$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft File: V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft (raw, json) Hash identifier: jT02861nwLfCs6eNLs5zSk2X6A9eD8+KVfLQukEpvzY= Subject key identifier: E7:FD:E4:63:C7:C2:59:33:BC:69:62:3A:D5:F8:ED:C5:04:C8:BA:BC Authority key identifier: 57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35 Certificate issuer: /CN=A91D4786/serialNumber=578C8D02AEF0B43E29FECEA1895DCC9D10663535 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft Manifest number: 49 Signing time: Sat 05 Apr 2025 06:39:08 +0000 Manifest this update: Sat 05 Apr 2025 06:39:08 +0000 Manifest next update: Sat 12 Apr 2025 06:39:08 +0000 Files and hashes: 1: V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl (hash: Va4/00xSyW699LD4O+2I7CfwMk2jdoXoVLaJOXU9xac=) 2: 07D85DDEA7C811EF92C28379C4F9AE02.roa (hash: ZcWeD92UYMu6fLpMaSqSsvoWJIwNEm94vjjCo7cjTrY=) 3: 073CAA38A7C811EF92C28379C4F9AE02.roa (hash: 3RUDCXxLe0lvptsJjUy4NkMr2pEIuvZpBiDjKj7RKDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 06:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4786 Validity Not Before: Apr 5 06:39:08 2025 GMT Not After : Apr 12 06:39:08 2025 GMT Subject: CN=67f0d00c-0c5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3a:e8:ab:18:5e:cc:ed:72:f3:40:a2:de:5a: 9c:a9:03:ef:ea:2c:62:14:c5:6f:eb:74:04:48:89: d1:10:9f:0e:50:45:51:9f:db:f4:d9:66:e2:49:ef: 5d:01:71:d0:a5:2f:7a:3b:34:ab:33:37:2c:2d:f8: 74:2c:0b:ba:95:e2:4e:9d:7a:b7:ea:ae:9f:67:2e: a1:33:04:87:55:33:be:1c:4e:ab:d1:66:de:05:f3: 13:3b:38:ff:9d:e2:7c:e8:4a:0d:43:b4:91:0d:bb: 4d:78:82:1e:60:7b:6d:cf:92:c0:78:ae:a0:16:ef: 67:f3:29:29:a6:6a:4d:ee:dd:24:1b:96:52:40:c5: 42:a5:49:b8:2f:15:a6:38:1f:7d:3b:68:7b:de:59: 63:fe:05:d3:77:a2:d5:f1:06:23:92:68:82:a9:c7: 9e:66:fb:cc:21:b6:8d:80:d4:18:42:35:c4:ad:65: e1:28:0d:b7:ba:9a:5b:df:9d:8e:ae:d9:a0:25:09: 0c:d2:a7:f6:5e:e9:a8:b3:e6:84:33:22:2b:84:f2: 6a:bb:76:5f:0e:49:98:dc:5f:b5:57:1d:3a:96:ff: d6:e3:57:d9:87:63:00:bc:67:5d:28:17:a1:62:77: 50:ab:06:f6:d2:7a:a5:32:c3:d0:4a:88:72:00:4e: f5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FD:E4:63:C7:C2:59:33:BC:69:62:3A:D5:F8:ED:C5:04:C8:BA:BC X509v3 Authority Key Identifier: keyid:57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:6a:74:cc:f5:b2:d6:8a:75:f3:58:ac:5b:80:46:e6:f7:5c: 