$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft File: -jVgKfx3KltDJpwxataFxLtaZW0.mft (raw, json) Hash identifier: AwZZ76XdGCKaSsOXSALuEXPPPN0hETLyV9pBBmA28jg= Subject key identifier: FD:44:7A:E5:AE:73:74:92:B8:DF:91:B7:E3:EB:1D:1F:60:1F:1F:7E Authority key identifier: FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D Certificate issuer: /CN=A9116B5E/serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D Certificate serial: 0602 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft Manifest number: 05F0 Signing time: Fri 28 Mar 2025 23:14:21 +0000 Manifest this update: Fri 28 Mar 2025 23:14:21 +0000 Manifest next update: Fri 04 Apr 2025 23:14:21 +0000 Files and hashes: 1: -jVgKfx3KltDJpwxataFxLtaZW0.crl (hash: 0LZCP1nsmYSTbdarpisisyvfpYaz43dDZy1WV48nHyk=) 2: 93E364468FC111EFA7695485C4F9AE02.roa (hash: l40SoBbVMbccw1MSf6F6VE2N6tSNsGG3U/26S05rROc=) 3: 26C5F4148FC111EF84928A68C4F9AE02.roa (hash: WwU6SoQDG+8gwXxtD5WuoKkjOwOvaEm4Y976SHnYcTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1538 (0x602) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116B5E Validity Not Before: Mar 28 23:14:21 2025 GMT Not After : Apr 4 23:14:21 2025 GMT Subject: CN=67e72d4d-1ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:47:4a:c1:0b:e6:52:bf:45:3c:2c:0d:c0:73: 6c:2e:22:fc:54:ff:b4:30:9f:fa:ea:16:45:37:88: 03:db:17:4a:4e:d2:b5:da:0c:1b:6f:02:6c:3f:7b: da:e6:5f:a5:60:9b:05:81:31:25:85:c1:f8:e0:02: ec:bc:1b:8e:51:0e:88:a4:f4:ac:fe:cd:d5:32:10: fe:7d:7f:ef:06:82:2d:a3:b6:4c:b1:a8:2c:83:e9: b5:25:9a:94:dd:ed:c2:bc:f5:30:cc:3c:1a:bd:6d: 76:fe:22:8d:92:66:1f:6b:0a:04:c0:56:9b:7a:9a: 7d:05:8b:5d:9c:f2:dc:9c:de:be:f0:f9:41:fc:26: 0c:db:29:ae:64:dc:85:99:da:56:f4:09:0f:34:83: d7:f5:13:ec:62:75:92:ba:0c:2c:8c:f4:fc:ad:f6: 91:36:51:cf:71:87:ba:9e:50:69:d0:64:8d:c6:5a: 1c:62:ef:f4:a9:3a:ad:c8:ce:12:67:be:8b:a6:90: 81:cc:4c:bd:f2:a6:30:4d:d0:28:90:35:c8:cb:63: 61:46:2c:02:0d:1d:a5:0c:0d:00:42:8b:92:58:99: 66:76:da:eb:81:f3:59:98:e7:b8:de:4d:b5:3c:87: c6:f8:34:e8:d0:18:8a:e5:37:f0:ad:58:2a:74:8b: c9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:44:7A:E5:AE:73:74:92:B8:DF:91:B7:E3:EB:1D:1F:60:1F:1F:7E X509v3 Authority Key Identifier: keyid:FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:5f:04:f6:39:b0:9a:5f:f0:cb:ce:1b:0d:09:ce:59:11:cc: 