$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft File: 4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft (raw, json) Hash identifier: yXnUiD566bYOHLNcKAhAbH14t5lseSyTQHhcXMj2GCM= Subject key identifier: E8:29:3C:A3:DC:22:08:CF:BA:A8:57:54:37:D5:8A:59:2C:A0:A4:0D Authority key identifier: E0:E9:B9:39:9B:8A:4A:5F:DC:DE:20:9F:C5:BE:C0:78:AF:95:CF:7B Certificate issuer: /CN=A91E1887/serialNumber=E0E9B9399B8A4A5FDCDE209FC5BEC078AF95CF7B Certificate serial: 0716 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft Manifest number: 0710 Signing time: Wed 16 Apr 2025 21:34:49 +0000 Manifest this update: Wed 16 Apr 2025 21:34:48 +0000 Manifest next update: Wed 23 Apr 2025 21:34:48 +0000 Files and hashes: 1: 4Om5OZuKSl_c3iCfxb7AeK-Vz3s.crl (hash: lNS0m+55RetKkaZVvlpaETMLHaQZYxzW+VjlkN3qR4c=) 2: 9F46C468355711EBA5B81020C4F9AE02.roa (hash: +mNdwjus2Kgr8/pfP9kkqV55Ej1FzQoLbQf0Qcf2IT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.crl rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 21:34:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1814 (0x716) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1887, serialNumber=E0E9B9399B8A4A5FDCDE209FC5BEC078AF95CF7B Validity Not Before: Apr 16 21:34:48 2025 GMT Not After : Apr 23 21:34:48 2025 GMT Subject: CN=68002279-1721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:65:7a:6f:0e:40:27:aa:52:30:79:fb:37:32: a6:72:4a:e1:28:4e:fe:14:67:1a:95:94:a1:37:fc: c7:db:fc:7d:17:77:24:21:88:fc:8a:4e:de:67:4d: 73:b8:70:72:ee:c3:fe:c0:0f:17:04:40:dd:25:7e: e0:42:30:70:65:a5:28:e8:94:20:c8:89:be:5a:ab: 38:26:51:cd:aa:37:05:e8:37:73:80:4b:14:80:df: 3e:2e:f1:ff:0b:e1:3b:0e:73:b3:66:98:72:09:96: 22:ba:a9:f4:5e:32:88:ff:2a:58:b5:f4:68:b5:48: 97:4e:3f:ab:23:9d:ee:e7:16:5b:f2:a4:9a:4b:f0: f9:a5:24:29:c7:2a:3d:eb:1a:07:57:c0:47:65:4f: 9e:b8:6f:ad:77:c2:64:b1:dd:30:95:d5:20:f0:44: ad:39:a8:1e:32:91:b7:3e:17:c4:19:69:4f:40:a7: b6:d3:15:fd:a6:20:ca:6e:f4:49:4b:1b:ea:1d:b3: 31:68:b0:f5:70:94:df:d1:b5:15:7f:31:c6:c3:87: 23:a0:4e:1e:1e:f6:4b:cd:b6:cc:23:d6:2a:c9:7f: 74:08:85:7b:46:28:65:12:b7:ce:a9:23:f6:71:cb: 10:c7:a9:00:16:3a:5f:49:ac:b8:f2:87:59:b3:4f: 2d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:29:3C:A3:DC:22:08:CF:BA:A8:57:54:37:D5:8A:59:2C:A0:A4:0D X509v3 Authority Key Identifier: keyid:E0:E9:B9:39:9B:8A:4A:5F:DC:DE:20:9F:C5:BE:C0:78:AF:95:CF:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:37:e2:b4:4a:7f:fb:f2:19:9c:1c:c4:8a:f3:f7:0d:06:a1: 