$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft File: n4mmBPRc629oBPtTTq3CQWa9Dyk.mft (raw, json) Hash identifier: uxTc4CcOj6VDh4lIC90m/bGjqNAhnzg7s6rcnw7q3xI= Subject key identifier: 4A:1E:B7:B3:6D:23:DD:CD:F0:E1:09:EB:0F:A7:1E:42:7D:F0:7A:11 Authority key identifier: 9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29 Certificate issuer: /CN=A91FD3F6/serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft Manifest number: 14 Signing time: Thu 03 Apr 2025 07:17:36 +0000 Manifest this update: Thu 03 Apr 2025 07:17:36 +0000 Manifest next update: Thu 10 Apr 2025 07:17:36 +0000 Files and hashes: 1: n4mmBPRc629oBPtTTq3CQWa9Dyk.crl (hash: 94AUvZC2QLJZ96d/914ouULj0+NfRSIMCl7lxgnmoew=) 2: 27B19A58F99911EFB6B7F427C4F9AE02.roa (hash: BUhldgfxait6fPn7ddMr7oElIYN1G4FTjWGIi47OvkE=) 3: 88E11172F99A11EFA825D961C4F9AE02.roa (hash: AXOaVoqZ86dlROkyEdtuYYcAQanKRipkDbyi/sYqa94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:17:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD3F6 Validity Not Before: Apr 3 07:17:36 2025 GMT Not After : Apr 10 07:17:36 2025 GMT Subject: CN=67ee3610-9add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:36:04:f3:02:47:1d:ea:8a:15:20:7a:85:52: 60:38:a2:11:5f:4a:00:4e:49:06:e6:ea:9e:98:63: 58:88:ae:db:d5:59:47:86:3b:83:1b:af:87:06:91: cc:80:6e:e7:24:a3:87:55:96:bc:04:0b:19:76:a1: ad:10:3c:8c:ec:51:8c:66:a4:d3:83:9e:0d:8c:79: 0b:82:ae:3c:c7:ee:e3:c2:21:a9:d9:03:b9:a2:56: ca:aa:3f:3a:81:6b:60:cc:fc:22:89:35:20:e6:65: b8:32:10:cd:d8:38:30:a3:e7:66:59:4f:eb:fa:29: 3d:c9:6a:e8:50:8a:98:19:5b:94:20:ed:3d:08:fd: 19:1d:f3:3a:2d:44:43:17:58:a9:76:50:a4:ac:2e: f6:a4:b7:17:f6:23:9a:b6:d5:8d:cd:e5:dc:4d:a1: 23:bd:d9:4a:10:e2:2a:77:d4:19:7f:6e:35:13:95: a1:95:d2:db:87:25:ea:03:71:4c:58:4d:e8:f6:85: 7c:3c:5a:38:6c:55:38:6a:bb:4a:d4:08:8b:75:8f: c9:8a:15:16:fa:2b:fe:b5:2a:f5:2a:90:fe:25:09: 6b:c2:a1:a1:86:9e:5b:19:e0:0a:7a:5d:fc:90:aa: c1:69:8a:ed:58:e0:d6:c6:47:ff:3b:29:7b:2a:29: da:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1E:B7:B3:6D:23:DD:CD:F0:E1:09:EB:0F:A7:1E:42:7D:F0:7A:11 X509v3 Authority Key Identifier: keyid:9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d6:9c:61:10:74:03:81:9b:3e:ba:08:5f:ac:fc:0e:16:61: 43:16:a3:04:ef:41:ee:bc:62:d3:cc:0b:b2:67:e7:7b:af:fd: 