$ rpki-client -vvf rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft File: cHDFVlzC_kVsMWBAi25_toDAjBk.mft (raw, json) Hash identifier: TbZhacMW5+2wWv3R4Y+7pBeGNOjPmMtje7x/rpOGhhM= Subject key identifier: A0:68:14:FD:64:B8:61:5D:0D:A3:D4:F8:8D:CD:DF:5F:A4:43:91:1C Authority key identifier: 70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19 Certificate issuer: /CN=A915B77C/serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19 Certificate serial: 0A3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft Manifest number: 0A2E Signing time: Fri 04 Apr 2025 19:56:20 +0000 Manifest this update: Fri 04 Apr 2025 19:56:20 +0000 Manifest next update: Fri 11 Apr 2025 19:56:20 +0000 Files and hashes: 1: cHDFVlzC_kVsMWBAi25_toDAjBk.crl (hash: T75RHZOydqEVtmzl4rVt8wuY9LhoseTXLpQ1oe70TdI=) 2: 96ACE9CE8E8F11EE8915FE78C4F9AE02.roa (hash: n7QYB4PprN8wvve4EgxwwoZXCNSALgZd5+0ffViTkK8=) 3: 6EA165728E8F11EEA8A9EE68C4F9AE02.roa (hash: 1K81wmlQPoGdZP/JjsQxYakrjnCNuKpYHSBFoJQ/JT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:56:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2620 (0xa3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B77C Validity Not Before: Apr 4 19:56:20 2025 GMT Not After : Apr 11 19:56:20 2025 GMT Subject: CN=67f03964-3252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4a:b4:24:fc:92:59:3e:04:ec:a0:4d:44:df: 1c:0c:b1:b0:4b:41:6b:44:13:86:c1:db:8e:71:0e: 75:33:ae:74:5a:8e:89:8a:66:ef:05:c2:2f:37:7c: 2e:d7:2b:b5:2c:5c:27:87:dd:48:24:5b:02:3d:4b: 36:11:15:e3:3d:bf:aa:f4:9b:2f:f2:e5:c9:b7:39: 86:2a:34:70:46:26:c2:74:4b:a8:2a:6d:22:15:71: ca:c5:14:9b:f0:f4:96:5d:ad:f9:95:27:31:e8:13: c1:bd:fb:32:ba:b4:d9:ed:b1:b6:c1:56:18:ff:7a: 5f:ec:06:18:8e:de:c6:23:41:4b:b0:56:43:73:09: 75:c5:07:f5:6a:e7:5c:ba:50:26:07:e9:e9:b5:51: 06:13:13:a8:aa:6a:31:03:79:61:45:7d:3a:0f:27: 16:c7:56:5c:ac:87:91:5a:25:bf:b1:2f:42:c2:22: 01:34:c6:a8:10:17:51:a8:2a:55:ad:07:af:22:54: ea:35:52:9c:6f:0d:7c:0e:e2:2a:a8:49:cf:a1:ad: 4d:b7:9d:f4:a2:2f:7d:c8:94:5d:8a:3f:d9:8e:fe: 6d:a1:b6:50:3e:19:cc:4d:61:93:e1:2e:82:4e:68: 81:14:54:16:bd:fd:99:5e:77:60:5d:6e:62:3b:a1: 31:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:68:14:FD:64:B8:61:5D:0D:A3:D4:F8:8D:CD:DF:5F:A4:43:91:1C X509v3 Authority Key Identifier: keyid:70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:89:a3:c5:5a:a3:b5:6b:33:5f:b4:f7:7f:3d:9e:6b:6d:4f: 