$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft File: v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft (raw, json) Hash identifier: G3az0IZv6TC1m47Q2Zf0pxMSgvpMwBs5zLydsjMoNWs= Subject key identifier: 1D:69:92:FF:81:05:B5:74:E7:67:90:94:9D:63:9A:29:58:E7:ED:BA Authority key identifier: BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C Certificate issuer: /CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C Certificate serial: 06AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft Manifest number: 0658 Signing time: Fri 04 Apr 2025 22:56:24 +0000 Manifest this update: Fri 04 Apr 2025 22:56:23 +0000 Manifest next update: Fri 11 Apr 2025 22:56:23 +0000 Files and hashes: 1: v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl (hash: ASnUW1Bp1187YyUkzvEEubsSzxxHDO73Z8GDZWSbeMA=) 2: CA44DBE09A9811EBAC99AD22C4F9AE02.roa (hash: wfbzZwER+fTgY++pqgXP/OKLLTSGFpByy89x8B47O4E=) 3: DA1FAC58A19011EBAA68DE2EC4F9AE02.roa (hash: 0fG/kMZux/g0TrRr8X6oVIRTrgst6KT9ZYMewvCkhYM=) 4: E0AAFE389A2411EBA8913944C4F9AE02.roa (hash: 1D7+OCtGjby5tViOYZaur4l4d2dDZ0m3lkkYo/LV9js=) 5: 971C513C022111EFBBBD7C47C4F9AE02.roa (hash: QuMBlcTc7QujQ/SOoXxGFQuUtssnMEkGa1IbX48EXaw=) 6: 671FC40EE29211EE94348874C4F9AE02.roa (hash: zylwlyfQcRU6ehbr04cNoWE1AgSNT1tCrRy3GfEdHx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:56:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1706 (0x6aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BE9D Validity Not Before: Apr 4 22:56:23 2025 GMT Not After : Apr 11 22:56:23 2025 GMT Subject: CN=67f06397-bfc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:48:a6:76:b6:58:b6:5a:c7:35:99:0d:02:33: a0:8b:8a:74:62:7c:be:96:71:8c:e0:c3:c9:3e:77: f4:79:19:99:bb:70:7d:58:0c:a8:ab:c2:5c:a6:72: 93:72:f0:38:e5:fd:83:b9:d7:af:21:f8:3c:32:ba: 4c:04:f8:c0:b3:b3:b9:35:7d:fd:8d:a3:53:d2:e3: e5:ae:50:20:77:54:6f:a7:74:83:88:0f:10:45:29: bd:da:6b:b9:35:ec:ca:0c:59:35:60:67:d0:c9:ec: db:f4:35:07:4a:f3:5f:ef:61:c9:d2:a6:5f:69:af: af:5a:b5:97:bd:4d:b2:f4:f6:bf:9c:df:73:5e:b0: 7f:8d:76:91:46:63:92:3f:83:92:c0:60:c8:dc:ef: b8:07:a8:a3:2e:21:cb:fc:bc:c9:e7:14:64:35:7b: c6:c6:02:6e:c6:d1:c7:29:b5:42:69:64:f8:a9:94: 71:e4:b6:75:8c:d6:6a:fe:76:ab:f0:13:9e:cc:19: a7:11:4a:57:88:47:be:d4:bf:c7:6a:c2:79:39:62: d6:1b:5a:35:86:61:ce:2c:e8:c6:fc:b0:8c:8f:d9: d6:40:bd:19:d0:f1:f8:3a:5f:cb:47:dc:34:c7:e1: 55:a2:65:d3:f5:3b:0b:ad:06:a1:70:79:84:cf:99: fa:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:69:92:FF:81:05:B5:74:E7:67:90:94:9D:63:9A:29:58:E7:ED:BA