$ rpki-client -vvf rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft File: 4jfSzTuh8bknVF8kSZKHKtCvwwU.mft (raw, json) Hash identifier: AlGLlS1hDJOesqkiLM2smf9cZVZxVQJY/17hqCDZvbY= Subject key identifier: 53:10:4A:2F:ED:E5:CF:60:E9:D5:9B:8A:E3:1F:F2:76:96:2E:CA:BF Authority key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 Certificate issuer: /CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Certificate serial: 08CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft Manifest number: 08B3 Signing time: Fri 28 Mar 2025 20:48:52 +0000 Manifest this update: Fri 28 Mar 2025 20:48:52 +0000 Manifest next update: Fri 04 Apr 2025 20:48:52 +0000 Files and hashes: 1: 4jfSzTuh8bknVF8kSZKHKtCvwwU.crl (hash: y/0m9cHb8c2KW9nH7W2t2wCCzHXZbYG22i5lNAYAtG4=) 2: 4C5CCE6EB46A11EAB5A01176C4F9AE02.roa (hash: YmROt2RnH3UdNIAXBylk68JRdbwoGmgzkhxTYT8yZZA=) 3: 9FCAD654781E11EB808A544BC4F9AE02.roa (hash: jI9GJ3mUj7/g+UDfOOrVVqKbgOohmwcRp94iSUpENxA=) 4: 4B3A4250B46A11EAB5A01176C4F9AE02.roa (hash: 65R5M+eBFk+Sri4/ilXTe6yj4G3UYq+q394nSZKR7qQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:48:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2252 (0x8cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912512F Validity Not Before: Mar 28 20:48:52 2025 GMT Not After : Apr 4 20:48:52 2025 GMT Subject: CN=67e70b34-e3a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ab:83:a3:35:74:ff:79:7a:be:60:06:47:aa: aa:b4:85:23:2b:91:c7:f7:cd:8f:13:dd:d2:6d:92: bd:ea:4d:3f:01:8d:8e:01:4b:85:9c:f2:1d:a5:04: e8:c5:c8:e5:97:3b:ae:a2:01:67:7c:57:2f:94:91: 74:4f:8b:57:50:79:da:cb:93:f2:a2:89:06:0b:13: b3:c5:d5:a8:51:1c:e9:6d:3f:84:83:f0:69:be:3d: f2:a5:88:e3:7f:a1:30:17:b3:32:7d:6b:60:4d:3f: 0e:1a:ba:c1:f8:3e:bc:e7:81:e8:3d:09:b2:3b:a7: ed:d8:71:3e:90:8c:8f:cc:6d:af:d5:39:15:fc:a5: 45:f6:08:1c:8a:9e:30:12:e2:0d:89:0e:5e:46:24: 0e:c8:e1:90:6f:2e:a8:0e:53:5b:56:e1:c6:b0:88: 9a:b9:26:b4:66:a8:c8:8e:4d:f9:93:fe:33:60:50: b7:c5:c7:53:0e:4a:27:e1:89:68:b0:7c:e3:44:e9: c8:99:7b:9b:5c:08:87:8f:fe:df:8d:ec:fd:a7:9b: 03:c7:e6:38:97:56:04:08:f5:2d:43:6b:07:30:c8: 0e:f3:a5:47:81:26:9a:0a:26:07:83:e8:4a:aa:fa: 1d:0d:68:e9:99:e6:f1:c3:a4:80:3d:4f:89:1e:38: d9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:10:4A:2F:ED:E5:CF:60:E9:D5:9B:8A:E3:1F:F2:76:96:2E:CA:BF X509v3 Authority Key Identifier: keyid:E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:21:57:64:ad:39:72:d1:64:ce:f6:d5:5e:6e:e3:03:e1:e8: 