$ rpki-client -vvf rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft File: SfkoK_Tch_fBI-WHPLql59aZMkg.mft (raw, json) Hash identifier: g5ZdKFewHsn65jvraNxyVGqR9Nri25YQFAJrOoXmOTE= Subject key identifier: EB:65:E6:A7:FE:5A:1C:F8:CF:C6:6F:A9:79:B3:BF:9D:83:BC:B1:7A Authority key identifier: 49:F9:28:2B:F4:DC:87:F7:C1:23:E5:87:3C:BA:A5:E7:D6:99:32:48 Certificate issuer: /CN=A914D167/serialNumber=49F9282BF4DC87F7C123E5873CBAA5E7D6993248 Certificate serial: 0210 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft Manifest number: 020C Signing time: Wed 09 Apr 2025 01:40:51 +0000 Manifest this update: Wed 09 Apr 2025 01:40:50 +0000 Manifest next update: Wed 16 Apr 2025 01:40:50 +0000 Files and hashes: 1: SfkoK_Tch_fBI-WHPLql59aZMkg.crl (hash: JDFtw/2B2OFljfdYtLBA0pxghW5ckiVi2LC07GMT6bs=) 2: 7FA158782F1D11EDA3E29B09C4F9AE02.roa (hash: 98vVrHrPunOhqyUNT9wqul+NkLuBnWOfghiKhqlLWSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.crl rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 01:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D167 Validity Not Before: Apr 9 01:40:50 2025 GMT Not After : Apr 16 01:40:50 2025 GMT Subject: CN=67f5d022-a553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b0:3e:00:8a:30:63:a7:03:b4:36:04:f2:c8: 7e:79:c1:7d:87:e6:aa:ef:a7:4c:44:fa:7f:37:d1: 8f:73:00:93:54:a1:6a:56:36:3a:d9:55:d2:27:0c: 5b:7e:f8:e7:ab:cd:4e:f3:99:49:06:0b:f0:54:24: 8a:7f:f2:c6:6b:61:ca:e9:9a:ef:1a:12:fe:95:97: 04:52:6f:81:fb:ed:2a:cc:7e:98:e6:3c:8d:c1:f6: 44:9c:e4:9b:6b:7d:d8:a6:46:23:58:0e:55:13:91: a7:89:8c:01:4e:e9:77:a3:97:4e:ba:20:b7:a6:d8: 45:df:4d:2f:4d:a4:87:2b:1b:e4:c7:24:94:7c:4d: 6e:d2:32:23:10:d0:62:b1:f6:60:0e:f2:37:93:42: 7a:ec:9f:19:f0:bb:c3:5e:5f:ef:f5:3f:9f:86:ca: 18:68:f5:61:1b:fc:d3:44:8f:02:86:51:2b:75:5e: f1:8c:4e:71:1a:a3:76:30:bf:0e:f2:b7:73:7f:00: 74:5d:64:c6:c8:06:48:04:47:c5:e3:e3:f1:a0:73: 4e:24:6d:5e:e7:94:d8:48:d1:db:a9:14:19:9e:f1: ca:fd:cb:64:62:8d:fe:fd:e6:6e:36:e4:ee:26:55: e5:e6:37:5a:7d:d6:85:5d:bf:6d:d0:37:d7:f8:02: a7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:65:E6:A7:FE:5A:1C:F8:CF:C6:6F:A9:79:B3:BF:9D:83:BC:B1:7A X509v3 Authority Key Identifier: keyid:49:F9:28:2B:F4:DC:87:F7:C1:23:E5:87:3C:BA:A5:E7:D6:99:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:b5:5d:40:e4:8e:26:03:19:af:ad:95:fc:14:9c:bb:a2:4a: be:f4:c2:25:9d:6f:6f:14:62:31:76:5f:9b:5c:46:dc:0b:56: 8f:7e:28:ef:1e:f7:c4:6f:0f:e9:9b:69:a7:ee:61:20:4a:8d: a2:10:b3:ad:f5:4b:d4:d5:3a:e3:d0:95:5b:89:b9:16:82:5d: 2e:d4:2f:21:00:e6:44:06:13:a4:8a:84:65:6e:9e:de:4c:32: 69:73:4c:e6:f2:23:85:b0:b3:62:81:cf:3c:7a:29:41:b4:50: c0:5b:c9:af:f5:a3:0b:73:26:43:a3:40:55:4f:05:36:42:06: 57:d9:b3:78:cf:0b:a8:a7:7b:16:77:7a:78:24:87:9d:c4:eb: b0:66:cf:7a:ae:20:cb:cf:49:b4:86:1e:ec:55:b2:db:49:b7: cb:7f:20:7b:5e:88:95:fc:5a:be:b8:e3:a9:62:35:db:ad:97: a9:b5:53:c2:d9:ec:87:27:ba:18:08:2d:59:c8:a7:48:c4:a1: 03:af:e3:eb:6e:c4:e8:41:38:e7:a3:e0:6a:09:a7:4f:bb:98: 8a:80:f7:55:c3:c2:07:6b:70:fc:82:0d:03:d9:23:6b:f0:17: 73:6d:73:45:0c:94:fd:bb:e7:bc:db:56:f2:ab:01:81:a0:09: 98:b0:4a:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQxNjcxMTAvBgNVBAUTKDQ5RjkyODJCRjREQzg3RjdDMTIzRTU4NzNDQkFBNUU3 RDY5OTMyNDgwHhcNMjUwNDA5MDE0MDUwWhcNMjUwNDE2MDE0MDUwWjAYMRYwFAYD VQQDEw02N2Y1ZDAyMi1hNTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrA+AIowY6cDtDYE8sh+ecF9h+aq76dMRPp/N9GPcwCTVKFqVjY62VXSJwxb fvjnq81O85lJBgvwVCSKf/LGa2HK6ZrvGhL+lZcEUm+B++0qzH6Y5jyNwfZEnOSb a33YpkYjWA5VE5GniYwBTul3o5dOuiC3pthF300vTaSHKxvkxySUfE1u0jIjENBi sfZgDvI3k0J67J8Z8LvDXl/v9T+fhsoYaPVhG/zTRI8ChlErdV7xjE5xGqN2ML8O 8rdzfwB0XWTGyAZIBEfF4+PxoHNOJG1e55TYSNHbqRQZnvHK/ctkYo3+/eZuNuTu JlXl5jdafdaFXb9t0DfX+AKn3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtl5qf+ Whz4z8ZvqXmzv52DvLF6MB8GA1UdIwQYMBaAFEn5KCv03If3wSPlhzy6pefWmTJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDE2Ny81RDVDNDJGMjJG MUIxMUVEQkREQUE0MDlDNEY5QUUwMi9TZmtvS19UY2hfZkJJLVdIUExxbDU5YVpN a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nma29LX1RjaF9mQkktV0hQTHFsNTlhWk1rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDE2Ny81RDVDNDJGMjJGMUIxMUVEQkREQUE0MDlDNEY5QUUwMi9TZmtvS19UY2hf ZkJJLVdIUExxbDU5YVpNa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGtV1A5I4mAxmvrZX8FJy7okq+9MIlnW9vFGIxdl+bXEbcC1aPfijv HvfEbw/pm2mn7mEgSo2iELOt9UvU1Trj0JVbibkWgl0u1C8hAOZEBhOkioRlbp7e TDJpc0zm8iOFsLNigc88eilBtFDAW8mv9aMLcyZDo0BVTwU2QgZX2bN4zwuop3sW d3p4JIedxOuwZs96riDLz0m0hh7sVbLbSbfLfyB7XoiV/Fq+uOOpYjXbrZeptVPC 2eyHJ7oYCC1ZyKdIxKEDr+PrbsToQTjno+BqCadPu5iKgPdVw8IHa3D8gg0D2SNr 8BdzbXNFDJT9u+e821byqwGBoAmYsEoV -----END CERTIFICATE-----Generated at Fri Apr 11 16:09:47 2025 by rpki-client