$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft File: SoXPE4hy0-RPkNe28wKPC1BnNMw.mft (raw, json) Hash identifier: 61bSXIBlsu27/wVSSjk9UD01EjPT2vK9MsGTbW8PDJs= Subject key identifier: CA:56:A3:E3:BA:FC:F6:F9:A3:1A:78:8E:23:9D:5E:1F:D8:59:0F:86 Authority key identifier: 4A:85:CF:13:88:72:D3:E4:4F:90:D7:B6:F3:02:8F:0B:50:67:34:CC Certificate issuer: /CN=A914D0AF/serialNumber=4A85CF138872D3E44F90D7B6F3028F0B506734CC Certificate serial: 03CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft Manifest number: 03C0 Signing time: Thu 17 Apr 2025 00:19:36 +0000 Manifest this update: Thu 17 Apr 2025 00:19:36 +0000 Manifest next update: Thu 24 Apr 2025 00:19:36 +0000 Files and hashes: 1: SoXPE4hy0-RPkNe28wKPC1BnNMw.crl (hash: 3yl7RGjwO0hyrryCfthjvxD7EjP/0PsZ/KTSdkYMp/k=) 2: 259E1BCC09FF11EFB1919C6CC4F9AE02.roa (hash: j+OInKGZZbnrWrTfBBb8ieEw0SxcAbpSQUpdiocMacE=) 3: ECCC589A09FE11EFBEBB616CC4F9AE02.roa (hash: HToMFGJs0PrSzy3dl46ENaQsO9PZvPk8q0J0yzAJKJA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.crl rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 00:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 970 (0x3ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D0AF, serialNumber=4A85CF138872D3E44F90D7B6F3028F0B506734CC Validity Not Before: Apr 17 00:19:36 2025 GMT Not After : Apr 24 00:19:36 2025 GMT Subject: CN=68004918-2086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7e:fc:17:df:cc:42:25:e7:61:62:92:23:34: 26:19:78:17:ce:1e:ac:99:02:9a:b6:c5:04:1e:f5: cf:42:64:d6:16:36:13:dd:d8:00:f6:ce:f0:82:02: 4f:74:51:19:03:38:bc:5b:6a:b2:09:ee:75:76:cf: be:58:6b:c1:31:5e:dd:6a:e2:d0:3b:fa:9e:74:84: 8f:da:1a:1d:ea:8a:83:c6:8d:d5:5e:d9:26:94:ff: 09:33:ad:57:08:f3:25:84:92:6d:4a:18:db:47:00: d2:4c:53:44:03:c4:2c:d3:12:6b:28:90:51:40:04: cc:1a:50:0e:8a:2f:31:e4:24:f5:ae:8f:71:af:a3: b0:ff:a3:b9:ad:10:d7:02:bf:c5:5e:5c:0f:d4:ad: 98:10:d9:ed:8a:5c:bb:3b:4a:02:db:4a:52:9a:94: 39:52:9b:dc:93:47:26:b7:72:09:66:e1:b9:8b:5e: d7:80:c1:bf:44:7b:ef:9a:f3:0d:ab:a2:bc:42:a7: 78:9c:5e:b8:71:49:26:0b:5a:ff:1d:9c:19:0b:c3: ff:02:31:d5:84:1b:aa:26:ce:ce:41:53:c9:30:40: 3c:35:59:16:2e:ef:94:ee:f2:9f:23:51:95:0e:dd: 68:00:e8:38:11:9e:0e:9d:05:87:99:49:83:71:63: 18:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:56:A3:E3:BA:FC:F6:F9:A3:1A:78:8E:23:9D:5E:1F:D8:59:0F:86 X509v3 Authority Key Identifier: keyid:4A:85:CF:13:88:72:D3:E4:4F:90:D7:B6:F3:02:8F:0B:50:67:34:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:2d:81:0a:f4:8d:3d:d1:62:6e:c2:09:55:ea:e1:84:80:f3: 4a:97:6d:8a:c8:16:3a:73:40:36:f6:c4:0a:18:5f:23:16:41: 88:14:18:49:f0:ed:26:3d:de:21:e8:c0:26:8e:ac:27:52:c0: ed:9e:68:2d:d3:3d:06:bb:f7:ae:ad:0b:9f:fc:7e:b5:32:21: 23:76:37:c4:6c:fd:c9:09:39:09:d0:ca:01:c0:94:9e:40:61: e2:1a:e5:ee:31:e5:9d:6c:f5:36:75:aa:6d:de:52:b1:36:0d: f1:61:f2:be:5a:9f:eb:6f:80:4e:21:c9:f5:07:6d:79:94:d2: af:c1:00:25:f5:dd:49:9b:2c:03:7a:40:eb:0b:29:d3:21:21: 6b:f8:f0:af:b5:ee:02:2a:b0:22:f5:87:df:52:81:47:9d:d8: 84:08:86:01:b0:69:20:3b:56:7a:6e:66:f3:e2:67:61:5d:72: da:f4:a2:db:68:ba:4e:c4:3f:c2:8b:28:19:69:0a:ec:a8:ca: be:ce:f7:28:91:41:02:54:3b:65:f4:9c:01:51:22:82:51:e8: b4:b6:2f:cf:c6:d9:4a:97:59:82:eb:85:53:03:60:bf:92:fa: a6:4d:e1:2e:c9:52:aa:55:32:62:bb:d7:f5:12:c0:b4:85:a9: df:5b:c5:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQwQUYxMTAvBgNVBAUTKDRBODVDRjEzODg3MkQzRTQ0RjkwRDdCNkYzMDI4RjBC NTA2NzM0Q0MwHhcNMjUwNDE3MDAxOTM2WhcNMjUwNDI0MDAxOTM2WjAYMRYwFAYD VQQDEw02ODAwNDkxOC0yMDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu378F9/MQiXnYWKSIzQmGXgXzh6smQKatsUEHvXPQmTWFjYT3dgA9s7wggJP dFEZAzi8W2qyCe51ds++WGvBMV7dauLQO/qedISP2hod6oqDxo3VXtkmlP8JM61X CPMlhJJtShjbRwDSTFNEA8Qs0xJrKJBRQATMGlAOii8x5CT1ro9xr6Ow/6O5rRDX Ar/FXlwP1K2YENntily7O0oC20pSmpQ5Upvck0cmt3IJZuG5i17XgMG/RHvvmvMN q6K8Qqd4nF64cUkmC1r/HZwZC8P/AjHVhBuqJs7OQVPJMEA8NVkWLu+U7vKfI1GV Dt1oAOg4EZ4OnQWHmUmDcWMYLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMpWo+O6 /Pb5oxp4jiOdXh/YWQ+GMB8GA1UdIwQYMBaAFEqFzxOIctPkT5DXtvMCjwtQZzTM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDBBRi8xRTMzOUIzNjg4 REUxMUVDOEE4QjE2MjhDNEY5QUUwMi9Tb1hQRTRoeTAtUlBrTmUyOHdLUEMxQm5O TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NvWFBFNGh5MC1SUGtOZTI4d0tQQzFCbk5Ndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDBBRi8xRTMzOUIzNjg4REUxMUVDOEE4QjE2MjhDNEY5QUUwMi9Tb1hQRTRoeTAt UlBrTmUyOHdLUEMxQm5OTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFLYEK9I090WJuwglV6uGEgPNKl22KyBY6c0A29sQKGF8jFkGIFBhJ 8O0mPd4h6MAmjqwnUsDtnmgt0z0Gu/eurQuf/H61MiEjdjfEbP3JCTkJ0MoBwJSe QGHiGuXuMeWdbPU2dapt3lKxNg3xYfK+Wp/rb4BOIcn1B215lNKvwQAl9d1JmywD ekDrCynTISFr+PCvte4CKrAi9YffUoFHndiECIYBsGkgO1Z6bmbz4mdhXXLa9KLb aLpOxD/CiygZaQrsqMq+zvcokUECVDtl9JwBUSKCUei0ti/PxtlKl1mC64VTA2C/ kvqmTeEuyVKqVTJiu9f1EsC0hanfW8Vr -----END CERTIFICATE-----Generated at Fri Apr 18 10:45:50 2025 by rpki-client