$ rpki-client -vvf rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft File: j4RQ6hjtZj3XYxNayPnBormb2W0.mft (raw, json) Hash identifier: TALkcph6PglMePdfif70rQC254xRoV1E/Gkcw4m2Z2I= Subject key identifier: E7:8B:A9:D7:B0:A9:EC:0E:1A:DE:9C:64:C4:20:41:1C:29:11:EB:05 Authority key identifier: 8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D Certificate issuer: /CN=A913D9CB/serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D Certificate serial: 0837 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft Manifest number: 0831 Signing time: Wed 02 Apr 2025 20:47:56 +0000 Manifest this update: Wed 02 Apr 2025 20:47:55 +0000 Manifest next update: Wed 09 Apr 2025 20:47:55 +0000 Files and hashes: 1: j4RQ6hjtZj3XYxNayPnBormb2W0.crl (hash: J6Hm35vNYAnCODzBIdeL6uRKCxkD3Im5ss+VNu7668Y=) 2: D6CE2DE4CA3C11EAB3604C46C4F9AE02.roa (hash: Pre6mj3qji68nWX5VPNZNIBmXlVK+D7mKmGk/F/UT7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 20:47:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2103 (0x837) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D9CB Validity Not Before: Apr 2 20:47:55 2025 GMT Not After : Apr 9 20:47:55 2025 GMT Subject: CN=67eda27b-3c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c8:3b:e0:11:f7:d5:2b:fc:8e:6c:b7:ca:8d: cc:aa:90:e9:41:91:ef:71:6b:74:0d:26:4f:ae:62: 72:0e:03:65:ba:18:2f:81:f6:8d:17:56:22:8d:a8: 9f:84:a7:6c:28:38:f0:17:b1:ae:ff:b4:0b:d8:5c: 58:e8:34:57:fc:e7:6f:27:cb:96:9f:c6:97:68:8a: 01:67:61:d9:3a:d9:c0:75:b7:ad:e3:07:93:49:3b: 00:62:14:29:42:b8:20:97:b6:29:e1:80:06:af:cf: 72:f3:35:bd:d2:06:19:a3:19:61:2e:b6:74:cb:39: 6d:0e:42:e8:83:80:ef:2c:e1:c0:28:b2:0f:87:f6: ea:99:5d:d7:d2:0e:b7:2c:a6:c0:35:70:56:c1:81: 62:74:7c:a0:bb:a8:2f:f9:2d:e1:64:b8:2f:70:9e: 49:e8:1a:a8:74:53:f8:3f:6a:ac:7d:8d:77:f0:2b: 1d:3d:ef:39:2c:79:b8:63:66:5f:1d:05:8c:07:a1: e1:b8:e7:24:97:44:cd:8c:39:15:09:29:e9:19:46: e7:47:56:6e:08:f7:44:a9:2c:c2:57:80:34:fa:fe: 5c:1c:f5:57:44:b3:1d:45:3d:df:c9:ff:e4:21:42: bf:42:15:c2:c9:67:30:20:08:c6:9d:51:02:e7:36: 58:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:8B:A9:D7:B0:A9:EC:0E:1A:DE:9C:64:C4:20:41:1C:29:11:EB:05 X509v3 Authority Key Identifier: keyid:8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:ae:da:46:a9:b1:3e:3d:53:e8:51:af:62:b4:1d:ab:2c:82: 