$ rpki-client -vvf rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft File: 4NVEW4CxgX9i88ZKqMj21-E64QM.mft (raw, json) Hash identifier: jUZMZok6QtBrZRjkM+BjvdiV4/RiZfjxbaoKQag9hsI= Subject key identifier: 36:CE:1D:C8:F2:F6:AD:86:5E:46:05:A2:4E:8C:EA:EA:AE:BA:7C:1B Authority key identifier: E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03 Certificate issuer: /CN=A918E469/serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103 Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft Manifest number: 01B0 Signing time: Sat 31 May 2025 02:51:19 +0000 Manifest this update: Sat 31 May 2025 02:51:19 +0000 Manifest next update: Sat 07 Jun 2025 02:51:19 +0000 Files and hashes: 1: 4NVEW4CxgX9i88ZKqMj21-E64QM.crl (hash: TuxAeHIvF8VRvpX9LojJoj/tV0fNevjZfXOhsy0FTkk=) 2: D3CE9058A5AD11ED95DBC66FC4F9AE02.roa (hash: V89TVKMG86FWKeqAC80eNKWm9QeM+Xm489cfb+DFW7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E469, serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103 Validity Not Before: May 31 02:51:19 2025 GMT Not After : Jun 7 02:51:19 2025 GMT Subject: CN=683a6ea7-4521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0b:43:9b:59:4e:eb:be:1c:c1:4f:e2:d4:5d: 12:f2:06:75:19:11:a7:dc:03:d7:9b:78:59:f2:e5: c4:6b:2c:59:ce:4c:fb:85:90:f8:1b:fa:7c:1e:7f: af:10:71:a8:a6:96:f7:8d:5d:14:0d:1c:bc:bd:14: 5c:09:82:73:9f:f4:8f:5d:24:d4:99:c1:3e:4a:87: e7:00:2d:73:08:b9:fa:c0:fd:e7:1c:7d:12:5e:5f: 00:3b:ac:dc:a3:f6:cf:76:4e:92:a1:12:6f:b1:9e: 31:0d:e8:03:7e:8c:4a:ee:50:e5:4f:e4:9c:66:1d: bb:95:c1:d3:d3:6f:2f:8a:73:83:a9:f3:9a:fb:7f: 37:b1:b2:4b:43:4c:c3:57:00:fe:23:44:f6:40:9e: ad:2f:1e:84:d6:19:a2:d7:12:de:e1:da:ac:7c:e7: d9:10:06:32:c3:87:72:2d:dc:62:80:f3:d5:d6:e5: c5:3b:2e:e3:4e:50:57:17:45:94:d4:fd:d1:57:b7: 0a:c3:63:5b:24:ac:ba:f0:4b:e7:de:f5:bc:1c:4d: 83:9b:d5:93:45:1b:23:3a:1e:d9:9c:ad:74:ed:0e: 1c:25:64:5a:ea:5f:bd:6f:1b:21:65:ad:97:d5:39: 1b:01:ff:67:d9:1e:35:6d:61:db:de:04:3c:78:9c: 8c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:CE:1D:C8:F2:F6:AD:86:5E:46:05:A2:4E:8C:EA:EA:AE:BA:7C:1B X509v3 Authority Key Identifier: keyid:E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:75:7f:fb:b8:ef:d3:07:1b:5c:8a:37:a3:37:66:41:6b:c1: f6:9c:f0:e0:c0:4c:5f:30:c4:a7:20:8e:fd:6e:57:64:80:99: 91:20:ce:b2:97:3f:8f:b4:4b:ab:77:13:bc:8e:54:b6:e2:58: 8a:3c:47:f7:0e:16:46:4f:ef:c2:88:1c:62:f1:37:05:4e:9a: 64:15:96:a5:f0:11:6d:e0:39:d6:1f:38:80:92:9d:1e:cf:a5: 81:5a:5f:06:e8:b7:10:7a:a6:e8:34:35:72:66:1e:66:2f:9c: 2e:1e:98:dc:d6:2d:50:10:d9:02:02:83:9b:32:71:61:b4:dd: cc:a4:ef:3c:a3:f6:33:66:10:5a:92:52:b2:b8:a3:18:f4:62: a3:d9:67:c8:8e:08:39:c3:ac:c9:c5:d1:08:20:a7:87:6b:33: b1:43:e2:90:f3:db:99:ce:39:7e:f4:4f:75:e9:92:bc:a3:90: 05:4f:fb:79:6f:2d:20:3f:71:88:bb:b8:2d:c0:4e:89:65:32: 5a:8e:db:fe:7b:98:ee:8f:03:d8:8e:2e:7e:c0:bd:d3:f9:28: 67:a2:4f:d2:37:ba:b1:55:39:bb:48:19:ad:83:d7:33:1b:b5: 97:9e:35:c2:0b:03:25:8c:a3:34:ba:d6:36:80:19:8d:6f:46: cb:ab:58:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0NjkxMTAvBgNVBAUTKEUwRDU0NDVCODBCMTgxN0Y2MkYzQzY0QUE4QzhGNkQ3 RTEzQUUxMDMwHhcNMjUwNTMxMDI1MTE5WhcNMjUwNjA3MDI1MTE5WjAYMRYwFAYD VQQDEw02ODNhNmVhNy00NTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4wtDm1lO674cwU/i1F0S8gZ1GRGn3APXm3hZ8uXEayxZzkz7hZD4G/p8Hn+v EHGoppb3jV0UDRy8vRRcCYJzn/SPXSTUmcE+SofnAC1zCLn6wP3nHH0SXl8AO6zc o/bPdk6SoRJvsZ4xDegDfoxK7lDlT+ScZh27lcHT028vinODqfOa+383sbJLQ0zD VwD+I0T2QJ6tLx6E1hmi1xLe4dqsfOfZEAYyw4dyLdxigPPV1uXFOy7jTlBXF0WU 1P3RV7cKw2NbJKy68Evn3vW8HE2Dm9WTRRsjOh7ZnK107Q4cJWRa6l+9bxshZa2X 1TkbAf9n2R41bWHb3gQ8eJyMqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbOHcjy 9q2GXkYFok6M6uquunwbMB8GA1UdIwQYMBaAFODVRFuAsYF/YvPGSqjI9tfhOuED MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTQ2OS9FRkE1NjNDOEE1 QTkxMUVEOEZFMzA1NTNDNEY5QUUwMi80TlZFVzRDeGdYOWk4OFpLcU1qMjEtRTY0 UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzROVkVXNEN4Z1g5aTg4WktxTWoyMS1FNjRRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTQ2OS9FRkE1NjNDOEE1QTkxMUVEOEZFMzA1NTNDNEY5QUUwMi80TlZFVzRDeGdY OWk4OFpLcU1qMjEtRTY0UU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0dX/7uO/TBxtcijejN2ZBa8H2nPDgwExfMMSnII79bldkgJmRIM6y lz+PtEurdxO8jlS24liKPEf3DhZGT+/CiBxi8TcFTppkFZal8BFt4DnWHziAkp0e z6WBWl8G6LcQeqboNDVyZh5mL5wuHpjc1i1QENkCAoObMnFhtN3MpO88o/YzZhBa klKyuKMY9GKj2WfIjgg5w6zJxdEIIKeHazOxQ+KQ89uZzjl+9E916ZK8o5AFT/t5 by0gP3GIu7gtwE6JZTJajtv+e5jujwPYji5+wL3T+Shnok/SN7qxVTm7SBmtg9cz G7WXnjXCCwMljKM0utY2gBmNb0bLq1jf -----END CERTIFICATE-----Generated at Sat May 31 17:53:09 2025 by rpki-client