$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft File: 4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft (raw, json) Hash identifier: 02/zoN8STnnl28yO2dgo0Gr5xqTS5033Dq1K2YehCww= Subject key identifier: B9:80:5B:C6:50:20:66:4E:EE:5A:D3:2D:4E:80:53:29:89:59:04:BE Authority key identifier: E2:F1:77:37:B8:4C:1F:67:86:9C:03:A4:7F:8C:41:9F:D4:20:01:6C Certificate issuer: /CN=A91E1604/serialNumber=E2F17737B84C1F67869C03A47F8C419FD420016C Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft Manifest number: 95 Signing time: Mon 21 Apr 2025 05:12:07 +0000 Manifest this update: Mon 21 Apr 2025 05:12:06 +0000 Manifest next update: Mon 28 Apr 2025 05:12:06 +0000 Files and hashes: 1: 4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl (hash: bgCEWslIA36aIukvuhoOxH4Z8JSzDOoWfSCJANJCY0o=) 2: 0B725F44496D11EF9F7F2116C4F9AE02.roa (hash: cLMsRe3bjQqt9KTlSv77ZsvirHU5HvmwxB64rB3nwQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 05:12:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1604, serialNumber=E2F17737B84C1F67869C03A47F8C419FD420016C Validity Not Before: Apr 21 05:12:06 2025 GMT Not After : Apr 28 05:12:06 2025 GMT Subject: CN=6805d3a7-4513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7a:10:04:bc:a1:d6:6a:20:d8:82:8a:b0:fc: 62:26:ba:cd:71:c1:ad:11:80:ce:35:76:b1:7c:0a: 89:d6:8a:32:ce:46:a0:67:43:6a:06:e1:87:93:8a: 8b:eb:c0:80:ac:ef:aa:d5:21:5b:41:1b:88:2e:b0: e3:d8:40:54:53:26:15:43:3d:b4:a1:ad:b4:07:80: e8:ff:cc:68:1a:e6:73:bc:38:cd:56:21:5e:84:b1: 39:3b:d1:93:55:ff:a0:5b:b3:75:ae:3d:39:e3:42: ab:b4:ec:62:78:69:fc:ef:0c:aa:05:3f:ff:43:94: 55:47:04:a0:e3:06:fa:ad:a7:49:ed:d3:75:19:9d: f7:ca:db:21:d4:c7:33:e5:9d:00:91:a8:b2:a9:0b: 4f:e0:2a:ff:cb:90:10:71:11:cb:51:16:fe:5e:5a: 50:da:a8:2f:8a:d9:09:e4:2b:9d:60:15:dc:c0:83: 2b:e7:af:0d:11:a6:19:6b:58:6b:9a:e3:5d:20:b7: 35:9a:49:f1:e9:b3:1f:1f:cf:82:3d:5a:38:ef:87: c2:80:c3:4b:f1:dc:76:fc:23:74:ac:b5:04:f2:fc: 23:25:e1:f0:d5:98:51:6d:1c:4b:88:44:13:a1:4f: 49:b5:12:7e:b9:78:98:51:c1:ed:a4:54:70:5e:41: d1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:80:5B:C6:50:20:66:4E:EE:5A:D3:2D:4E:80:53:29:89:59:04:BE X509v3 Authority Key Identifier: keyid:E2:F1:77:37:B8:4C:1F:67:86:9C:03:A4:7F:8C:41:9F:D4:20:01:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:0a:8b:79:40:32:23:1c:10:2a:83:5d:e6:2d:58:06:2f:00: