$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft File: 84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft (raw, json) Hash identifier: UcUvRq3aY8Fr5XJBsx13Si/pF+YU648TgaIbCsK68bk= Subject key identifier: BE:28:92:0C:89:34:C5:1F:0F:D0:90:49:A7:FF:6E:48:4D:2A:74:F6 Authority key identifier: F3:85:89:F8:46:4A:A5:A9:16:99:F8:08:64:9E:C5:36:83:1B:00:4A Certificate issuer: /CN=A914DC55/serialNumber=F38589F8464AA5A91699F808649EC536831B004A Certificate serial: 04F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft Manifest number: 04E4 Signing time: Wed 16 Apr 2025 23:26:41 +0000 Manifest this update: Wed 16 Apr 2025 23:26:41 +0000 Manifest next update: Wed 23 Apr 2025 23:26:41 +0000 Files and hashes: 1: 84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl (hash: WPc0jpCetA1s6N4X4BLQJwvZK72dPIsStEWxhCxU0Jc=) 2: 4F1B63805A0A11ECAEA43C36C4F9AE02.roa (hash: u5W11dVoRw3toGEIJUHd861OTITZBp585qmJEJVveAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 23:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1268 (0x4f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DC55, serialNumber=F38589F8464AA5A91699F808649EC536831B004A Validity Not Before: Apr 16 23:26:41 2025 GMT Not After : Apr 23 23:26:41 2025 GMT Subject: CN=68003cb1-a88f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a1:58:d7:2d:f8:3d:e5:44:0d:a1:7c:9d:a3: 07:02:f2:ed:8c:c5:3b:83:9d:f0:0d:0e:88:dd:2d: e4:d6:6b:19:67:5d:60:70:c1:c7:9a:bb:0b:23:e1: da:7e:01:3f:97:37:a9:b8:89:5a:42:54:39:62:c3: 17:40:1c:4a:45:20:d8:e2:ec:16:d9:85:c3:62:f5: 6e:a1:be:09:84:28:f6:ea:18:c4:d4:f3:a8:dc:d1: 2d:7e:1a:24:6e:05:55:92:f7:a8:85:9a:d6:26:c3: c3:9c:90:cc:a9:11:ef:75:53:7d:ca:65:6a:a9:93: 64:95:13:99:04:28:08:97:5b:0d:9c:71:87:a4:ad: dd:85:38:49:88:86:80:c3:16:d8:c5:9c:00:3a:5c: 93:1e:0b:c0:6d:95:bd:63:ea:1a:da:fc:66:1d:10: 88:39:d3:8a:20:c0:18:6f:de:fe:49:a0:10:00:a5: d2:31:2a:a7:c4:d2:21:f7:3e:e9:7c:57:00:e8:a8: f6:c5:35:1e:d8:0c:16:6e:05:3b:eb:2c:9c:23:3f: 93:25:e9:be:53:0c:52:ad:d2:92:c4:17:47:e9:9d: 41:bc:d7:18:1b:f9:84:54:a2:21:d1:80:a2:4c:d7: a8:f7:28:27:a9:ed:8c:8f:7b:a2:fb:76:6b:72:77: c7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:28:92:0C:89:34:C5:1F:0F:D0:90:49:A7:FF:6E:48:4D:2A:74:F6 X509v3 Authority Key Identifier: keyid:F3:85:89:F8:46:4A:A5:A9:16:99:F8:08:64:9E:C5:36:83:1B:00:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:01:5c:88:93:0b:f2:64:13:2c:6a:cd:88:e1:ce:e9:04:e0: 