$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft File: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft (raw, json) Hash identifier: VA7+Qo9sp+DiL1JGkjNc1Nw4W/GOVOKh9Nvl4Wu/hWM= Subject key identifier: C2:FC:6D:9F:01:70:82:A1:47:0D:7C:EF:6C:2F:CD:C7:83:51:E9:9A Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E Certificate issuer: /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E Certificate serial: 0797 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft Manifest number: 078D Signing time: Fri 30 May 2025 21:36:50 +0000 Manifest this update: Fri 30 May 2025 21:36:49 +0000 Manifest next update: Fri 06 Jun 2025 21:36:49 +0000 Files and hashes: 1: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl (hash: 79F5VrA5v0WoJ++1BSJ0G18rfKzQZmG7K2CW1mEdp/4=) 2: 009FA5F0397C11EF9EC42850C4F9AE02.roa (hash: BUdadXM84LZqg6dcPh4b0sJ5Cd4Jg9PJnJrm+wRnwP8=) 3: E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (hash: GwT8wJjuiJq3ptd4ORrNmt479yde0NY4ozRqZ/YvpGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:36:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1943 (0x797) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9FCC, serialNumber=E01002B37C26B9709915267666F44900C0131E2E Validity Not Before: May 30 21:36:49 2025 GMT Not After : Jun 6 21:36:49 2025 GMT Subject: CN=683a24f2-2aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a1:c9:4b:8a:9b:9a:cb:74:4e:93:e8:22:5f: da:b7:0e:a3:0f:f8:01:82:e1:94:c4:74:2d:cd:66: 2b:2e:db:43:03:47:ca:2e:2c:43:64:b3:8e:8a:76: d6:6d:16:f6:3c:93:c8:61:c9:30:41:b6:57:ba:c2: 5b:5d:ef:6e:78:45:91:4d:c0:40:3f:86:10:e6:e4: 07:b0:79:f2:bd:c1:a6:4e:b8:cf:9b:be:6c:37:78: dc:7a:a0:38:52:05:70:4b:19:0b:a2:85:5d:92:0c: 13:ac:ef:5b:3f:ae:6f:b8:b3:d0:b2:10:63:5f:44: 6c:98:04:99:45:e5:de:26:c8:45:a5:84:93:2e:e0: e9:9c:14:fc:78:9c:0e:81:c2:27:ed:7a:60:c0:3e: 41:dc:17:d4:c0:44:7a:94:06:2d:33:38:a8:95:e9: 00:ce:fe:25:f2:0c:23:e3:45:9a:37:70:ad:46:04: 2c:63:39:f9:93:ce:ad:dd:f1:29:22:96:14:21:e6: b5:1a:8f:c8:6a:b3:87:87:b2:19:bb:12:0d:72:8f: 93:ad:80:31:f2:78:e7:d4:61:a7:ff:1c:6e:6d:53: 24:c6:7b:f2:d9:95:1e:41:1a:12:14:d0:1c:a2:4a: 8e:ba:a5:a5:18:40:c8:e7:9f:83:1f:bb:3b:1d:a0: 60:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:FC:6D:9F:01:70:82:A1:47:0D:7C:EF:6C:2F:CD:C7:83:51:E9:9A X509v3 Authority Key Identifier: keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:35:e5:4d:e7:10:53:6b:c2:21:e6:d0:cc:50:06:a1:19:b2: 80:c6:4f:16:bb:db:2f:a1:bc:2b:a9:c5:bd:0b:86:b8:14:de: 40:2b:a5:e2:44:fe:09:e7:0d:64:c9:80:f3:ac:bc:64:d5:f4: 96:29:06:c7:f9:68:51:53:70:73:99:cb:20:52:1e:c7:60:39: 5a:2c:cd:c1:4e:f6:da:9e:f9:4a:f3:ae:da:7f:a9:f6:66:2a: 64:0c:d9:c2:43:a9:db:a4:75:e9:49:ec:e7:42:fc:ba:1a:42: 41:a8:f0:6b:c2:13:b0:85:b7:e2:f1:31:95:4c:a8:0b:89:f8: ff:3c:a0:ff:67:83:dc:4c:01:8c:94:cd:df:b5:8a:85:92:e3: 02:e3:a8:41:d0:28:b1:a2:3c:2c:d0:9b:b6:ef:4a:2b:8c:38: 25:f4:0d:76:b4:9d:3f:67:4b:e1:6e:74:59:01:2e:7e:39:ec: 5a:f1:47:e6:f3:f0:9c:93:4d:64:aa:bc:f2:03:6b:44:e0:0c: d3:3f:fa:18:0d:6b:5f:2b:db:13:a4:e2:67:37:ef:79:7c:68: 82:9a:15:c1:a5:df:0f:ed:6d:3f:ad:08:09:97:3d:ee:5a:93: 96:05:3b:5c:e8:fa:79:9b:fe:4f:73:6e:fd:e0:db:46:23:ae: 6e:3b:50:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGQ0MxMTAvBgNVBAUTKEUwMTAwMkIzN0MyNkI5NzA5OTE1MjY3NjY2RjQ0OTAw QzAxMzFFMkUwHhcNMjUwNTMwMjEzNjQ5WhcNMjUwNjA2MjEzNjQ5WjAYMRYwFAYD VQQDEw02ODNhMjRmMi0yYWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6HJS4qbmst0TpPoIl/atw6jD/gBguGUxHQtzWYrLttDA0fKLixDZLOOinbW bRb2PJPIYckwQbZXusJbXe9ueEWRTcBAP4YQ5uQHsHnyvcGmTrjPm75sN3jceqA4 UgVwSxkLooVdkgwTrO9bP65vuLPQshBjX0RsmASZReXeJshFpYSTLuDpnBT8eJwO gcIn7XpgwD5B3BfUwER6lAYtMziolekAzv4l8gwj40WaN3CtRgQsYzn5k86t3fEp IpYUIea1Go/IarOHh7IZuxINco+TrYAx8njn1GGn/xxubVMkxnvy2ZUeQRoSFNAc okqOuqWlGEDI55+DH7s7HaBgmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFML8bZ8B cIKhRw1872wvzceDUemaMB8GA1UdIwQYMBaAFOAQArN8JrlwmRUmdmb0SQDAEx4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUZDQy8yMkNENzlERTBE Q0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVYQ1pGU1oyWnZSSkFNQVRI aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCQUNzM3dtdVhDWkZTWjJadlJKQU1BVEhpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUZDQy8yMkNENzlERTBEQ0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVY Q1pGU1oyWnZSSkFNQVRIaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJNeVN5xBTa8Ih5tDMUAahGbKAxk8Wu9svobwrqcW9C4a4FN5AK6Xi RP4J5w1kyYDzrLxk1fSWKQbH+WhRU3BzmcsgUh7HYDlaLM3BTvbanvlK867af6n2 ZipkDNnCQ6nbpHXpSeznQvy6GkJBqPBrwhOwhbfi8TGVTKgLifj/PKD/Z4PcTAGM lM3ftYqFkuMC46hB0Cixojws0Ju270orjDgl9A12tJ0/Z0vhbnRZAS5+Oexa8Ufm 8/Cck01kqrzyA2tE4AzTP/oYDWtfK9sTpOJnN+95fGiCmhXBpd8P7W0/rQgJlz3u WpOWBTtc6Pp5m/5Pc2794NtGI65uO1CK -----END CERTIFICATE-----Generated at Sat May 31 16:30:39 2025 by rpki-client