$ rpki-client -vvf rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft File: CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft (raw, json) Hash identifier: r8lkWS7VhZvI5aalNwtrTdrNyxH+2LyLi2HPP5gN1P8= Subject key identifier: 92:E3:EF:DB:D7:5D:9D:30:F7:ED:8D:99:ED:EA:C7:D2:32:64:37:C6 Authority key identifier: 08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90 Certificate issuer: /CN=A913F600/serialNumber=08DB815B7310D87EEFAFCD52CF261CD15829F790 Certificate serial: 1158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft Manifest number: 1144 Signing time: Wed 02 Apr 2025 17:18:14 +0000 Manifest this update: Wed 02 Apr 2025 17:18:14 +0000 Manifest next update: Wed 09 Apr 2025 17:18:14 +0000 Files and hashes: 1: CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl (hash: 0I0vDbrA1VJL7cMF3SoMEsdUBAAml9WaKZpnG57qDZg=) 2: A18ED49C9A0D11EC92AD8580C4F9AE02.roa (hash: qJKad/+ZiMDaDiVaiAw8w9uuhueQYfaURJcRIR4BlLQ=) 3: 03960D4AFF6411EFB94AD726C4F9AE02.roa (hash: Dd+h++CV6wNZJ7QO0n2rdW4OE3i2iMOeGWoydYTSCjs=) 4: 86B7624062FE11EEB277647CC4F9AE02.roa (hash: +KT0Egyqjjf85ES0SDoa2VeTo6qX07zVXJ1wUoWuy48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 17:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4440 (0x1158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F600 Validity Not Before: Apr 2 17:18:14 2025 GMT Not After : Apr 9 17:18:14 2025 GMT Subject: CN=67ed7156-de13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:11:e4:77:88:a7:c4:3b:95:9f:b3:49:87:eb: 1c:f7:de:03:0c:19:cc:93:0c:b8:74:63:a3:d8:c3: 6f:3b:35:bf:3a:1f:1c:be:38:71:72:9a:25:57:be: ad:6f:0d:38:77:ed:ee:fd:7b:83:c0:eb:88:50:ac: b1:bb:90:1d:19:bb:ea:e8:85:7f:b0:b2:ca:b3:98: b9:e4:7e:a4:aa:8f:86:7a:e0:ed:f3:f9:28:77:e0: 47:4d:fc:c3:aa:48:4e:3b:9e:13:b1:cc:5f:39:12: 40:46:8f:b9:f8:3d:ba:79:95:a8:bf:33:59:8b:23: f1:42:95:54:ec:d8:0f:12:00:7e:bb:af:08:fc:51: 42:f6:42:4b:14:14:ad:50:1f:be:b2:94:d8:4f:45: f9:d6:24:59:07:4c:2a:17:21:3f:49:95:fd:bc:86: 75:43:94:2d:14:f5:47:11:44:19:36:17:fb:f9:5a: 5d:e9:60:0c:9c:94:14:c1:bb:3b:d7:f9:ea:d8:1f: b6:65:bc:9c:42:75:38:e9:43:2d:f9:18:20:ec:c3: e1:7b:b0:56:b8:e9:0f:c1:a7:69:01:30:0a:c5:63: 23:fe:d7:02:3e:b4:cf:06:43:a5:7c:33:39:11:f5: 47:8d:09:87:82:b9:19:d0:41:d2:83:4f:90:b6:ef: 21:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E3:EF:DB:D7:5D:9D:30:F7:ED:8D:99:ED:EA:C7:D2:32:64:37:C6 X509v3 Authority Key Identifier: