$ rpki-client -vvf rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft File: CfwHfzPjrWe_FHdVFno61OrLHnw.mft (raw, json) Hash identifier: cC6CTWEUF9XyfSrWX46sNPn9X2PhpaXxMvwECFTfV+w= Subject key identifier: 58:F7:E0:2E:74:1A:61:E7:0F:20:14:0F:A8:4C:CF:A5:6F:FA:78:31 Authority key identifier: 09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C Certificate issuer: /CN=A9161613/serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C Certificate serial: 060B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft Manifest number: 05AA Signing time: Sun 06 Apr 2025 23:04:36 +0000 Manifest this update: Sun 06 Apr 2025 23:04:36 +0000 Manifest next update: Sun 13 Apr 2025 23:04:36 +0000 Files and hashes: 1: CfwHfzPjrWe_FHdVFno61OrLHnw.crl (hash: BZYx+UjMpQzUfKidKcYl8x8YerMO2BTs/zkHNVKMdqQ=) 2: ACDC465C7AEF11EFA321CE80C4F9AE02.roa (hash: yBRdcVlJbMlBPrrr56nDrfaeaxDRpo8RSVcl7jjMZG8=) 3: 81618D88E53E11EB9E429C44C4F9AE02.roa (hash: eFJqISAsUQRuhPb6f3Hah2PFjEJHe1r/X4BKPg7b4kE=) 4: 30904BA8329711EE8EC1E923C4F9AE02.roa (hash: APJ8LqbdzO0lCKxbThL64TXLQduxBrfKXGZEsGj8Ew8=) 5: 3A826C8CED9311EFB3825372C4F9AE02.roa (hash: AIcPcPwO0MC9ukAjdNsCx6XwtejcpEw/imMkdJauIwo=) 6: 5BCDBECC9D6311EE8C1C2B7AC4F9AE02.roa (hash: Pe3y0RLjR0FIZwfwi6WYTekm/kM3adNSrKJHDrzMHQ0=) 7: 639394F4B05611EF95B2931BC4F9AE02.roa (hash: C08kfFB3sbHdAzC9hLJnr0tm+lqFd1yHsi8+zNn8y4s=) 8: 8023B518E53E11EB9E429C44C4F9AE02.roa (hash: vSQHxn5/lTR7h5pMBllVKzWJzWkf2IiJr01/df+82mQ=) 9: 167A6086BBD211EEABCC0D23C4F9AE02.roa (hash: bZCNjczNhzUji7LuYcuS6Yg9nvK9y01d14oqtpECLrI=) 10: 80AD3A9AE53E11EB9E429C44C4F9AE02.roa (hash: 0krzqD999T9B24TBVDnqpUMPP33Jo+TAt8qYmCWzmx0=) 11: 7F2A4208E53E11EB9E429C44C4F9AE02.roa (hash: epJMifwD6R2b1WeonhK6+Ptsph58rQyMoEb+/4Q80hY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 23:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1547 (0x60b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161613 Validity Not Before: Apr 6 23:04:36 2025 GMT Not After : Apr 13 23:04:36 2025 GMT Subject: CN=67f30884-6a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c6:de:97:0b:ae:d8:7a:71:76:41:a0:14:53: c4:88:ee:af:db:67:35:95:d7:6e:2d:2d:48:28:a1: 16:b5:48:b4:6b:f0:5e:09:34:fd:a7:ce:46:f8:dc: 04:57:b6:15:ee:d0:4a:12:e3:93:89:c0:bb:f2:78: c4:f0:ad:93:4b:a2:00:6e:d9:2c:af:72:8d:c6:d9: 10:2d:aa:00:ce:a9:c6:f4:c0:9a:79:f7:9b:e0:ce: 6d:db:e3:48:9f:43:1d:ac:00:a3:ed:7b:2a:0a:d7: 5f:bf:95:6a:ea:53:73:b7:25:4e:5d:19:6b:8c:61: b1:ab:a6:90:04:a4:8f:31:34:9e:55:45:3f:a7:e2: e1:b0:1b:a2:96:3b:b3:50:bf:34:9e:2a:c3:e6:3a: bc:96:af:7b:09:21:2c:4e:36:79:b2:5c:c5:fe:17: bb:c3:0d:2d:a4:bd:bf:4b:d1:f1:9c:0b:1a:dc:4b: 22:0a:66:51:83:6b:cf:7e:e7:6b:04:69:87:b6:2a: e5:27:d6:4e:bd:0f:43:a9:8d:a3:7a:90:c3:a2:52: