$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.mft File: z4nWqxHn1Hqhe0MJxypytxy6R64.mft (raw, json) Hash identifier: 1ABkUfb+Irjuugui3ScYZmpwByw9Vp+OXjUDA7v6QcE= Subject key identifier: 43:63:65:2E:97:F3:0B:C3:C6:89:E7:17:73:E5:33:5D:5C:3A:92:B8 Authority key identifier: CF:89:D6:AB:11:E7:D4:7A:A1:7B:43:09:C7:2A:72:B7:1C:BA:47:AE Certificate issuer: /CN=A91E4D9B/serialNumber=CF89D6AB11E7D47AA17B4309C72A72B71CBA47AE Certificate serial: 084E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4nWqxHn1Hqhe0MJxypytxy6R64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.mft Manifest number: 0844 Signing time: Wed 02 Apr 2025 20:47:24 +0000 Manifest this update: Wed 02 Apr 2025 20:47:23 +0000 Manifest next update: Wed 09 Apr 2025 20:47:23 +0000 Files and hashes: 1: z4nWqxHn1Hqhe0MJxypytxy6R64.crl (hash: 9Lweuxv0eG05wh9nGmOUfux6jx9xskL4HyZqNr20IkM=) 2: CCF7B8AA22B811ECAD21FB20C4F9AE02.roa (hash: jP9WQeUuHByQOgvhcc4yViwwc1IsiLi4j4kFeZuXSLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.crl rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4nWqxHn1Hqhe0MJxypytxy6R64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 20:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2126 (0x84e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4D9B Validity Not Before: Apr 2 20:47:23 2025 GMT Not After : Apr 9 20:47:23 2025 GMT Subject: CN=67eda25c-fa2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c1:b5:73:cb:92:e0:d8:84:8b:f5:e0:99:2b: 48:e9:95:1c:fc:64:17:0e:59:50:dc:24:ff:24:75: 22:40:a4:4c:98:52:12:4f:a0:09:5e:63:47:94:9c: 63:06:3c:b7:7a:9e:76:b7:56:9a:ee:51:88:2f:a8: 2e:f2:f5:ff:3c:27:6e:b2:3a:64:14:ad:9c:8e:b1: 59:03:88:c7:80:10:97:d8:85:c3:56:38:6a:b6:93: 74:1f:8a:5a:a2:a9:cd:54:ea:cf:df:9a:60:93:08: 32:17:2e:f7:b4:b5:4c:30:20:06:8c:06:1f:6f:e5: 2c:bc:1a:be:3b:7e:2d:19:80:25:9a:91:37:e0:9f: 81:6d:0a:cb:66:ac:64:a4:25:a6:ef:b6:c8:d9:48: 1e:3c:1c:45:13:0b:7f:7d:7a:59:b9:5f:21:c1:d8: 43:ac:bd:07:33:6b:4e:ec:c1:c4:8c:de:1e:51:7a: 7f:c4:38:d4:39:27:8a:ee:85:ed:c9:b5:ae:51:e4: a9:c3:fb:a8:e0:25:f5:7c:77:bf:60:86:c6:c1:cb: b3:a8:3d:71:e3:d7:af:af:e4:e5:77:4c:b4:9e:a4: be:71:74:78:3f:08:56:9d:32:1b:c0:7a:b0:46:38: 99:3c:06:c3:00:bd:04:79:04:0f:55:b4:a6:9c:5e: 40:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:63:65:2E:97:F3:0B:C3:C6:89:E7:17:73:E5:33:5D:5C:3A:92:B8 X509v3 Authority Key Identifier: keyid:CF:89:D6:AB:11:E7:D4:7A:A1:7B:43:09:C7:2A:72:B7:1C:BA:47:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4nWqxHn1Hqhe0MJxypytxy6R64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D9B/F5BAA3D8C80011EA87D44A78C4F9AE02/z4nWqxHn1Hqhe0MJxypytxy6R64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:13:58:d5:f8:2e:10:44:4e:3c:ac:a9:26:f5:1e:87:28:64: 2f:0e:68:ba:e5:89:e9:d2:ec:3c:ac:28:d0:76:8b:f1:fa:8f: 39:e6:c2:54:2d:74:cb:ca:91:dd:5b:ba:c4:ae:d5:be:19:e2: 1d:30:20:99:94:1a:65:64:e2:d5:ce:48:8e:b3:66:58:50:39: 9d:57:83:d9:bf:d8:6d:cd:65:3d:84:20:5a:46:2a:f2:26:94: 8d:3c:98:49:fa:29:e3:6c:60:fb:1d:dd:78:b2:04:c4:3d:0c: c5:01:06:6e:8e:f7:fc:ea:1b:20:a3:39:7e:d0:62:6f:05:a8: bc:fe:1b:44:9a:d0:8c:49:82:69:01:52:a8:43:56:59:33:e6: 71:b4:e1:95:3a:5d:38:f6:83:ea:c8:45:1a:83:55:04:56:a8: 0d:05:69:69:a7:24:af:ce:6b:cc:79:b4:35:cc:6c:ab:f4:b4: 96:e7:45:bc:fa:e9:33:28:26:c7:28:b9:cd:7f:0b:3e:7e:05: 8c:9b:0d:2d:15:ba:a1:40:be:75:d2:df:03:c6:a8:1f:70:22: a8:e7:89:28:b6:d6:34:28:50:2c:9a:54:1a:19:9c:0b:be:24: e7:a3:34:3a:db:dd:b4:75:85:5c:49:5b:af:b9:1b:b3:fb:ae: 8d:2b:cb:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTREOUIxMTAvBgNVBAUTKENGODlENkFCMTFFN0Q0N0FBMTdCNDMwOUM3MkE3MkI3 MUNCQTQ3QUUwHhcNMjUwNDAyMjA0NzIzWhcNMjUwNDA5MjA0NzIzWjAYMRYwFAYD VQQDEw02N2VkYTI1Yy1mYTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmsG1c8uS4NiEi/XgmStI6ZUc/GQXDllQ3CT/JHUiQKRMmFIST6AJXmNHlJxj Bjy3ep52t1aa7lGIL6gu8vX/PCdusjpkFK2cjrFZA4jHgBCX2IXDVjhqtpN0H4pa oqnNVOrP35pgkwgyFy73tLVMMCAGjAYfb+UsvBq+O34tGYAlmpE34J+BbQrLZqxk pCWm77bI2UgePBxFEwt/fXpZuV8hwdhDrL0HM2tO7MHEjN4eUXp/xDjUOSeK7oXt ybWuUeSpw/uo4CX1fHe/YIbGwcuzqD1x49evr+Tld0y0nqS+cXR4PwhWnTIbwHqw RjiZPAbDAL0EeQQPVbSmnF5AyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENjZS6X 8wvDxonnF3PlM11cOpK4MB8GA1UdIwQYMBaAFM+J1qsR59R6oXtDCccqcrccukeu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEQ5Qi9GNUJBQTNEOEM4 MDAxMUVBODdENDRBNzhDNEY5QUUwMi96NG5XcXhIbjFIcWhlME1KeHlweXR4eTZS NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3o0bldxeEhuMUhxaGUwTUp4eXB5dHh5NlI2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEQ5Qi9GNUJBQTNEOEM4MDAxMUVBODdENDRBNzhDNEY5QUUwMi96NG5XcXhIbjFI cWhlME1KeHlweXR4eTZSNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnE1jV+C4QRE48rKkm9R6HKGQvDmi65Ynp0uw8rCjQdovx+o855sJU LXTLypHdW7rErtW+GeIdMCCZlBplZOLVzkiOs2ZYUDmdV4PZv9htzWU9hCBaRiry JpSNPJhJ+injbGD7Hd14sgTEPQzFAQZujvf86hsgozl+0GJvBai8/htEmtCMSYJp AVKoQ1ZZM+ZxtOGVOl049oPqyEUag1UEVqgNBWlppySvzmvMebQ1zGyr9LSW50W8 +ukzKCbHKLnNfws+fgWMmw0tFbqhQL510t8DxqgfcCKo54kottY0KFAsmlQaGZwL viTnozQ62920dYVcSVuvuRuz+66NK8sj -----END CERTIFICATE-----Generated at Fri Apr 4 22:30:07 2025 by rpki-client