$ rpki-client -vvf rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft File: F4L8LE0koOJkDRWzGQ3umPNrjzw.mft (raw, json) Hash identifier: EXOvHgZPX+3ugrYGp9UhJY5zDKLztR8bT1ZR/samEe8= Subject key identifier: 36:96:B5:5D:0A:5B:54:FB:B8:03:E3:98:75:AA:61:9B:3E:4E:6A:DC Authority key identifier: 17:82:FC:2C:4D:24:A0:E2:64:0D:15:B3:19:0D:EE:98:F3:6B:8F:3C Certificate issuer: /CN=A912E92E/serialNumber=1782FC2C4D24A0E2640D15B3190DEE98F36B8F3C Certificate serial: 082D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4L8LE0koOJkDRWzGQ3umPNrjzw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft Manifest number: 35C4 Signing time: Thu 10 Apr 2025 16:01:08 +0000 Manifest this update: Thu 10 Apr 2025 16:01:08 +0000 Manifest next update: Thu 17 Apr 2025 16:01:08 +0000 Files and hashes: 1: F4L8LE0koOJkDRWzGQ3umPNrjzw.crl (hash: rGvRSK7D0UmO5UInNSJncTVzTASMwi80CGwDN1ymi2E=) 2: 8595A74A373C11ECA3E8C51BC4F9AE02.roa (hash: +veyd8W47YCvCuitg3o8ThOGXu4XRgXC3k1LgL4ZMH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.crl rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4L8LE0koOJkDRWzGQ3umPNrjzw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 16:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2093 (0x82d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E92E Validity Not Before: Apr 10 16:01:08 2025 GMT Not After : Apr 17 16:01:08 2025 GMT Subject: CN=67f7eb44-9a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2f:6d:65:b5:78:f9:d3:d0:a7:5a:0f:13:4a: 83:b2:a1:ec:2d:fe:51:00:af:ad:68:8e:25:61:e2: 35:c2:3e:50:27:73:b6:3d:28:fd:b6:5d:fb:8c:ad: a0:f4:35:46:b8:e8:20:d2:4c:f5:59:50:4c:eb:04: e7:a1:ef:cf:db:ec:b7:6f:2e:eb:51:59:16:39:70: 0d:1c:f9:f9:0e:d7:24:3a:72:49:fa:c1:c5:89:da: 63:b8:4f:47:a9:3f:03:e3:68:f6:e5:8f:24:ac:03: 94:a1:0e:cd:78:b3:f6:23:13:59:5d:06:32:01:12: 46:86:35:f8:49:90:84:be:9c:7e:76:62:85:a0:89: f6:0c:95:e6:5e:b6:cc:ed:c3:8a:df:6d:d4:28:39: 90:46:f1:51:16:81:10:f3:8b:a1:bd:29:b4:9d:2e: 3a:81:f8:11:e4:81:83:03:32:b1:07:9b:36:11:70: b1:71:c6:6d:41:d1:0b:8f:7e:26:08:11:b5:ae:43: ae:65:cf:b6:0c:5d:ab:2b:64:f2:ac:f2:46:3d:1d: 56:82:ce:ed:9a:88:de:74:2b:f9:fe:e4:50:3e:e6: 45:41:d5:2e:5a:96:3d:64:99:b7:a1:ba:2a:91:68: 15:f9:08:1c:05:02:9d:ef:88:9a:33:da:87:00:c8: 50:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:96:B5:5D:0A:5B:54:FB:B8:03:E3:98:75:AA:61:9B:3E:4E:6A:DC X509v3 Authority Key Identifier: keyid:17:82:FC:2C:4D:24:A0:E2:64:0D:15:B3:19:0D:EE:98:F3:6B:8F:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4L8LE0koOJkDRWzGQ3umPNrjzw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:9d:ba:35:d6:73:60:ab:ef:97:47:84:79:e4:73:c5:29:da: 22:d2:b6:d8:95:da:5b:93:fb:b5:da:11:46:f7:f1:ce:52:ab: 10:1c:d6:d7:04:36:c4:22:1f:41:38:3f:94:c1:31:8c:8a:39: 00:d0:6f:fd:af:6d:e2:5c:f7:3c:06:fd:8c:42:b0:4d:d2:4a: d2:85:b0:09:09:d2:e5:eb:71:0b:81:33:5b:30:a0:21:03:6e: d5:63:91:4f:72:df:0e:7b:c6:bf:98:97:30:dc:89:f2:a3:f3: 60:f1:91:08:36:cd:a3:28:22:e1:1a:f9:4c:34:62:4a:cd:d2: 11:e5:7f:17:88:3b:13:3d:dd:57:5d:5c:58:a2:54:01:bb:1a: 01:30:9c:4d:b0:d8:ca:fc:27:dd:1a:9e:c4:a2:08:05:6d:a6: 2b:8b:72:fd:35:f0:ed:4b:20:c1:f0:99:66:cc:07:f2:15:18: bc:9b:be:0e:cf:c1:ee:e9:56:05:b4:eb:85:61:f7:2c:d1:8c: bb:40:d4:9d:24:f5:1a:0e:6b:67:19:be:17:ca:fd:b5:c6:cd: df:ee:49:81:a0:34:19:62:9c:db:28:41:b4:e8:78:c0:1a:6a: 27:a7:b5:23:52:23:3a:50:73:ce:4d:4c:a6:9b:d9:a0:25:e8: 7c:23:e3:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5MkUxMTAvBgNVBAUTKDE3ODJGQzJDNEQyNEEwRTI2NDBEMTVCMzE5MERFRTk4 RjM2QjhGM0MwHhcNMjUwNDEwMTYwMTA4WhcNMjUwNDE3MTYwMTA4WjAYMRYwFAYD VQQDEw02N2Y3ZWI0NC05YTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2y9tZbV4+dPQp1oPE0qDsqHsLf5RAK+taI4lYeI1wj5QJ3O2PSj9tl37jK2g 9DVGuOgg0kz1WVBM6wTnoe/P2+y3by7rUVkWOXANHPn5DtckOnJJ+sHFidpjuE9H qT8D42j25Y8krAOUoQ7NeLP2IxNZXQYyARJGhjX4SZCEvpx+dmKFoIn2DJXmXrbM 7cOK323UKDmQRvFRFoEQ84uhvSm0nS46gfgR5IGDAzKxB5s2EXCxccZtQdELj34m CBG1rkOuZc+2DF2rK2TyrPJGPR1Wgs7tmojedCv5/uRQPuZFQdUuWpY9ZJm3oboq kWgV+QgcBQKd74iaM9qHAMhQQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDaWtV0K W1T7uAPjmHWqYZs+TmrcMB8GA1UdIwQYMBaAFBeC/CxNJKDiZA0VsxkN7pjza488 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTkyRS9BMDA5OUE4MDI3 RDExMUU2QUU3QkYyN0NDNEY5QUUwMi9GNEw4TEUwa29PSmtEUld6R1EzdW1QTnJq encuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y0TDhMRTBrb09Ka0RSV3pHUTN1bVBOcmp6dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTkyRS9BMDA5OUE4MDI3RDExMUU2QUU3QkYyN0NDNEY5QUUwMi9GNEw4TEUwa29P SmtEUld6R1EzdW1QTnJqencubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdnbo11nNgq++XR4R55HPFKdoi0rbYldpbk/u12hFG9/HOUqsQHNbX BDbEIh9BOD+UwTGMijkA0G/9r23iXPc8Bv2MQrBN0krShbAJCdLl63ELgTNbMKAh A27VY5FPct8Oe8a/mJcw3Inyo/Ng8ZEINs2jKCLhGvlMNGJKzdIR5X8XiDsTPd1X XVxYolQBuxoBMJxNsNjK/CfdGp7EoggFbaYri3L9NfDtSyDB8JlmzAfyFRi8m74O z8Hu6VYFtOuFYfcs0Yy7QNSdJPUaDmtnGb4Xyv21xs3f7kmBoDQZYpzbKEG06HjA Gmonp7UjUiM6UHPOTUymm9mgJeh8I+PP -----END CERTIFICATE-----Generated at Sat Apr 12 05:59:18 2025 by rpki-client