$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft File: 4XI0Y4kx9DllENfQutUfivTrhrY.mft (raw, json) Hash identifier: fbbVqN2KR3GkKHl3MYjqW3K/SuZ7f8H1FCyV5LMoNw8= Subject key identifier: FB:4C:22:99:8E:BD:09:37:B8:1B:65:A6:B4:35:8D:EB:C4:83:44:0D Authority key identifier: E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 Certificate issuer: /CN=A91F34FA/serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Certificate serial: 01C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft Manifest number: 01BD Signing time: Thu 03 Apr 2025 02:21:29 +0000 Manifest this update: Thu 03 Apr 2025 02:21:29 +0000 Manifest next update: Thu 10 Apr 2025 02:21:29 +0000 Files and hashes: 1: 4XI0Y4kx9DllENfQutUfivTrhrY.crl (hash: dODtzZuI2zpV2ekrjAtYA7BHfCjgyyCzY6qH3n1d5N8=) 2: 8256A692444A11EFB043DE36C4F9AE02.roa (hash: Ple4OYydaAojanyJwx7ZWPyKox9DD4lFfc6gQi2CwTI=) 3: 81B847F4444A11EFB043DE36C4F9AE02.roa (hash: iBZ0Vc5oqFw84Bi0mykH6jGLVo3+N0cmUjqo5T+vIIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F34FA Validity Not Before: Apr 3 02:21:29 2025 GMT Not After : Apr 10 02:21:29 2025 GMT Subject: CN=67edf0a9-5afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e2:89:58:98:53:c2:a4:2b:59:cc:41:5c:d9: 90:dc:3c:9f:89:52:8a:0f:ca:af:cc:14:63:f3:e9: 63:6b:cb:93:fa:43:ec:83:42:ee:f4:2d:5b:e5:63: 10:88:9d:b2:80:af:9e:16:08:01:29:ce:a1:9a:0f: 12:2d:b2:d5:8b:33:bf:39:72:e1:b3:49:7c:35:af: 5b:c4:98:e7:3e:eb:76:0b:57:95:c3:ee:93:ae:cd: 12:67:0e:3d:cc:1f:b5:70:1d:bc:85:0c:39:fa:9a: 17:68:56:70:aa:d1:a5:0b:a3:ce:40:e7:ba:58:15: e7:d7:83:70:71:d0:f8:b7:ac:e0:a2:d3:fc:3f:d9: ba:c9:c2:61:d4:56:75:19:fe:44:85:30:2b:49:0e: eb:a9:5e:03:95:c1:ef:c5:26:b8:fa:42:1b:7b:ea: dd:71:4e:5d:32:fd:25:60:16:fe:fc:d8:9f:f3:bd: 33:9c:42:37:16:38:6e:fd:88:83:91:42:40:6f:4b: 0e:30:22:b1:2e:96:98:4b:4e:e0:ed:4a:bb:83:90: 3f:16:b3:c7:24:d2:e8:76:0b:b2:df:8a:3a:2b:fb: 62:72:16:1e:41:bf:ca:11:4f:b3:66:9e:fc:6a:d1: a1:e2:97:14:c1:e0:71:26:27:d9:b7:9c:5f:4e:db: d1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4C:22:99:8E:BD:09:37:B8:1B:65:A6:B4:35:8D:EB:C4:83:44:0D X509v3 Authority Key Identifier: keyid:E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:8b:76:3e:14:85:57:23:81:94:74:a5:9f:59:78:30:e1:4a: f1:33:06:40:b4:68:14:72:77:8b:b6:fa:b9:7c:d0:57:1d:a8: 0d:12:27:9b:9a:99:ca:83:86:7b:b9:57:01:f2:41:6f:3d:5b: 76:3d:44:07:26:28:76:ff:f7:d6:48:17:b2:fc:e7:c1:f5:13: 91:40:b2:44:09:dc:88:3c:6c:83:ee:1f:cc:8e:7b:8b:b6:23: 95:bb:29:1d:30:43:1c:0f:97:51:b9:d5:47:32:57:91:ed:3f: a7:9c:f6:9c:56:55:30:3b:ad:e0:e6:92:00:c6:45:61:42:00: 6e:1b:89:80:08:fd:f7:a8:a7:df:a7:64:5e:75:f2:cb:73:0d: 0a:38:71:db:05:1b:20:8b:d6:09:f3:42:f6:3b:82:1c:54:30: fb:e9:43:14:97:95:1d:8a:19:4a:17:16:ff:09:2e:75:13:02: a8:93:da:21:c9:91:35:e3:f7:c4:d2:e2:38:c0:08:c7:2a:c8: b5:77:4e:67:20:6b:18:eb:6c:43:18:2e:6a:99:02:03:b7:f2: 8c:80:92:cd:d2:59:fe:a9:ed:b0:fe:0a:5a:b5:80:7f:f9:a7: 50:c1:ff:8d:c5:e3:f7:bd:62:cd:7c:53:09:d6:eb:cb:fd:95: 26:38:f9:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM0RkExMTAvBgNVBAUTKEUxNzIzNDYzODkzMUY0Mzk2NTEwRDdEMEJBRDUxRjhB RjRFQjg2QjYwHhcNMjUwNDAzMDIyMTI5WhcNMjUwNDEwMDIyMTI5WjAYMRYwFAYD VQQDEw02N2VkZjBhOS01YWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+KJWJhTwqQrWcxBXNmQ3DyfiVKKD8qvzBRj8+lja8uT+kPsg0Lu9C1b5WMQ iJ2ygK+eFggBKc6hmg8SLbLVizO/OXLhs0l8Na9bxJjnPut2C1eVw+6Trs0SZw49 zB+1cB28hQw5+poXaFZwqtGlC6POQOe6WBXn14NwcdD4t6zgotP8P9m6ycJh1FZ1 Gf5EhTArSQ7rqV4DlcHvxSa4+kIbe+rdcU5dMv0lYBb+/Nif870znEI3Fjhu/YiD kUJAb0sOMCKxLpaYS07g7Uq7g5A/FrPHJNLodguy34o6K/tichYeQb/KEU+zZp78 atGh4pcUweBxJifZt5xfTtvR4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtMIpmO vQk3uBtlprQ1jevEg0QNMB8GA1UdIwQYMBaAFOFyNGOJMfQ5ZRDX0LrVH4r064a2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRGQS80NUU5RTE2QTY1 OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlEbGxFTmZRdXRVZml2VHJo clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYSTBZNGt4OURsbEVOZlF1dFVmaXZUcmhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzRGQS80NUU5RTE2QTY1OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlE bGxFTmZRdXRVZml2VHJoclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/i3Y+FIVXI4GUdKWfWXgw4UrxMwZAtGgUcneLtvq5fNBXHagNEieb mpnKg4Z7uVcB8kFvPVt2PUQHJih2//fWSBey/OfB9RORQLJECdyIPGyD7h/MjnuL tiOVuykdMEMcD5dRudVHMleR7T+nnPacVlUwO63g5pIAxkVhQgBuG4mACP33qKff p2RedfLLcw0KOHHbBRsgi9YJ80L2O4IcVDD76UMUl5UdihlKFxb/CS51EwKok9oh yZE14/fE0uI4wAjHKsi1d05nIGsY62xDGC5qmQIDt/KMgJLN0ln+qe2w/gpatYB/ +adQwf+NxeP3vWLNfFMJ1uvL/ZUmOPlu -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:27 2025 by rpki-client