$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft File: fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft (raw, json) Hash identifier: KGRG9EJvFGJJuYb3a5riNDXFiNOVsjhSTqX5u88G6yg= Subject key identifier: 53:BF:6E:B6:AE:57:3E:C6:89:48:72:06:E3:EA:9A:6C:D9:B2:93:D2 Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5 Certificate issuer: /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5 Certificate serial: 0351 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft Manifest number: 0342 Signing time: Sat 29 Mar 2025 01:21:06 +0000 Manifest this update: Sat 29 Mar 2025 01:21:05 +0000 Manifest next update: Sat 05 Apr 2025 01:21:05 +0000 Files and hashes: 1: fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl (hash: 1DEQD6Tuxrlp0rOoiCsq6jM7VJQMWTATq/U75qNXd3I=) 2: 2E6B1980CA0211EF80E1DD42C4F9AE02.roa (hash: XTIn6xd6LAQNjR8zYGrEopF6yPf5strTO17Pxq6MJp0=) 3: 319786BEB63B11EF8D06900EC4F9AE02.roa (hash: 793xsUqNZCct53yJajRGlSIE/c6ELGxRJKtUEFm7DNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 01:21:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 849 (0x351) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D4F2 Validity Not Before: Mar 29 01:21:05 2025 GMT Not After : Apr 5 01:21:05 2025 GMT Subject: CN=67e74b01-50f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fc:91:b9:94:9b:28:e9:98:a6:65:75:c9:2e: 22:3f:d8:a2:ff:fb:a4:49:62:6d:9e:69:f6:ef:4f: b6:30:72:36:6d:9d:ed:48:98:02:77:a9:b2:ad:80: 2b:ca:7a:a8:28:41:09:23:96:da:91:50:65:63:64: 74:4d:0a:4b:77:67:30:bb:a1:7f:12:5a:01:c2:f8: e9:6d:3b:5a:f3:00:e7:8d:51:3e:79:b0:d9:ae:18: 00:46:45:7e:1c:47:c1:69:5e:58:68:7f:50:e8:75: f2:8a:b2:e0:8d:e9:87:72:48:ff:f8:d2:e7:f8:85: c4:54:f1:c8:0a:bb:ea:9b:f1:77:c1:e2:81:9e:39: bc:14:da:b6:bf:f1:87:c1:34:db:5e:7d:8e:ab:3d: dc:2b:8b:f0:26:26:1d:68:0f:c7:a5:fc:9a:42:30: 3a:d3:2a:43:27:64:a3:57:4f:06:b3:8a:e8:f7:b2: 78:8d:b1:ba:42:46:22:4f:dd:c9:d8:70:1a:5a:ab: 2d:e7:9f:7c:ca:dd:a7:cd:41:e7:dc:d9:32:8b:28: 16:1f:65:9e:b6:2a:69:e3:bc:66:72:b3:63:cf:28: 4c:d5:cd:93:ad:5b:f9:2e:d4:e1:d9:86:fe:8f:55: 70:96:38:ed:8a:aa:94:bd:de:77:aa:7f:e5:77:42: 33:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BF:6E:B6:AE:57:3E:C6:89:48:72:06:E3:EA:9A:6C:D9:B2:93:D2 X509v3 Authority Key Identifier: keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:13:1d:eb:1b:58:ea:49:1c:9f:d6:3f:84:8b:41:a2:2e:20: 3f:df:f8:1d:e5:ea:8a:87:45:98:c0:c5:6c:62:cf:36:68:e8: 52:78:f5:25:ca:2c:fc:f2:0a:af:f8:fc:dc:bb:5a:14:4b:dc: 18:a6:6b:49:c4:44:95:f0:2f:cc:c2:b0:0c:f9:bf:fd:d0:e5: 74:49:b8:d2:7f:7e:08:d6:04:d6:94:46:2d:78:77:43:81:47: 76:5d:b9:8e:96:de:ed:91:e6:68:d1:f3:9a:3f:a6:4c:fa:88: 98:24:e6:2f:c1:ec:7a:f6:31:8d:5b:3d:63:a7:89:23:63:30: 61:69:93:ed:3a:fe:6d:9d:95:3a:16:70:06:b3:0a:62:5d:34: c7:52:f6:b8:65:8e:95:d2:8a:f3:e9:d6:4a:78:6f:73:66:56: ab:a7:aa:99:a7:49:05:fa:6f:e9:51:1f:1b:c8:b8:db:1a:fd: ed:8a:35:4e:27:00:95:f9:0b:32:f9:48:4c:c3:86:a3:47:1e: e4:73:c6:dc:79:18:66:63:f3:53:08:60:44:6a:2f:63:37:f0: 0b:f8:15:d0:c3:9c:5b:bb:22:57:35:1b:06:cf:f2:e1:a3:28: be:74:46:80:3f:c0:ee:4b:68:ab:d4:42:2a:df:bd:61:26:6a: cf:72:74:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ0RjIxMTAvBgNVBAUTKDdEMThEODc3NTAyMTA1RkExODcyQURFRTRDRjI2MjND NDE0RjE2QjUwHhcNMjUwMzI5MDEyMTA1WhcNMjUwNDA1MDEyMTA1WjAYMRYwFAYD VQQDEw02N2U3NGIwMS01MGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/yRuZSbKOmYpmV1yS4iP9ii//ukSWJtnmn270+2MHI2bZ3tSJgCd6myrYAr ynqoKEEJI5bakVBlY2R0TQpLd2cwu6F/EloBwvjpbTta8wDnjVE+ebDZrhgARkV+ HEfBaV5YaH9Q6HXyirLgjemHckj/+NLn+IXEVPHICrvqm/F3weKBnjm8FNq2v/GH wTTbXn2Oqz3cK4vwJiYdaA/HpfyaQjA60ypDJ2SjV08Gs4ro97J4jbG6QkYiT93J 2HAaWqst5598yt2nzUHn3NkyiygWH2Wetipp47xmcrNjzyhM1c2TrVv5LtTh2Yb+ j1VwljjtiqqUvd53qn/ld0IzEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFO/brau Vz7GiUhyBuPqmmzZspPSMB8GA1UdIwQYMBaAFH0Y2HdQIQX6GHKt7kzyYjxBTxa1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDRGMi9EMjk5RjhFQ0I5 QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJmb1ljcTN1VFBKaVBFRlBG clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSallkMUFoQmZvWWNxM3VUUEppUEVGUEZyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDRGMi9EMjk5RjhFQ0I5QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJm b1ljcTN1VFBKaVBFRlBGclUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjEx3rG1jqSRyf1j+Ei0GiLiA/3/gd5eqKh0WYwMVsYs82aOhSePUl yiz88gqv+Pzcu1oUS9wYpmtJxESV8C/MwrAM+b/90OV0SbjSf34I1gTWlEYteHdD gUd2XbmOlt7tkeZo0fOaP6ZM+oiYJOYvwex69jGNWz1jp4kjYzBhaZPtOv5tnZU6 FnAGswpiXTTHUva4ZY6V0orz6dZKeG9zZlarp6qZp0kF+m/pUR8byLjbGv3tijVO JwCV+Qsy+UhMw4ajRx7kc8bceRhmY/NTCGBEai9jN/AL+BXQw5xbuyJXNRsGz/Lh oyi+dEaAP8DuS2ir1EIq371hJmrPcnQ0 -----END CERTIFICATE-----Generated at Fri Apr 4 21:54:02 2025 by rpki-client