$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft File: 4ggepNPNtZniYIYCcE_bNYbUj1c.mft (raw, json) Hash identifier: K1TBYh1zGA24vefzBLQ7AY9mFsxbFsy4kJUuzn34hAM= Subject key identifier: 2D:51:67:A0:4D:6A:E8:68:DA:0E:77:E4:0A:93:AB:42:0D:7A:8F:6F Authority key identifier: E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57 Certificate issuer: /CN=A91CDF1C/serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57 Certificate serial: 0B9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft Manifest number: 0B98 Signing time: Fri 30 May 2025 19:12:08 +0000 Manifest this update: Fri 30 May 2025 19:12:07 +0000 Manifest next update: Fri 06 Jun 2025 19:12:07 +0000 Files and hashes: 1: 4ggepNPNtZniYIYCcE_bNYbUj1c.crl (hash: A+fwTYriRDAb7R+2QTWE57var7QUj0YoGbLzal2Y8fw=) 2: 277BE15035CD11EAA2366620C4F9AE02.roa (hash: hJTBnRNb+rBuco3pui7GARCwhnSPV6pCkk0fRFtrHKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.crl rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:12:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2974 (0xb9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDF1C, serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57 Validity Not Before: May 30 19:12:07 2025 GMT Not After : Jun 6 19:12:07 2025 GMT Subject: CN=683a0307-85c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:86:f2:0d:bd:ba:68:e7:37:e1:29:30:95:8f: 5c:d1:eb:3a:e5:e5:e9:6c:94:b2:bb:90:96:f1:03: 2f:f2:55:85:e1:71:fd:4e:38:44:24:06:8c:45:ca: 64:60:78:77:63:f9:1d:42:d2:b7:37:23:27:44:6b: 03:db:00:c0:75:5a:79:2a:53:64:7f:9c:2a:8f:9a: ad:73:1a:9d:25:94:be:ae:9e:98:bb:2a:5d:44:39: 4b:2a:c8:d7:2d:73:e7:cd:5c:cb:9e:33:d2:9c:b8: 9a:0f:b7:dc:a3:ef:29:35:10:2b:59:9c:64:8b:7d: 53:55:2e:15:00:c9:7a:73:8b:54:83:ff:b4:6d:8d: dd:fe:91:46:6a:79:69:4a:3e:f6:69:1b:fd:9c:b5: e4:ce:2a:07:cd:44:79:20:f1:39:42:8a:21:2d:4a: fd:14:5b:95:05:a7:9e:ed:6d:dc:ab:df:23:7f:46: 40:9e:9d:bc:ab:d7:88:03:e1:fa:bc:73:99:e4:b1: b6:9f:7a:8f:1f:43:29:0d:19:62:09:37:57:f8:8e: b5:98:ae:19:91:67:16:de:05:06:dc:b6:6c:60:7d: aa:ac:7f:b2:4e:e2:4b:7d:4d:2d:2c:a8:87:83:7a: 96:af:3d:5b:c8:d5:5b:28:cb:a7:46:73:9f:21:67: 10:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:51:67:A0:4D:6A:E8:68:DA:0E:77:E4:0A:93:AB:42:0D:7A:8F:6F X509v3 Authority Key Identifier: keyid:E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:48:38:34:7c:28:73:4a:a2:0a:40:4d:84:a5:45:6d:70:04: b2:c4:bc:ad:a6:21:e5:3b:47:21:06:63:52:b8:c3:dd:aa:04: 57:61:f3:5c:97:a8:81:1a:b4:d3:34:60:47:1c:93:0e:93:fd: 97:d5:d6:c1:68:26:aa:e0:01:c1:f1:bf:9d:d6:34:63:c7:f8: ed:1a:b1:7e:4d:97:bc:3d:d5:a8:64:23:05:71:f5:be:04:8a: 78:c7:88:80:62:97:c0:11:55:c3:d7:2d:88:09:87:18:54:9f: 56:07:e1:af:e3:bd:c5:02:ec:9e:c3:82:85:49:4f:4c:35:f9: 69:53:19:67:67:8a:98:28:34:17:8e:9d:38:0e:f4:35:3e:02: 96:f4:b1:9d:65:22:2c:f4:46:ad:d4:81:2f:4a:5a:12:b2:df: be:9b:55:d8:65:49:04:26:d2:fd:00:df:9a:0e:f3:14:a5:66: 8d:f8:b7:d0:0f:34:11:b7:43:6e:ce:4c:6b:be:50:77:e3:4b: 25:5a:c4:8d:40:be:8f:63:fe:31:06:05:7e:c6:46:bc:5d:81: 0f:c0:9b:20:19:ac:7f:45:ca:35:0c:35:16:c9:75:50:eb:72: 20:30:31:af:5a:04:34:77:82:f8:a1:25:fa:5c:48:0b:58:ab: 8a:b4:51:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGMUMxMTAvBgNVBAUTKEUyMDgxRUE0RDNDREI1OTlFMjYwODYwMjcwNEZEQjM1 ODZENDhGNTcwHhcNMjUwNTMwMTkxMjA3WhcNMjUwNjA2MTkxMjA3WjAYMRYwFAYD VQQDEw02ODNhMDMwNy04NWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqobyDb26aOc34SkwlY9c0es65eXpbJSyu5CW8QMv8lWF4XH9TjhEJAaMRcpk YHh3Y/kdQtK3NyMnRGsD2wDAdVp5KlNkf5wqj5qtcxqdJZS+rp6YuypdRDlLKsjX LXPnzVzLnjPSnLiaD7fco+8pNRArWZxki31TVS4VAMl6c4tUg/+0bY3d/pFGanlp Sj72aRv9nLXkzioHzUR5IPE5QoohLUr9FFuVBaee7W3cq98jf0ZAnp28q9eIA+H6 vHOZ5LG2n3qPH0MpDRliCTdX+I61mK4ZkWcW3gUG3LZsYH2qrH+yTuJLfU0tLKiH g3qWrz1byNVbKMunRnOfIWcQDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1RZ6BN auho2g535AqTq0INeo9vMB8GA1UdIwQYMBaAFOIIHqTTzbWZ4mCGAnBP2zWG1I9X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREYxQy8zNkM5NjIyMDI2 M0UxMUVBODRGMUJDODZDNEY5QUUwMi80Z2dlcE5QTnRabmlZSVlDY0VfYk5ZYlVq MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRnZ2VwTlBOdFpuaVlJWUNjRV9iTlliVWoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REYxQy8zNkM5NjIyMDI2M0UxMUVBODRGMUJDODZDNEY5QUUwMi80Z2dlcE5QTnRa bmlZSVlDY0VfYk5ZYlVqMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBySDg0fChzSqIKQE2EpUVtcASyxLytpiHlO0chBmNSuMPdqgRXYfNc l6iBGrTTNGBHHJMOk/2X1dbBaCaq4AHB8b+d1jRjx/jtGrF+TZe8PdWoZCMFcfW+ BIp4x4iAYpfAEVXD1y2ICYcYVJ9WB+Gv473FAuyew4KFSU9MNflpUxlnZ4qYKDQX jp04DvQ1PgKW9LGdZSIs9Eat1IEvSloSst++m1XYZUkEJtL9AN+aDvMUpWaN+LfQ DzQRt0NuzkxrvlB340slWsSNQL6PY/4xBgV+xka8XYEPwJsgGax/Rco1DDUWyXVQ 63IgMDGvWgQ0d4L4oSX6XEgLWKuKtFH+ -----END CERTIFICATE-----Generated at Sat May 31 17:46:32 2025 by rpki-client