$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft File: E4zRCkd43g41kR6cnJRPSyHE2wk.mft (raw, json) Hash identifier: h/uUAGFPZ8K2fO0KhQkCC6+bebx2kof+FyuA3RcLkrQ= Subject key identifier: 30:CB:6C:19:9D:5F:8B:C7:E7:3E:0B:03:8E:1D:D9:1B:CD:CD:48:C6 Authority key identifier: 13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 Certificate issuer: /CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Certificate serial: 0C86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft Manifest number: 0C71 Signing time: Sat 12 Apr 2025 18:09:05 +0000 Manifest this update: Sat 12 Apr 2025 18:09:04 +0000 Manifest next update: Sat 19 Apr 2025 18:09:04 +0000 Files and hashes: 1: E4zRCkd43g41kR6cnJRPSyHE2wk.crl (hash: gx5GECmmq+kyLxLkRQO6Q6bWNDDx4DXaPlnQ/5OhBrs=) 2: 1FC5063AE0D411ECB6C0B01CC4F9AE02.roa (hash: logqdhARGTyBkzJX/eotDYOSUYMcRn8n6eQk1B3sltA=) 3: 0827E4147F7911EC86DE4B56C4F9AE02.roa (hash: CFNa1CRrRXsw2NlqSuSKe2rvDg2ywkEC8x6fBZFbOK4=) 4: 41CBB5B87F7611ECAD50FA4EC4F9AE02.roa (hash: GtVkTj6lkgw7RXe+n4R0d/g9GkOJM8psiPRDO4atRDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 17:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3206 (0xc86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F9C, serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Validity Not Before: Apr 12 18:09:04 2025 GMT Not After : Apr 19 18:09:04 2025 GMT Subject: CN=67faac40-8d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ca:4d:6b:e1:b7:6a:be:38:0d:bf:26:5d:ef: 1f:2d:47:11:c1:18:70:d7:41:bb:50:08:5c:46:41: ca:95:15:25:ec:25:67:c4:eb:47:29:68:7e:c3:d4: 42:f5:0c:df:1b:eb:19:ca:5d:c2:bf:02:7c:91:88: c0:06:4c:fb:a3:9e:05:68:8b:b9:ab:37:f4:d7:d2: c9:a9:fd:2d:f9:b5:32:e3:e9:06:67:ca:f4:98:54: a7:40:86:ab:d9:fc:21:e0:35:62:10:5a:1f:4e:5b: ff:5e:ae:c5:cf:ee:74:c9:fa:3b:37:a3:91:e0:b5: a6:b4:e0:15:db:2b:dd:7d:21:59:48:a8:21:49:6f: 1f:d5:87:24:e0:d3:0a:90:03:a8:79:0a:9f:1c:fb: 01:eb:6d:0f:2d:6a:29:b6:e1:b1:d3:21:cc:02:9b: de:9a:6b:fe:3d:f5:2e:db:22:79:e3:d6:47:37:35: 89:d9:8d:12:4e:7e:0a:c1:20:3d:40:92:77:0f:1a: 2f:c8:ba:9e:e9:77:ed:50:0c:e8:12:cc:0b:b1:76: 52:47:21:41:bd:d6:58:14:ab:67:bd:12:37:62:20: 10:cb:89:29:b2:70:12:45:a6:cf:7c:54:74:89:a7: 2e:28:b6:61:f9:9b:fa:b1:c1:bc:04:b4:33:e7:ab: 00:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:CB:6C:19:9D:5F:8B:C7:E7:3E:0B:03:8E:1D:D9:1B:CD:CD:48:C6 X509v3 Authority Key Identifier: keyid:13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f6:e0:88:94:2c:a5:14:40:5c:8b:6d:7a:b0:b2:9b:3e:07:8c: 7e:de:73:ec:fd:d3:4b:3e:23:3c:9a:6c:34:3d:44:16:52:57: f9:91:c8:b2:09:0c:f4:bb:e6:da:e1:37:b2:a7:fc:a0:a5:aa: ed:f5:52:49:b5:d7:0b:26:05:4d:ee:b7:d8:26:81:23:e2:1d: 12:a4:f2:c5:14:27:81:7c:a4:63:45:6b:38:6c:4f:a5:55:76: 4a:30:e5:11:08:06:4c:6a:92:f7:d7:ad:86:9e:c8:04:8d:5d: 9f:f6:2c:68:8f:20:07:77:01:e6:2f:cf:38:02:7f:06:c5:da: 41:86:dd:a9:6a:b4:77:9f:e7:3f:c4:da:23:70:db:47:a8:54: 9f:6d:85:d5:d6:db:8a:c3:20:5e:e4:07:25:f7:b5:96:92:77: a0:a4:e6:4e:d1:fb:4f:06:7e:24:db:22:c9:db:68:30:f8:4a: 8b:bc:cc:ef:a7:84:12:11:70:9c:94:6d:6b:b5:64:02:76:b6: 58:b2:41:6d:22:1b:e7:4d:ec:26:e7:31:9e:31:b2:63:1e:20: b1:ea:76:ce:7a:65:dd:de:41:db:db:7b:ca:7f:26:b7:a8:7d: b1:ee:67:09:3a:05:54:48:17:ab:a1:9e:42:bf:2f:d1:04:92: 83:a3:0e:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBGOUMxMTAvBgNVBAUTKDEzOENEMTBBNDc3OERFMEUzNTkxMUU5QzlDOTQ0RjRC MjFDNERCMDkwHhcNMjUwNDEyMTgwOTA0WhcNMjUwNDE5MTgwOTA0WjAYMRYwFAYD VQQDEw02N2ZhYWM0MC04ZDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA58pNa+G3ar44Db8mXe8fLUcRwRhw10G7UAhcRkHKlRUl7CVnxOtHKWh+w9RC 9QzfG+sZyl3CvwJ8kYjABkz7o54FaIu5qzf019LJqf0t+bUy4+kGZ8r0mFSnQIar 2fwh4DViEFofTlv/Xq7Fz+50yfo7N6OR4LWmtOAV2yvdfSFZSKghSW8f1Yck4NMK kAOoeQqfHPsB620PLWoptuGx0yHMApvemmv+PfUu2yJ549ZHNzWJ2Y0STn4KwSA9 QJJ3DxovyLqe6XftUAzoEswLsXZSRyFBvdZYFKtnvRI3YiAQy4kpsnASRabPfFR0 iacuKLZh+Zv6scG8BLQz56sA2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDLbBmd X4vH5z4LA44d2RvNzUjGMB8GA1UdIwQYMBaAFBOM0QpHeN4ONZEenJyUT0shxNsJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEY5Qy8yOUNCMDIwRUZB MEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNnNDFrUjZjbkpSUFN5SEUy d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U0elJDa2Q0M2c0MWtSNmNuSlJQU3lIRTJ3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEY5Qy8yOUNCMDIwRUZBMEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNn NDFrUjZjbkpSUFN5SEUyd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQD24IiULKUUQFyLbXqwsps+B4x+3nPs/dNLPiM8mmw0PUQWUlf5kciy CQz0u+ba4Teyp/ygpart9VJJtdcLJgVN7rfYJoEj4h0SpPLFFCeBfKRjRWs4bE+l VXZKMOURCAZMapL3162GnsgEjV2f9ixojyAHdwHmL884An8GxdpBht2parR3n+c/ xNojcNtHqFSfbYXV1tuKwyBe5Acl97WWknegpOZO0ftPBn4k2yLJ22gw+EqLvMzv p4QSEXCclG1rtWQCdrZYskFtIhvnTewm5zGeMbJjHiCx6nbOemXd3kHb23vKfya3 qH2x7mcJOgVUSBeroZ5Cvy/RBJKDow7q -----END CERTIFICATE-----Generated at Sun Apr 13 01:33:58 2025 by rpki-client