X509v3 Authority Key Identifier: keyid:BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:6a:a3:e7:3b:f5:7a:ec:85:e2:24:09:bc:b9:de:20:e3:6b: 96:d0:ea:f5:04:ff:3f:03:c1:ee:c1:13:b0:ce:ac:16:a7:a3: e3:ec:eb:d9:a4:ae:9a:ee:13:f2:cc:fb:f2:c3:69:1c:28:70: 54:ff:64:87:e6:cb:6a:ca:6a:22:c3:65:7d:36:c2:61:eb:92: 6d:3a:a1:dd:21:5a:30:de:f0:13:34:f3:19:4d:28:54:3f:98: 24:8d:13:ad:5e:11:3d:58:6c:65:e9:d5:f2:87:9d:9f:a0:a9: 30:44:67:7c:d8:73:52:02:35:cc:d8:18:f6:9c:39:8a:3d:5c: 3d:74:ea:ce:a3:9d:5d:aa:c6:f8:e2:28:52:9e:3f:98:36:8d: bf:99:28:81:0e:fd:db:83:e1:86:c3:12:71:93:06:80:d9:df: 80:4e:c0:7f:ff:8c:60:36:8d:11:91:c5:12:01:44:7e:73:f8: 43:63:74:6b:74:ce:b4:a8:15:2e:82:0a:1f:4a:2b:60:b6:ff: c1:51:c2:68:53:3a:79:9f:d8:db:7d:4a:b3:7e:61:a1:a3:cb: 30:fb:1d:73:27:8f:1c:ef:c5:f3:77:65:5e:97:17:27:f0:4d: 38:2f:94:a7:8e:e9:02:df:4e:96:00:a4:83:8e:1d:81:f4:8d: 2c:6e:67:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJFOUQxMTAvBgNVBAUTKEJGNkFEMUFCQzlEOTE2MTlBMDkyODdGQjZDNjRGNDY0 N0I5RkQzMUMwHhcNMjUwNDA0MjI1NjIzWhcNMjUwNDExMjI1NjIzWjAYMRYwFAYD VQQDEw02N2YwNjM5Ny1iZmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kimdrZYtlrHNZkNAjOgi4p0Yny+lnGM4MPJPnf0eRmZu3B9WAyoq8JcpnKT cvA45f2DudevIfg8MrpMBPjAs7O5NX39jaNT0uPlrlAgd1Rvp3SDiA8QRSm92mu5 NezKDFk1YGfQyezb9DUHSvNf72HJ0qZfaa+vWrWXvU2y9Pa/nN9zXrB/jXaRRmOS P4OSwGDI3O+4B6ijLiHL/LzJ5xRkNXvGxgJuxtHHKbVCaWT4qZRx5LZ1jNZq/nar 8BOezBmnEUpXiEe+1L/HasJ5OWLWG1o1hmHOLOjG/LCMj9nWQL0Z0PH4Ol/LR9w0 x+FVomXT9TsLrQahcHmEz5n6yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1pkv+B BbV052eQlJ1jmilY5+26MB8GA1UdIwQYMBaAFL9q0avJ2RYZoJKH+2xk9GR7n9Mc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkU5RC9EMzA1RTRFRTk5 MEUxMUVCODlCNzZENjhDNEY5QUUwMi92MnJScThuWkZobWdrb2Y3YkdUMFpIdWYw eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YyclJxOG5aRmhtZ2tvZjdiR1QwWkh1ZjB4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkU5RC9EMzA1RTRFRTk5MEUxMUVCODlCNzZENjhDNEY5QUUwMi92MnJScThuWkZo bWdrb2Y3YkdUMFpIdWYweHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0aqPnO/V67IXiJAm8ud4g42uW0Or1BP8/A8HuwROwzqwWp6Pj7OvZ pK6a7hPyzPvyw2kcKHBU/2SH5stqymoiw2V9NsJh65JtOqHdIVow3vATNPMZTShU P5gkjROtXhE9WGxl6dXyh52foKkwRGd82HNSAjXM2Bj2nDmKPVw9dOrOo51dqsb4 4ihSnj+YNo2/mSiBDv3bg+GGwxJxkwaA2d+ATsB//4xgNo0RkcUSAUR+c/hDY3Rr dM60qBUuggofSitgtv/BUcJoUzp5n9jbfUqzfmGho8sw+x1zJ48c78Xzd2Velxcn 8E04L5SnjukC306WAKSDjh2B9I0sbmdt -----END CERTIFICATE-----Generated at Sat Apr 5 16:25:31 2025 by rpki-client