$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.mft File: sAFKgwbFLkBPZ8ovjlhvm4aOjKs.mft (raw, json) Hash identifier: xc7RmVhN2QZXUSRUZxMrNkDG6UAeTPRzys2elBffiig= Subject key identifier: F0:42:C6:6B:37:0B:4D:6F:62:D7:6C:E3:D8:63:91:8E:86:FA:F1:77 Authority key identifier: B0:01:4A:83:06:C5:2E:40:4F:67:CA:2F:8E:58:6F:9B:86:8E:8C:AB Certificate issuer: /CN=A914FA25/serialNumber=B0014A8306C52E404F67CA2F8E586F9B868E8CAB Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.mft Manifest number: 0D7C Signing time: Fri 04 Apr 2025 19:03:23 +0000 Manifest this update: Fri 04 Apr 2025 19:03:21 +0000 Manifest next update: Fri 11 Apr 2025 19:03:21 +0000 Files and hashes: 1: sAFKgwbFLkBPZ8ovjlhvm4aOjKs.crl (hash: 0d3GQEum8zXzoXy470n4K8vIb5ZbuiOC+8V+FSMu5UM=) 2: 16D76086A0A811EF88ED2026C4F9AE02.roa (hash: 8Np2ddxX2fo4rhs148sR/PBqkKkRgOKwM4iRJDzvMNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.crl rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FA25 Validity Not Before: Apr 4 19:03:21 2025 GMT Not After : Apr 11 19:03:21 2025 GMT Subject: CN=67f02cfa-e073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cc:94:50:7d:fe:8a:7a:f7:7c:99:d5:0e:60: 71:40:0d:41:57:d5:1e:13:91:2a:dd:a1:fb:fe:c7: 82:80:11:9b:d1:a0:94:69:8d:97:1f:15:cd:ec:48: b2:1d:d8:b0:a8:bb:57:6c:8b:8e:ce:85:b6:19:c1: ff:91:9d:f9:8b:49:9c:76:e6:13:3c:09:4e:71:27: 96:4f:a0:b8:ce:3f:9c:36:4d:7c:cc:b0:30:13:90: aa:87:4b:3f:d4:95:ef:0a:77:d3:72:0a:11:13:5d: 45:40:63:0b:4e:23:4e:92:d5:53:e0:01:fc:3d:c8: 16:1c:61:bc:9d:f8:c3:ae:7d:4d:97:e8:9f:90:42: 7e:26:9e:83:17:58:b8:98:54:14:48:d8:8d:0e:e7: 60:75:4d:1f:b1:32:05:5d:a4:99:16:4b:38:b6:7a: 7a:a2:64:7c:77:a7:a6:ad:be:a8:61:3d:10:b4:c1: 96:95:09:86:15:89:09:20:c1:0f:0b:aa:b0:52:62: c6:74:ae:c5:62:10:82:da:fc:1a:a7:97:85:b4:16: fc:91:83:55:57:a8:a4:66:50:61:06:14:ad:fc:81: a2:50:18:9a:a0:e1:bb:c4:55:d8:b1:95:97:86:ce: 5c:6d:45:97:6e:5b:a2:6a:a1:1f:16:2e:40:ab:47: 99:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:42:C6:6B:37:0B:4D:6F:62:D7:6C:E3:D8:63:91:8E:86:FA:F1:77 X509v3 Authority Key Identifier: keyid:B0:01:4A:83:06:C5:2E:40:4F:67:CA:2F:8E:58:6F:9B:86:8E:8C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:09:9c:63:e9:93:e0:4c:05:9d:36:48:36:36:bb:85:c7:0f: 3a:85:fc:7c:65:ee:1c:43:8d:09:f8:ab:38:6f:7d:bb:7b:eb: 