$ rpki-client -vvf rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft File: Pj3GKtNpQScHmphxdsIYwJs-yf0.mft (raw, json) Hash identifier: lEcOXcylKzKaoES4NRV+pA3QcUZ+CTfzFhvQTmKOWOc= Subject key identifier: 8F:F6:0F:D7:56:3A:77:01:B0:7D:3E:F9:C0:AD:9D:4A:99:B5:0B:A2 Authority key identifier: 3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD Certificate issuer: /CN=A916559E/serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD Certificate serial: 2BE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft Manifest number: 2BC6 Signing time: Fri 04 Apr 2025 15:35:56 +0000 Manifest this update: Fri 04 Apr 2025 15:35:56 +0000 Manifest next update: Fri 11 Apr 2025 15:35:56 +0000 Files and hashes: 1: Pj3GKtNpQScHmphxdsIYwJs-yf0.crl (hash: 8VF/IwzzjectzMCcyjZrOhDDqbMl3lfzDG27apn2kWk=) 2: 5E736B1EEE2C11ECBDA4362BC4F9AE02.roa (hash: QxC8XQFD3MDBsuFxTQg4Otg1i1wTUXZZ34Nm/9hdJR8=) 3: A37B20206FE111E9B3465D70C4F9AE02.roa (hash: yJlLAaym8LODZOP3qHrwUI/2A/4o2Eczor55+AGHrBo=) 4: C49CBEFCD27711ECAAC6BD51C4F9AE02.roa (hash: ZzinzTlIW5G+E7Cn69/SSCuiLh8Bteyn8yaFUqPW2mk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11237 (0x2be5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916559E Validity Not Before: Apr 4 15:35:56 2025 GMT Not After : Apr 11 15:35:56 2025 GMT Subject: CN=67effc5c-4562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:9a:ca:dc:4b:82:8a:e5:08:a5:cb:7c:3e:1d: e9:c4:7b:01:95:d6:9e:09:cc:42:28:76:10:f0:a1: de:99:70:44:cc:f5:f5:18:cd:bc:55:7e:50:23:6f: 36:d2:92:87:65:7e:e1:57:40:19:af:0b:a9:1a:d0: 79:b7:8f:27:8a:ee:fd:00:9f:dc:6a:0f:0f:24:26: 3c:46:c1:52:a7:ac:49:58:6c:2d:48:e2:b6:49:63: 1c:81:0e:8f:74:07:58:ce:11:d3:74:ac:3f:a4:2f: 1b:a8:29:0c:dc:a1:c6:90:30:f9:89:9b:e9:f9:71: c7:00:86:15:ab:aa:66:f9:74:3e:f4:f3:e1:8c:69: 23:ec:89:9c:ef:a7:6a:c6:66:8f:8e:6b:59:fa:a4: 1a:90:f0:29:2d:f1:09:01:95:c5:bd:50:e9:8c:32: ed:c6:c0:52:76:a4:0d:4d:0c:98:89:a1:36:56:e4: 75:18:2c:09:2b:38:6c:91:11:4f:11:40:ce:b6:0d: 44:19:65:21:eb:45:fe:b6:4d:e7:f0:93:91:e7:45: 92:75:8b:86:28:ab:a5:1b:82:3b:1c:b8:cf:ee:bb: fe:56:07:83:13:3a:2e:9d:70:fb:11:50:d4:2d:55: de:5f:20:0c:e9:ca:56:be:3f:6e:db:40:22:fc:39: f2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F6:0F:D7:56:3A:77:01:B0:7D:3E:F9:C0:AD:9D:4A:99:B5:0B:A2 X509v3 Authority Key Identifier: keyid:3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:52:5f:e3:b0:c6:36:78:8b:17:25:c4:4e:8a:b3:5b:fd:a9: 84:cb:37:0f:9d:54:27:f9:be:13:e9:23:87:e8:af:41:d0:02: a2:41:f6:40:87:17:42:80:20:bd:cf:cf:b7:d3:aa:f0:29:97: 9d:e0:29:3a:cb:da:b9:0d:b3:e9:ee:93:73:b8:4e:0a:1d:71: ac:7b:eb:98:59:cb:55:c1:c8:83:b8:1b:14:f0:f1:f9:50:29: 34:a7:ec:23:b1:97:25:a1:dc:f8:b4:64:a7:55:77:86:7b:83: 63:31:4d:ea:a6:ac:b0:40:48:2e:f4:3f:e2:a6:20:2b:be:69: 19:69:89:27:aa:c6:91:da:0a:7a:5a:65:eb:2c:e8:db:f8:9b: d1:8f:9f:2e:c3:db:53:93:9f:8f:bc:70:c5:85:4e:03:7a:fa: d3:c1:23:5b:ad:3d:f5:dc:b3:26:ba:c8:b1:7e:9c:fd:4c:e2: 66:5c:d5:e8:ae:c7:3c:33:d5:06:66:8a:fc:52:31:33:20:60: 04:cb:1c:87:4d:04:5f:b9:99:cd:3d:02:b1:62:4c:cb:bb:d5: 29:63:85:9a:4e:b4:b4:d9:d3:3b:b4:51:b5:33:4c:93:b5:9f: 7a:61:9c:21:de:c3:d0:2f:48:b7:3e:bd:e2:fb:94:39:4e:ce: 15:7f:02:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1OUUxMTAvBgNVBAUTKDNFM0RDNjJBRDM2OTQxMjcwNzlBOTg3MTc2QzIxOEMw OUIzRUM5RkQwHhcNMjUwNDA0MTUzNTU2WhcNMjUwNDExMTUzNTU2WjAYMRYwFAYD VQQDEw02N2VmZmM1Yy00NTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+ZrK3EuCiuUIpct8Ph3pxHsBldaeCcxCKHYQ8KHemXBEzPX1GM28VX5QI282 0pKHZX7hV0AZrwupGtB5t48niu79AJ/cag8PJCY8RsFSp6xJWGwtSOK2SWMcgQ6P dAdYzhHTdKw/pC8bqCkM3KHGkDD5iZvp+XHHAIYVq6pm+XQ+9PPhjGkj7Imc76dq xmaPjmtZ+qQakPApLfEJAZXFvVDpjDLtxsBSdqQNTQyYiaE2VuR1GCwJKzhskRFP EUDOtg1EGWUh60X+tk3n8JOR50WSdYuGKKulG4I7HLjP7rv+VgeDEzounXD7EVDU LVXeXyAM6cpWvj9u20Ai/DnyoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/2D9dW OncBsH0++cCtnUqZtQuiMB8GA1UdIwQYMBaAFD49xirTaUEnB5qYcXbCGMCbPsn9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU5RS9ENDdGRUZDRUQ0 MEIxMUUzODVENDhBNzA1OTExRUEzMi9QajNHS3ROcFFTY0htcGh4ZHNJWXdKcy15 ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BqM0dLdE5wUVNjSG1waHhkc0lZd0pzLXlmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTU5RS9ENDdGRUZDRUQ0MEIxMUUzODVENDhBNzA1OTExRUEzMi9QajNHS3ROcFFT Y0htcGh4ZHNJWXdKcy15ZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGUl/jsMY2eIsXJcROirNb/amEyzcPnVQn+b4T6SOH6K9B0AKiQfZA hxdCgCC9z8+306rwKZed4Ck6y9q5DbPp7pNzuE4KHXGse+uYWctVwciDuBsU8PH5 UCk0p+wjsZclodz4tGSnVXeGe4NjMU3qpqywQEgu9D/ipiArvmkZaYknqsaR2gp6 WmXrLOjb+JvRj58uw9tTk5+PvHDFhU4DevrTwSNbrT313LMmusixfpz9TOJmXNXo rsc8M9UGZor8UjEzIGAEyxyHTQRfuZnNPQKxYkzLu9UpY4WaTrS02dM7tFG1M0yT tZ96YZwh3sPQL0i3Pr3i+5Q5Ts4VfwLd -----END CERTIFICATE-----Generated at Sat Apr 5 13:19:57 2025 by rpki-client