$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft File: 4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft (raw, json) Hash identifier: 3rBpkv3Ox4IGeBi6hEG9JRyo/nXuMUNaYKLu0grE9OU= Subject key identifier: 1D:52:A7:60:41:69:1B:C7:0E:49:A8:29:A7:78:F0:C1:49:21:11:98 Authority key identifier: E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30 Certificate issuer: /CN=A917F0AF/serialNumber=E114378DA934861469F495D97598E0F00289C330 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft Manifest number: 4B Signing time: Sat 31 May 2025 06:53:48 +0000 Manifest this update: Sat 31 May 2025 06:53:47 +0000 Manifest next update: Sat 07 Jun 2025 06:53:47 +0000 Files and hashes: 1: 4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl (hash: nYvxlqHMZvvYFsEb4ghbpDf4QwZZmzlLeVkJXiplE9Q=) 2: 27E5184CCC6211EFA20BEE1BC4F9AE02.roa (hash: Nfq9gOVsvHp+sAvDqwlNp+Rm9HqcCv4rXARNazxofGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F0AF, serialNumber=E114378DA934861469F495D97598E0F00289C330 Validity Not Before: May 31 06:53:47 2025 GMT Not After : Jun 7 06:53:47 2025 GMT Subject: CN=683aa77c-2e4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:61:29:23:0d:90:82:2a:9f:02:55:39:ea:75: 19:81:c9:12:19:ac:de:eb:11:dd:45:95:33:8a:53: 31:c5:07:79:30:91:0d:74:d2:2f:b6:15:5e:a4:44: cd:29:f9:a7:ed:41:b2:63:75:45:96:64:af:ac:46: 92:44:74:60:94:d9:b9:8e:77:c7:51:50:e1:a7:01: 4b:70:83:7a:bd:ee:4b:fb:b9:03:98:bb:89:cc:47: 87:ab:3b:be:82:00:c7:e9:57:df:7a:9a:ab:e6:98: 2d:cc:60:d7:50:8a:e1:4a:b1:69:cd:8a:f5:f8:fc: b3:5d:3d:5d:a3:1f:c8:85:39:48:6c:8d:50:2b:07: 46:de:00:3f:21:f0:2f:7b:60:32:e3:a3:30:68:1a: 48:f2:ef:f9:75:bc:5b:d5:5f:6b:80:14:71:ee:02: 69:f1:3a:e7:41:58:3e:20:c5:e3:f4:1f:7b:14:5b: f7:20:22:c9:f3:8f:2c:db:50:13:3c:eb:d3:8a:90: 6c:13:56:dc:d9:61:a9:cd:e0:a6:67:3e:2c:f2:63: 99:8b:ee:59:30:51:ad:c7:f6:e5:33:d3:04:bb:60: 1f:5e:bf:60:20:98:3c:4d:b3:bb:99:8c:e1:a0:38: 6b:28:57:d1:08:a9:fc:35:35:81:76:85:6e:2c:d4: a8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:52:A7:60:41:69:1B:C7:0E:49:A8:29:A7:78:F0:C1:49:21:11:98 X509v3 Authority Key Identifier: keyid:E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:20:80:a6:c8:8a:f9:ff:06:11:bd:dd:ae:a3:92:1b:56:e8: d1:ad:70:25:21:24:d2:2b:7c:04:fc:7f:e0:ed:69:bd:67:a0: 87:95:c0:c8:46:72:d2:d5:92:ce:c6:1a:89:a3:d3:29:85:66: b5:c4:5d:1e:95:18:30:8d:26:a7:de:6b:b6:ce:93:4c:f3:d3: cd:69:61:dc:1b:af:c9:30:0a:db:6d:ff:f9:36:78:17:c5:86: d1:ee:23:6a:ce:bb:8f:24:6e:db:ac:50:d0:5b:d6:a6:9d:c2: bb:23:9b:0d:27:e2:e3:3b:a5:6a:44:d7:82:fd:e5:ec:24:4f: 27:3c:e2:d8:60:8b:e5:e6:b9:d9:bb:43:fd:2b:e6:b9:26:1a: da:b0:39:36:30:de:d4:06:f5:c7:d9:93:52:6e:c9:25:78:2b: e7:09:d2:61:f1:8d:0e:99:8a:90:35:d3:c1:12:7f:09:d5:b1: 5f:4b:34:6a:4e:cc:97:7c:09:fe:cd:1b:aa:7c:9c:63:6c:21: 08:3a:86:69:e5:a9:d6:88:66:cc:1b:ba:b5:dc:00:fa:3d:ba: f5:f9:30:1d:48:a0:b9:de:2b:62:be:82:39:f7:7f:1c:0a:3d: cf:1b:1b:bc:37:59:6b:1e:71:c2:d9:bc:65:ff:12:05:02:79: fb:e4:ed:03 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RjBBRjExMC8GA1UEBRMoRTExNDM3OERBOTM0ODYxNDY5RjQ5NUQ5NzU5OEUwRjAw Mjg5QzMzMDAeFw0yNTA1MzEwNjUzNDdaFw0yNTA2MDcwNjUzNDdaMBgxFjAUBgNV BAMTDTY4M2FhNzdjLTJlNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVYSkjDZCCKp8CVTnqdRmByRIZrN7rEd1FlTOKUzHFB3kwkQ100i+2FV6kRM0p +aftQbJjdUWWZK+sRpJEdGCU2bmOd8dRUOGnAUtwg3q97kv7uQOYu4nMR4erO76C AMfpV996mqvmmC3MYNdQiuFKsWnNivX4/LNdPV2jH8iFOUhsjVArB0beAD8h8C97 YDLjozBoGkjy7/l1vFvVX2uAFHHuAmnxOudBWD4gxeP0H3sUW/cgIsnzjyzbUBM8 69OKkGwTVtzZYanN4KZnPizyY5mL7lkwUa3H9uUz0wS7YB9ev2AgmDxNs7uZjOGg OGsoV9EIqfw1NYF2hW4s1Kj/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHVKnYEFp G8cOSagpp3jwwUkhEZgwHwYDVR0jBBgwFoAU4RQ3jak0hhRp9JXZdZjg8AKJwzAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGMEFGLzJEN0E3RTBFQ0M0 RjExRUZBODlBOEYxNEM0RjlBRTAyLzRSUTNqYWswaGhScDlKWFpkWmpnOEFLSnd6 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNFJRM2phazBoaFJwOUpYWmRaamc4QUtKd3pBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG MEFGLzJEN0E3RTBFQ0M0RjExRUZBODlBOEYxNEM0RjlBRTAyLzRSUTNqYWswaGhS cDlKWFpkWmpnOEFLSnd6QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHsggKbIivn/BhG93a6jkhtW6NGtcCUhJNIrfAT8f+Dtab1noIeVwMhG ctLVks7GGomj0ymFZrXEXR6VGDCNJqfea7bOk0zz081pYdwbr8kwCttt//k2eBfF htHuI2rOu48kbtusUNBb1qadwrsjmw0n4uM7pWpE14L95ewkTyc84thgi+Xmudm7 Q/0r5rkmGtqwOTYw3tQG9cfZk1JuySV4K+cJ0mHxjQ6ZipA108ESfwnVsV9LNGpO zJd8Cf7NG6p8nGNsIQg6hmnlqdaIZswburXcAPo9uvX5MB1IoLneK2K+gjn3fxwK Pc8bG7w3WWseccLZvGX/EgUCefvk7QM= -----END CERTIFICATE-----Generated at Sat May 31 16:46:52 2025 by rpki-client