51:78:f0:d7:d9:1e:13:b5:8f:b4:59:f4:ae:da:4a:6f:23:9f: de:b8:57:0c:45:81:03:ee:12:63:ae:ff:c7:95:19:f6:59:ac: d4:77:09:99:63:41:27:2c:57:de:11:6e:78:80:db:a3:ba:d0: 6b:db:4f:2a:69:a0:3a:46:d5:92:ed:ab:50:2e:c1:59:1b:fe: 42:81:c0:d0:ce:63:d9:9a:b7:a9:46:ed:00:a9:84:6e:e3:d2: 07:92:05:d5:c7:f0:5f:44:03:41:e2:4d:ba:14:bd:36:e2:e7: 91:07:23:0c:31:42:ec:2c:52:31:9e:cb:eb:e6:d8:2e:66:21: c2:5a:9d:ed:bf:96:af:a8:92:77:48:55:1a:5e:f0:ab:d4:b1: 32:7a:58:d9:94:12:70:93:35:7e:ce:86:e2:d6:b0:d0:40:a7: 08:21:78:fb:83:1b:e9:a5:7d:1b:64:81:a5:d5:f1:72:b2:e0: 40:ad:c6:a1:3b:6a:ca:d6:6e:8a:7b:ee:17:5a:ee:e3:ef:c7: ef:51:0c:64:ce:b4:b8:ad:a0:54:e8:f7:4f:c3:af:09:77:e6: 65:86:65:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZBMjUxMTAvBgNVBAUTKEIwMDE0QTgzMDZDNTJFNDA0RjY3Q0EyRjhFNTg2RjlC ODY4RThDQUIwHhcNMjUwNDA0MTkwMzIxWhcNMjUwNDExMTkwMzIxWjAYMRYwFAYD VQQDEw02N2YwMmNmYS1lMDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo8yUUH3+inr3fJnVDmBxQA1BV9UeE5Eq3aH7/seCgBGb0aCUaY2XHxXN7Eiy HdiwqLtXbIuOzoW2GcH/kZ35i0mcduYTPAlOcSeWT6C4zj+cNk18zLAwE5Cqh0s/ 1JXvCnfTcgoRE11FQGMLTiNOktVT4AH8PcgWHGG8nfjDrn1Nl+ifkEJ+Jp6DF1i4 mFQUSNiNDudgdU0fsTIFXaSZFks4tnp6omR8d6emrb6oYT0QtMGWlQmGFYkJIMEP C6qwUmLGdK7FYhCC2vwap5eFtBb8kYNVV6ikZlBhBhSt/IGiUBiaoOG7xFXYsZWX hs5cbUWXbluiaqEfFi5Aq0eZywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBCxms3 C01vYtds49hjkY6G+vF3MB8GA1UdIwQYMBaAFLABSoMGxS5AT2fKL45Yb5uGjoyr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkEyNS8yQkJDQkNBQTFE QUMxMUVBQUY0QTM3NjNDNEY5QUUwMi9zQUZLZ3diRkxrQlBaOG92amxodm00YU9q S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NBRktnd2JGTGtCUFo4b3ZqbGh2bTRhT2pLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkEyNS8yQkJDQkNBQTFEQUMxMUVBQUY0QTM3NjNDNEY5QUUwMi9zQUZLZ3diRkxr QlBaOG92amxodm00YU9qS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYCZxj6ZPgTAWdNkg2NruFxw86hfx8Ze4cQ40J+Ks4b327e+tRePDX 2R4TtY+0WfSu2kpvI5/euFcMRYED7hJjrv/HlRn2WazUdwmZY0EnLFfeEW54gNuj utBr208qaaA6RtWS7atQLsFZG/5CgcDQzmPZmrepRu0AqYRu49IHkgXVx/BfRANB 4k26FL024ueRByMMMULsLFIxnsvr5tguZiHCWp3tv5avqJJ3SFUaXvCr1LEyeljZ lBJwkzV+zobi1rDQQKcIIXj7gxvppX0bZIGl1fFysuBArcahO2rK1m6Ke+4XWu7j 78fvUQxkzrS4raBU6PdPw68Jd+ZlhmU/ -----END CERTIFICATE-----Generated at Fri Apr 4 22:01:50 2025 by rpki-client