$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft File: a4ZCQd8BLyOSegHA44bgeqtJxSI.mft (raw, json) Hash identifier: +jfeXxwpAxfKB9sc0TBkN2K0yQurD8Mlf98uuYcUMqE= Subject key identifier: FD:BB:79:1D:02:18:2B:CA:7F:68:F2:93:EA:EC:68:FD:5D:2E:4E:90 Authority key identifier: 6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22 Certificate issuer: /CN=A91FAD6F/serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522 Certificate serial: 1B4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft Manifest number: 1B40 Signing time: Fri 30 May 2025 16:27:40 +0000 Manifest this update: Fri 30 May 2025 16:27:40 +0000 Manifest next update: Fri 06 Jun 2025 16:27:40 +0000 Files and hashes: 1: a4ZCQd8BLyOSegHA44bgeqtJxSI.crl (hash: q0nvQN33MTNClBF67RQa4hmUv7SDXeX0+tXvPNaTxkU=) 2: 26834412EFF211E9B74F3A6AC4F9AE02.roa (hash: ZmGMH4g7cGfub9A5Ucup2yr3pAIXwRpZ1v4yX9SvAOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:27:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6989 (0x1b4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAD6F, serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522 Validity Not Before: May 30 16:27:40 2025 GMT Not After : Jun 6 16:27:40 2025 GMT Subject: CN=6839dc7c-bf26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f8:4b:10:91:cb:3b:e8:7e:d3:b4:47:6d:e0: 4d:8c:22:4d:a9:a2:db:02:99:31:de:48:ca:0e:6e: 4d:0b:7a:ac:a3:66:f0:61:5e:fc:37:bb:08:20:08: 53:80:48:6b:31:62:b6:47:52:c4:b4:9d:33:e1:f2: a5:8b:96:08:2c:86:53:02:ac:fb:48:62:93:64:b0: e0:57:d1:c9:b7:64:f1:91:c9:9e:29:6a:5f:73:f9: d3:89:57:1e:96:95:fb:5c:59:11:95:8a:90:20:7f: b9:d2:98:f7:84:07:4c:c6:5e:db:ac:2b:04:e8:d7: 35:59:01:28:8e:5e:aa:43:52:e4:2e:48:97:b6:f8: c9:0a:57:0c:9e:e5:fc:5b:89:93:92:13:31:da:40: cb:ae:32:1b:b1:14:e3:a1:a4:9b:83:0e:a3:46:bc: eb:9b:5e:6b:4a:a9:81:72:ff:10:8e:c4:24:ca:27: bd:dc:af:92:4b:2d:72:ba:7e:b6:a2:3d:6a:c0:90: ff:11:09:23:22:09:2a:4a:5a:1b:a6:f7:d9:47:31: c6:4b:0a:1c:03:ed:5d:78:d8:ee:9d:88:3b:a0:de: f2:d2:10:ad:fe:e8:a7:d0:dc:fb:21:49:c5:a5:8a: ed:06:c6:f0:96:4a:e3:ed:bb:b0:f1:48:3e:f6:eb: c8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BB:79:1D:02:18:2B:CA:7F:68:F2:93:EA:EC:68:FD:5D:2E:4E:90 X509v3 Authority Key Identifier: keyid:6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:6a:d5:b7:9a:69:da:88:8c:8e:f3:75:88:a7:61:79:85:c7: 