$ rpki-client -vvf rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft File: k-dhjM_iZIDXknoYcbrYP--d9IQ.mft (raw, json) Hash identifier: t11NFmd0389AncaQbPLI66MHGJQNUj9aZd7GlqGdUkk= Subject key identifier: FC:94:17:A9:92:A5:3C:14:BB:62:0F:3C:E8:DD:C8:D6:A6:A4:C3:16 Authority key identifier: 93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84 Certificate issuer: /CN=A915F438/serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484 Certificate serial: 250E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft Manifest number: 24FA Signing time: Sat 12 Apr 2025 15:43:01 +0000 Manifest this update: Sat 12 Apr 2025 15:43:01 +0000 Manifest next update: Sat 19 Apr 2025 15:43:01 +0000 Files and hashes: 1: k-dhjM_iZIDXknoYcbrYP--d9IQ.crl (hash: RSsKvV4WjtWjB7di4tg3xdsYJ+QTMSa59VXZa/ALZRA=) 2: 657B47B61C2F11E880C4ED7BC4F9AE02.roa (hash: cn19kmgTI5pykmKU6ztYW1fuk/UgkkZVZQRR4mCHAg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9486 (0x250e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F438, serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484 Validity Not Before: Apr 12 15:43:01 2025 GMT Not After : Apr 19 15:43:01 2025 GMT Subject: CN=67fa8a05-8807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ef:7c:1f:9e:58:b2:fb:b6:37:bd:ca:1c:eb: 13:1c:8a:51:78:9f:7b:a8:a3:8f:ef:cd:b7:d8:3b: a8:4a:49:ba:40:e7:e6:86:9f:2b:18:41:be:1c:ba: 7a:62:7b:38:c3:a8:1d:75:d8:80:34:af:3d:7c:b6: 90:fd:92:da:0c:3e:d8:aa:15:08:19:69:cc:a5:8d: dd:7f:0c:e5:70:03:53:82:da:c3:fd:00:8f:15:00: d8:6a:cb:1e:0d:5e:b6:61:6f:11:95:7c:15:2e:70: da:bf:cf:e3:62:3e:83:7a:47:15:cd:0f:78:1b:c2: 96:71:18:21:4a:5d:c9:a5:44:9b:87:0c:9b:e8:1a: 37:40:c0:49:0c:91:c8:84:3b:70:ed:f9:fc:75:20: 7c:37:7e:62:e7:b1:3c:c9:67:b0:28:5a:51:db:83: a7:c9:28:af:4a:b7:32:94:02:0d:cf:0f:db:e0:8c: 9d:ac:95:0d:5f:2c:63:c8:26:9e:ab:17:bd:3f:29: 2a:ec:63:20:4d:c5:ba:b5:70:1c:2c:3d:1f:1e:51: 11:a5:51:02:95:de:80:6d:5b:1e:9b:8a:d8:db:18: f5:83:5e:6b:33:39:8f:ea:08:20:c3:14:3c:64:de: 58:c6:58:00:26:31:c2:4f:d0:4f:e3:db:3b:da:88: 1d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:94:17:A9:92:A5:3C:14:BB:62:0F:3C:E8:DD:C8:D6:A6:A4:C3:16 X509v3 Authority Key Identifier: keyid:93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:df:a4:1d:10:c4:28:4a:c3:0b:1c:cc:9f:f0:30:6d:75:12: b7:74:bc:ca:7c:f6:88:7a:4d:b9:18:06:48:a0:82:a5:d0:88: b4:2c:8b:ae:62:52:29:df:d0:fb:40:4b:72:04:c4:c4:96:a3: d6:99:96:f7:29:0b:99:b3:4b:38:50:50:05:34:82:40:e7:5e: 0e:97:97:14:ef:f1:1a:df:fe:c7:ed:4f:1e:f0:23:14:44:42: c6:82:0d:89:16:a7:0f:c6:25:77:5a:0f:d1:ef:0d:e5:cf:d6: 47:4f:26:60:f5:41:76:1f:5e:da:e8:8c:a6:aa:c1:e4:3a:e6: 4e:b8:6e:4d:4b:96:2b:7a:bd:8e:9f:7f:0f:d7:53:56:b5:d1: af:63:ba:0b:bc:4c:5b:a8:d1:30:2d:22:05:d7:30:1a:19:c5: 9e:77:54:21:43:43:89:fd:d1:4a:da:2b:e5:5b:4c:6e:a2:b1: 2d:3d:37:83:1a:f5:84:d3:51:32:94:33:3c:0b:79:5b:dd:d1: 26:40:6c:ca:97:cf:b8:0e:da:9b:b6:55:c3:52:dd:83:38:b8: 60:40:a1:77:e6:fc:89:1f:b5:15:85:07:c1:45:c2:23:95:78: cd:44:8d:9f:93:42:89:3d:db:17:3c:3f:a1:f5:64:bf:3e:47: 98:04:92:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY0MzgxMTAvBgNVBAUTKDkzRTc2MThDQ0ZFMjY0ODBENzkyN0ExODcxQkFEODNG RUY5REY0ODQwHhcNMjUwNDEyMTU0MzAxWhcNMjUwNDE5MTU0MzAxWjAYMRYwFAYD VQQDEw02N2ZhOGEwNS04ODA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnu98H55Ysvu2N73KHOsTHIpReJ97qKOP78232DuoSkm6QOfmhp8rGEG+HLp6 Yns4w6gdddiANK89fLaQ/ZLaDD7YqhUIGWnMpY3dfwzlcANTgtrD/QCPFQDYasse DV62YW8RlXwVLnDav8/jYj6DekcVzQ94G8KWcRghSl3JpUSbhwyb6Bo3QMBJDJHI hDtw7fn8dSB8N35i57E8yWewKFpR24OnySivSrcylAINzw/b4IydrJUNXyxjyCae qxe9Pykq7GMgTcW6tXAcLD0fHlERpVECld6AbVsem4rY2xj1g15rMzmP6gggwxQ8 ZN5YxlgAJjHCT9BP49s72ogdCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPyUF6mS pTwUu2IPPOjdyNampMMWMB8GA1UdIwQYMBaAFJPnYYzP4mSA15J6GHG62D/vnfSE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjQzOC9CN0VGNTNGRTJC NEUxMUU1QUNCQkRGM0FDNEY5QUUwMi9rLWRoak1faVpJRFhrbm9ZY2JyWVAtLWQ5 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2stZGhqTV9pWklEWGtub1ljYnJZUC0tZDlJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjQzOC9CN0VGNTNGRTJCNEUxMUU1QUNCQkRGM0FDNEY5QUUwMi9rLWRoak1faVpJ RFhrbm9ZY2JyWVAtLWQ5SVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK36QdEMQoSsMLHMyf8DBtdRK3dLzKfPaIek25GAZIoIKl0Ii0LIuu YlIp39D7QEtyBMTElqPWmZb3KQuZs0s4UFAFNIJA514Ol5cU7/Ea3/7H7U8e8CMU RELGgg2JFqcPxiV3Wg/R7w3lz9ZHTyZg9UF2H17a6IymqsHkOuZOuG5NS5Yrer2O n38P11NWtdGvY7oLvExbqNEwLSIF1zAaGcWed1QhQ0OJ/dFK2ivlW0xuorEtPTeD GvWE01EylDM8C3lb3dEmQGzKl8+4DtqbtlXDUt2DOLhgQKF35vyJH7UVhQfBRcIj lXjNRI2fk0KJPdsXPD+h9WS/PkeYBJJ8 -----END CERTIFICATE-----Generated at Sat Apr 12 18:46:54 2025 by rpki-client