$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft File: yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft (raw, json) Hash identifier: zxz5XS6UeMipDyORAS5TD03yl+Ojcqjuqygpb1UoAvY= Subject key identifier: DE:9F:CD:A1:67:D0:ED:7F:2B:EF:01:3B:29:B4:81:AE:03:40:8E:B4 Authority key identifier: C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34 Certificate issuer: /CN=A912AC33/serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634 Certificate serial: 03F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft Manifest number: 03EA Signing time: Sat 29 Mar 2025 00:47:31 +0000 Manifest this update: Sat 29 Mar 2025 00:47:31 +0000 Manifest next update: Sat 05 Apr 2025 00:47:31 +0000 Files and hashes: 1: yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl (hash: 9Fx+uRuMUBBergTcShMglqhtOhS+bt5On97PPGaq9aA=) 2: E4804004737211EC866EAC24C4F9AE02.roa (hash: NdcrODMvzPxbGahsHjIC859CSUu00GxcxQ7bS9fv+uc=) 3: 204CB89672C011EC809A5933C4F9AE02.roa (hash: Gfvw/vl1mymWE2Hz3blrobSO5Bvy6xdNCRghpmsy0TE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1014 (0x3f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC33 Validity Not Before: Mar 29 00:47:31 2025 GMT Not After : Apr 5 00:47:31 2025 GMT Subject: CN=67e74323-3372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:2b:f2:2a:3d:2b:7f:01:31:c0:05:e4:da:87: 09:47:bc:1c:38:0e:0e:49:ba:96:cd:e3:60:b0:6b: 00:a8:3c:63:1f:34:ec:24:98:fd:6f:ce:2e:ad:f1: 3e:69:6f:fa:5b:8d:2e:cc:fb:3f:3d:5e:d7:88:1a: f1:a8:e8:ad:dd:36:51:17:53:25:e3:6d:cc:9f:94: db:15:fe:87:5b:53:4a:c0:95:c3:a8:05:7f:b2:e2: b8:22:50:b0:d1:00:90:7c:aa:2a:44:87:cc:d2:06: bf:54:43:a7:7c:ea:8b:40:8f:a3:84:9b:e2:76:d6: 96:68:6b:12:ea:07:d2:7f:f6:c6:cb:69:75:d7:7b: 68:95:c0:e7:ff:dd:41:30:7a:44:1e:c1:64:70:f8: 6a:af:a9:65:bf:a2:4b:a5:ba:42:ef:61:c2:4d:46: b5:f2:d8:25:1c:9a:bf:60:55:7e:cb:04:0f:f3:50: 2c:27:61:c6:5a:cf:e2:c8:03:90:6a:4c:3f:03:6b: 24:e1:58:d1:98:2e:40:ee:04:ce:a5:62:23:4c:1e: 6f:0f:d5:38:d1:d4:d1:6c:f0:a3:6b:04:83:42:f3: bb:1e:62:44:d5:28:ac:a3:61:ee:43:49:56:1c:28: 82:8a:db:fa:c2:73:7c:90:f3:84:be:1d:d7:f3:fe: d4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9F:CD:A1:67:D0:ED:7F:2B:EF:01:3B:29:B4:81:AE:03:40:8E:B4 X509v3 Authority Key Identifier: keyid:C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:0c:d7:27:94:21:15:04:a2:12:72:dc:08:64:d7:88:dc:b4: 45:ac:39:6a:4e:bf:fa:f1:83:4f:a7:a9:8c:f0:f7:a4:97:f6: e2:be:3a:c6:f1:1d:45:3c:b9:14:6b:4c:d9:72:82:8e:c0:58: 87:fb:e7:5b:16:08:18:e5:12:10:3b:99:12:16:2e:34:d3:d3: fb:43:a6:3a:fe:e5:92:40:1e:57:2e:69:7d:f2:1e:8c:68:21: a8:c9:57:c2:89:41:3e:05:98:ce:c5:c8:ad:af:35:9a:9b:84: a3:9a:12:2a:ad:17:a1:65:6f:2c:33:6b:1a:72:ad:29:1b:19: 8c:e5:f2:52:9c:c2:16:37:06:c5:17:d4:4d:d7:cc:b6:1e:6f: 67:fc:69:58:7f:bd:d2:bc:3f:c1:0e:21:b5:5e:aa:13:1d:ba: 7e:41:e5:88:e5:b4:ba:f9:60:47:80:99:25:73:f5:d2:cf:e6: dc:7d:ac:7b:eb:e3:56:3a:66:62:53:cb:36:80:e8:17:65:4f: c1:78:f1:dc:2d:ae:c2:cb:5a:5b:88:c6:96:b3:e4:df:bb:03: ec:cf:db:22:80:19:6d:24:69:6f:26:2a:d2:6c:ca:17:4d:db: 63:b4:d1:90:e3:c4:60:2d:1a:dd:71:d5:97:93:c2:9b:02:14: d5:4c:c0:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDMzMxMTAvBgNVBAUTKEM5NUNFOUQxQjZCMzEwODFDMDI1RDQ2QTNBMTY3RkNG REZBNzI2MzQwHhcNMjUwMzI5MDA0NzMxWhcNMjUwNDA1MDA0NzMxWjAYMRYwFAYD VQQDEw02N2U3NDMyMy0zMzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6yvyKj0rfwExwAXk2ocJR7wcOA4OSbqWzeNgsGsAqDxjHzTsJJj9b84urfE+ aW/6W40uzPs/PV7XiBrxqOit3TZRF1Ml423Mn5TbFf6HW1NKwJXDqAV/suK4IlCw 0QCQfKoqRIfM0ga/VEOnfOqLQI+jhJvidtaWaGsS6gfSf/bGy2l113tolcDn/91B MHpEHsFkcPhqr6llv6JLpbpC72HCTUa18tglHJq/YFV+ywQP81AsJ2HGWs/iyAOQ akw/A2sk4VjRmC5A7gTOpWIjTB5vD9U40dTRbPCjawSDQvO7HmJE1Siso2HuQ0lW HCiCitv6wnN8kPOEvh3X8/7UkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6fzaFn 0O1/K+8BOym0ga4DQI60MB8GA1UdIwQYMBaAFMlc6dG2sxCBwCXUajoWf8/fpyY0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzMy8wNEIzMzQ4ODcy QkMxMUVDODYxMTZENUVDNEY5QUUwMi95VnpwMGJhekVJSEFKZFJxT2haX3o5LW5K alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lWenAwYmF6RUlIQUpkUnFPaFpfejktbkpqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUMzMy8wNEIzMzQ4ODcyQkMxMUVDODYxMTZENUVDNEY5QUUwMi95VnpwMGJhekVJ SEFKZFJxT2haX3o5LW5KalEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABDNcnlCEVBKISctwIZNeI3LRFrDlqTr/68YNPp6mM8Pekl/bivjrG 8R1FPLkUa0zZcoKOwFiH++dbFggY5RIQO5kSFi4009P7Q6Y6/uWSQB5XLml98h6M aCGoyVfCiUE+BZjOxcitrzWam4SjmhIqrRehZW8sM2sacq0pGxmM5fJSnMIWNwbF F9RN18y2Hm9n/GlYf73SvD/BDiG1XqoTHbp+QeWI5bS6+WBHgJklc/XSz+bcfax7 6+NWOmZiU8s2gOgXZU/BePHcLa7Cy1pbiMaWs+TfuwPsz9sigBltJGlvJirSbMoX TdtjtNGQ48RgLRrdcdWXk8KbAhTVTMBJ -----END CERTIFICATE-----Generated at Fri Apr 4 22:27:07 2025 by rpki-client