$ rpki-client -vvf rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft File: d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft (raw, json) Hash identifier: lbuCFGjUj5mjw/K6aFmy+Qhin6tlNRgAkcLE9JS9GKE= Subject key identifier: 9C:8D:74:FA:F9:AA:EB:97:87:FF:F6:28:A5:35:7A:42:22:AF:B9:CD Authority key identifier: 77:EA:6F:E0:16:65:1C:FB:16:93:41:67:45:E9:A5:BE:A4:74:53:46 Certificate issuer: /CN=A913A69E/serialNumber=77EA6FE016651CFB1693416745E9A5BEA4745346 Certificate serial: 0B73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft Manifest number: 0B6A Signing time: Fri 04 Apr 2025 19:11:24 +0000 Manifest this update: Fri 04 Apr 2025 19:11:23 +0000 Manifest next update: Fri 11 Apr 2025 19:11:23 +0000 Files and hashes: 1: d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl (hash: 2hYwSoC3NhlBigDOZSNrifC68RH6bcNgl/QzB3JLcZA=) 2: AB60C088B6E111EDB3BAC26CC4F9AE02.roa (hash: 5XNAMXcyNSOVLGmmucARGwpqHZGGrdPlivmquQGAyUw=) 3: 951CA536C1B511EF87BCEA11C4F9AE02.roa (hash: 7wRjpl4ak/daHT3cAIU8dsdddsw6EG34B50egxoHuUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2931 (0xb73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A69E Validity Not Before: Apr 4 19:11:23 2025 GMT Not After : Apr 11 19:11:23 2025 GMT Subject: CN=67f02edb-4247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:10:f3:1f:7c:ab:b0:fe:04:23:8a:f3:7e:3c: d4:4a:54:7c:2e:3d:fc:33:ec:07:d9:4e:cc:fa:f6: 46:0d:73:21:93:01:df:e9:5a:e7:35:f1:7a:37:77: 13:1b:b8:39:2d:9b:4c:4e:14:4c:30:16:d8:2e:7e: 5d:62:6d:18:c9:7c:f4:16:de:8e:dc:88:ac:e5:68: 76:a8:31:4f:fb:2f:22:2e:42:38:1b:b7:e2:2f:a3: cb:5f:1d:5b:5c:89:73:f0:a1:81:51:89:28:15:36: 58:6b:1d:78:22:0c:7c:ba:f0:40:8d:74:43:2e:59: d9:be:59:e1:d5:43:47:51:d4:11:0f:7d:c3:66:10: b9:29:64:c7:36:80:b3:27:86:d1:15:08:2a:19:ea: be:92:70:74:95:8f:10:ac:2c:cb:ac:44:82:08:7f: 7e:5c:1e:b8:8c:09:3d:f9:16:04:42:05:af:70:5f: 74:dc:59:a9:9c:30:21:04:83:63:05:f2:bb:96:1d: c6:4d:12:aa:34:c9:b6:d6:6c:1f:76:87:f9:6f:d0: 47:1e:85:91:52:e8:41:b1:c6:fa:aa:38:98:f4:47: 6e:1f:ea:d8:cd:ec:5a:83:d0:f0:01:41:42:a8:21: 48:e9:81:af:83:41:0b:0f:a5:a5:d9:dc:38:f4:6e: d8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8D:74:FA:F9:AA:EB:97:87:FF:F6:28:A5:35:7A:42:22:AF:B9:CD X509v3 Authority Key Identifier: keyid:77:EA:6F:E0:16:65:1C:FB:16:93:41:67:45:E9:A5:BE:A4:74:53:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e9:54:12:10:d7:74:40:1d:ee:bf:fb:eb:71:2f:09:86:4c: 