$ rpki-client -vvf rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft File: 4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft (raw, json) Hash identifier: 24kx3Sv5QkCDoA8+feo5q41/j4acyEUavVqURZExBUA= Subject key identifier: 20:67:93:C8:1D:D3:4C:4C:90:F2:27:6A:48:24:0A:42:12:B7:41:F3 Authority key identifier: E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F Certificate issuer: /CN=A91471DA/serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F Certificate serial: 04F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft Manifest number: 04F7 Signing time: Fri 30 May 2025 23:53:08 +0000 Manifest this update: Fri 30 May 2025 23:53:07 +0000 Manifest next update: Fri 06 Jun 2025 23:53:07 +0000 Files and hashes: 1: 4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl (hash: AbPt+eboqWS0e01n+chwpR4ZUtucCMkixbUm+BZRssU=) 2: 914E7A440FE611EC8DD2020EC4F9AE02.roa (hash: mjyt1YwDNmlbVB+s1ceKNJUb36Gp/fdDhWoek/UDCZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1273 (0x4f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91471DA, serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F Validity Not Before: May 30 23:53:07 2025 GMT Not After : Jun 6 23:53:07 2025 GMT Subject: CN=683a44e3-2420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:41:c3:ca:84:f0:6f:87:61:87:3a:4e:bb:39: b5:52:55:ab:8e:35:25:bf:92:2b:20:6f:01:29:f4: d4:fd:2f:0a:33:73:60:6d:a6:73:50:55:b1:57:b8: 80:25:d0:f5:4b:31:63:cb:81:64:61:90:c4:65:0f: 63:61:c2:36:8a:18:cb:a1:4a:12:4b:0a:12:31:74: 0e:4a:e8:8d:93:f8:9b:7c:0d:6e:ca:a4:03:d4:ca: e6:28:97:b1:65:86:a9:b1:26:68:c1:2f:8f:e2:54: e3:f7:54:93:50:a3:a9:6f:a5:70:1f:7d:1c:cb:df: 7f:b1:7f:65:a9:1a:23:22:94:02:f8:5a:98:aa:77: 4c:02:1d:bd:17:48:2f:0e:d7:05:0e:b8:b1:cc:c8: cb:3a:cf:2c:ed:78:7c:a2:f8:08:10:bf:74:54:1e: de:57:a4:4a:3e:89:6f:3e:8c:48:3b:d4:31:09:0d: d5:aa:95:94:ec:76:48:dd:5c:6a:a3:4f:cc:29:02: 44:bf:5c:2d:a2:4b:e8:a0:52:92:af:18:07:72:05: 87:9c:4e:30:d2:5e:d0:44:7f:36:5c:6e:6c:73:ba: b8:50:e4:15:76:4b:88:99:a2:42:8d:f9:5d:c3:f3: 48:bc:8d:47:92:a3:a3:bc:ae:0c:29:e0:d7:09:7a: b6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:67:93:C8:1D:D3:4C:4C:90:F2:27:6A:48:24:0A:42:12:B7:41:F3 X509v3 Authority Key Identifier: keyid:E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:75:72:54:b2:da:0b:99:01:0c:71:c1:c5:13:66:7c:f5:54: e5:0b:58:32:22:ee:4f:dd:69:0f:54:d5:8e:19:c4:5e:87:1b: e3:ac:13:f2:92:76:05:6c:6a:3f:bb:22:ce:6a:62:55:ba:53: 74:db:9e:2e:13:bc:df:d9:c0:36:7d:00:ac:28:f5:07:df:b0: 34:3c:75:c9:08:f0:01:d1:aa:3b:18:fb:bb:a2:6d:4d:26:58: 6e:58:29:61:a1:ab:49:68:41:38:60:1c:a0:6e:93:19:56:3f: 0a:ac:e3:a7:b8:a2:19:09:a6:42:87:54:0b:2b:2d:fe:77:82: 92:3c:e8:81:2f:a5:65:b5:1b:ad:ab:16:09:9f:2d:85:c0:a7: 76:01:b5:d7:e4:fc:9c:c9:59:1e:7b:dd:d1:f5:47:9e:b9:c0: b2:65:82:03:8a:96:45:ea:c2:52:78:3f:45:d8:8f:3d:f2:3c: e9:32:ee:89:90:89:61:22:61:da:6e:57:45:ca:24:b9:26:69: dd:0a:d7:b7:8d:78:60:97:24:18:30:37:16:19:15:8a:4a:6c: 35:41:b3:d7:f1:6e:58:79:bd:1b:3b:e0:69:3c:8d:c2:0e:64: 22:c4:78:eb:90:7c:ae:d8:f0:a8:46:29:37:7b:e3:88:f4:61: 2e:06:e8:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcxREExMTAvBgNVBAUTKEUyNEQwOTU0MTA2MkM2MDhCRTM2M0ZGNjE5Q0NCODQ0 NEREQzNDMkYwHhcNMjUwNTMwMjM1MzA3WhcNMjUwNjA2MjM1MzA3WjAYMRYwFAYD VQQDEw02ODNhNDRlMy0yNDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEHDyoTwb4dhhzpOuzm1UlWrjjUlv5IrIG8BKfTU/S8KM3NgbaZzUFWxV7iA JdD1SzFjy4FkYZDEZQ9jYcI2ihjLoUoSSwoSMXQOSuiNk/ibfA1uyqQD1MrmKJex ZYapsSZowS+P4lTj91STUKOpb6VwH30cy99/sX9lqRojIpQC+FqYqndMAh29F0gv DtcFDrixzMjLOs8s7Xh8ovgIEL90VB7eV6RKPolvPoxIO9QxCQ3VqpWU7HZI3Vxq o0/MKQJEv1wtokvooFKSrxgHcgWHnE4w0l7QRH82XG5sc7q4UOQVdkuImaJCjfld w/NIvI1HkqOjvK4MKeDXCXq27QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBnk8gd 00xMkPInakgkCkISt0HzMB8GA1UdIwQYMBaAFOJNCVQQYsYIvjY/9hnMuERN3Dwv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzFEQS81MUQ1Nzk0ODBG RTIxMUVDQTREREM5MDlDNEY5QUUwMi80azBKVkJCaXhnaS1Oal8yR2N5NFJFM2NQ QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRrMEpWQkJpeGdpLU5qXzJHY3k0UkUzY1BDOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzFEQS81MUQ1Nzk0ODBGRTIxMUVDQTREREM5MDlDNEY5QUUwMi80azBKVkJCaXhn aS1Oal8yR2N5NFJFM2NQQzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBddXJUstoLmQEMccHFE2Z89VTlC1gyIu5P3WkPVNWOGcRehxvjrBPy knYFbGo/uyLOamJVulN0254uE7zf2cA2fQCsKPUH37A0PHXJCPAB0ao7GPu7om1N JlhuWClhoatJaEE4YBygbpMZVj8KrOOnuKIZCaZCh1QLKy3+d4KSPOiBL6VltRut qxYJny2FwKd2AbXX5PycyVkee93R9UeeucCyZYIDipZF6sJSeD9F2I898jzpMu6J kIlhImHabldFyiS5JmndCte3jXhglyQYMDcWGRWKSmw1QbPX8W5Yeb0bO+BpPI3C DmQixHjrkHyu2PCoRik3e+OI9GEuBujo -----END CERTIFICATE-----Generated at Sat May 31 17:06:27 2025 by rpki-client