$ rpki-client -vvf rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft File: MJk4cOkSzRkdgKzvMDV6VP80-C4.mft (raw, json) Hash identifier: fQBxRbZcwHBq6Y4b46JpijV0j9aWjY06uVzuQj9qvaU= Subject key identifier: BE:40:9F:CB:AC:94:B3:E3:13:BB:FE:27:B7:3B:FF:59:DB:E8:E6:35 Authority key identifier: 30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E Certificate issuer: /CN=A91E84A9/serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E Certificate serial: 11F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft Manifest number: 11ED Signing time: Wed 02 Apr 2025 17:12:15 +0000 Manifest this update: Wed 02 Apr 2025 17:12:15 +0000 Manifest next update: Wed 09 Apr 2025 17:12:15 +0000 Files and hashes: 1: MJk4cOkSzRkdgKzvMDV6VP80-C4.crl (hash: aMciifMYzho+0uh95Qz51BWPgVo27p3MV2YAEG8HDW4=) 2: DA7E3CA6E19811E8822B8E5CC4F9AE02.roa (hash: nEHygU0iQ55kYxCvR5kzgzTy6GI2Ua1TfbgvO9Q4FhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 17:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4596 (0x11f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E84A9 Validity Not Before: Apr 2 17:12:15 2025 GMT Not After : Apr 9 17:12:15 2025 GMT Subject: CN=67ed6fef-ad82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d6:c2:a4:44:11:c0:30:34:1f:c6:3f:93:39: 26:8f:6c:8c:ff:21:cd:fe:cb:62:d8:6c:63:83:87: 58:17:b5:96:db:4a:a6:e8:5d:31:f8:99:b8:62:f2: b5:0b:fd:13:2f:b2:d2:83:eb:a2:1c:89:a9:8b:00: fd:a5:ab:ff:10:3a:c2:fd:81:c9:3f:57:60:f3:9e: 82:2b:75:57:95:69:8a:34:1b:d4:37:29:b4:0a:89: 18:ef:59:69:1d:f3:96:3f:e2:9d:3c:e4:29:e9:89: da:7f:c9:1f:d7:3a:75:b3:21:c3:4e:d7:db:1e:6d: 55:00:a9:19:59:80:3f:80:82:1f:5c:86:b3:be:e1: 9f:f3:7c:c1:d1:89:dc:90:12:dd:19:d8:c1:95:22: 3b:0c:d6:09:ae:e1:4c:87:02:6c:34:70:97:ff:b7: 31:d4:5b:bf:21:d4:5a:ac:9e:41:b1:64:0f:5b:05: 07:a5:b5:b6:d4:b3:b2:e8:49:1a:10:b3:23:37:12: 49:f3:64:2b:0f:ae:36:4b:c1:cb:f6:32:d2:5b:33: c6:4e:a0:d4:1f:1f:b5:ce:71:65:a2:37:bf:d5:81: 2f:32:98:35:6f:49:3f:90:a0:10:88:ab:88:af:0e: be:5b:ab:f3:8c:41:0f:38:9b:33:09:12:ad:78:81: 2c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:40:9F:CB:AC:94:B3:E3:13:BB:FE:27:B7:3B:FF:59:DB:E8:E6:35 X509v3 Authority Key Identifier: keyid:30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:ba:67:44:dd:9e:ea:f0:92:2f:a8:cf:3c:3c:8b:b4:ba:92: ce:cf:0b:8c:56:9f:88:46:6c:92:90:3c:3a:0f:69:b2:80:3e: cf:43:19:ad:97:f9:f0:e6:96:2c:8d:5e:a8:84:44:54:3a:02: 21:25:97:73:12:6a:e6:50:cc:3c:3e:44:92:9c:2d:ea:c6:35: bb:bc:78:50:de:c6:42:4a:57:ed:27:09:66:e0:c5:d3:6a:b8: a1:53:e8:b0:d3:65:d8:91:26:45:5b:a4:c3:c6:ea:e6:3c:a4: 65:98:20:18:a8:f9:33:7c:96:fc:21:0b:c8:cc:87:9e:c1:4f: 8d:3e:d0:b1:fb:fd:b1:fa:af:f1:77:f3:67:e2:95:a9:f5:7a: 9e:f0:12:3b:e0:9a:81:c8:09:c4:55:99:51:af:fa:db:ec:a1: a4:ae:7d:ea:a8:4c:93:45:b3:9f:9d:c3:e6:1d:a1:43:94:ac: 58:02:4c:44:03:a9:92:87:b8:ba:e3:37:69:90:89:96:c7:02: e5:de:0e:72:12:1b:ca:d5:14:ca:54:f5:2a:07:ed:6b:f6:4a: 4c:67:73:b1:f4:fa:ad:24:74:80:02:53:b6:96:48:9f:ae:0a: ea:f5:c6:de:4c:f5:48:e9:ed:e8:13:3f:d3:07:27:11:98:ac: 3d:ff:84:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg0QTkxMTAvBgNVBAUTKDMwOTkzODcwRTkxMkNEMTkxRDgwQUNFRjMwMzU3QTU0 RkYzNEY4MkUwHhcNMjUwNDAyMTcxMjE1WhcNMjUwNDA5MTcxMjE1WjAYMRYwFAYD VQQDEw02N2VkNmZlZi1hZDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9bCpEQRwDA0H8Y/kzkmj2yM/yHN/sti2Gxjg4dYF7WW20qm6F0x+Jm4YvK1 C/0TL7LSg+uiHImpiwD9pav/EDrC/YHJP1dg856CK3VXlWmKNBvUNym0CokY71lp HfOWP+KdPOQp6Ynaf8kf1zp1syHDTtfbHm1VAKkZWYA/gIIfXIazvuGf83zB0Ync kBLdGdjBlSI7DNYJruFMhwJsNHCX/7cx1Fu/IdRarJ5BsWQPWwUHpbW21LOy6Eka ELMjNxJJ82QrD642S8HL9jLSWzPGTqDUHx+1znFloje/1YEvMpg1b0k/kKAQiKuI rw6+W6vzjEEPOJszCRKteIEsjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5An8us lLPjE7v+J7c7/1nb6OY1MB8GA1UdIwQYMBaAFDCZOHDpEs0ZHYCs7zA1elT/NPgu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODRBOS82QTkwQTlDMEUx OTcxMUU4Qjk0QzA1NThDNEY5QUUwMi9NSms0Y09rU3pSa2RnS3p2TURWNlZQODAt QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01KazRjT2tTelJrZGdLenZNRFY2VlA4MC1DNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODRBOS82QTkwQTlDMEUxOTcxMUU4Qjk0QzA1NThDNEY5QUUwMi9NSms0Y09rU3pS a2RnS3p2TURWNlZQODAtQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwumdE3Z7q8JIvqM88PIu0upLOzwuMVp+IRmySkDw6D2mygD7PQxmt l/nw5pYsjV6ohERUOgIhJZdzEmrmUMw8PkSSnC3qxjW7vHhQ3sZCSlftJwlm4MXT arihU+iw02XYkSZFW6TDxurmPKRlmCAYqPkzfJb8IQvIzIeewU+NPtCx+/2x+q/x d/Nn4pWp9Xqe8BI74JqByAnEVZlRr/rb7KGkrn3qqEyTRbOfncPmHaFDlKxYAkxE A6mSh7i64zdpkImWxwLl3g5yEhvK1RTKVPUqB+1r9kpMZ3Ox9PqtJHSAAlO2lkif rgrq9cbeTPVI6e3oEz/TBycRmKw9/4R5 -----END CERTIFICATE-----Generated at Fri Apr 4 18:34:01 2025 by rpki-client