95:35:74:fb:7e:de:46:00:5b:c8:30:c4:ea:63:1f:70:db:01: 25:f3:c7:e8:f5:6f:3c:7b:d9:77:0a:eb:0a:0e:b3:90:ab:38: 87:e1:62:62:d0:b6:90:60:27:95:eb:3f:41:9a:f8:fd:1f:1d: 59:cf:9d:57:2e:74:7f:e1:07:86:47:b0:99:55:a4:9d:c5:ea: b6:d1:3f:1f:13:b3:44:da:75:69:e6:bf:7d:93:f1:d2:95:78: f7:fb:53:67:81:72:49:f6:9e:95:89:22:83:12:e5:ac:b1:1d: 34:71:9e:e9:97:cf:62:2e:b0:31:6c:ee:f1:2d:a9:66:ad:78: 6e:15:f6:25:24:43:f0:da:8b:65:5a:c2:a7:9f:12:34:58:7b: b8:be:07:43:b0:ba:e6:ba:71:cd:c8:dc:3d:65:72:a1:57:36: fd:5b:43:7a:a8:f6:09:a9:cf:15:a5:92:88:30:45:66:31:0e: c7:f9:05:48:57:1a:51:4d:b0:e8:d0:46:bd:ed:7e:37:b3:2c: c4:67:5a:8e:ed:07:ce:62:41:08:11:62:b7:fe:d8:9f:11:5e: 3b:23:d3:17:d6:2e:db:1a:e7:9b:c9:0c:07:98:7c:aa:d3:42: 74:24:f2:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI3N0MxMTAvBgNVBAUTKDcwNzBDNTU2NUNDMkZFNDU2QzMxNjA0MDhCNkU3RkI2 ODBDMDhDMTkwHhcNMjUwNDA0MTk1NjIwWhcNMjUwNDExMTk1NjIwWjAYMRYwFAYD VQQDEw02N2YwMzk2NC0zMjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEq0JPySWT4E7KBNRN8cDLGwS0FrRBOGwduOcQ51M650Wo6JimbvBcIvN3wu 1yu1LFwnh91IJFsCPUs2ERXjPb+q9Jsv8uXJtzmGKjRwRibCdEuoKm0iFXHKxRSb 8PSWXa35lScx6BPBvfsyurTZ7bG2wVYY/3pf7AYYjt7GI0FLsFZDcwl1xQf1audc ulAmB+nptVEGExOoqmoxA3lhRX06DycWx1ZcrIeRWiW/sS9CwiIBNMaoEBdRqCpV rQevIlTqNVKcbw18DuIqqEnPoa1Nt530oi99yJRdij/Zjv5tobZQPhnMTWGT4S6C TmiBFFQWvf2ZXndgXW5iO6ExIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBoFP1k uGFdDaPU+I3N31+kQ5EcMB8GA1UdIwQYMBaAFHBwxVZcwv5FbDFgQItuf7aAwIwZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjc3Qy8yODE0Rjc3QTY5 QjUxMUVBQkE2MDE3NTJDNEY5QUUwMi9jSERGVmx6Q19rVnNNV0JBaTI1X3RvREFq QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NIREZWbHpDX2tWc01XQkFpMjVfdG9EQWpCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Qjc3Qy8yODE0Rjc3QTY5QjUxMUVBQkE2MDE3NTJDNEY5QUUwMi9jSERGVmx6Q19r VnNNV0JBaTI1X3RvREFqQmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkiaPFWqO1azNftPd/PZ5rbU+VNXT7ft5GAFvIMMTqYx9w2wEl88fo 9W88e9l3CusKDrOQqziH4WJi0LaQYCeV6z9Bmvj9Hx1Zz51XLnR/4QeGR7CZVaSd xeq20T8fE7NE2nVp5r99k/HSlXj3+1NngXJJ9p6ViSKDEuWssR00cZ7pl89iLrAx bO7xLalmrXhuFfYlJEPw2otlWsKnnxI0WHu4vgdDsLrmunHNyNw9ZXKhVzb9W0N6 qPYJqc8VpZKIMEVmMQ7H+QVIVxpRTbDo0Ea97X43syzEZ1qO7QfOYkEIEWK3/tif EV47I9MX1i7bGuebyQwHmHyq00J0JPLE -----END CERTIFICATE-----Generated at Sat Apr 5 05:45:47 2025 by rpki-client