$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft File: p24FuDRU7RogkCXoPXXkBXkYksE.mft (raw, json) Hash identifier: wWI5GQrukxl63uP8JeUSTaEGMMXLoj0sEaf8hM7szCk= Subject key identifier: 96:0F:CE:AC:82:93:C2:32:66:AE:B1:71:78:77:0D:48:CF:D0:83:DB Authority key identifier: A7:6E:05:B8:34:54:ED:1A:20:90:25:E8:3D:75:E4:05:79:18:92:C1 Certificate issuer: /CN=A914E6AA/serialNumber=A76E05B83454ED1A209025E83D75E405791892C1 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft Manifest number: 0888 Signing time: Wed 16 Apr 2025 22:39:26 +0000 Manifest this update: Wed 16 Apr 2025 22:39:25 +0000 Manifest next update: Wed 23 Apr 2025 22:39:25 +0000 Files and hashes: 1: p24FuDRU7RogkCXoPXXkBXkYksE.crl (hash: C5tMwOSNQGCgIXalx7cBrDMxw75W3Zil0/XX+vrvC30=) 2: 078192DE0E0111F08A256F7AC4F9AE02.roa (hash: LXGEYHuadccOutKJ+/tshTQpVwD3yYdPEV04BO81LG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 22:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=A76E05B83454ED1A209025E83D75E405791892C1 Validity Not Before: Apr 16 22:39:25 2025 GMT Not After : Apr 23 22:39:25 2025 GMT Subject: CN=6800319e-ab7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1b:c8:1d:87:c1:ad:73:f9:7d:9c:3e:42:53: 8a:07:99:4f:49:11:29:1c:63:e5:22:0b:53:b7:49: 4d:c4:b1:3d:7e:d6:e9:8d:2e:e3:68:ee:39:5a:25: 81:f2:6d:b2:87:cd:a4:73:bb:ed:db:ff:74:a4:92: 72:16:80:10:3a:c0:e4:a0:64:23:95:02:1e:1c:2a: 86:e4:53:6c:95:b1:23:45:97:f2:5d:07:a4:9e:7c: 4a:5e:20:56:ff:b1:84:44:3e:80:fb:cb:4b:84:c8: b8:01:96:36:2b:b6:1e:fb:9a:b7:96:13:6a:84:76: ab:c9:9f:48:d8:91:fd:23:61:43:8d:e1:66:3b:8d: 69:0f:35:e2:31:08:18:3e:7e:b6:42:7b:67:96:d8: 15:cf:44:60:70:20:13:19:94:04:13:35:29:09:92: 90:45:0f:1e:dd:cf:27:6a:31:ff:6f:ae:1d:4d:71: c4:cc:cd:85:47:24:0a:9a:3c:dc:15:08:b7:a4:60: ac:f1:16:41:ed:46:43:2e:c4:e8:4f:63:0f:fb:8b: 11:4c:20:fe:ff:3d:41:bb:e3:99:b8:34:9a:e8:b1: e1:ff:f6:56:45:cf:54:f3:ce:37:f6:95:68:c4:5b: a2:dc:b4:c5:da:91:7f:8f:57:42:0c:97:46:6f:cb: 13:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0F:CE:AC:82:93:C2:32:66:AE:B1:71:78:77:0D:48:CF:D0:83:DB X509v3 Authority Key Identifier: keyid:A7:6E:05:B8:34:54:ED:1A:20:90:25:E8:3D:75:E4:05:79:18:92:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:70:f1:ee:42:ce:45:94:81:f2:eb:d7:dd:90:00:f3:92:b2: 