keyid:08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:98:b4:64:51:b2:c5:11:95:c9:3f:90:77:67:7b:25:14:5b: 20:27:66:55:af:71:8c:4c:8b:2e:2b:f8:ea:25:e3:ce:ff:1f: ac:13:bb:e9:4b:1c:59:cf:2b:62:2d:11:c5:4c:1f:70:80:18: f6:24:e7:12:5b:95:72:e2:d5:3e:09:1f:94:86:e4:5e:87:6e: a7:2c:3e:d0:4a:38:98:62:99:c5:d9:99:a0:6a:d9:f2:57:b7: 0d:ca:c8:e7:df:6e:22:38:2b:ba:2c:52:c2:a9:e4:7d:8e:9b: e9:e6:a0:cd:c6:72:ac:99:e5:3d:68:60:fd:95:4a:b7:41:b1: 01:21:66:e9:84:ff:16:16:c5:ab:1d:cb:03:d2:99:70:b8:17: 7f:94:7f:c4:41:c4:e0:c8:fb:20:6c:12:bd:cc:cc:6a:98:6a: 70:48:d2:ba:1c:f6:cd:e3:33:ce:98:6f:be:3e:21:5b:6b:68: 09:26:07:67:36:d2:d7:99:87:86:59:76:bf:b2:4c:45:93:2c: d3:cf:df:5b:4f:5c:42:57:1c:60:f4:45:95:fa:20:5c:37:1f: b2:50:c8:80:ed:fd:a0:1b:9d:82:75:93:43:fd:7e:76:a4:8c: 81:03:84:5d:0a:de:56:fe:5c:25:86:f3:b9:59:35:2c:9d:71: 9a:e9:b5:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y2MDAxMTAvBgNVBAUTKDA4REI4MTVCNzMxMEQ4N0VFRkFGQ0Q1MkNGMjYxQ0Qx NTgyOUY3OTAwHhcNMjUwNDAyMTcxODE0WhcNMjUwNDA5MTcxODE0WjAYMRYwFAYD VQQDEw02N2VkNzE1Ni1kZTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRHkd4inxDuVn7NJh+sc994DDBnMkwy4dGOj2MNvOzW/Oh8cvjhxcpolV76t bw04d+3u/XuDwOuIUKyxu5AdGbvq6IV/sLLKs5i55H6kqo+GeuDt8/kod+BHTfzD qkhOO54TscxfORJARo+5+D26eZWovzNZiyPxQpVU7NgPEgB+u68I/FFC9kJLFBSt UB++spTYT0X51iRZB0wqFyE/SZX9vIZ1Q5QtFPVHEUQZNhf7+Vpd6WAMnJQUwbs7 1/nq2B+2ZbycQnU46UMt+Rgg7MPhe7BWuOkPwadpATAKxWMj/tcCPrTPBkOlfDM5 EfVHjQmHgrkZ0EHSg0+Qtu8hrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLj79vX XZ0w9+2Nme3qx9IyZDfGMB8GA1UdIwQYMBaAFAjbgVtzENh+76/NUs8mHNFYKfeQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjYwMC85RjYxNUJCRTA1 OTUxMUU5OTkyMEQyNzFDNEY5QUUwMi9DTnVCVzNNUTJIN3ZyODFTenlZYzBWZ3A5 NUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOdUJXM01RMkg3dnI4MVN6eVljMFZncDk1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjYwMC85RjYxNUJCRTA1OTUxMUU5OTkyMEQyNzFDNEY5QUUwMi9DTnVCVzNNUTJI N3ZyODFTenlZYzBWZ3A5NUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+mLRkUbLFEZXJP5B3Z3slFFsgJ2ZVr3GMTIsuK/jqJePO/x+sE7vp SxxZzytiLRHFTB9wgBj2JOcSW5Vy4tU+CR+UhuReh26nLD7QSjiYYpnF2Zmgatny V7cNysjn324iOCu6LFLCqeR9jpvp5qDNxnKsmeU9aGD9lUq3QbEBIWbphP8WFsWr HcsD0plwuBd/lH/EQcTgyPsgbBK9zMxqmGpwSNK6HPbN4zPOmG++PiFba2gJJgdn NtLXmYeGWXa/skxFkyzTz99bT1xCVxxg9EWV+iBcNx+yUMiA7f2gG52CdZND/X52 pIyBA4RdCt5W/lwlhvO5WTUsnXGa6bXw -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:49 2025 by rpki-client