$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft File: F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft (raw, json) Hash identifier: BCs8W8/pZvo7TYSVpsXWlip1/DrhqjrMHT4lqyiMdSE= Subject key identifier: 23:32:66:FC:7A:47:AC:42:17:D8:21:9B:B7:CF:A0:E7:85:F5:E3:71 Authority key identifier: 17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 Certificate issuer: /CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Certificate serial: 34F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft Manifest number: 34B7 Signing time: Wed 16 Apr 2025 14:46:18 +0000 Manifest this update: Wed 16 Apr 2025 14:46:17 +0000 Manifest next update: Wed 23 Apr 2025 14:46:17 +0000 Files and hashes: 1: F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl (hash: jWSuIDczsJVIxbVQciN9Q5V+AKpbPHvU+5ZHBrJrots=) 2: 8F40C09ACCDB11EE9490B979C4F9AE02.roa (hash: yiAnHDFzUwZD8NgEs572n3xyr3663E+/9a3ArADXBpc=) 3: 7165DB28E2C911EF8A1C1514C4F9AE02.roa (hash: WlVHKhM+QwijE+SR8uQjozWScXJjKVRCH43Kmj5ogqo=) 4: 9E6876BCE2C911EF9C706014C4F9AE02.roa (hash: HpL5s0fx/k48lcKkhw5hAynAHc+E2GbcH0xb8v2hOgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 14:46:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13559 (0x34f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Validity Not Before: Apr 16 14:46:17 2025 GMT Not After : Apr 23 14:46:17 2025 GMT Subject: CN=67ffc2b9-62ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:35:15:66:cd:3d:ff:d6:f6:f7:b9:8c:d6:09: ec:0a:23:fe:c3:5a:64:3b:cc:09:03:fb:eb:5f:2d: 8d:2d:12:93:56:49:bf:a0:45:2d:b8:39:b5:a7:12: ed:98:2a:65:df:7c:3e:93:22:3f:0b:5b:e4:cb:7c: 6f:e7:0b:5e:4a:da:fc:f8:05:84:d9:2d:b2:b7:8d: 04:12:23:47:3e:fd:ba:65:74:b3:28:2f:e6:9c:82: ef:50:fe:a8:68:80:e3:b3:9d:44:1d:81:ed:92:4e: 08:d2:c4:e3:38:7a:a1:d4:13:d0:64:3f:cb:bd:00: fb:6c:6f:96:5b:ba:70:5b:1c:20:8f:40:e6:12:b1: 04:f4:d4:85:f0:85:30:11:ba:47:d2:f3:42:14:fa: 0a:3a:bb:40:e3:49:9b:36:8d:29:34:8d:79:39:55: bb:c1:b0:53:36:c8:60:40:9c:b6:5c:21:af:cf:73: 9b:5a:62:95:54:73:01:73:3f:33:16:0b:b2:5e:70: cb:f8:1e:a4:7d:c6:69:cc:70:49:45:4a:eb:c7:d4: 3b:de:66:b6:51:a2:20:49:b2:52:96:bc:2e:e6:69: de:a5:59:4f:6b:d3:91:d0:77:e4:3c:f3:c1:6f:10: 5f:18:9e:0a:de:dc:8d:49:7e:a2:c7:f9:d4:1a:59: a5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:32:66:FC:7A:47:AC:42:17:D8:21:9B:B7:CF:A0:E7:85:F5:E3:71 X509v3 Authority Key Identifier: keyid:17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:de:a2:33:3a:35:fb:e4:46:ab:4d:b1:0f:0b:b4:dc:a4:e5: d4:85:ab:68:66:c6:db:8b:a0:64:28:df:d5:83:ee:1c:32:46: bf:0c:33:12:fc:ff:8d:0d:61:14:a1:d8:bf:6e:0f:59:a5:99: 08:53:0c:6b:4e:c0:cf:bb:72:32:1e:39:68:a8:cb:de:cd:03: b4:47:6b:71:75:1f:90:a0:b4:a2:39:71:3b:6f:0b:ee:19:7e: 71:2a:89:9b:80:a2:43:57:92:ee:9b:8a:2e:4c:ac:3f:a5:6d: c5:d0:d6:c3:07:b9:50:2d:cf:3f:c2:59:b9:ac:5d:58:57:0d: 22:e5:35:01:c4:c3:5d:e2:2f:a5:62:6d:bc:17:a0:70:8a:1d: 35:5d:3a:87:d2:03:a0:d5:2b:68:e4:c3:28:6a:7e:61:63:e5: 32:1a:c9:61:b3:99:21:3d:b9:b4:f3:7f:47:24:e2:a4:56:77: fb:06:8d:f7:3a:62:9c:25:b9:ee:00:88:b0:d5:e2:6c:34:71: f8:c5:36:ff:92:69:0b:a0:33:19:19:12:32:dd:d9:5f:75:ed: cf:b1:b5:bc:96:d3:13:40:14:ef:2e:18:fc:71:01:c9:de:c5: c5:94:13:e8:60:c1:38:ce:3a:30:15:74:95:8d:97:4d:63:48: e9:ed:c0:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDE3NTc3RjFFOTJFQjMzQjJDREU2RTQ4OUMwQjlBOTlB MkUwMkZEQTMwHhcNMjUwNDE2MTQ0NjE3WhcNMjUwNDIzMTQ0NjE3WjAYMRYwFAYD VQQDEw02N2ZmYzJiOS02MmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDUVZs09/9b297mM1gnsCiP+w1pkO8wJA/vrXy2NLRKTVkm/oEUtuDm1pxLt mCpl33w+kyI/C1vky3xv5wteStr8+AWE2S2yt40EEiNHPv26ZXSzKC/mnILvUP6o aIDjs51EHYHtkk4I0sTjOHqh1BPQZD/LvQD7bG+WW7pwWxwgj0DmErEE9NSF8IUw EbpH0vNCFPoKOrtA40mbNo0pNI15OVW7wbBTNshgQJy2XCGvz3ObWmKVVHMBcz8z FguyXnDL+B6kfcZpzHBJRUrrx9Q73ma2UaIgSbJSlrwu5mnepVlPa9OR0HfkPPPB bxBfGJ4K3tyNSX6ix/nUGlmlVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMyZvx6 R6xCF9ghm7fPoOeF9eNxMB8GA1UdIwQYMBaAFBdXfx6S6zOyzebkicC5qZouAv2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi82NzUyMDhBRTFE OTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03TE41dVNKd0xtcG1pNENf YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YxZF9IcExyTTdMTjV1U0p3TG1wbWk0Q19hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi82NzUyMDhBRTFEOTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03 TE41dVNKd0xtcG1pNENfYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBy3qIzOjX75EarTbEPC7TcpOXUhatoZsbbi6BkKN/Vg+4cMka/DDMS /P+NDWEUodi/bg9ZpZkIUwxrTsDPu3IyHjloqMvezQO0R2txdR+QoLSiOXE7bwvu GX5xKombgKJDV5Lum4ouTKw/pW3F0NbDB7lQLc8/wlm5rF1YVw0i5TUBxMNd4i+l Ym28F6Bwih01XTqH0gOg1Sto5MMoan5hY+UyGslhs5khPbm0839HJOKkVnf7Bo33 OmKcJbnuAIiw1eJsNHH4xTb/kmkLoDMZGRIy3dlfde3PsbW8ltMTQBTvLhj8cQHJ 3sXFlBPoYME4zjowFXSVjZdNY0jp7cBd -----END CERTIFICATE-----Generated at Fri Apr 18 04:42:08 2025 by rpki-client