7f:91:e3:a5:63:21:e2:0d:f1:09:c2:a3:1b:8c:66:d8:9d:d2: 3c:34:bf:92:e4:fe:1e:da:7f:35:39:49:e9:4f:29:91:7d:c3: b4:1f:fa:ba:13:14:cc:8b:d8:54:ba:cd:50:45:c1:f4:0d:b5: df:6c:fd:1a:29:d5:4a:b7:c9:9e:cb:ff:e1:2e:7b:aa:72:5a: 53:42:ec:44:50:2c:7f:de:2a:f9:fc:5b:65:c4:06:6f:89:2e: 4d:37:1e:27:ca:1e:72:c6:a0:8f:71:9a:79:da:bc:2c:1a:3a: 80:7b:11:bf:23:02:24:3c:c2:f2:f6:4b:a4:0b:b2:c7:94:da: b2:1f:20:b2:b6:72:cb:82:8b:88:a9:10:fc:4c:38:66:4f:f9: 05:4d:01:7e:1e:e4:38:3a:ee:ea:ab:c4:64:c0:07:0e:5c:81: 08:30:3c:73:b3:12:19:c1:70:90:2c:58:53:18:3d:b8:e4:61: 6d:24:5c:37:c7:ec:d2:67:0f:d5:e1:1e:4e:60:ba:ca:e4:11: a1:3d:3d:b1:8c:35:d1:8e:f5:1d:b0:29:48:63:b8:7c:59:28: 99:23:4f:1f:07:60:8f:b3:07:03:a3:75:34:63:cd:08:4b:cd: 2e:6d:7c:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxMkYxMTAvBgNVBAUTKEUyMzdEMkNEM0JBMUYxQjkyNzU0NUYyNDQ5OTI4NzJB RDBBRkMzMDUwHhcNMjUwMzI4MjA0ODUyWhcNMjUwNDA0MjA0ODUyWjAYMRYwFAYD VQQDEw02N2U3MGIzNC1lM2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6uDozV0/3l6vmAGR6qqtIUjK5HH982PE93SbZK96k0/AY2OAUuFnPIdpQTo xcjllzuuogFnfFcvlJF0T4tXUHnay5PyookGCxOzxdWoURzpbT+Eg/Bpvj3ypYjj f6EwF7MyfWtgTT8OGrrB+D6854HoPQmyO6ft2HE+kIyPzG2v1TkV/KVF9ggcip4w EuINiQ5eRiQOyOGQby6oDlNbVuHGsIiauSa0ZqjIjk35k/4zYFC3xcdTDkon4Ylo sHzjROnImXubXAiHj/7fjez9p5sDx+Y4l1YECPUtQ2sHMMgO86VHgSaaCiYHg+hK qvodDWjpmebxw6SAPU+JHjjZkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMQSi/t 5c9g6dWbiuMf8naWLsq/MB8GA1UdIwQYMBaAFOI30s07ofG5J1RfJEmShyrQr8MF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTEyRi80QjhCRkZFQ0I0 NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhia25WRjhrU1pLSEt0Q3Z3 d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRqZlN6VHVoOGJrblZGOGtTWktIS3RDdnd3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTEyRi80QjhCRkZFQ0I0NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhi a25WRjhrU1pLSEt0Q3Z3d1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5IVdkrTly0WTO9tVebuMD4eh/keOlYyHiDfEJwqMbjGbYndI8NL+S 5P4e2n81OUnpTymRfcO0H/q6ExTMi9hUus1QRcH0DbXfbP0aKdVKt8mey//hLnuq clpTQuxEUCx/3ir5/FtlxAZviS5NNx4nyh5yxqCPcZp52rwsGjqAexG/IwIkPMLy 9kukC7LHlNqyHyCytnLLgouIqRD8TDhmT/kFTQF+HuQ4Ou7qq8RkwAcOXIEIMDxz sxIZwXCQLFhTGD245GFtJFw3x+zSZw/V4R5OYLrK5BGhPT2xjDXRjvUdsClIY7h8 WSiZI08fB2CPswcDo3U0Y80IS80ubXzO -----END CERTIFICATE-----Generated at Fri Apr 4 18:31:38 2025 by rpki-client