$ rpki-client -vvf rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft File: keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft (raw, json) Hash identifier: MGT9OUFT8AxxaFHRBSAOjbLuwl8qx6UtiLrQdef+/Gs= Subject key identifier: 85:BA:52:F2:BA:5C:AD:68:5D:9F:2E:9B:62:A3:DA:2D:D4:BE:A3:C5 Authority key identifier: 91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A Certificate issuer: /CN=A911ACAC/serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A Certificate serial: 04A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft Manifest number: 0495 Signing time: Thu 03 Apr 2025 00:02:34 +0000 Manifest this update: Thu 03 Apr 2025 00:02:33 +0000 Manifest next update: Thu 10 Apr 2025 00:02:33 +0000 Files and hashes: 1: keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl (hash: nt5ojie9nQRVw9e3f9t6oMic/2bZKK0t/cs5cJ+/n/I=) 2: C52B4E0A3FE011EF88794913C4F9AE02.roa (hash: BHc0YO4uerOV3pChxVjG7O544zd2LrVw+gOJhxCdrB0=) 3: 1295B5943FA611EF94664041C4F9AE02.roa (hash: FuWrvkmDIg3mxhyAWWbi/ukBRQacmBTwsE71FX0nX8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1185 (0x4a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ACAC Validity Not Before: Apr 3 00:02:33 2025 GMT Not After : Apr 10 00:02:33 2025 GMT Subject: CN=67edd019-81b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:90:fd:3b:73:cf:ec:eb:28:b6:2d:44:5f:82: 96:9b:d9:2f:c8:83:4c:9c:3e:07:1e:4a:df:7a:eb: 50:c5:33:43:26:0e:ef:17:27:98:39:ad:86:2b:e3: 2e:1c:16:4b:18:2a:13:17:43:9a:12:63:87:65:d2: 2e:13:09:74:b0:a2:8c:48:d5:3e:9e:7f:74:ac:18: e8:8a:0b:c4:6b:ab:15:ff:84:71:37:d5:e0:51:c3: 37:c9:f5:89:a1:b5:5e:67:0c:75:e3:a7:0b:c9:1d: 89:e1:24:8f:a8:8f:dc:1c:81:a2:cb:02:43:32:77: 9d:a0:cd:43:db:45:97:f8:51:f0:47:21:b9:b6:87: b8:e2:11:ba:8a:85:ab:ef:32:e6:50:f4:b3:83:d6: be:47:0a:fa:d4:d5:d7:23:99:c6:1d:6b:c9:2c:80: 33:2f:bc:ae:bf:26:f2:14:30:23:fc:13:3c:c2:fc: 89:cc:13:6c:a0:fd:e8:6f:8d:b5:bf:32:3e:5f:be: 03:77:0b:7b:1d:29:c0:32:a0:0d:c1:b9:51:6e:51: 2d:82:e1:c3:98:e3:5b:c3:f5:a6:62:3f:38:22:d7: ed:9e:97:8e:8c:67:14:9c:c7:13:12:66:72:95:b8: 7e:fe:4a:bf:78:88:b8:79:9d:90:63:9f:24:d8:24: cd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BA:52:F2:BA:5C:AD:68:5D:9F:2E:9B:62:A3:DA:2D:D4:BE:A3:C5 X509v3 Authority Key Identifier: keyid:91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:67:7e:b5:01:ae:ec:5a:a8:88:f0:85:6d:32:34:f2:73:b3: e5:05:f5:40:fb:ac:94:49:82:ef:a8:2a:cd:54:d2:ef:c0:ed: ab:55:51:e4:42:cd:dd:25:e1:f5:0d:58:db:34:68:78:44:92: a1:bd:c4:f5:08:d3:5b:1b:7f:c9:c0:54:64:19:d7:6c:1e:65: 2d:20:76:0d:e9:2b:35:22:ff:6a:1d:14:ed:d6:12:73:65:41: 38:69:2a:e9:d5:72:5f:4e:bd:9d:09:b7:21:59:df:03:2e:23: 53:11:d1:58:cb:92:25:d9:8c:d8:78:c0:b5:ed:56:37:c0:00: c4:18:c8:e8:00:d7:09:f9:83:f4:25:e4:80:1e:45:12:83:13: 75:0a:9a:73:3c:b2:09:a7:e4:a4:02:6c:54:fb:e6:4f:8a:7c: dc:24:63:50:d8:30:5d:7b:d8:49:12:f7:b2:f0:a5:52:a4:46: 83:ec:1a:ee:c3:d8:22:2b:c2:73:37:5d:0f:d2:b5:bc:ec:1c: 00:11:0d:5d:9f:a7:d1:8e:19:ac:17:fb:9e:96:74:57:26:3e: 8c:6c:97:d8:8f:71:fa:dd:36:f6:52:a6:96:fd:57:71:2b:db: 8f:d4:1e:fe:41:c5:b3:45:5f:26:30:88:f5:65:18:1e:56:7d: 66:95:f8:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFDQUMxMTAvBgNVBAUTKDkxRTY3OTcyMUVEMUUwOTI3RUJCN0U0NjFDODA1ODBE MjM5MzU5MkEwHhcNMjUwNDAzMDAwMjMzWhcNMjUwNDEwMDAwMjMzWjAYMRYwFAYD VQQDEw02N2VkZDAxOS04MWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlpD9O3PP7Osoti1EX4KWm9kvyINMnD4HHkrfeutQxTNDJg7vFyeYOa2GK+Mu HBZLGCoTF0OaEmOHZdIuEwl0sKKMSNU+nn90rBjoigvEa6sV/4RxN9XgUcM3yfWJ obVeZwx146cLyR2J4SSPqI/cHIGiywJDMnedoM1D20WX+FHwRyG5toe44hG6ioWr 7zLmUPSzg9a+Rwr61NXXI5nGHWvJLIAzL7yuvybyFDAj/BM8wvyJzBNsoP3ob421 vzI+X74Ddwt7HSnAMqANwblRblEtguHDmONbw/WmYj84ItftnpeOjGcUnMcTEmZy lbh+/kq/eIi4eZ2QY58k2CTNfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIW6UvK6 XK1oXZ8um2Kj2i3UvqPFMB8GA1UdIwQYMBaAFJHmeXIe0eCSfrt+RhyAWA0jk1kq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUNBQy9CM0JEQTU2NDMx RDMxMUVDOEQzQkJGMzBDNEY5QUUwMi9rZVo1Y2g3UjRKSi11MzVHSElCWURTT1RX U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tlWjVjaDdSNEpKLXUzNUdISUJZRFNPVFdTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUNBQy9CM0JEQTU2NDMxRDMxMUVDOEQzQkJGMzBDNEY5QUUwMi9rZVo1Y2g3UjRK Si11MzVHSElCWURTT1RXU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOZ361Aa7sWqiI8IVtMjTyc7PlBfVA+6yUSYLvqCrNVNLvwO2rVVHk Qs3dJeH1DVjbNGh4RJKhvcT1CNNbG3/JwFRkGddsHmUtIHYN6Ss1Iv9qHRTt1hJz ZUE4aSrp1XJfTr2dCbchWd8DLiNTEdFYy5Il2YzYeMC17VY3wADEGMjoANcJ+YP0 JeSAHkUSgxN1CppzPLIJp+SkAmxU++ZPinzcJGNQ2DBde9hJEvey8KVSpEaD7Bru w9giK8JzN10P0rW87BwAEQ1dn6fRjhmsF/uelnRXJj6MbJfYj3H63Tb2UqaW/Vdx K9uP1B7+QcWzRV8mMIj1ZRgeVn1mlfjj -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:25 2025 by rpki-client