$ rpki-client -vvf rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft File: 4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft (raw, json) Hash identifier: 7fb64M2xDHHoA/sIo4kwHCtdYgvn1nYKYu7gLJEQbdU= Subject key identifier: 22:79:47:15:B7:4B:99:2C:81:2F:AE:EC:31:F0:0D:BA:3B:E0:81:5A Authority key identifier: E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07 Certificate issuer: /CN=A914CBF3/serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707 Certificate serial: 0C18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft Manifest number: 0BF7 Signing time: Sun 06 Apr 2025 18:34:52 +0000 Manifest this update: Sun 06 Apr 2025 18:34:52 +0000 Manifest next update: Sun 13 Apr 2025 18:34:52 +0000 Files and hashes: 1: 4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl (hash: PI05gJYeBxnd1RhMJ/bq5oeVd6BzZh8CaWiIyCy59m8=) 2: 183DE570057A11EC822F230EC4F9AE02.roa (hash: bEfFzY9ERkUCouk5XoaucvDsVkrzcwabTIVAnbK3Eko=) 3: B32668C4D98C11EB905D7281C4F9AE02.roa (hash: +CpW1CaKQXu6MhTzl4JHCslaYOAYJXQr9xAkDiD0lq0=) 4: 140E693613BF11ECA64D821AC4F9AE02.roa (hash: BLN1lKtFOEI4I4kMREMJqKNdevJbMvO6FDfATzwYDjw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 18:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3096 (0xc18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CBF3 Validity Not Before: Apr 6 18:34:52 2025 GMT Not After : Apr 13 18:34:52 2025 GMT Subject: CN=67f2c94c-d1f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:10:ab:8c:12:0d:7c:08:bd:47:a7:2c:1a:b5: 62:ba:ee:91:b7:bf:98:f7:12:29:48:7c:a8:00:14: fc:14:95:98:4e:9d:c2:f6:e7:3e:3d:83:be:22:de: 3b:d1:a5:ed:ea:2b:a9:5d:54:f8:ab:ff:4e:5d:b9: 0e:4a:76:22:14:6e:15:34:ac:1c:40:d7:95:43:9d: 5b:12:dd:a0:8d:28:08:4a:e5:70:d1:7d:bc:2d:95: ac:9f:02:59:c5:c8:ee:99:65:77:4c:4f:ea:f2:61: 90:b5:77:78:af:72:92:83:d1:19:f9:54:f8:26:a0: 2a:c3:f2:f6:29:b5:80:d0:b2:37:c9:78:c6:e4:20: 3c:5e:05:70:13:5f:29:ed:12:1b:5b:7a:54:c5:31: 5e:75:86:fe:3b:ac:be:e8:45:3b:6b:c8:71:f0:45: 4d:93:be:6e:18:e8:f1:09:2a:69:b6:55:a6:88:05: c7:6f:1d:08:7a:2b:c1:48:80:c4:ae:ca:79:c5:29: 0f:3a:0d:6a:3c:c7:b2:a2:07:7e:00:41:b6:63:36: 97:1d:1b:54:98:0e:64:24:56:8e:79:76:ca:fb:67: 93:6e:9c:c4:fc:24:a0:a4:95:2a:67:cc:de:86:11: 0c:36:dc:d3:65:d9:1b:e4:3e:93:fd:c1:d7:fa:9b: fa:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:79:47:15:B7:4B:99:2C:81:2F:AE:EC:31:F0:0D:BA:3B:E0:81:5A X509v3 Authority Key Identifier: keyid:E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:65:2b:82:77:0a:a8:11:00:ab:69:1d:08:d4:51:96:a4:51: 1d:4e:83:ea:b7:ec:b8:e2:e3:5e:5c:2e:ec:fe:a0:0e:47:57: 5b:5e:b0:41:9a:e3:b5:2b:03:1b:f3:a6:75:fb:f9:d2:63:d2: b5:92:7c:24:e1:de:65:7e:1b:5d:b6:47:59:63:34:20:f2:5d: 68:39:21:92:98:d7:69:e2:50:c4:a2:dd:0c:de:88:c8:5e:82: 9a:99:d7:88:15:41:17:be:81:36:c4:bf:1c:aa:44:d3:ff:df: f4:5c:09:aa:21:a8:e7:85:bb:e2:72:fb:43:13:09:92:9a:82: 4d:73:46:2b:8b:07:23:18:76:44:36:14:5c:a5:24:aa:6f:26: 5f:4b:1f:e7:3e:44:90:1e:b8:5b:1b:e5:b5:55:18:7b:63:b8: 6b:c1:1e:d4:7e:fe:cc:e6:9a:eb:d5:3e:c5:3e:09:b8:4b:b6: 18:08:00:77:fc:74:55:c5:c3:8e:12:10:70:7e:58:82:22:5d: bb:9d:5b:aa:21:df:76:50:e4:e6:29:4b:65:e0:04:eb:8d:0d: 5c:56:ce:47:61:13:4f:81:45:42:ac:f2:9f:1a:8a:6d:3f:f3: d9:5b:a5:93:86:2f:48:36:58:43:85:43:13:4b:4f:ad:07:78: 15:55:14:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCRjMxMTAvBgNVBAUTKEUyNDQ5RTMxMjIyMDEzMUUyRTc2QzQyQzdDQ0M2REQx OTM1MTA3MDcwHhcNMjUwNDA2MTgzNDUyWhcNMjUwNDEzMTgzNDUyWjAYMRYwFAYD VQQDEw02N2YyYzk0Yy1kMWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxCrjBINfAi9R6csGrViuu6Rt7+Y9xIpSHyoABT8FJWYTp3C9uc+PYO+It47 0aXt6iupXVT4q/9OXbkOSnYiFG4VNKwcQNeVQ51bEt2gjSgISuVw0X28LZWsnwJZ xcjumWV3TE/q8mGQtXd4r3KSg9EZ+VT4JqAqw/L2KbWA0LI3yXjG5CA8XgVwE18p 7RIbW3pUxTFedYb+O6y+6EU7a8hx8EVNk75uGOjxCSpptlWmiAXHbx0IeivBSIDE rsp5xSkPOg1qPMeyogd+AEG2YzaXHRtUmA5kJFaOeXbK+2eTbpzE/CSgpJUqZ8ze hhEMNtzTZdkb5D6T/cHX+pv67wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJ5RxW3 S5ksgS+u7DHwDbo74IFaMB8GA1UdIwQYMBaAFOJEnjEiIBMeLnbELHzMbdGTUQcH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0JGMy8xQkM2RUIyMDEx RTcxMUVBQjkwM0FBNzlDNEY5QUUwMi80a1NlTVNJZ0V4NHVkc1FzZk14dDBaTlJC d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRrU2VNU0lnRXg0dWRzUXNmTXh0MFpOUkJ3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0JGMy8xQkM2RUIyMDExRTcxMUVBQjkwM0FBNzlDNEY5QUUwMi80a1NlTVNJZ0V4 NHVkc1FzZk14dDBaTlJCd2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJZSuCdwqoEQCraR0I1FGWpFEdToPqt+y44uNeXC7s/qAOR1dbXrBB muO1KwMb86Z1+/nSY9K1knwk4d5lfhtdtkdZYzQg8l1oOSGSmNdp4lDEot0M3ojI XoKamdeIFUEXvoE2xL8cqkTT/9/0XAmqIajnhbvicvtDEwmSmoJNc0YriwcjGHZE NhRcpSSqbyZfSx/nPkSQHrhbG+W1VRh7Y7hrwR7Ufv7M5prr1T7FPgm4S7YYCAB3 /HRVxcOOEhBwfliCIl27nVuqId92UOTmKUtl4ATrjQ1cVs5HYRNPgUVCrPKfGopt P/PZW6WThi9INlhDhUMTS0+tB3gVVRR8 -----END CERTIFICATE-----Generated at Mon Apr 7 07:01:37 2025 by rpki-client