56:c0:d4:21:0f:88:58:ac:c2:fa:91:b9:bb:8d:8f:d5:6e:95: 3b:f3:d2:d4:65:6f:b4:fe:61:2d:69:44:c7:1e:ac:0a:a0:d1: 95:85:40:3a:ad:da:ff:05:01:d5:4d:5e:d1:b7:a8:d6:29:c0: c0:b9:4a:3f:c6:18:a7:07:3e:6d:79:81:2c:2c:af:b8:d3:cb: ce:53:95:c4:5c:e6:a3:ee:ee:61:3a:7c:12:72:bd:31:5a:b5: e5:5f:c5:14:2e:7b:c4:60:54:bc:74:b7:3f:ad:1a:55:f5:37: 31:8f:06:96:64:a6:62:5b:f7:f0:49:ad:35:de:b8:77:4e:b5: fe:e3:64:19:71:ab:01:1b:59:c1:a1:78:e6:23:9c:ac:c4:04: d0:17:7e:31:79:4b:6d:8f:36:79:07:db:d7:a2:43:27:34:3d: 71:20:c4:fb:c0:76:c6:b4:35:aa:42:ae:55:2f:b4:e3:ec:ce: 2c:69:cc:78:d7:0c:07:54:da:d6:87:45:fe:28:32:3f:90:5e: 18:0b:98:06:14:65:0b:59:a6:9c:4e:91:41:b0:17:46:9a:9c: df:e6:c3:2b:92:1c:5f:bb:58:62:a6:1d:41:f1:e0:eb:fc:c6: fe:05:d0:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFENkYxMTAvBgNVBAUTKDZCODY0MjQxREYwMTJGMjM5MjdBMDFDMEUzODZFMDdB QUI0OUM1MjIwHhcNMjUwNTMwMTYyNzQwWhcNMjUwNjA2MTYyNzQwWjAYMRYwFAYD VQQDEw02ODM5ZGM3Yy1iZjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4vhLEJHLO+h+07RHbeBNjCJNqaLbApkx3kjKDm5NC3qso2bwYV78N7sIIAhT gEhrMWK2R1LEtJ0z4fKli5YILIZTAqz7SGKTZLDgV9HJt2TxkcmeKWpfc/nTiVce lpX7XFkRlYqQIH+50pj3hAdMxl7brCsE6Nc1WQEojl6qQ1LkLkiXtvjJClcMnuX8 W4mTkhMx2kDLrjIbsRTjoaSbgw6jRrzrm15rSqmBcv8QjsQkyie93K+SSy1yun62 oj1qwJD/EQkjIgkqSlobpvfZRzHGSwocA+1deNjunYg7oN7y0hCt/uin0Nz7IUnF pYrtBsbwlkrj7buw8Ug+9uvIoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP27eR0C GCvKf2jyk+rsaP1dLk6QMB8GA1UdIwQYMBaAFGuGQkHfAS8jknoBwOOG4HqrScUi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUQ2Ri80NkM5NDA5NDE0 NEIxMUU3ODhBMjc5NUVDNEY5QUUwMi9hNFpDUWQ4Qkx5T1NlZ0hBNDRiZ2VxdEp4 U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E0WkNRZDhCTHlPU2VnSEE0NGJnZXF0SnhTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUQ2Ri80NkM5NDA5NDE0NEIxMUU3ODhBMjc5NUVDNEY5QUUwMi9hNFpDUWQ4Qkx5 T1NlZ0hBNDRiZ2VxdEp4U0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQatW3mmnaiIyO83WIp2F5hcdWwNQhD4hYrML6kbm7jY/VbpU789LU ZW+0/mEtaUTHHqwKoNGVhUA6rdr/BQHVTV7Rt6jWKcDAuUo/xhinBz5teYEsLK+4 08vOU5XEXOaj7u5hOnwScr0xWrXlX8UULnvEYFS8dLc/rRpV9TcxjwaWZKZiW/fw Sa013rh3TrX+42QZcasBG1nBoXjmI5ysxATQF34xeUttjzZ5B9vXokMnND1xIMT7 wHbGtDWqQq5VL7Tj7M4sacx41wwHVNrWh0X+KDI/kF4YC5gGFGULWaacTpFBsBdG mpzf5sMrkhxfu1hiph1B8eDr/Mb+BdCb -----END CERTIFICATE-----Generated at Sat May 31 16:33:04 2025 by rpki-client