$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft File: 4XI0Y4kx9DllENfQutUfivTrhrY.mft (raw, json) Hash identifier: O7WJxh6HUb/rhkZU9WEWfphmi6lGjcu+sDIUSDkJ4vE= Subject key identifier: 0E:0C:C0:FD:CA:B5:A9:C1:20:74:59:AC:4E:F0:27:01:73:DC:C0:58 Authority key identifier: E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 Certificate issuer: /CN=A91F34FA/serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft Manifest number: 01D9 Signing time: Sat 31 May 2025 02:27:30 +0000 Manifest this update: Sat 31 May 2025 02:27:30 +0000 Manifest next update: Sat 07 Jun 2025 02:27:30 +0000 Files and hashes: 1: 4XI0Y4kx9DllENfQutUfivTrhrY.crl (hash: gsljvUuDZKIqWWKjipNRbWPATf974Qh0+x87zJrhiMk=) 2: 8256A692444A11EFB043DE36C4F9AE02.roa (hash: Ple4OYydaAojanyJwx7ZWPyKox9DD4lFfc6gQi2CwTI=) 3: 81B847F4444A11EFB043DE36C4F9AE02.roa (hash: iBZ0Vc5oqFw84Bi0mykH6jGLVo3+N0cmUjqo5T+vIIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F34FA, serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6 Validity Not Before: May 31 02:27:30 2025 GMT Not After : Jun 7 02:27:30 2025 GMT Subject: CN=683a6912-cb95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d6:fe:ec:49:12:f0:24:12:3d:c9:30:7c:87: 26:4e:15:40:e5:56:72:10:4f:97:1f:59:55:56:1f: 6b:c7:eb:c8:68:45:a5:50:a1:da:f5:e7:bd:f1:d7: d1:01:5b:f3:42:7b:01:a3:0c:d4:5c:79:43:ff:c4: 59:f8:36:96:ea:9d:f1:35:fc:93:91:8d:3d:00:f7: 80:34:ed:13:e8:b5:af:e0:90:47:cb:a7:67:f2:77: 39:45:2c:41:3a:fe:ba:94:74:81:68:fe:a0:d5:34: ea:95:46:02:57:96:59:a3:87:f5:1f:f1:22:28:cf: e4:7e:ee:f0:b3:ec:87:2f:41:74:c5:fe:a4:a7:c1: 50:bb:eb:be:83:9e:45:60:51:d0:5e:f1:6c:6d:b2: 49:68:85:5b:17:cc:be:7b:f2:7e:43:7f:cf:f9:a5: cc:7d:46:e8:93:10:7a:d9:89:2b:56:c2:b7:ab:0f: a6:c7:5d:d0:9f:b6:ae:29:9d:93:9d:c1:5a:e8:44: 18:04:61:de:24:a4:da:e3:e6:94:a0:c2:ff:69:4d: 5b:53:0a:af:4f:00:d1:42:a4:04:a7:dd:6d:6a:d1: 20:b5:8d:a9:cc:bc:74:23:d8:e5:c9:80:c5:bb:21: 46:55:ce:d0:6e:e3:b1:be:21:1d:d1:6d:59:81:15: a8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0C:C0:FD:CA:B5:A9:C1:20:74:59:AC:4E:F0:27:01:73:DC:C0:58 X509v3 Authority Key Identifier: keyid:E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:41:b0:63:ac:1f:f6:ec:34:de:5f:38:5a:c4:7d:a0:f4:7c: 17:36:19:72:a7:47:84:91:77:70:a0:46:43:e9:a7:bf:c6:1c: 30:4a:c4:13:95:bb:56:42:cf:04:98:39:ae:2d:48:0a:2a:af: 13:14:93:f2:66:24:d3:03:25:7b:1d:fa:39:a0:c3:20:fb:f6: fc:37:33:15:1e:97:06:5e:f5:54:64:7d:d6:0e:e3:9e:1a:87: 46:68:c3:87:50:06:75:3e:05:08:b7:d1:df:a7:7c:5c:0a:0f: 72:ea:df:1b:ec:b0:e6:59:c9:38:1f:f0:c2:93:9f:af:92:00: 77:20:73:aa:7d:75:c7:65:46:98:06:66:1e:4c:1e:58:a2:d0: a9:5a:ad:ea:95:60:c5:8b:71:80:77:fe:54:09:cb:61:2f:15: f0:ef:34:b0:55:c2:70:4a:b8:9b:f5:01:7d:31:fc:95:4d:aa: 7e:eb:38:4b:bd:a3:36:9c:98:58:20:e0:a4:53:32:58:7d:8b: 6b:45:99:ad:b5:c9:a3:7f:d3:f6:40:25:cc:76:b8:6c:b7:02: 42:a8:7c:ab:0c:d2:2f:f8:d5:a3:11:7a:48:0b:bc:57:21:d4: 4f:9e:0c:89:39:c0:01:e9:c9:f8:69:be:7e:3e:c2:a6:6e:24: 6b:be:c3:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM0RkExMTAvBgNVBAUTKEUxNzIzNDYzODkzMUY0Mzk2NTEwRDdEMEJBRDUxRjhB RjRFQjg2QjYwHhcNMjUwNTMxMDIyNzMwWhcNMjUwNjA3MDIyNzMwWjAYMRYwFAYD VQQDEw02ODNhNjkxMi1jYjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Nb+7EkS8CQSPckwfIcmThVA5VZyEE+XH1lVVh9rx+vIaEWlUKHa9ee98dfR AVvzQnsBowzUXHlD/8RZ+DaW6p3xNfyTkY09APeANO0T6LWv4JBHy6dn8nc5RSxB Ov66lHSBaP6g1TTqlUYCV5ZZo4f1H/EiKM/kfu7ws+yHL0F0xf6kp8FQu+u+g55F YFHQXvFsbbJJaIVbF8y+e/J+Q3/P+aXMfUbokxB62YkrVsK3qw+mx13Qn7auKZ2T ncFa6EQYBGHeJKTa4+aUoML/aU1bUwqvTwDRQqQEp91tatEgtY2pzLx0I9jlyYDF uyFGVc7QbuOxviEd0W1ZgRWoQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4MwP3K tanBIHRZrE7wJwFz3MBYMB8GA1UdIwQYMBaAFOFyNGOJMfQ5ZRDX0LrVH4r064a2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRGQS80NUU5RTE2QTY1 OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlEbGxFTmZRdXRVZml2VHJo clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYSTBZNGt4OURsbEVOZlF1dFVmaXZUcmhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzRGQS80NUU5RTE2QTY1OEExMUVEOTlBMjFCNkZDNEY5QUUwMi80WEkwWTRreDlE bGxFTmZRdXRVZml2VHJoclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTQbBjrB/27DTeXzhaxH2g9HwXNhlyp0eEkXdwoEZD6ae/xhwwSsQT lbtWQs8EmDmuLUgKKq8TFJPyZiTTAyV7Hfo5oMMg+/b8NzMVHpcGXvVUZH3WDuOe GodGaMOHUAZ1PgUIt9Hfp3xcCg9y6t8b7LDmWck4H/DCk5+vkgB3IHOqfXXHZUaY BmYeTB5YotCpWq3qlWDFi3GAd/5UCcthLxXw7zSwVcJwSrib9QF9MfyVTap+6zhL vaM2nJhYIOCkUzJYfYtrRZmttcmjf9P2QCXMdrhstwJCqHyrDNIv+NWjEXpIC7xX IdRPngyJOcAB6cn4ab5+PsKmbiRrvsP/ -----END CERTIFICATE-----Generated at Sat May 31 17:53:06 2025 by rpki-client