87:fa:dc:f2:98:6f:34:49:ef:4f:95:f3:dc:d9:84:20:c3:d3: a1:64:c9:23:66:83:9d:b3:7f:dd:a4:3d:99:33:5e:af:e6:4e: bc:1f:70:d0:a3:f0:c2:6f:56:32:d8:78:83:62:35:b2:5f:99: 95:8f:03:3b:0f:7b:c6:cb:3b:ee:0e:dc:d7:25:9a:5d:24:60: 41:89:7f:43:09:61:2a:89:28:e6:2f:72:40:fe:43:6d:96:10: 59:78:13:e7:4a:a1:aa:4c:26:44:9e:f2:d4:ad:9f:19:6e:64: 17:8b:ef:55:7e:30:3a:fd:ff:37:1d:a5:68:94:76:13:44:f1: 1d:23:b7:cd:3b:05:32:4e:dd:a5:91:aa:62:83:f3:ae:8b:91: 54:d3:b9:1d:f9:bc:4c:0c:61:ab:9e:4b:7c:24:94:5f:45:1a: 55:ac:7e:0d:66:2c:fb:44:4d:39:5e:af:af:02:76:28:15:7f: e6:91:28:46:fc:8d:9b:9d:cd:7b:6f:09:d5:7c:a2:ce:40:c0: 84:79:70:78:fc:a2:91:82:8f:9a:e6:1e:b2:81:13:69:ef:fb: 21:71:49:62:d1:c7:37:ad:51:f9:69:e7:48:8f:4b:10:f2:48: 85:58:a7:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q5Q0IxMTAvBgNVBAUTKDhGODQ1MEVBMThFRDY2M0RENzYzMTM1QUM4RjlDMUEy Qjk5QkQ5NkQwHhcNMjUwNDAyMjA0NzU1WhcNMjUwNDA5MjA0NzU1WjAYMRYwFAYD VQQDEw02N2VkYTI3Yi0zYzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoMg74BH31Sv8jmy3yo3MqpDpQZHvcWt0DSZPrmJyDgNluhgvgfaNF1Yijaif hKdsKDjwF7Gu/7QL2FxY6DRX/OdvJ8uWn8aXaIoBZ2HZOtnAdbet4weTSTsAYhQp Qrggl7Yp4YAGr89y8zW90gYZoxlhLrZ0yzltDkLog4DvLOHAKLIPh/bqmV3X0g63 LKbANXBWwYFidHygu6gv+S3hZLgvcJ5J6BqodFP4P2qsfY138CsdPe85LHm4Y2Zf HQWMB6HhuOckl0TNjDkVCSnpGUbnR1ZuCPdEqSzCV4A0+v5cHPVXRLMdRT3fyf/k IUK/QhXCyWcwIAjGnVEC5zZY9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOeLqdew qewOGt6cZMQgQRwpEesFMB8GA1UdIwQYMBaAFI+EUOoY7WY912MTWsj5waK5m9lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDlDQi8zRkQyRDlDNENB MkExMUVBOTVFQTg4N0ZDNEY5QUUwMi9qNFJRNmhqdFpqM1hZeE5heVBuQm9ybWIy VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o0UlE2aGp0WmozWFl4TmF5UG5Cb3JtYjJXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDlDQi8zRkQyRDlDNENBMkExMUVBOTVFQTg4N0ZDNEY5QUUwMi9qNFJRNmhqdFpq M1hZeE5heVBuQm9ybWIyVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZrtpGqbE+PVPoUa9itB2rLIKH+tzymG80Se9PlfPc2YQgw9OhZMkj ZoOds3/dpD2ZM16v5k68H3DQo/DCb1Yy2HiDYjWyX5mVjwM7D3vGyzvuDtzXJZpd JGBBiX9DCWEqiSjmL3JA/kNtlhBZeBPnSqGqTCZEnvLUrZ8ZbmQXi+9VfjA6/f83 HaVolHYTRPEdI7fNOwUyTt2lkapig/Oui5FU07kd+bxMDGGrnkt8JJRfRRpVrH4N Ziz7RE05Xq+vAnYoFX/mkShG/I2bnc17bwnVfKLOQMCEeXB4/KKRgo+a5h6ygRNp 7/shcUli0cc3rVH5aedIj0sQ8kiFWKdo -----END CERTIFICATE-----Generated at Fri Apr 4 22:15:12 2025 by rpki-client