$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft File: 4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft (raw, json) Hash identifier: iUltWzwYYHkf7UIH68a4Y9KQsNi9s7r0hiYCtlp/XrY= Subject key identifier: C9:A8:F4:B0:01:2D:8E:DF:CA:56:88:E8:CE:FC:75:B6:85:95:FF:7A Authority key identifier: E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24 Certificate issuer: /CN=A91E0CA1/serialNumber=E1D95A3CBDD92029AEBE1E1308099E6249CD3624 Certificate serial: 0ABD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft Manifest number: 0AB6 Signing time: Fri 30 May 2025 19:41:10 +0000 Manifest this update: Fri 30 May 2025 19:41:10 +0000 Manifest next update: Fri 06 Jun 2025 19:41:09 +0000 Files and hashes: 1: 4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl (hash: iKQCK+do5vqFQugJ/0p4Ml9YBonF1iSEYGoak2GtSs8=) 2: 29B9D5B8524111EABEF0A119C4F9AE02.roa (hash: XgnhviRQUKAkeu4itRmlPhHlV4kxqNIZcBKK2pdxl3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2749 (0xabd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CA1, serialNumber=E1D95A3CBDD92029AEBE1E1308099E6249CD3624 Validity Not Before: May 30 19:41:10 2025 GMT Not After : Jun 6 19:41:09 2025 GMT Subject: CN=683a09d6-ca69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7e:cf:ae:94:3e:1d:a6:b9:98:b3:02:22:db: 00:5d:6f:bf:aa:38:76:13:be:a0:be:76:2c:c5:62: 76:9a:88:9a:b6:5f:f6:7d:60:08:bb:98:aa:d1:c6: 93:74:ad:e4:c8:b8:81:dc:aa:51:dd:29:b0:f8:ab: 67:31:1d:44:90:7a:6c:91:66:84:1c:ac:5f:ad:35: c9:b3:86:f9:e9:7d:98:6e:2c:c5:38:0e:8c:d8:f2: a7:07:91:0a:5f:4a:33:d4:61:02:04:0d:62:99:53: ea:3c:fb:33:d2:c2:08:6d:be:58:03:26:93:27:68: 24:c9:d5:2f:bc:2a:8c:83:c3:e3:42:b3:2d:a1:0b: f8:d7:c9:21:5a:2d:86:1e:bc:ec:5a:82:da:da:90: c0:aa:e8:87:a0:d7:3d:4b:f1:a9:1f:d3:ff:7f:76: ae:4f:67:e7:6a:71:e5:14:3c:a9:bc:f3:88:0b:e3: 5e:90:a5:41:5f:5f:2e:46:e9:e1:05:4d:ad:4d:a6: 66:e4:df:cc:6b:ef:4e:e4:80:00:32:be:58:3d:ec: 0a:b5:fc:89:e9:36:28:4e:d9:4f:69:c8:04:7e:0b: a4:b1:d1:3e:6c:22:c9:26:db:19:86:77:b5:52:10: bd:d6:6e:92:5c:70:d1:79:03:21:85:24:cb:44:38: 29:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A8:F4:B0:01:2D:8E:DF:CA:56:88:E8:CE:FC:75:B6:85:95:FF:7A X509v3 Authority Key Identifier: keyid:E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d0:b7:1e:6a:b3:30:87:7d:e4:d6:61:e9:34:e3:fd:e1:21: 96:1a:21:bb:cf:21:0a:2e:82:f3:72:f5:e6:9a:39:9b:40:0d: 45:e1:04:13:a5:ab:b7:51:24:1c:df:03:b2:c1:62:db:9e:e1: d6:b5:1a:66:32:5b:46:f1:aa:5b:81:ae:70:78:41:7c:9f:7b: 03:8f:80:d9:d4:29:d1:f6:81:e5:6d:a1:6f:90:97:20:87:18: 12:81:81:f1:5d:cf:65:0b:41:83:62:a4:0d:33:c5:49:82:f5: 2a:e8:eb:0e:00:7b:d2:fe:b8:f5:48:14:d2:08:6e:ad:7f:7b: 5a:ba:6b:b1:49:21:29:b5:f3:76:18:90:fd:1e:01:bf:9e:71: 3e:54:22:dd:54:58:6a:be:b5:20:46:8f:b6:da:e7:8c:9d:16: 8c:bf:f3:2b:81:84:cb:19:32:c0:ed:51:c6:80:3e:28:8e:dc: 4f:79:4a:81:76:51:89:fa:5a:8a:ea:25:9b:06:24:56:6e:19: 44:a5:6f:8a:d6:c5:93:c2:d2:c0:1e:ae:6f:88:3c:bb:0d:ad: 61:42:7d:20:ba:7d:2c:1f:20:5f:a8:74:f2:f6:d9:81:82:5d: 19:ba:3e:ad:38:3a:56:53:5d:37:f0:08:e1:0d:98:9a:90:49: 28:5b:6e:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDQTExMTAvBgNVBAUTKEUxRDk1QTNDQkREOTIwMjlBRUJFMUUxMzA4MDk5RTYy NDlDRDM2MjQwHhcNMjUwNTMwMTk0MTEwWhcNMjUwNjA2MTk0MTA5WjAYMRYwFAYD VQQDEw02ODNhMDlkNi1jYTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvH7PrpQ+Haa5mLMCItsAXW+/qjh2E76gvnYsxWJ2moiatl/2fWAIu5iq0caT dK3kyLiB3KpR3Smw+KtnMR1EkHpskWaEHKxfrTXJs4b56X2YbizFOA6M2PKnB5EK X0oz1GECBA1imVPqPPsz0sIIbb5YAyaTJ2gkydUvvCqMg8PjQrMtoQv418khWi2G HrzsWoLa2pDAquiHoNc9S/GpH9P/f3auT2fnanHlFDypvPOIC+NekKVBX18uRunh BU2tTaZm5N/Ma+9O5IAAMr5YPewKtfyJ6TYoTtlPacgEfguksdE+bCLJJtsZhne1 UhC91m6SXHDReQMhhSTLRDgp3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmo9LAB LY7fylaI6M78dbaFlf96MB8GA1UdIwQYMBaAFOHZWjy92SAprr4eEwgJnmJJzTYk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENBMS83MDYzRTQyNDUy M0YxMUVBOEM5Q0YwMTZDNEY5QUUwMi80ZGxhUEwzWklDbXV2aDRUQ0FtZVlrbk5O aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRkbGFQTDNaSUNtdXZoNFRDQW1lWWtuTk5pUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENBMS83MDYzRTQyNDUyM0YxMUVBOEM5Q0YwMTZDNEY5QUUwMi80ZGxhUEwzWklD bXV2aDRUQ0FtZVlrbk5OaVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO0LcearMwh33k1mHpNOP94SGWGiG7zyEKLoLzcvXmmjmbQA1F4QQT pau3USQc3wOywWLbnuHWtRpmMltG8apbga5weEF8n3sDj4DZ1CnR9oHlbaFvkJcg hxgSgYHxXc9lC0GDYqQNM8VJgvUq6OsOAHvS/rj1SBTSCG6tf3taumuxSSEptfN2 GJD9HgG/nnE+VCLdVFhqvrUgRo+22ueMnRaMv/MrgYTLGTLA7VHGgD4ojtxPeUqB dlGJ+lqK6iWbBiRWbhlEpW+K1sWTwtLAHq5viDy7Da1hQn0gun0sHyBfqHTy9tmB gl0Zuj6tODpWU1038AjhDZiakEkoW27G -----END CERTIFICATE-----Generated at Sat May 31 17:16:18 2025 by rpki-client