4f:a2:cb:c6:08:2e:3c:ad:6f:e1:91:d8:9f:8d:a5:67:7a:b4: e7:ab:e1:39:f8:ea:ae:6a:3e:b8:f4:bf:77:58:a8:d9:cb:36: 99:8d:55:c6:94:5c:70:fe:64:6e:01:9f:2b:60:07:6a:73:76: d6:5f:b9:45:3f:5c:1c:21:36:43:d4:dc:71:c4:87:4d:c5:18: 21:38:45:5d:81:9c:aa:16:50:00:9f:12:cc:c4:8e:c7:1d:3f: bc:f3:74:ce:7c:43:e6:4f:d1:bb:3d:38:bc:b3:6d:0f:d6:4e: 87:ab:0a:ad:9e:3c:78:0e:8b:57:ce:0c:e0:b7:72:25:fa:25: b2:56:e4:04:da:f6:ce:a9:b4:c9:f5:f1:a4:9a:e9:22:ba:d4: c4:39:ed:bd:42:c0:0a:63:36:d5:77:0a:e8:70:11:36:56:16: 4b:88:8a:b1:3c:c8:4e:20:23:2e:92:3b:0f:2c:41:ce:2d:e6: 2e:b0:ae:ce:2c:78:fc:e5:14:91:2d:3c:4b:b1:3d:0a:b3:c9: e9:73:23:e4:4f:37:db:8b:78:6e:9e:ec:28:12:b4:42:87:12: ea:f1:5b:13:2c:e4:c7:8f:65:7c:01:1e:1f:81:21:51:d5:db: ee:2e:ff:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E2OUUxMTAvBgNVBAUTKDc3RUE2RkUwMTY2NTFDRkIxNjkzNDE2NzQ1RTlBNUJF QTQ3NDUzNDYwHhcNMjUwNDA0MTkxMTIzWhcNMjUwNDExMTkxMTIzWjAYMRYwFAYD VQQDEw02N2YwMmVkYi00MjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5RDzH3yrsP4EI4rzfjzUSlR8Lj38M+wH2U7M+vZGDXMhkwHf6VrnNfF6N3cT G7g5LZtMThRMMBbYLn5dYm0YyXz0Ft6O3Iis5Wh2qDFP+y8iLkI4G7fiL6PLXx1b XIlz8KGBUYkoFTZYax14Igx8uvBAjXRDLlnZvlnh1UNHUdQRD33DZhC5KWTHNoCz J4bRFQgqGeq+knB0lY8QrCzLrESCCH9+XB64jAk9+RYEQgWvcF903FmpnDAhBINj BfK7lh3GTRKqNMm21mwfdof5b9BHHoWRUuhBscb6qjiY9EduH+rYzexag9DwAUFC qCFI6YGvg0ELD6Wl2dw49G7Y0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyNdPr5 quuXh//2KKU1ekIir7nNMB8GA1UdIwQYMBaAFHfqb+AWZRz7FpNBZ0Xppb6kdFNG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTY5RS9GQjlGQjkzQTJB RTYxMUVBQUJENTZCMTRDNEY5QUUwMi9kLXB2NEJabEhQc1drMEZuUmVtbHZxUjBV MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QtcHY0QlpsSFBzV2swRm5SZW1sdnFSMFUwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTY5RS9GQjlGQjkzQTJBRTYxMUVBQUJENTZCMTRDNEY5QUUwMi9kLXB2NEJabEhQ c1drMEZuUmVtbHZxUjBVMFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO6VQSENd0QB3uv/vrcS8JhkxPosvGCC48rW/hkdifjaVnerTnq+E5 +Oquaj649L93WKjZyzaZjVXGlFxw/mRuAZ8rYAdqc3bWX7lFP1wcITZD1NxxxIdN xRghOEVdgZyqFlAAnxLMxI7HHT+883TOfEPmT9G7PTi8s20P1k6Hqwqtnjx4DotX zgzgt3Il+iWyVuQE2vbOqbTJ9fGkmukiutTEOe29QsAKYzbVdwrocBE2VhZLiIqx PMhOICMukjsPLEHOLeYusK7OLHj85RSRLTxLsT0Ks8npcyPkTzfbi3hunuwoErRC hxLq8VsTLOTHj2V8AR4fgSFR1dvuLv+b -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:56 2025 by rpki-client