b7:f3:c4:65:da:dc:40:a7:cd:a5:7e:0d:f7:75:e7: b4:bf:76:9b:b2:17:20:ef:e2:00:b1:23:b7:02:07: a1:17:1f:d8:ee:ae:d5:3c:aa:6b:fb:1c:36:9d:a0: 7e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F7:E0:2E:74:1A:61:E7:0F:20:14:0F:A8:4C:CF:A5:6F:FA:78:31 X509v3 Authority Key Identifier: keyid:09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:ad:ff:33:b1:48:1c:b4:b1:24:7b:b3:14:f7:32:a8:e9:39: a3:38:97:3f:d8:97:50:17:40:a9:68:ca:1d:2a:39:d1:db:06: 22:a0:2c:45:d6:ca:ae:45:1a:d1:b8:34:1d:4d:80:a8:2a:01: e0:0c:bc:2b:12:3e:85:07:08:04:fe:e4:6a:35:d1:ca:cd:3b: c2:b9:e9:84:5c:9d:da:f9:af:d8:21:00:f2:38:0a:d6:dd:ff: 23:44:0d:71:56:3f:29:90:af:b3:79:d1:ed:61:4b:b8:a1:eb: ef:5f:bb:cc:cd:24:20:c3:9d:f1:0c:fc:c6:1b:10:51:f7:ed: a4:75:82:6a:05:61:e9:9b:2f:df:9a:80:d4:44:87:fa:1b:07: 61:a4:a6:0a:95:f0:cb:73:d5:0c:71:90:84:99:39:ee:76:b8: 97:f1:a4:2b:94:aa:98:20:7b:06:5c:4f:7f:b1:b8:c2:03:37: 47:e7:eb:b7:2b:2a:1d:ec:f7:f8:df:6c:68:9a:fc:6c:8d:9c: bf:cd:f5:30:da:cf:4e:43:4a:20:ba:75:bf:16:07:d6:27:33: ce:17:9a:36:c1:ac:88:2d:c3:00:6d:c7:d1:22:36:af:52:12: 89:55:8b:e8:8e:c0:c5:37:87:3e:9a:e4:ff:da:85:dc:f3:ea: 6e:29:0b:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE2MTMxMTAvBgNVBAUTKDA5RkMwNzdGMzNFM0FENjdCRjE0Nzc1NTE2N0EzQUQ0 RUFDQjFFN0MwHhcNMjUwNDA2MjMwNDM2WhcNMjUwNDEzMjMwNDM2WjAYMRYwFAYD VQQDEw02N2YzMDg4NC02YTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssbelwuu2HpxdkGgFFPEiO6v22c1ldduLS1IKKEWtUi0a/BeCTT9p85G+NwE V7YV7tBKEuOTicC78njE8K2TS6IAbtksr3KNxtkQLaoAzqnG9MCaefeb4M5t2+NI n0MdrACj7XsqCtdfv5Vq6lNztyVOXRlrjGGxq6aQBKSPMTSeVUU/p+LhsBuiljuz UL80nirD5jq8lq97CSEsTjZ5slzF/he7ww0tpL2/S9HxnAsa3EsiCmZRg2vPfudr BGmHtirlJ9ZOvQ9DqY2jepDDolK388Rl2txAp82lfg33dee0v3abshcg7+IAsSO3 AgehFx/Y7q7VPKpr+xw2naB+RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFj34C50 GmHnDyAUD6hMz6Vv+ngxMB8GA1UdIwQYMBaAFAn8B38z461nvxR3VRZ6OtTqyx58 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTYxMy8zMDk5MjY2OEU1 MzkxMUVCOEE1QjkyNzFDNEY5QUUwMi9DZndIZnpQanJXZV9GSGRWRm5vNjFPckxI bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Nmd0hmelBqcldlX0ZIZFZGbm82MU9yTEhudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTYxMy8zMDk5MjY2OEU1MzkxMUVCOEE1QjkyNzFDNEY5QUUwMi9DZndIZnpQanJX ZV9GSGRWRm5vNjFPckxIbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVrf8zsUgctLEke7MU9zKo6TmjOJc/2JdQF0CpaModKjnR2wYioCxF 1squRRrRuDQdTYCoKgHgDLwrEj6FBwgE/uRqNdHKzTvCuemEXJ3a+a/YIQDyOArW 3f8jRA1xVj8pkK+zedHtYUu4oevvX7vMzSQgw53xDPzGGxBR9+2kdYJqBWHpmy/f moDURIf6GwdhpKYKlfDLc9UMcZCEmTnudriX8aQrlKqYIHsGXE9/sbjCAzdH5+u3 Kyod7Pf432xomvxsjZy/zfUw2s9OQ0ogunW/FgfWJzPOF5o2wayILcMAbcfRIjav UhKJVYvojsDFN4c+muT/2oXc8+puKQvo -----END CERTIFICATE-----Generated at Mon Apr 7 13:58:23 2025 by rpki-client