21:58:cd:6e:ea:33:e2:a1:dd:d4:30:9b:16:6b:4f:69:17:69: 3c:80:cc:dd:16:dd:70:5e:ac:eb:4d:f0:e7:f2:ee:ce:af:3d: eb:72:f3:d3:de:ba:d1:4c:34:ef:ec:c5:05:89:20:c3:90:c5: c2:99:c8:83:e5:af:4b:43:03:cf:7b:80:81:e6:c4:a8:2d:cc: 7f:f2:70:62:90:81:be:63:11:43:ca:cb:17:fd:46:6d:a3:d6: 37:e2:87:b8:a6:d0:8a:3b:ee:04:94:4f:15:0e:6d:f2:60:c1: 61:97:c1:da:e3:93:2b:2e:84:13:11:60:54:8e:a1:d4:fc:ac: f5:88:9c:e1:5c:95:34:82:8a:b1:11:ac:a5:45:3c:09:ba:07: 11:69:2b:75:61:b5:fb:cb:5b:81:13:ec:20:d4:4d:99:f2:fd: 49:be:64:fd:b1:38:b2:14:38:0e:d1:14:2d:d5:b7:96:31:8d: 6e:fd:48:3a:b3:d6:23:d1:04:8f:74:b5:11:a4:8d:b6:30:c9: 3b:3a:5a:7e:00:02:70:b5:36:af:be:07:d2:25:2f:59:65:ee: 8d:85:01:d6:5f:19:0a:da:6e:04:cf:46:7a:b6:ca:69:74:3e: 42:c9:62:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERDNTUxMTAvBgNVBAUTKEYzODU4OUY4NDY0QUE1QTkxNjk5RjgwODY0OUVDNTM2 ODMxQjAwNEEwHhcNMjUwNDE2MjMyNjQxWhcNMjUwNDIzMjMyNjQxWjAYMRYwFAYD VQQDEw02ODAwM2NiMS1hODhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKFY1y34PeVEDaF8naMHAvLtjMU7g53wDQ6I3S3k1msZZ11gcMHHmrsLI+Ha fgE/lzepuIlaQlQ5YsMXQBxKRSDY4uwW2YXDYvVuob4JhCj26hjE1POo3NEtfhok bgVVkveohZrWJsPDnJDMqRHvdVN9ymVqqZNklROZBCgIl1sNnHGHpK3dhThJiIaA wxbYxZwAOlyTHgvAbZW9Y+oa2vxmHRCIOdOKIMAYb97+SaAQAKXSMSqnxNIh9z7p fFcA6Kj2xTUe2AwWbgU76yycIz+TJem+UwxSrdKSxBdH6Z1BvNcYG/mEVKIh0YCi TNeo9ygnqe2Mj3ui+3ZrcnfHlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4okgyJ NMUfD9CQSaf/bkhNKnT2MB8GA1UdIwQYMBaAFPOFifhGSqWpFpn4CGSexTaDGwBK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1NS9DQ0JFMUJBNjE3 NjIxMUVDODFBMEQxMUVDNEY5QUUwMi84NFdKLUVaS3Bha1dtZmdJWko3Rk5vTWJB RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg0V0otRVpLcGFrV21mZ0laSjdGTm9NYkFFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REM1NS9DQ0JFMUJBNjE3NjIxMUVDODFBMEQxMUVDNEY5QUUwMi84NFdKLUVaS3Bh a1dtZmdJWko3Rk5vTWJBRW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2AVyIkwvyZBMsas2I4c7pBOAhWM1u6jPiod3UMJsWa09pF2k8gMzd Ft1wXqzrTfDn8u7Orz3rcvPT3rrRTDTv7MUFiSDDkMXCmciD5a9LQwPPe4CB5sSo Lcx/8nBikIG+YxFDyssX/UZto9Y34oe4ptCKO+4ElE8VDm3yYMFhl8Ha45MrLoQT EWBUjqHU/Kz1iJzhXJU0goqxEaylRTwJugcRaSt1YbX7y1uBE+wg1E2Z8v1JvmT9 sTiyFDgO0RQt1beWMY1u/Ug6s9Yj0QSPdLURpI22MMk7Olp+AAJwtTavvgfSJS9Z Ze6NhQHWXxkK2m4Ez0Z6tsppdD5CyWJh -----END CERTIFICATE-----Generated at Sat Apr 19 00:53:57 2025 by rpki-client