0f:22:68:90:f7:e9:69:53:60:83:86:e1:aa:4f:34:ba:0b:77: 71:f4:34:46:3b:b6:94:52:88:67:ae:31:0f:6c:ea:ce:67:85: 7d:9e:62:42:98:16:e7:c1:d0:94:70:8d:8d:68:e8:c4:9c:3f: ce:b6:68:ce:6e:59:49:81:f7:7b:2b:45:07:ff:21:e1:e6:9f: ae:9a:23:e8:73:74:e9:ba:d0:31:3e:74:f2:c1:e0:51:20:d9: e4:c0:c2:6a:3f:f4:6e:5c:dd:fc:3c:2b:be:e2:fd:74:9c:32: 46:b2:f9:26:de:eb:80:6e:02:6f:8d:b2:1d:4a:df:ec:f7:74: 4b:04:1b:cc:85:29:11:db:13:60:4c:f8:96:cc:f3:f1:11:6f: f4:e1:ab:d5:ff:d7:0e:3a:b7:0b:b5:ab:74:73:f3:2b:a1:d0: af:4f:47:27:2e:e1:e3:7a:20:83:f6:cf:e8:8c:86:2b:b5:ce: 1b:f1:5b:13:08:25:06:c7:20:18:19:9b:97:88:8f:f4:76:4f: 48:a3:99:d5:fd:82:17:94:d2:80:96:1d:29:b1:bc:76:83:79: ae:d9:65:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDNGNjExMC8GA1UEBRMoOUY4OUE2MDRGNDVDRUI2RjY4MDRGQjUzNEVBREMyNDE2 NkJEMEYyOTAeFw0yNTA0MDMwNzE3MzZaFw0yNTA0MTAwNzE3MzZaMBgxFjAUBgNV BAMTDTY3ZWUzNjEwLTlhZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSNgTzAkcd6ooVIHqFUmA4ohFfSgBOSQbm6p6YY1iIrtvVWUeGO4Mbr4cGkcyA bucko4dVlrwECxl2oa0QPIzsUYxmpNODng2MeQuCrjzH7uPCIanZA7miVsqqPzqB a2DM/CKJNSDmZbgyEM3YODCj52ZZT+v6KT3JauhQipgZW5Qg7T0I/Rkd8zotREMX WKl2UKSsLvaktxf2I5q21Y3N5dxNoSO92UoQ4ip31Bl/bjUTlaGV0tuHJeoDcUxY Tej2hXw8WjhsVThqu0rUCIt1j8mKFRb6K/61KvUqkP4lCWvCoaGGnlsZ4Ap6XfyQ qsFpiu1Y4NbGR/87KXsqKdqTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSh63s20j 3c3w4QnrD6ceQn3wehEwHwYDVR0jBBgwFoAUn4mmBPRc629oBPtTTq3CQWa9Dykw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEM0Y2LzM3MTY4MUZBRjhE MzExRUY5NzU4RkIwRkM0RjlBRTAyL240bW1CUFJjNjI5b0JQdFRUcTNDUVdhOUR5 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbjRtbUJQUmM2MjlvQlB0VFRxM0NRV2E5RHlrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE M0Y2LzM3MTY4MUZBRjhEMzExRUY5NzU4RkIwRkM0RjlBRTAyL240bW1CUFJjNjI5 b0JQdFRUcTNDUVdhOUR5ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF7WnGEQdAOBmz66CF+s/A4WYUMWowTvQe68YtPMC7Jn53uv/Q8iaJD3 6WlTYIOG4apPNLoLd3H0NEY7tpRSiGeuMQ9s6s5nhX2eYkKYFufB0JRwjY1o6MSc P862aM5uWUmB93srRQf/IeHmn66aI+hzdOm60DE+dPLB4FEg2eTAwmo/9G5c3fw8 K77i/XScMkay+Sbe64BuAm+Nsh1K3+z3dEsEG8yFKRHbE2BM+JbM8/ERb/Thq9X/ 1w46twu1q3Rz8yuh0K9PRycu4eN6IIP2z+iMhiu1zhvxWxMIJQbHIBgZm5eIj/R2 T0ijmdX9gheU0oCWHSmxvHaDea7ZZfU= -----END CERTIFICATE-----Generated at Sat Apr 5 07:46:28 2025 by rpki-client