42:09:4b:2c:c3:cf:48:10:0b:e0:ea:ff:ca:54:d9:19:7a:2e: 94:d5:da:7f:d8:84:45:71:a0:27:fe:ee:22:db:e9:b6:67:1e: ab:f8:53:cb:37:45:30:45:03:8f:68:cd:70:7f:88:96:1d:e0: 1f:08:d5:db:2e:b7:02:ec:73:b1:ac:0c:64:58:f6:ad:b0:a3: cf:3a:da:41:9b:54:f5:ad:ce:4b:6f:e1:9e:2e:3f:75:36:06: 19:82:34:11:5c:cd:a3:88:fd:c0:d6:e0:74:d9:5f:82:20:85: c6:18:58:73:c8:ac:ed:a0:30:a9:6b:be:44:bc:b8:28:af:be: 2a:df:f7:09:5c:1a:a4:d7:1b:ea:c2:46:d7:b1:9e:cc:26:9c: 73:9a:fa:d6:10:fe:20:e8:a3:cb:f2:47:fc:39:d0:d8:ff:4a: d6:75:f1:8c:1a:b8:f7:34:c3:9e:c3:20:1e:46:c5:4e:2f:db: a4:8d:2b:4b:54:6e:5d:97:35:c7:a0:39:15:ef:7b:65:64:cf: 67:f6:61:3c:a0:09:cc:ea:9e:de:1b:4a:99:7f:b1:26:45:8b: 7b:a3:03:cb:4e:cb:1c:f3:66:cd:8c:88:63:f6:e2:65:ee:35: d7:f4:12:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTZBQTExMC8GA1UEBRMoQTc2RTA1QjgzNDU0RUQxQTIwOTAyNUU4M0Q3NUU0MDU3 OTE4OTJDMTAeFw0yNTA0MTYyMjM5MjVaFw0yNTA0MjMyMjM5MjVaMBgxFjAUBgNV BAMTDTY4MDAzMTllLWFiN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClG8gdh8Gtc/l9nD5CU4oHmU9JESkcY+UiC1O3SU3EsT1+1umNLuNo7jlaJYHy bbKHzaRzu+3b/3SkknIWgBA6wOSgZCOVAh4cKobkU2yVsSNFl/JdB6SefEpeIFb/ sYREPoD7y0uEyLgBljYrth77mreWE2qEdqvJn0jYkf0jYUON4WY7jWkPNeIxCBg+ frZCe2eW2BXPRGBwIBMZlAQTNSkJkpBFDx7dzydqMf9vrh1NccTMzYVHJAqaPNwV CLekYKzxFkHtRkMuxOhPYw/7ixFMIP7/PUG745m4NJroseH/9lZFz1Tzzjf2lWjE W6LctMXakX+PV0IMl0ZvyxOfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlg/OrIKT wjJmrrFxeHcNSM/Qg9swHwYDVR0jBBgwFoAUp24FuDRU7RogkCXoPXXkBXkYksEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFNkFBLzhFREIxMDdFQURB ODExRUJBN0M5RjU2N0M0RjlBRTAyL3AyNEZ1RFJVN1JvZ2tDWG9QWFhrQlhrWWtz RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcDI0RnVEUlU3Um9na0NYb1BYWGtCWGtZa3NFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF NkFBLzhFREIxMDdFQURBODExRUJBN0M5RjU2N0M0RjlBRTAyL3AyNEZ1RFJVN1Jv Z2tDWG9QWFhrQlhrWWtzRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADBw8e5CzkWUgfLr192QAPOSskIJSyzDz0gQC+Dq/8pU2Rl6LpTV2n/Y hEVxoCf+7iLb6bZnHqv4U8s3RTBFA49ozXB/iJYd4B8I1dsutwLsc7GsDGRY9q2w o8862kGbVPWtzktv4Z4uP3U2BhmCNBFczaOI/cDW4HTZX4IghcYYWHPIrO2gMKlr vkS8uCivvirf9wlcGqTXG+rCRtexnswmnHOa+tYQ/iDoo8vyR/w50Nj/StZ18Ywa uPc0w57DIB5GxU4v26SNK0tUbl2XNcegORXve2Vkz2f2YTygCczqnt4bSpl/sSZF i3ujA8tOyxzzZs2MiGP24mXuNdf0Ekw= -----END CERTIFICATE-----Generated at Fri Apr 18 17:17:56 2025 by rpki-client