$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft File: c4TcZntNSaWs1QpYtIkWoVrCYWs.mft (raw, json) Hash identifier: aHUuPa16DcfFTFNAUO3Bf4kxeoMx8FfoaUOmLtWLuzs= Subject key identifier: B5:84:23:46:70:EA:4F:8F:40:3C:CA:43:76:5B:33:4C:A7:E1:29:77 Authority key identifier: 73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B Certificate issuer: /CN=A91E8D07/serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft Manifest number: 012E Signing time: Sat 31 May 2025 04:12:53 +0000 Manifest this update: Sat 31 May 2025 04:12:53 +0000 Manifest next update: Sat 07 Jun 2025 04:12:53 +0000 Files and hashes: 1: c4TcZntNSaWs1QpYtIkWoVrCYWs.crl (hash: NUmTLnaW2lnQU5+9qZ6IDjeuxc03FGhkLjwV6soXdIg=) 2: F1E9B236718E11EEAF67DB48C4F9AE02.roa (hash: 1MgG7WTwswH0kCn616eOpfwXJOyuod5SbIGbahzjBCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:12:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8D07, serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Validity Not Before: May 31 04:12:53 2025 GMT Not After : Jun 7 04:12:53 2025 GMT Subject: CN=683a81c5-311f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7d:bf:60:08:f8:7b:b8:a6:ca:51:c6:9a:3a: 33:b9:d7:45:db:3d:bc:5b:d6:cc:61:22:0d:db:bd: 0d:f2:1a:2b:16:3d:00:c0:dc:33:40:aa:37:4c:d1: 2e:20:8b:8b:d8:dc:0a:a8:62:e0:24:35:63:19:54: 9f:09:e1:b4:ad:fa:2e:65:54:42:5a:a6:8b:f0:9e: 61:66:fc:24:76:1b:80:7c:09:19:3c:52:26:48:2b: 5d:b8:df:20:b9:f3:55:16:a6:f6:53:4d:06:06:8b: b4:db:d6:3f:2d:59:c2:76:c7:31:7c:53:99:bd:a1: 65:a9:88:38:e6:26:15:07:0e:5f:bd:14:2a:a4:49: 16:85:43:37:40:3a:bd:6e:7b:67:6a:9e:e7:8a:87: 8e:3a:5c:7e:dd:8e:93:39:74:9d:b6:09:07:66:2f: bd:c4:86:1e:4f:c8:75:8a:6c:a6:b3:54:a0:ed:8d: 91:71:c7:9b:37:80:30:76:41:2e:50:99:48:c7:d4: 24:fa:31:51:2f:bd:61:71:f0:18:2c:0d:4b:28:61: a7:29:14:79:ff:23:35:62:7c:4f:e0:11:47:fd:cd: df:5b:f3:57:3c:9d:38:01:8f:5e:06:b2:4e:55:01: 9e:47:a6:42:9a:ca:b7:49:94:5b:02:8c:b7:e8:66: 01:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:84:23:46:70:EA:4F:8F:40:3C:CA:43:76:5B:33:4C:A7:E1:29:77 X509v3 Authority Key Identifier: keyid:73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:04:1d:1f:4f:0b:96:15:b0:27:da:49:06:a9:66:12:48:d9: fb:91:98:40:49:e8:d4:bd:15:f9:d8:bf:e4:77:9c:be:23:0f: e4:99:35:47:30:e5:e2:36:96:83:26:48:7d:a7:01:51:2d:e9: 2e:2f:a5:28:c6:ba:12:ab:3b:ef:58:9c:9e:4c:d2:94:58:9a: 2c:45:d4:17:4d:a9:31:13:c8:6e:cd:24:03:32:c0:fb:7c:33: 23:00:9a:b1:b5:f0:86:eb:02:fe:b8:d8:c9:a2:6a:7a:03:ae: f5:ca:48:a6:c2:33:01:fa:d3:2d:f6:42:e0:23:71:9c:27:96: 41:e6:dd:2d:f8:38:ff:9a:a7:95:c2:db:82:a9:3a:42:9a:95: 01:2c:3e:b7:9b:f2:4c:1a:b9:0d:87:65:6d:66:7f:f1:36:7f: 3f:0c:1d:f2:74:f4:d9:c0:af:08:68:bc:87:9d:0e:84:f0:81: 44:5d:1d:3b:77:5b:5c:b0:cf:0d:16:e1:41:a0:c5:ee:21:c4: fe:04:47:ab:56:a7:35:11:45:5e:d3:c0:c9:ce:db:44:94:e7: 2d:22:74:0c:52:bc:46:66:fd:b0:d7:de:69:a4:34:7d:43:bd: ab:d8:6e:40:ef:ef:76:eb:c4:be:41:93:ee:94:dc:b6:25:33: 94:31:eb:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThEMDcxMTAvBgNVBAUTKDczODREQzY2N0I0RDQ5QTVBQ0Q1MEE1OEI0ODkxNkEx NUFDMjYxNkIwHhcNMjUwNTMxMDQxMjUzWhcNMjUwNjA3MDQxMjUzWjAYMRYwFAYD VQQDEw02ODNhODFjNS0zMTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAon2/YAj4e7imylHGmjozuddF2z28W9bMYSIN270N8horFj0AwNwzQKo3TNEu IIuL2NwKqGLgJDVjGVSfCeG0rfouZVRCWqaL8J5hZvwkdhuAfAkZPFImSCtduN8g ufNVFqb2U00GBou029Y/LVnCdscxfFOZvaFlqYg45iYVBw5fvRQqpEkWhUM3QDq9 bntnap7nioeOOlx+3Y6TOXSdtgkHZi+9xIYeT8h1imyms1Sg7Y2RccebN4AwdkEu UJlIx9Qk+jFRL71hcfAYLA1LKGGnKRR5/yM1YnxP4BFH/c3fW/NXPJ04AY9eBrJO VQGeR6ZCmsq3SZRbAoy36GYB8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWEI0Zw 6k+PQDzKQ3ZbM0yn4Sl3MB8GA1UdIwQYMBaAFHOE3GZ7TUmlrNUKWLSJFqFawmFr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQwNy81MDU1NjBCNjZF N0IxMUVFQjdFOTdENUZDNEY5QUUwMi9jNFRjWm50TlNhV3MxUXBZdElrV29WckNZ V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M0VGNabnROU2FXczFRcFl0SWtXb1ZyQ1lXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEQwNy81MDU1NjBCNjZFN0IxMUVFQjdFOTdENUZDNEY5QUUwMi9jNFRjWm50TlNh V3MxUXBZdElrV29WckNZV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPBB0fTwuWFbAn2kkGqWYSSNn7kZhASejUvRX52L/kd5y+Iw/kmTVH MOXiNpaDJkh9pwFRLekuL6UoxroSqzvvWJyeTNKUWJosRdQXTakxE8huzSQDMsD7 fDMjAJqxtfCG6wL+uNjJomp6A671ykimwjMB+tMt9kLgI3GcJ5ZB5t0t+Dj/mqeV wtuCqTpCmpUBLD63m/JMGrkNh2VtZn/xNn8/DB3ydPTZwK8IaLyHnQ6E8IFEXR07 d1tcsM8NFuFBoMXuIcT+BEerVqc1EUVe08DJzttElOctInQMUrxGZv2w195ppDR9 Q72r2G5A7+9268S+QZPulNy2JTOUMetI -----END CERTIFICATE-----Generated at Sat May 31 16:39:56 2025 by rpki-client