$ rpki-client -vvf rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft File: Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft (raw, json) Hash identifier: y5sc0g283NZVddP/femJ7hfqNahleqX6jMAAjK4eWs4= Subject key identifier: C6:97:55:15:9D:75:9D:5F:0A:C5:41:49:76:A2:5E:A8:86:70:9F:C4 Authority key identifier: 16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47 Certificate issuer: /CN=A916223F/serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247 Certificate serial: 0C62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft Manifest number: 0C5D Signing time: Fri 04 Apr 2025 18:23:37 +0000 Manifest this update: Fri 04 Apr 2025 18:23:37 +0000 Manifest next update: Fri 11 Apr 2025 18:23:37 +0000 Files and hashes: 1: Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl (hash: gM0E4odlDX/EW40OhuXAKS2xCA7MLQ8kHBpFgLmGA04=) 2: 80392340F95D11E9ABF14387C4F9AE02.roa (hash: /karXHORf2+bzNF7YGlxUcjlijjurkc//gM0e/4KtEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3170 (0xc62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916223F Validity Not Before: Apr 4 18:23:37 2025 GMT Not After : Apr 11 18:23:37 2025 GMT Subject: CN=67f023a9-7f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:57:77:de:99:65:6c:0f:4b:91:43:99:0b:09: 29:99:c3:c6:ee:f3:01:55:14:99:72:e8:82:70:36: e4:e4:5d:19:b8:b3:a5:5b:80:c8:6b:12:ea:3a:f7: d6:ca:e0:d5:e5:b6:5a:9a:52:99:62:c5:78:f8:8e: cf:a7:5e:0e:0f:03:09:25:b6:0b:72:7d:c1:bc:59: fd:32:77:64:d8:06:5e:96:49:b6:f5:9a:cf:dd:4c: f3:6a:0d:14:21:76:56:19:3b:33:da:97:24:68:82: 08:1d:c3:c1:9d:d7:91:a7:59:f5:2c:a6:27:0b:5c: 70:f2:13:90:35:05:68:86:ee:96:24:38:c1:67:fc: bf:c4:23:6a:b4:eb:ce:8e:66:2a:83:d2:a4:1b:b5: 7e:a8:ff:dd:fe:19:5a:d4:2b:91:43:e7:57:bd:4d: ba:a1:fc:ee:6d:fe:c5:d6:37:23:20:f8:88:a9:19: 0d:29:ee:0d:ae:07:43:7d:14:57:1a:c7:9f:75:a0: 90:40:3c:7b:bc:c8:c1:80:33:ba:53:63:f3:17:13: 7e:b2:9e:7b:9e:25:b0:f6:c4:77:72:a8:f1:c2:c9: bb:d9:bd:05:59:a3:d4:37:05:23:20:b8:fb:5b:c9: d2:1a:a2:b8:cd:27:fa:da:c3:76:74:1f:a8:e8:87: dd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:97:55:15:9D:75:9D:5F:0A:C5:41:49:76:A2:5E:A8:86:70:9F:C4 X509v3 Authority Key Identifier: keyid:16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:8b:6b:ce:46:7e:ec:e5:44:2f:be:85:c1:39:83:7d:b8:a8: c3:48:78:8c:4c:5e:0c:23:1c:12:08:58:ff:bc:60:16:6c:3c: 16:0b:58:dc:db:c7:16:ec:1c:6b:b0:da:1e:1f:90:fd:65:8e: 50:a2:ec:23:2d:be:c9:c0:0c:1a:6f:fc:98:74:9c:28:e6:28: c6:a7:88:49:a7:62:c6:5a:a4:4b:88:8d:52:af:0d:ce:28:3c: f8:71:96:25:82:31:7d:d3:0c:11:b3:31:27:3e:1e:c8:72:33: d2:af:66:de:6b:4b:25:98:3b:f0:97:db:ac:a4:67:24:7f:fa: 7e:b9:68:fd:c4:2a:50:4d:fd:a6:48:34:fb:06:e1:81:38:80: e7:ef:37:2f:0a:97:f8:fe:16:b3:b7:7c:aa:5a:89:20:24:99: 55:8d:f4:60:57:eb:e8:b3:c3:d8:f8:21:c5:26:5e:c4:2b:48: 8f:6d:fd:00:17:f2:06:4e:95:29:c6:e8:6f:56:93:ee:a8:5e: 99:49:87:44:70:43:e6:b6:45:f4:9f:85:3e:c1:e3:20:e5:f1: 40:0e:e8:02:03:a8:48:48:54:fb:04:6a:23:1e:fd:e8:95:7c: 4a:61:ed:9d:10:1f:94:38:24:bd:0a:c9:61:50:78:f0:58:90: cc:18:aa:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIyM0YxMTAvBgNVBAUTKDE2RURDODk1NkJDNDEzQzlDNTAyMTkyOEIwM0JDODUw RkM3RTcyNDcwHhcNMjUwNDA0MTgyMzM3WhcNMjUwNDExMTgyMzM3WjAYMRYwFAYD VQQDEw02N2YwMjNhOS03ZjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFd33pllbA9LkUOZCwkpmcPG7vMBVRSZcuiCcDbk5F0ZuLOlW4DIaxLqOvfW yuDV5bZamlKZYsV4+I7Pp14ODwMJJbYLcn3BvFn9Mndk2AZelkm29ZrP3Uzzag0U IXZWGTsz2pckaIIIHcPBndeRp1n1LKYnC1xw8hOQNQVohu6WJDjBZ/y/xCNqtOvO jmYqg9KkG7V+qP/d/hla1CuRQ+dXvU26ofzubf7F1jcjIPiIqRkNKe4NrgdDfRRX GsefdaCQQDx7vMjBgDO6U2PzFxN+sp57niWw9sR3cqjxwsm72b0FWaPUNwUjILj7 W8nSGqK4zSf62sN2dB+o6IfdewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMaXVRWd dZ1fCsVBSXaiXqiGcJ/EMB8GA1UdIwQYMBaAFBbtyJVrxBPJxQIZKLA7yFD8fnJH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjIzRi80RUJGMjdCNkY5 NUMxMUU5QjYyNzIyODVDNEY5QUUwMi9GdTNJbFd2RUU4bkZBaGtvc0R2SVVQeC1j a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z1M0lsV3ZFRThuRkFoa29zRHZJVVB4LWNrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjIzRi80RUJGMjdCNkY5NUMxMUU5QjYyNzIyODVDNEY5QUUwMi9GdTNJbFd2RUU4 bkZBaGtvc0R2SVVQeC1ja2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXi2vORn7s5UQvvoXBOYN9uKjDSHiMTF4MIxwSCFj/vGAWbDwWC1jc 28cW7BxrsNoeH5D9ZY5QouwjLb7JwAwab/yYdJwo5ijGp4hJp2LGWqRLiI1Srw3O KDz4cZYlgjF90wwRszEnPh7IcjPSr2bea0slmDvwl9uspGckf/p+uWj9xCpQTf2m SDT7BuGBOIDn7zcvCpf4/hazt3yqWokgJJlVjfRgV+vos8PY+CHFJl7EK0iPbf0A F/IGTpUpxuhvVpPuqF6ZSYdEcEPmtkX0n4U+weMg5fFADugCA6hISFT7BGojHv3o lXxKYe2dEB+UOCS9CslhUHjwWJDMGKpI -----END CERTIFICATE-----Generated at Sat Apr 5 13:44:57 2025 by rpki-client