$ rpki-client -vvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft File: r-cn5CCdzfgnYldLXjPICDeHoY8.mft (raw, json) Hash identifier: D4EsntjaIIf3btV99gECkJ1ALv72LLhHFdybsOkLtxQ= Subject key identifier: 33:05:13:46:A2:10:28:9E:41:E6:88:75:C9:99:01:80:91:78:26:64 Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F Certificate issuer: /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Certificate serial: 1E8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft Manifest number: 1E2A Signing time: Fri 04 Apr 2025 16:08:34 +0000 Manifest this update: Fri 04 Apr 2025 16:08:33 +0000 Manifest next update: Fri 11 Apr 2025 16:08:33 +0000 Files and hashes: 1: r-cn5CCdzfgnYldLXjPICDeHoY8.crl (hash: cjFfBfPd3fjn9/ZK0K+N2LIvlmTFBSyMqCo4b+xNX/A=) 2: 7EFB8A6E885311E6BDE50A80C4F9AE02.roa (hash: WKYh+NxnsT3X7rLjv5qUGFM6/m1tIHkeIZefmgprnPs=) 3: D80B013A172011EEB3A9C124C4F9AE02.roa (hash: i+bH68t7yKzy0Rw6D9wkVEOs5mv50GBBoWxW4vThyQY=) 4: CF946690E5E711EE89AF4E5AC4F9AE02.roa (hash: Hy5wV1LNqpxbM5ijt7NUzM7tVBcEJ4OJJPk557Hpy8c=) 5: 882AC358E1F511EE9188A919C4F9AE02.roa (hash: 7XnoI3SWGKSLq9zz7HLNS32aw+KK++smhLaAOQ+1lDo=) 6: 5C6A7BE6E1F511EEA08A5519C4F9AE02.roa (hash: T6jmHSx80+1QapW6ywMYadpctCcOQDce4QIxekTXdlo=) 7: B0ACAB905A2011EA9E34F70BC4F9AE02.roa (hash: K3rejCNdQ0NeO9mAgLHI687zq5GLAF1vM1BDZ4QHrk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7819 (0x1e8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AE5F Validity Not Before: Apr 4 16:08:33 2025 GMT Not After : Apr 11 16:08:33 2025 GMT Subject: CN=67f00402-6240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:38:1c:f7:6c:23:31:4d:61:fd:35:b9:cf:3b: 1d:b3:8d:47:60:28:0b:5b:88:aa:39:fa:38:1f:26: 85:bd:4d:b2:88:f6:04:c5:29:c9:32:9a:38:0a:b5: dd:d1:8a:2c:d4:2a:f8:5d:0a:b9:91:7c:be:c1:ea: 6f:94:bc:2a:d7:3d:05:0d:57:3c:73:22:02:a5:b3: 3e:5d:38:3f:32:e6:d9:13:83:ce:54:07:e4:d0:3e: 05:8f:c1:8f:fb:68:e5:5d:ce:52:6f:ab:4b:34:e6: b0:55:b5:e5:e1:44:ac:0f:fa:2b:00:68:79:25:e9: 58:8d:dd:c1:bc:05:77:d1:ad:e1:56:c7:72:41:f7: 5a:57:cb:3c:be:7f:59:ee:c7:30:22:59:53:bd:9d: 12:0f:e3:6e:20:5f:03:88:81:a5:a0:ba:9e:15:bd: 87:1c:ff:9c:2e:f0:65:43:c5:07:d9:1f:9c:62:50: a8:fd:a5:f3:30:eb:35:b6:ba:02:9e:1d:7a:65:86: 99:53:4e:8c:fb:33:7e:12:09:3b:a6:0d:c7:37:81: 73:e6:55:3b:92:bc:ac:62:3c:9c:ed:f0:79:da:02: 01:e6:ad:19:7d:84:0a:e1:00:f3:06:6d:67:5e:1a: 2d:74:7b:67:2f:1e:cf:67:40:ac:a3:f1:85:a2:13: 1b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:05:13:46:A2:10:28:9E:41:E6:88:75:C9:99:01:80:91:78:26:64 