3c:13:4e:d4:e9:3e:20:44:95:a3:bd:d2:eb:04:fd:f5:2b:2f: dc:35:0a:9f:cd:88:e0:b6:c1:06:43:10:40:18:98:20:2d:4e: 18:43:42:ce:70:6a:bd:44:35:15:98:66:d0:b2:0c:98:be:7d: 35:96:60:74:36:de:fb:8c:e7:5d:6b:09:6f:4e:49:f3:ff:d9: 90:e9:23:7e:3f:03:9a:d7:1e:d9:cc:d3:c9:f3:0f:a9:4b:ee: 05:31:7c:f1:b7:9c:63:cf:79:ae:53:80:c5:9d:82:63:71:cc: 11:51:e2:29:5c:ff:54:f0:dc:dd:e4:10:fd:19:cd:c2:26:a5: 70:4d:b0:9a:1f:01:2a:da:07:c6:07:c5:f1:ba:13:30:40:ce: e4:18:8b:2b:ab:4b:29:7e:54:9a:92:8a:49:27:4d:75:4b:03: fd:ae:69:10:fd:1c:9f:be:76:a7:46:f4:10:86:21:0d:da:1a: 0b:d8:ed:13:4a:36:30:9e:f8:d3:7e:8e:1b:79:bb:75:8c:34: 9a:78:bd:8d:fa:71:7a:ea:d2:95:89:ff:12:1f:fe:32:f0:4b: f6:26:31:08:97:94:74:6e:ce:fe:ab:b7:dd:4f:1f:6d:47:13: 3b:b0:3f:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCNUUxMTAvBgNVBAUTKEZBMzU2MDI5RkM3NzJBNUI0MzI2OUMzMTZBRDY4NUM0 QkI1QTY1NkQwHhcNMjUwMzI4MjMxNDIxWhcNMjUwNDA0MjMxNDIxWjAYMRYwFAYD VQQDEw02N2U3MmQ0ZC0xY2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkdKwQvmUr9FPCwNwHNsLiL8VP+0MJ/66hZFN4gD2xdKTtK12gwbbwJsP3va 5l+lYJsFgTElhcH44ALsvBuOUQ6IpPSs/s3VMhD+fX/vBoIto7ZMsagsg+m1JZqU 3e3CvPUwzDwavW12/iKNkmYfawoEwFabepp9BYtdnPLcnN6+8PlB/CYM2ymuZNyF mdpW9AkPNIPX9RPsYnWSugwsjPT8rfaRNlHPcYe6nlBp0GSNxlocYu/0qTqtyM4S Z76LppCBzEy98qYwTdAokDXIy2NhRiwCDR2lDA0AQouSWJlmdtrrgfNZmOe43k21 PIfG+DTo0BiK5TfwrVgqdIvJ0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1EeuWu c3SSuN+Rt+PrHR9gHx9+MB8GA1UdIwQYMBaAFPo1YCn8dypbQyacMWrWhcS7WmVt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkI1RS9GNThDNTY5NEE2 RTAxMUVCQUMxREVCNTdDNEY5QUUwMi8talZnS2Z4M0tsdERKcHd4YXRhRnhMdGFa VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1qVmdLZngzS2x0REpwd3hhdGFGeEx0YVpXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkI1RS9GNThDNTY5NEE2RTAxMUVCQUMxREVCNTdDNEY5QUUwMi8talZnS2Z4M0ts dERKcHd4YXRhRnhMdGFaVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEXwT2ObCaX/DLzhsNCc5ZEcw8E07U6T4gRJWjvdLrBP31Ky/cNQqf zYjgtsEGQxBAGJggLU4YQ0LOcGq9RDUVmGbQsgyYvn01lmB0Nt77jOddawlvTknz /9mQ6SN+PwOa1x7ZzNPJ8w+pS+4FMXzxt5xjz3muU4DFnYJjccwRUeIpXP9U8Nzd 5BD9Gc3CJqVwTbCaHwEq2gfGB8XxuhMwQM7kGIsrq0spflSakopJJ011SwP9rmkQ /RyfvnanRvQQhiEN2hoL2O0TSjYwnvjTfo4bebt1jDSaeL2N+nF66tKVif8SH/4y 8Ev2JjEIl5R0bs7+q7fdTx9tRxM7sD/g -----END CERTIFICATE-----Generated at Fri Apr 4 22:00:49 2025 by rpki-client