17:3d:80:bb:be:48:9d:f1:10:8c:6c:f9:a6:7e:f9:e2:89:1e: cd:e3:df:3c:89:cc:e3:3b:a7:0a:54:b6:3c:50:3f:90:a1:02: 4b:8c:dc:24:6b:32:42:69:ba:51:1a:73:5b:61:76:b1:54:14: 4c:2f:25:8b:d7:33:ea:f4:c5:81:21:a8:53:b1:39:5c:43:bc: 53:72:32:4c:9b:1f:0f:45:1a:e0:ca:a0:07:25:ff:d4:67:64: 65:ab:4b:ab:b4:fa:44:f6:1a:41:2e:4c:a0:b4:5e:e8:0a:79: c0:f0:87:d1:1e:ec:88:75:87:bd:07:f2:8c:83:26:55:47:18: 4e:e1:43:a6:bc:ad:bd:70:2e:47:75:99:31:55:dc:3c:64:44: 8f:94:a7:cb:c4:6f:8b:41:1f:8c:25:14:91:8b:5f:db:79:7b: ca:1b:53:bd:22:ab:02:42:15:7d:7e:0f:fd:b3:3e:f2:1d:57: e9:5a:e7:9d:22:b8:a0:c5:dc:07:83:20:e5:94:66:48:1a:64: 3d:d4:24:a6:5a:b3:e3:67:fc:f5:ce:a6:a0:95:e4:a7:8c:a0: cc:c6:f4:bf:d9:86:8d:52:dc:92:87:d3:54:db:60:4c:98:cf: 88:6e:e2:15 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDc4NjExMC8GA1UEBRMoNTc4QzhEMDJBRUYwQjQzRTI5RkVDRUExODk1RENDOUQx MDY2MzUzNTAeFw0yNTA0MDUwNjM5MDhaFw0yNTA0MTIwNjM5MDhaMBgxFjAUBgNV BAMTDTY3ZjBkMDBjLTBjNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwOuirGF7M7XLzQKLeWpypA+/qLGIUxW/rdARIidEQnw5QRVGf2/TZZuJJ710B cdClL3o7NKszNywt+HQsC7qV4k6derfqrp9nLqEzBIdVM74cTqvRZt4F8xM7OP+d 4nzoSg1DtJENu014gh5ge23PksB4rqAW72fzKSmmak3u3SQbllJAxUKlSbgvFaY4 H307aHveWWP+BdN3otXxBiOSaIKpx55m+8whto2A1BhCNcStZeEoDbe6mlvfnY6u 2aAlCQzSp/Ze6aiz5oQzIiuE8mq7dl8OSZjcX7VXHTqW/9bjV9mHYwC8Z10oF6Fi d1CrBvbSeqUyw9BKiHIATvWzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5/3kY8fC WTO8aWI61fjtxQTIurwwHwYDVR0jBBgwFoAUV4yNAq7wtD4p/s6hiV3MnRBmNTUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0Nzg2LzM0NTk4QzcwQTdD MzExRUZCNTExRTA1M0M0RjlBRTAyL1Y0eU5BcTd3dEQ0cF9zNmhpVjNNblJCbU5U VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVjR5TkFxN3d0RDRwX3M2aGlWM01uUkJtTlRVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 Nzg2LzM0NTk4QzcwQTdDMzExRUZCNTExRTA1M0M0RjlBRTAyL1Y0eU5BcTd3dEQ0 cF9zNmhpVjNNblJCbU5UVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKhqdMz1staKdfNYrFuARub3XBc9gLu+SJ3xEIxs+aZ++eKJHs3j3zyJ zOM7pwpUtjxQP5ChAkuM3CRrMkJpulEac1thdrFUFEwvJYvXM+r0xYEhqFOxOVxD vFNyMkybHw9FGuDKoAcl/9RnZGWrS6u0+kT2GkEuTKC0XugKecDwh9Ee7Ih1h70H 8oyDJlVHGE7hQ6a8rb1wLkd1mTFV3DxkRI+Up8vEb4tBH4wlFJGLX9t5e8obU70i qwJCFX1+D/2zPvIdV+la550iuKDF3AeDIOWUZkgaZD3UJKZas+Nn/PXOpqCV5KeM oMzG9L/Zho1S3JKH01TbYEyYz4hu4hU= -----END CERTIFICATE-----Generated at Sun Apr 6 18:32:24 2025 by rpki-client