$ rpki-client -vvf rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft File: 0Iw24m8k-51RTztAqON6mgS1gCU.mft (raw, json) Hash identifier: FVkONCDAVEx7mMW/NQHSIhIzJnCJ1XNj3EcFCfbki1g= Subject key identifier: 73:1C:C1:F5:AF:81:5A:91:E2:DC:E2:30:DB:7F:76:11:BB:B8:CC:F7 Authority key identifier: D0:8C:36:E2:6F:24:FB:9D:51:4F:3B:40:A8:E3:7A:9A:04:B5:80:25 Certificate issuer: /CN=A913E03C/serialNumber=D08C36E26F24FB9D514F3B40A8E37A9A04B58025 Certificate serial: 3468 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Iw24m8k-51RTztAqON6mgS1gCU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft Manifest number: 3467 Signing time: Fri 04 Apr 2025 14:57:08 +0000 Manifest this update: Fri 04 Apr 2025 14:57:07 +0000 Manifest next update: Fri 11 Apr 2025 14:57:07 +0000 Files and hashes: 1: 0Iw24m8k-51RTztAqON6mgS1gCU.crl (hash: f1srEUEeLeZueMqN+gt2QV66qJXojo9ZthFtM97cXZI=) 2: 1D790596F25D11EF8C5D7036C4F9AE02.roa (hash: 0c5mooek/SI4tHJlanxjMJ+LPip9Hy2VF66plGlTaFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.crl rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Iw24m8k-51RTztAqON6mgS1gCU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13416 (0x3468) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E03C Validity Not Before: Apr 4 14:57:07 2025 GMT Not After : Apr 11 14:57:07 2025 GMT Subject: CN=67eff343-8c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:10:f2:ec:d8:15:cc:74:af:6b:2e:db:2c:4e: c9:12:39:0c:c5:60:06:ef:07:8c:68:55:df:f9:82: f9:52:29:32:15:d6:29:76:3c:09:89:48:80:c2:f4: 82:c7:45:a1:17:fc:58:54:bd:fb:73:c1:b6:05:8a: e9:8e:46:17:fb:0c:bb:f4:c4:36:3b:51:70:3b:f1: 02:bd:6c:5e:1d:cb:b3:1b:cd:48:46:3b:3c:db:88: 72:06:af:3c:6f:6e:33:47:7d:86:ca:1c:bb:bb:68: 07:c9:45:8f:74:ae:eb:78:77:4c:36:38:c3:95:93: b8:17:d4:c8:34:f9:fb:88:bf:c1:77:8e:b5:5a:f5: b9:cc:82:fe:41:1d:dc:cd:be:cd:25:d8:6b:89:1b: 39:5e:22:d9:a9:ae:cf:02:1f:0d:33:b0:d8:8f:77: b8:48:1d:16:73:b8:50:77:b5:70:a8:20:63:06:3d: ae:f8:d4:3f:cb:f8:1b:ef:a3:7c:6c:b2:b5:1e:d6: eb:c8:fc:03:d8:41:81:df:fa:02:1a:5e:31:f3:e3: 70:d6:f1:6d:3f:12:8e:bf:06:c4:b0:67:49:36:7d: 4c:f6:5f:f4:a7:b7:0f:e8:47:f0:2b:f2:a6:fe:85: 38:8b:f1:0b:1a:d6:96:11:73:fa:e1:45:dc:6c:ee: e7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:1C:C1:F5:AF:81:5A:91:E2:DC:E2:30:DB:7F:76:11:BB:B8:CC:F7 X509v3 Authority Key Identifier: