5: b5:42:2c:22:9b:a6:3a:27:de:33:91:f1:84:ca:1f: ae:e5:4d:d9:66:c3:0d:5f:73:01:88:88:a8:66:f9: 2f:c7:04:88:0e:6d:fe:7b:55:8c:1a:03:28:ae:32: a1:4b:3d:d8:0e:87:be:ae:bb:26:99:00:75:bb:4b: 3e:92:9b:6a:49:4e:0e:96:f6:09:81:fd:c1:3e:1b: fa:40:c5:82:54:14:61:cc:ca:61:b4:8f:a3:e5:4e: 58:90:8e:60:85:28:04:94:99:2e:c1:a4:75:97:89: a2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:58:81:79:6E:9B:5B:B3:CA:B7:F6:89:86:21:57:C5:90:8E:DF:02 X509v3 Authority Key Identifier: keyid:E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:97:75:bd:24:6c:05:3f:e9:c6:f9:f0:14:fe:a2:5e:56:2d: 3b:98:2b:b6:ae:25:d3:2c:1a:d9:5a:48:b7:1f:1d:ad:8e:18: a1:84:29:23:25:9d:e3:4b:1f:37:25:cc:6e:64:c9:ad:fd:af: f8:08:81:3b:f2:c6:6f:bf:94:81:c6:81:c6:c0:3d:10:3b:c7: 95:44:cb:a4:08:7f:12:40:5b:a7:cd:ec:d6:a9:8b:18:3f:9c: bc:13:64:63:1c:3b:db:51:4d:59:03:2d:2a:2f:db:99:f2:6c: 55:86:d7:e3:76:62:09:32:3f:3f:15:f6:5f:45:37:dc:46:83: 36:2e:a5:fc:4d:cc:75:7a:34:7c:5f:e3:71:74:23:4b:a6:85: 42:31:6e:2c:73:3f:11:09:a8:0f:30:2a:2c:78:12:70:49:0a: 37:9c:12:b3:15:5a:84:d2:fc:9e:a9:e3:2a:9f:95:5a:bb:38: d5:9f:5b:c5:9e:c0:c2:80:90:4a:30:dc:45:2d:91:f1:73:32: 83:2d:ec:0e:18:31:de:e0:1a:17:8f:9e:13:2e:34:99:36:3d: 53:b8:f4:00:ae:31:d1:44:dc:2e:99:5b:61:1a:84:fb:1e:23: 65:c3:c4:72:54:84:f8:95:a5:e9:34:05:67:77:98:f5:51:92: 8f:3e:92:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA4NTMxMTAvBgNVBAUTKEUwRjNDRkJERkE3RDA3NDI3NEZBNzQ5RDQwMjlDRUUz NTg4Rjc3QzMwHhcNMjUwNDAyMjExOTI5WhcNMjUwNDA5MjExOTI5WjAYMRYwFAYD VQQDEw02N2VkYTllMi1hNDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Vh/gnMAhw8Wkn619tXu1xNCihkAqHAmQ0fYU2DW9OChYuMmJARArUl7WWUI U40y4ZzX+EzZ235LKNbQXcHqDZN3TS7JI1BSt1pWcaTqxdRHcZWVuv2Kj9ciQP6b rWeYGHVOYenlA225qB5llnYDuhkvar/YTqpaKlqioJsljJKER5F/5a0A2+xitPoJ yJoJq8sxQqW1Qiwim6Y6J94zkfGEyh+u5U3ZZsMNX3MBiIioZvkvxwSIDm3+e1WM GgMorjKhSz3YDoe+rrsmmQB1u0s+kptqSU4OlvYJgf3BPhv6QMWCVBRhzMphtI+j 5U5YkI5ghSgElJkuwaR1l4miAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAFYgXlu m1uzyrf2iYYhV8WQjt8CMB8GA1UdIwQYMBaAFODzz736fQdCdPp0nUApzuNYj3fD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDg1My81Qjk0MzkwRTA0 NDExMUVCOTFDNDNFNDVDNEY5QUUwMi80UFBQdmZwOUIwSjAtblNkUUNuTzQxaVBk OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRQUFB2ZnA5QjBKMC1uU2RRQ25PNDFpUGQ4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDg1My81Qjk0MzkwRTA0NDExMUVCOTFDNDNFNDVDNEY5QUUwMi80UFBQdmZwOUIw SjAtblNkUUNuTzQxaVBkOE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBil3W9JGwFP+nG+fAU/qJeVi07mCu2riXTLBrZWki3Hx2tjhihhCkj JZ3jSx83JcxuZMmt/a/4CIE78sZvv5SBxoHGwD0QO8eVRMukCH8SQFunzezWqYsY P5y8E2RjHDvbUU1ZAy0qL9uZ8mxVhtfjdmIJMj8/FfZfRTfcRoM2LqX8Tcx1ejR8 X+NxdCNLpoVCMW4scz8RCagPMCoseBJwSQo3nBKzFVqE0vyeqeMqn5VauzjVn1vF nsDCgJBKMNxFLZHxczKDLewOGDHe4BoXj54TLjSZNj1TuPQArjHRRNwumVthGoT7 HiNlw8RyVIT4laXpNAVnd5j1UZKPPpJK -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:44 2025 by rpki-client