X509v3 Authority Key Identifier: keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:e9:67:82:a7:ca:90:e3:47:53:fa:50:40:fe:ff:43:9c:fc: 1e:5c:09:fa:65:7a:08:21:33:1a:0b:8e:6a:55:af:e5:46:cd: 38:40:8f:99:73:96:d5:de:46:11:02:8c:a4:44:9a:47:c4:a6: 17:93:92:ef:64:33:11:da:3c:49:a2:00:e3:06:5a:6d:36:17: 71:6e:d3:a2:c4:99:54:81:af:35:d8:c8:4c:07:56:20:76:f8: 66:43:ce:9e:45:20:d3:70:67:8a:cb:13:6e:9d:1d:0e:16:52: 2c:dc:4b:99:b0:4b:81:5e:8f:06:30:7b:5b:2e:0b:fd:48:2a: 70:13:4d:84:41:af:16:47:7f:b5:9f:42:b2:23:64:05:fa:70: a3:18:01:73:7e:70:f1:73:b1:da:c6:a6:8f:5c:0b:60:34:f2: 4c:da:50:b9:b9:e4:1d:24:17:3a:2c:03:ba:c3:00:3d:3f:20: bc:26:68:be:6e:05:6b:a8:89:61:97:3d:f9:cf:86:5f:33:a2: 4b:3a:9e:ee:ac:a2:0c:c4:3b:69:36:9b:fd:c4:bb:63:63:40: 1b:57:c1:0a:7b:f0:a7:d5:df:c3:c0:d6:45:c9:b3:88:73:52: 70:53:be:fd:a4:9a:db:72:15:ef:c1:ca:80:6c:b2:7e:bc:c0: 4b:c1:19:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFFNUYxMTAvBgNVBAUTKEFGRTcyN0U0MjA5RENERjgyNzYyNTc0QjVFMzNDODA4 Mzc4N0ExOEYwHhcNMjUwNDA0MTYwODMzWhcNMjUwNDExMTYwODMzWjAYMRYwFAYD VQQDEw02N2YwMDQwMi02MjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzgc92wjMU1h/TW5zzsds41HYCgLW4iqOfo4HyaFvU2yiPYExSnJMpo4CrXd 0Yos1Cr4XQq5kXy+wepvlLwq1z0FDVc8cyICpbM+XTg/MubZE4POVAfk0D4Fj8GP +2jlXc5Sb6tLNOawVbXl4USsD/orAGh5JelYjd3BvAV30a3hVsdyQfdaV8s8vn9Z 7scwIllTvZ0SD+NuIF8DiIGloLqeFb2HHP+cLvBlQ8UH2R+cYlCo/aXzMOs1troC nh16ZYaZU06M+zN+Egk7pg3HN4Fz5lU7krysYjyc7fB52gIB5q0ZfYQK4QDzBm1n XhotdHtnLx7PZ0Cso/GFohMbFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMFE0ai ECieQeaIdcmZAYCReCZkMB8GA1UdIwQYMBaAFK/nJ+Qgnc34J2JXS14zyAg3h6GP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUU1Ri84Qjc5QjY3ODg4 NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpmZ25ZbGRMWGpQSUNEZUhv WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItY241Q0NkemZnbllsZExYalBJQ0RlSG9ZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUU1Ri84Qjc5QjY3ODg4NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpm Z25ZbGRMWGpQSUNEZUhvWTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDK6WeCp8qQ40dT+lBA/v9DnPweXAn6ZXoIITMaC45qVa/lRs04QI+Z c5bV3kYRAoykRJpHxKYXk5LvZDMR2jxJogDjBlptNhdxbtOixJlUga812MhMB1Yg dvhmQ86eRSDTcGeKyxNunR0OFlIs3EuZsEuBXo8GMHtbLgv9SCpwE02EQa8WR3+1 n0KyI2QF+nCjGAFzfnDxc7HaxqaPXAtgNPJM2lC5ueQdJBc6LAO6wwA9PyC8Jmi+ bgVrqIlhlz35z4ZfM6JLOp7urKIMxDtpNpv9xLtjY0AbV8EKe/Cn1d/DwNZFybOI c1JwU779pJrbchXvwcqAbLJ+vMBLwRn4 -----END CERTIFICATE-----Generated at Sat Apr 5 16:22:34 2025 by rpki-client