c7:4c:a1:c2:61:43:59:76:20:2a:97:77:0a:43:b2:4a:7b:1d: 67:8a:40:6d:76:5a:5e:9a:68:1f:92:da:5d:10:b0:dc:8f:0d: 69:fc:e3:e9:09:79:74:fa:5a:61:fd:89:f3:4f:75:25:e2:89: af:57:cf:f0:c4:a9:7c:c1:db:3f:67:2d:0a:0c:4b:74:66:d3: 10:13:d5:15:5f:9e:1c:43:92:cc:90:e7:22:17:8c:c0:81:32: 4a:c9:4a:3e:83:de:29:e4:19:50:fd:3a:63:88:9e:29:11:c5: e6:15:b1:80:d4:34:f2:5e:4a:ff:b0:e2:f2:24:87:ee:4a:5a: c3:ce:04:04:4d:8e:fc:51:ff:8f:30:13:18:11:0a:c6:52:1f: c8:46:13:a3:56:1f:96:60:03:c5:9a:26:2a:15:58:13:17:c4: 94:26:7d:49:67:fd:7f:a3:f0:4d:67:c5:c3:76:b0:5e:d9:0f: 1c:9e:5c:a1:c4:45:da:c3:a5:e7:72:24:3d:68:4c:c8:30:25: 53:60:89:dc:95:a2:c7:b2:18:9d:30:eb:8a:9d:c0:82:70:62: 90:19:3a:39:b4:6b:e5:72:d3:c4:de:8a:57:38:e1:b1:ff:31: 60:e2:37:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE2MDQxMTAvBgNVBAUTKEUyRjE3NzM3Qjg0QzFGNjc4NjlDMDNBNDdGOEM0MTlG RDQyMDAxNkMwHhcNMjUwNDIxMDUxMjA2WhcNMjUwNDI4MDUxMjA2WjAYMRYwFAYD VQQDEw02ODA1ZDNhNy00NTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1noQBLyh1mog2IKKsPxiJrrNccGtEYDONXaxfAqJ1ooyzkagZ0NqBuGHk4qL 68CArO+q1SFbQRuILrDj2EBUUyYVQz20oa20B4Do/8xoGuZzvDjNViFehLE5O9GT Vf+gW7N1rj0540KrtOxieGn87wyqBT//Q5RVRwSg4wb6radJ7dN1GZ33ytsh1Mcz 5Z0AkaiyqQtP4Cr/y5AQcRHLURb+XlpQ2qgvitkJ5CudYBXcwIMr568NEaYZa1hr muNdILc1mknx6bMfH8+CPVo474fCgMNL8dx2/CN0rLUE8vwjJeHw1ZhRbRxLiEQT oU9JtRJ+uXiYUcHtpFRwXkHRCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmAW8ZQ IGZO7lrTLU6AUymJWQS+MB8GA1UdIwQYMBaAFOLxdze4TB9nhpwDpH+MQZ/UIAFs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTYwNC8xMjBDMkM3NDND RUIxMUVGOTRFMjRGNTlDNEY5QUUwMi80dkYzTjdoTUgyZUduQU9rZjR4Qm45UWdB V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR2RjNON2hNSDJlR25BT2tmNHhCbjlRZ0FXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTYwNC8xMjBDMkM3NDNDRUIxMUVGOTRFMjRGNTlDNEY5QUUwMi80dkYzTjdoTUgy ZUduQU9rZjR4Qm45UWdBV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKCot5QDIjHBAqg13mLVgGLwDHTKHCYUNZdiAql3cKQ7JKex1nikBt dlpemmgfktpdELDcjw1p/OPpCXl0+lph/YnzT3Ul4omvV8/wxKl8wds/Zy0KDEt0 ZtMQE9UVX54cQ5LMkOciF4zAgTJKyUo+g94p5BlQ/TpjiJ4pEcXmFbGA1DTyXkr/ sOLyJIfuSlrDzgQETY78Uf+PMBMYEQrGUh/IRhOjVh+WYAPFmiYqFVgTF8SUJn1J Z/1/o/BNZ8XDdrBe2Q8cnlyhxEXaw6XnciQ9aEzIMCVTYInclaLHshidMOuKncCC cGKQGTo5tGvlctPE3opXOOGx/zFg4jdQ -----END CERTIFICATE-----Generated at Tue Apr 22 02:59:48 2025 by rpki-client