$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft File: c4wjqkznVV7qL8jCvtj0akiNyT0.mft (raw, json) Hash identifier: JHS74bdt/eERDj/J+HuM2No+TaAdSBpD7jczke1WB0M= Subject key identifier: 01:92:D3:7E:64:B8:2A:D2:E7:53:00:0B:B7:7F:96:40:C3:ED:DB:53 Authority key identifier: 73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D Certificate issuer: /CN=A91B2D29/serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D Certificate serial: 2424 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft Manifest number: 4677 Signing time: Fri 30 May 2025 15:59:02 +0000 Manifest this update: Fri 30 May 2025 15:59:01 +0000 Manifest next update: Fri 06 Jun 2025 15:59:01 +0000 Files and hashes: 1: c4wjqkznVV7qL8jCvtj0akiNyT0.crl (hash: Q50LMOM/HtThuwkmVFQSJjn3UrTmpcHsCJqDQWQx6fM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9252 (0x2424) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D29, serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D Validity Not Before: May 30 15:59:01 2025 GMT Not After : Jun 6 15:59:01 2025 GMT Subject: CN=6839d5c6-0d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2a:dd:5a:6b:45:73:58:aa:8a:da:db:b3:9c: 31:91:75:33:60:55:9c:f5:e3:1e:2d:c3:03:7f:b0: 17:d1:dd:a3:08:f7:c9:f7:62:6d:5f:7e:4b:50:bf: 8a:a6:a4:8c:51:8e:3c:65:de:3a:94:c2:c5:f8:9c: 6b:57:66:5d:ad:6f:37:0f:cd:04:f4:37:53:e7:57: bf:8e:54:e8:e1:e3:db:9a:fa:1a:6b:ad:29:76:e2: f5:2d:d9:cf:dc:b9:e4:d5:62:9e:88:ce:47:0c:63: 91:ba:c7:56:5b:78:f2:3a:e9:1d:ff:63:45:bc:9e: 4a:a3:94:89:9e:bd:08:f7:e0:61:17:f7:04:0a:aa: 97:87:4d:9d:f1:7f:77:d9:9f:01:e7:1e:0c:cd:a8: 36:fd:e0:50:83:95:ce:a3:73:38:d1:df:6e:1a:5c: f7:fe:8b:2e:86:4f:9c:82:ec:15:20:10:67:ce:df: f2:30:77:92:cd:4e:be:06:e0:9c:50:bc:42:b9:fe: 24:d7:02:e2:49:5f:69:e1:8d:53:d9:5a:5b:22:f3: e5:a1:ad:96:99:29:13:8c:ac:c9:fb:56:e1:58:b1: ff:77:0f:67:c0:eb:f3:66:02:f6:4d:a7:97:a2:b9: 0b:c5:94:e8:52:43:7e:de:ff:22:f1:3e:ea:89:a3: 4c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:92:D3:7E:64:B8:2A:D2:E7:53:00:0B:B7:7F:96:40:C3:ED:DB:53 X509v3 Authority Key Identifier: keyid:73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:88:8b:79:f5:36:f2:df:c5:95:c2:6a:49:f1:7a:aa:4b:e4: 8f:be:6a:64:e0:30:9c:9a:e4:0d:6b:82:da:21:1d:1c:df:da: 7e:23:71:c7:4a:9a:de:a4:1a:30:54:4c:6e:3e:43:14:de:71: 37:9c:d8:32:c1:14:dc:70:03:df:e8:f6:18:af:fc:c7:58:2a: dd:ec:e4:2f:06:14:9c:a0:c8:73:44:8e:9f:2c:61:21:27:96: 5a:20:0c:ad:1a:56:4a:fd:ce:18:ac:7c:b7:66:64:8a:49:07: 78:3d:ad:cc:ab:8c:b5:ac:1d:67:75:27:47:e6:3d:a7:a1:33: 07:06:d9:4a:79:3f:04:d6:ef:15:a3:5f:da:52:99:8a:90:ca: 95:4f:37:84:55:d4:ec:1e:e0:cf:c3:54:90:b8:4f:12:39:81: e0:4f:8e:e3:a0:de:d1:1e:a0:98:14:e0:90:a1:73:f9:d7:39: 75:4d:69:4e:62:2a:0a:5f:63:ca:d8:bf:c9:69:3b:c0:ce:89: b3:d3:e5:7d:94:51:2c:ff:6c:f2:02:66:2e:80:61:81:d9:c7: c1:54:55:56:de:8e:41:eb:5d:0a:4f:38:73:79:e0:4c:94:ab: 71:cb:65:c3:b0:68:3d:f6:de:3b:07:3e:11:36:44:db:08:39: 4d:61:8b:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJEMjkxMTAvBgNVBAUTKDczOEMyM0FBNENFNzU1NUVFQTJGQzhDMkJFRDhGNDZB NDg4REM5M0QwHhcNMjUwNTMwMTU1OTAxWhcNMjUwNjA2MTU1OTAxWjAYMRYwFAYD VQQDEw02ODM5ZDVjNi0wZDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSrdWmtFc1iqitrbs5wxkXUzYFWc9eMeLcMDf7AX0d2jCPfJ92JtX35LUL+K pqSMUY48Zd46lMLF+JxrV2ZdrW83D80E9DdT51e/jlTo4ePbmvoaa60pduL1LdnP 3Lnk1WKeiM5HDGORusdWW3jyOukd/2NFvJ5Ko5SJnr0I9+BhF/cECqqXh02d8X93 2Z8B5x4Mzag2/eBQg5XOo3M40d9uGlz3/osuhk+cguwVIBBnzt/yMHeSzU6+BuCc ULxCuf4k1wLiSV9p4Y1T2VpbIvPloa2WmSkTjKzJ+1bhWLH/dw9nwOvzZgL2TaeX orkLxZToUkN+3v8i8T7qiaNMpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGS035k uCrS51MAC7d/lkDD7dtTMB8GA1UdIwQYMBaAFHOMI6pM51Ve6i/Iwr7Y9GpIjck9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQyOS9GNzFFNzE2NjU1 MjExMUU1QURCMjA5MkFDNEY5QUUwMi9jNHdqcWt6blZWN3FMOGpDdnRqMGFraU55 VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M0d2pxa3puVlY3cUw4akN2dGowYWtpTnlUMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQyOS9GNzFFNzE2NjU1MjExMUU1QURCMjA5MkFDNEY5QUUwMi9jNHdqcWt6blZW N3FMOGpDdnRqMGFraU55VDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATiIt59Tby38WVwmpJ8XqqS+SPvmpk4DCcmuQNa4LaIR0c39p+I3HH SprepBowVExuPkMU3nE3nNgywRTccAPf6PYYr/zHWCrd7OQvBhScoMhzRI6fLGEh J5ZaIAytGlZK/c4YrHy3ZmSKSQd4Pa3Mq4y1rB1ndSdH5j2noTMHBtlKeT8E1u8V o1/aUpmKkMqVTzeEVdTsHuDPw1SQuE8SOYHgT47joN7RHqCYFOCQoXP51zl1TWlO YioKX2PK2L/JaTvAzomz0+V9lFEs/2zyAmYugGGB2cfBVFVW3o5B610KTzhzeeBM lKtxy2XDsGg99t47Bz4RNkTbCDlNYYvL -----END CERTIFICATE-----Generated at Sat May 31 16:29:35 2025 by rpki-client