$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft File: C4E-K7qEBp60NNZWZn_s4fYbSUs.mft (raw, json) Hash identifier: d/gall9PrU50uAThtVhdMio88QzxmwOinY5XvpFy+gA= Subject key identifier: 7C:F5:4A:2B:0C:ED:1C:3E:96:E6:14:00:A3:63:80:5A:4D:25:B9:8C Authority key identifier: 0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B Certificate issuer: /CN=A91E7A8E/serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft Manifest number: 0107 Signing time: Fri 11 Apr 2025 04:15:16 +0000 Manifest this update: Fri 11 Apr 2025 04:15:15 +0000 Manifest next update: Fri 18 Apr 2025 04:15:15 +0000 Files and hashes: 1: C4E-K7qEBp60NNZWZn_s4fYbSUs.crl (hash: IIo9KhyuTJs/APW302270Qdjop/4ys2DOYfmVY3CzGU=) 2: 0120C296835D11EEA3484166C4F9AE02.roa (hash: 7OzrwZ3Ky/gjMPnFBCcju8Q1dBXI74VmazgiOgPzNsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 04:15:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7A8E, serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B Validity Not Before: Apr 11 04:15:15 2025 GMT Not After : Apr 18 04:15:15 2025 GMT Subject: CN=67f89754-af5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:42:20:ae:db:37:91:e7:eb:5e:96:b5:ca:36: e0:af:b7:f8:5f:59:8c:30:f5:8e:46:b6:94:52:d0: 21:c2:40:93:5d:b7:c0:f1:7f:50:5f:c0:9b:f7:d8: a5:23:4e:82:7b:89:ae:67:7b:e3:50:7a:46:a3:86: 7d:61:82:00:ab:6b:7c:7d:e2:5e:f1:95:b4:4b:59: c2:a3:b8:3d:c9:76:7c:ef:6f:34:41:d3:12:1b:55: 1f:9a:fe:36:6c:6d:1a:1a:2a:89:06:3a:5d:0e:4b: a8:c0:31:97:53:dc:e8:ae:92:5b:9e:db:c2:8c:b1: 87:16:ed:41:96:65:40:79:79:8b:20:a5:57:60:6a: 90:03:32:83:59:09:a6:c6:bd:fa:77:7c:3c:06:73: 95:e4:35:09:5d:0a:88:28:a6:29:75:b2:9e:d7:2d: 53:16:09:e0:94:9e:aa:70:0a:b6:54:87:d0:0c:35: 5d:2e:4f:86:f8:72:c9:d0:4b:83:da:75:9c:6a:b2: a7:f7:22:e2:bf:b7:fd:3e:09:04:37:b2:95:15:48: b1:04:64:bb:34:27:2d:45:95:be:75:44:3a:18:a0: 90:b1:01:d8:92:01:7d:1e:27:7c:2b:d2:90:0f:c2: 42:6b:1a:5f:19:1d:eb:53:9c:9f:b5:54:6f:34:01: b8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F5:4A:2B:0C:ED:1C:3E:96:E6:14:00:A3:63:80:5A:4D:25:B9:8C X509v3 Authority Key Identifier: keyid:0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:9f:1d:fe:6f:3b:03:ce:28:90:75:bc:ad:53:9a:3c:6c:6d: bb:ee:a8:70:c9:e4:8a:ff:04:ed:65:62:aa:ad:d3:9b:70:ea: b5:60:4e:a1:fb:1a:ef:25:f6:ba:37:6b:c5:ed:18:e0:7e:4a: 06:f0:26:30:d3:78:60:ce:a9:b4:34:63:72:b9:b6:b8:c1:80: 2c:12:58:81:83:2f:34:01:90:77:d7:48:fc:de:e5:e7:77:3d: 14:00:ec:d5:ba:44:60:06:54:be:d8:1c:84:b9:63:62:a3:b4: 77:01:e5:ce:54:78:b0:20:61:ce:0a:43:64:8b:0c:75:c9:00: 9b:77:da:1d:eb:14:44:4d:b2:9a:5f:e9:a8:ab:fc:72:97:18: af:a8:ce:9e:cc:0d:99:24:0e:65:99:5e:4e:a5:13:f0:54:95: b9:90:65:30:ea:c6:69:dd:70:58:5e:d8:44:ed:37:a7:8f:e3: 8c:9e:85:72:47:f2:98:b0:d3:8a:16:58:54:52:05:bc:49:3a: 20:21:14:81:28:e9:8d:f8:c9:8a:84:b1:4b:29:1b:4f:cb:78: 35:d1:8d:c8:ac:70:cd:5c:b1:4f:f3:bb:9e:fe:61:c9:dd:90: d0:ed:ab:4a:70:a5:51:0e:c8:db:1a:c0:25:20:2e:a2:e0:2b: 37:e8:25:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdBOEUxMTAvBgNVBAUTKDBCODEzRTJCQkE4NDA2OUVCNDM0RDY1NjY2N0ZFQ0Ux RjYxQjQ5NEIwHhcNMjUwNDExMDQxNTE1WhcNMjUwNDE4MDQxNTE1WjAYMRYwFAYD VQQDEw02N2Y4OTc1NC1hZjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0Igrts3kefrXpa1yjbgr7f4X1mMMPWORraUUtAhwkCTXbfA8X9QX8Cb99il I06Ce4muZ3vjUHpGo4Z9YYIAq2t8feJe8ZW0S1nCo7g9yXZ87280QdMSG1Ufmv42 bG0aGiqJBjpdDkuowDGXU9zorpJbntvCjLGHFu1BlmVAeXmLIKVXYGqQAzKDWQmm xr36d3w8BnOV5DUJXQqIKKYpdbKe1y1TFgnglJ6qcAq2VIfQDDVdLk+G+HLJ0EuD 2nWcarKn9yLiv7f9PgkEN7KVFUixBGS7NCctRZW+dUQ6GKCQsQHYkgF9Hid8K9KQ D8JCaxpfGR3rU5yftVRvNAG49QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHz1SisM 7Rw+luYUAKNjgFpNJbmMMB8GA1UdIwQYMBaAFAuBPiu6hAaetDTWVmZ/7OH2G0lL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0E4RS9BMDUxNTZBNjgz NUMxMUVFODhFQUI4NEZDNEY5QUUwMi9DNEUtSzdxRUJwNjBOTlpXWm5fczRmWWJT VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M0RS1LN3FFQnA2ME5OWldabl9zNGZZYlNVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0E4RS9BMDUxNTZBNjgzNUMxMUVFODhFQUI4NEZDNEY5QUUwMi9DNEUtSzdxRUJw NjBOTlpXWm5fczRmWWJTVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsnx3+bzsDziiQdbytU5o8bG277qhwyeSK/wTtZWKqrdObcOq1YE6h +xrvJfa6N2vF7RjgfkoG8CYw03hgzqm0NGNyuba4wYAsEliBgy80AZB310j83uXn dz0UAOzVukRgBlS+2ByEuWNio7R3AeXOVHiwIGHOCkNkiwx1yQCbd9od6xRETbKa X+moq/xylxivqM6ezA2ZJA5lmV5OpRPwVJW5kGUw6sZp3XBYXthE7Tenj+OMnoVy R/KYsNOKFlhUUgW8STogIRSBKOmN+MmKhLFLKRtPy3g10Y3IrHDNXLFP87ue/mHJ 3ZDQ7atKcKVRDsjbGsAlIC6i4Cs36CU/ -----END CERTIFICATE-----Generated at Sat Apr 12 18:59:46 2025 by rpki-client