$ rpki-client -vvf rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft File: -Y3cNC9-J7aMoI09R8emmyaVXqE.mft (raw, json) Hash identifier: aH2KxG2MGvIHggWugZ8ezJ1Vcu43N8uwXk3GPD8dAbM= Subject key identifier: 01:C0:A0:EF:A4:C1:6D:F1:71:38:6D:44:E0:11:64:C8:6C:FE:AA:95 Authority key identifier: F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1 Certificate issuer: /CN=A913C68B/serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1 Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft Manifest number: 0119 Signing time: Sat 29 Mar 2025 04:14:50 +0000 Manifest this update: Sat 29 Mar 2025 04:14:50 +0000 Manifest next update: Sat 05 Apr 2025 04:14:50 +0000 Files and hashes: 1: -Y3cNC9-J7aMoI09R8emmyaVXqE.crl (hash: pkdgMXYcyto+6eBQ0yu51Ihvscgf1N3LsEDFcH795Zg=) 2: 98647190660511EE9F741151C4F9AE02.roa (hash: e+txXDDxOVgsnDumxQz73KTXT5VsRCiU70K17gULEyo=) 3: B0EBC1C862D111EEB797E270C4F9AE02.roa (hash: uhWuVXhTDAjPShdJrXnZxr0ARCm+SFwovWX+zDp8Oy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C68B Validity Not Before: Mar 29 04:14:50 2025 GMT Not After : Apr 5 04:14:50 2025 GMT Subject: CN=67e773ba-0adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e9:c6:a2:49:93:99:f9:5b:30:85:27:76:c7: 52:0e:4a:11:79:d7:86:32:5d:68:fd:7a:4c:b0:76: ac:e0:f3:91:ec:ef:99:0a:a1:05:63:6d:2a:c1:2f: 38:8d:78:e8:53:df:55:1c:bb:60:a8:d6:35:b2:3e: 65:e1:3e:a1:77:1b:f3:1c:2b:ba:32:f4:63:0e:df: 5f:c4:6f:9c:c7:95:d7:60:8f:dc:a7:ef:f8:cc:90: 59:54:39:d3:3f:69:81:8a:2e:03:3f:97:79:8a:dc: 57:aa:2e:c2:48:50:f6:53:d0:26:c1:5b:b2:7e:1a: ea:8a:f3:8a:2b:8c:ac:91:94:12:04:8b:e3:07:85: 9b:58:4b:46:af:95:45:23:51:14:16:30:06:30:51: e2:b1:5a:b9:96:4d:db:f1:71:13:da:c0:de:13:cc: 08:83:7c:bd:af:c2:bf:81:9c:31:bf:de:f2:8f:3e: a0:5f:84:e4:8e:1d:e4:74:ae:07:7e:d0:08:7c:58: f6:71:cb:3b:dd:c5:45:7f:17:38:1d:33:84:17:8f: ae:33:91:d4:e2:0f:85:0f:55:2d:3f:71:c5:71:dd: 39:3d:b5:dc:71:aa:f0:1a:d2:4e:34:8f:b4:ad:18: ed:3d:07:f2:35:3e:a7:c6:07:b8:01:bb:39:46:78: d0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C0:A0:EF:A4:C1:6D:F1:71:38:6D:44:E0:11:64:C8:6C:FE:AA:95 X509v3 Authority Key Identifier: keyid:F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:ad:16:75:83:bf:da:ee:cf:3a:b0:e0:d7:16:b4:ac:69:4c: ab:b2:e5:9f:df:04:94:0d:5a:b8:2f:be:75:5f:04:2b:be:ba: ee:1d:5a:1e:23:b3:11:8d:c7:ca:d1:1d:a9:a1:fa:c4:cb:8e: 42:5e:ed:b5:c2:5a:0c:fe:24:da:a5:a8:1d:8c:59:ac:fd:a8: be:ec:73:cc:26:b8:1f:fe:fa:c4:69:82:44:74:55:3f:21:da: 94:cc:d6:0c:5b:cd:27:3a:7d:92:8b:f8:43:8b:35:2f:b5:73: dd:d4:19:4f:18:9b:52:bf:b0:2f:8e:b8:26:14:89:ed:41:f7: d8:60:19:86:e4:7f:cf:8b:0e:38:43:6a:8d:91:54:c6:79:85: 7b:99:1a:3c:02:7e:98:03:8a:22:c8:6c:1e:aa:03:6d:12:66: 3c:df:3c:f9:36:db:eb:e7:0a:20:fc:34:8d:7b:3f:87:b8:d1: c9:ab:d5:c2:5b:00:d4:7e:f2:f4:ba:4e:6e:03:45:b3:5e:13: 81:1c:12:8d:89:6e:17:a6:cf:e6:14:d7:88:2f:aa:cb:ee:67: ef:ff:4c:7d:ed:73:f8:16:57:0d:78:be:96:e0:65:9d:51:db: a7:d2:ea:19:87:d5:7e:9b:06:8f:49:b9:dc:15:e8:c1:4d:f4: 58:e8:a5:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M2OEIxMTAvBgNVBAUTKEY5OEREQzM0MkY3RTI3QjY4Q0EwOEQzRDQ3QzdBNjlC MjY5NTVFQTEwHhcNMjUwMzI5MDQxNDUwWhcNMjUwNDA1MDQxNDUwWjAYMRYwFAYD VQQDEw02N2U3NzNiYS0wYWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsenGokmTmflbMIUndsdSDkoRedeGMl1o/XpMsHas4POR7O+ZCqEFY20qwS84 jXjoU99VHLtgqNY1sj5l4T6hdxvzHCu6MvRjDt9fxG+cx5XXYI/cp+/4zJBZVDnT P2mBii4DP5d5itxXqi7CSFD2U9AmwVuyfhrqivOKK4yskZQSBIvjB4WbWEtGr5VF I1EUFjAGMFHisVq5lk3b8XET2sDeE8wIg3y9r8K/gZwxv97yjz6gX4Tkjh3kdK4H ftAIfFj2ccs73cVFfxc4HTOEF4+uM5HU4g+FD1UtP3HFcd05PbXccarwGtJONI+0 rRjtPQfyNT6nxge4Abs5RnjQewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHAoO+k wW3xcThtROARZMhs/qqVMB8GA1UdIwQYMBaAFPmN3DQvfie2jKCNPUfHppsmlV6h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzY4Qi80RTlDMUY5MDYy RDExMUVFQUExQzg2NERDNEY5QUUwMi8tWTNjTkM5LUo3YU1vSTA5UjhlbW15YVZY cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ZM2NOQzktSjdhTW9JMDlSOGVtbXlhVlhxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzY4Qi80RTlDMUY5MDYyRDExMUVFQUExQzg2NERDNEY5QUUwMi8tWTNjTkM5LUo3 YU1vSTA5UjhlbW15YVZYcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChrRZ1g7/a7s86sODXFrSsaUyrsuWf3wSUDVq4L751XwQrvrruHVoe I7MRjcfK0R2pofrEy45CXu21wloM/iTapagdjFms/ai+7HPMJrgf/vrEaYJEdFU/ IdqUzNYMW80nOn2Si/hDizUvtXPd1BlPGJtSv7AvjrgmFIntQffYYBmG5H/Piw44 Q2qNkVTGeYV7mRo8An6YA4oiyGweqgNtEmY83zz5Ntvr5wog/DSNez+HuNHJq9XC WwDUfvL0uk5uA0WzXhOBHBKNiW4Xps/mFNeIL6rL7mfv/0x97XP4FlcNeL6W4GWd Udun0uoZh9V+mwaPSbncFejBTfRY6KXs -----END CERTIFICATE-----Generated at Fri Apr 4 22:27:02 2025 by rpki-client