7f:4b:5c:2d:cb:aa:74:f8:92:d1:25:08:66:8f:ee:d7:21:08: 57:f6:98:61:35:bd:06:7e:3d:ed:75:35:f1:55:c1:f8:60:a4: d3:1a:24:4e:ef:33:56:b5:ca:1e:ca:11:e2:33:33:3a:93:90: d5:b3:27:b3:8b:f6:c7:2b:be:c5:56:57:7b:7b:2f:d3:2e:1d: b1:e5:da:b4:f9:5c:57:79:a7:52:93:a5:7a:a9:c1:39:b2:ee: 56:0f:9c:56:42:e8:31:b8:dd:5e:f6:fe:81:8c:27:87:2c:13: 10:0b:79:37:ad:f6:3c:a9:20:69:df:d4:65:06:32:73:09:72: 34:60:44:cb:23:c6:24:56:05:70:09:69:4f:6a:04:ba:5f:1e: 60:af:56:1e:25:ba:bd:a8:89:37:d6:c4:b3:ca:f7:1d:d0:63: 17:e2:59:80:86:ec:b4:ac:05:90:95:8b:fb:a9:63:d2:f9:a2: 59:db:98:97:64:2c:58:ec:77:cd:97:9e:4c:52:1c:71:08:e9: c9:72:06:72:f2:09:98:e4:a2:66:44:b0:eb:e3:82:75:db:89: 06:e6:4c:f5:3b:62:3e:59:45:3b:00:b0:c5:d3:e6:92:fe:33: aa:a5:cc:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE4ODcxMTAvBgNVBAUTKEUwRTlCOTM5OUI4QTRBNUZEQ0RFMjA5RkM1QkVDMDc4 QUY5NUNGN0IwHhcNMjUwNDE2MjEzNDQ4WhcNMjUwNDIzMjEzNDQ4WjAYMRYwFAYD VQQDEw02ODAwMjI3OS0xNzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArGV6bw5AJ6pSMHn7NzKmckrhKE7+FGcalZShN/zH2/x9F3ckIYj8ik7eZ01z uHBy7sP+wA8XBEDdJX7gQjBwZaUo6JQgyIm+Wqs4JlHNqjcF6DdzgEsUgN8+LvH/ C+E7DnOzZphyCZYiuqn0XjKI/ypYtfRotUiXTj+rI53u5xZb8qSaS/D5pSQpxyo9 6xoHV8BHZU+euG+td8Jksd0wldUg8EStOageMpG3PhfEGWlPQKe20xX9piDKbvRJ SxvqHbMxaLD1cJTf0bUVfzHGw4cjoE4eHvZLzbbMI9YqyX90CIV7RihlErfOqSP2 ccsQx6kAFjpfSay48odZs08t9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgpPKPc IgjPuqhXVDfVilksoKQNMB8GA1UdIwQYMBaAFODpuTmbikpf3N4gn8W+wHivlc97 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTg4Ny84NEVFOEI2MDM1 NTExMUVCOUY0MTk1MEVDNEY5QUUwMi80T201T1p1S1NsX2MzaUNmeGI3QWVLLVZ6 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRPbTVPWnVLU2xfYzNpQ2Z4YjdBZUstVnozcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTg4Ny84NEVFOEI2MDM1NTExMUVCOUY0MTk1MEVDNEY5QUUwMi80T201T1p1S1Ns X2MzaUNmeGI3QWVLLVZ6M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMN+K0Sn/78hmcHMSK8/cNBqF/S1wty6p0+JLRJQhmj+7XIQhX9phh Nb0Gfj3tdTXxVcH4YKTTGiRO7zNWtcoeyhHiMzM6k5DVsyezi/bHK77FVld7ey/T Lh2x5dq0+VxXeadSk6V6qcE5su5WD5xWQugxuN1e9v6BjCeHLBMQC3k3rfY8qSBp 39RlBjJzCXI0YETLI8YkVgVwCWlPagS6Xx5gr1YeJbq9qIk31sSzyvcd0GMX4lmA huy0rAWQlYv7qWPS+aJZ25iXZCxY7HfNl55MUhxxCOnJcgZy8gmY5KJmRLDr44J1 24kG5kz1O2I+WUU7ALDF0+aS/jOqpcwd -----END CERTIFICATE-----Generated at Thu Apr 17 18:11:50 2025 by rpki-client