keyid:D0:8C:36:E2:6F:24:FB:9D:51:4F:3B:40:A8:E3:7A:9A:04:B5:80:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Iw24m8k-51RTztAqON6mgS1gCU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:4f:77:55:db:7e:d6:7e:51:e6:30:8c:66:d5:0a:1d:3b:d2: 43:28:df:24:98:2f:e5:fa:e7:40:f2:f6:3d:48:12:88:45:34: bf:0d:db:fa:d8:de:35:46:ca:d4:53:62:65:76:39:5a:5e:02: 04:84:92:aa:4b:14:84:2a:1c:40:0b:2c:36:97:24:06:43:f2: 39:4f:e0:ae:f4:d5:94:81:f4:53:3d:f4:21:ae:03:39:2d:94: a2:42:16:a1:8c:61:be:8f:77:9f:04:60:2c:de:24:7c:41:73: dd:6a:10:d0:5a:df:ca:cb:e5:98:9b:bd:9d:25:d7:78:d2:c0: 64:6c:f3:16:d3:6b:bc:ff:f7:0d:67:b7:09:06:2c:09:04:71: a2:15:3b:9f:a9:5b:a2:21:5d:f9:94:4c:51:65:45:15:f4:67: 4c:5d:c2:88:31:08:86:fe:92:29:70:e3:dd:38:7e:b2:6a:fa: eb:a6:0e:39:a3:8b:d1:9f:fb:0e:35:2f:89:99:cd:8c:ce:e5: 6f:cd:4c:c0:73:92:37:88:45:9c:8a:b1:df:9b:08:d4:bd:72: 3f:c3:64:98:dc:d8:67:91:eb:3c:46:67:b8:cf:f8:7e:fa:4a: e1:58:ff:92:22:96:3a:fa:0a:7b:52:f9:58:de:90:b2:9e:a8: 44:8e:97:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UwM0MxMTAvBgNVBAUTKEQwOEMzNkUyNkYyNEZCOUQ1MTRGM0I0MEE4RTM3QTlB MDRCNTgwMjUwHhcNMjUwNDA0MTQ1NzA3WhcNMjUwNDExMTQ1NzA3WjAYMRYwFAYD VQQDEw02N2VmZjM0My04YzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRDy7NgVzHSvay7bLE7JEjkMxWAG7weMaFXf+YL5UikyFdYpdjwJiUiAwvSC x0WhF/xYVL37c8G2BYrpjkYX+wy79MQ2O1FwO/ECvWxeHcuzG81IRjs824hyBq88 b24zR32Gyhy7u2gHyUWPdK7reHdMNjjDlZO4F9TINPn7iL/Bd461WvW5zIL+QR3c zb7NJdhriRs5XiLZqa7PAh8NM7DYj3e4SB0Wc7hQd7VwqCBjBj2u+NQ/y/gb76N8 bLK1HtbryPwD2EGB3/oCGl4x8+Nw1vFtPxKOvwbEsGdJNn1M9l/0p7cP6EfwK/Km /oU4i/ELGtaWEXP64UXcbO7nlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMcwfWv gVqR4tziMNt/dhG7uMz3MB8GA1UdIwQYMBaAFNCMNuJvJPudUU87QKjjepoEtYAl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTAzQy9CNkUwRjRBQTFE OUExMUUyODkyMTI5ODgwOEIwMkNEMi8wSXcyNG04ay01MVJUenRBcU9ONm1nUzFn Q1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBJdzI0bThrLTUxUlR6dEFxT042bWdTMWdDVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTAzQy9CNkUwRjRBQTFEOUExMUUyODkyMTI5ODgwOEIwMkNEMi8wSXcyNG04ay01 MVJUenRBcU9ONm1nUzFnQ1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9T3dV237WflHmMIxm1QodO9JDKN8kmC/l+udA8vY9SBKIRTS/Ddv6 2N41RsrUU2JldjlaXgIEhJKqSxSEKhxACyw2lyQGQ/I5T+Cu9NWUgfRTPfQhrgM5 LZSiQhahjGG+j3efBGAs3iR8QXPdahDQWt/Ky+WYm72dJdd40sBkbPMW02u8//cN Z7cJBiwJBHGiFTufqVuiIV35lExRZUUV9GdMXcKIMQiG/pIpcOPdOH6yavrrpg45 o4vRn/sONS+Jmc2MzuVvzUzAc5I3iEWcirHfmwjUvXI/w2SY3Nhnkes8Rme4z/h+ +krhWP+SIpY6+gp7UvlY3pCynqhEjpct -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:50 2025 by rpki-client