$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft File: CVjwl8rkKX3ycoLkGD468UJMj34.mft (raw, json) Hash identifier: r2XnQWXpZ3W3uVId2MCjeqB/asmglAgU46mzH6uDkc8= Subject key identifier: 0C:0E:25:E2:6A:51:EF:20:2D:18:65:65:CF:6F:84:D5:03:45:5A:F7 Authority key identifier: 09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E Certificate issuer: /CN=A916814B/serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Certificate serial: 1613 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft Manifest number: 160A Signing time: Wed 16 Apr 2025 16:44:18 +0000 Manifest this update: Wed 16 Apr 2025 16:44:17 +0000 Manifest next update: Wed 23 Apr 2025 16:44:17 +0000 Files and hashes: 1: CVjwl8rkKX3ycoLkGD468UJMj34.crl (hash: YVCj/5yjrtnvbducAGke7117S+b1PF6t5stqqSsZB7g=) 2: B4450EF68E5311EBB81E6C70C4F9AE02.roa (hash: mykXr6ve/cwvr+LfcirysCKrHVhRt9J9fVkHn/0QFbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 16:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5651 (0x1613) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916814B, serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Validity Not Before: Apr 16 16:44:17 2025 GMT Not After : Apr 23 16:44:17 2025 GMT Subject: CN=67ffde62-501f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c0:e9:2a:fc:67:ba:58:d4:19:ed:6f:ef:98: 7f:20:5a:00:3b:47:d2:44:31:60:3f:9e:3c:0c:d3: 93:be:aa:80:45:2a:77:dd:18:93:5e:1f:8d:8d:30: 87:08:ff:8c:e3:e7:a7:fb:3d:6a:a3:eb:1a:be:ff: 9f:54:f3:7d:e6:47:d7:1f:33:7a:3f:02:0a:80:76: 1c:f1:34:b7:60:76:5b:e6:07:13:1e:8c:39:92:ee: 3c:34:f8:3b:46:9a:05:b9:7e:b0:39:3e:dd:73:73: a1:1e:4b:4e:3e:11:ba:b4:d9:61:f3:41:28:e3:36: e4:30:d2:f3:4d:c6:e2:3c:70:63:bb:93:83:25:0c: db:ed:5c:14:69:ea:3e:9d:25:b1:a9:5f:af:2a:d4: 17:f2:b5:7c:f8:03:30:18:24:3c:82:f9:20:17:25: 91:b8:69:4a:6e:86:6d:46:e2:09:56:d1:26:12:96: ff:2c:24:55:1b:91:d0:2a:41:fa:70:15:8c:e6:fe: f7:b6:d1:1d:aa:40:57:5d:d8:4d:e9:0a:ab:d1:cb: 17:76:c0:56:b8:26:2b:65:12:c0:dd:07:24:b4:e8: db:8e:74:28:04:62:2d:21:d3:df:b0:ef:ca:20:87: d9:82:96:4d:c1:50:8b:fd:b0:b7:6c:db:94:a0:a7: b4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0E:25:E2:6A:51:EF:20:2D:18:65:65:CF:6F:84:D5:03:45:5A:F7 X509v3 Authority Key Identifier: keyid:09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:54:c3:e0:6e:a4:38:08:83:c9:ca:82:b5:bc:f0:da:07:d0: 42:1b:b2:8a:1f:3c:35:04:ff:d0:c6:41:94:73:94:40:5a:74: d0:06:66:49:19:64:cf:51:33:66:69:07:d3:45:ef:b4:e2:42: 97:ec:8a:f9:c4:b8:d8:82:88:ba:17:c7:3f:ad:64:82:b6:2b: ae:08:ea:75:e5:3d:32:05:67:2d:e8:f4:14:ea:0d:2d:fe:da: 84:9c:45:ce:bf:d4:dd:33:4a:f6:5f:45:2f:0b:10:d2:bd:aa: 3a:ac:86:2d:3d:b7:09:ae:30:34:53:a8:bb:39:1c:c4:aa:b6: 15:d6:87:b5:96:9d:3f:eb:0a:ac:ec:a1:25:e8:1c:58:58:ff: 40:ab:ef:0e:12:e7:cb:a9:7c:ee:d7:c4:b1:0d:3a:dd:91:f1: 73:cc:9e:99:b8:2c:58:35:21:ba:28:2d:b8:4b:c6:a9:0a:4b: 87:04:73:28:d5:af:d7:a5:8a:bd:6d:4e:4a:54:2a:a8:a6:14: 63:65:06:16:59:3d:44:74:88:1a:8f:cd:c7:5b:81:56:0b:91: 2f:cb:0b:1f:8b:1d:33:f8:da:03:9b:a1:6a:2a:10:cf:13:a6: 1e:b5:8e:03:9a:d7:ab:e8:97:3e:f6:c9:c9:0d:72:d4:29:30: d7:f7:45:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxNEIxMTAvBgNVBAUTKDA5NThGMDk3Q0FFNDI5N0RGMjcyODJFNDE4M0UzQUYx NDI0QzhGN0UwHhcNMjUwNDE2MTY0NDE3WhcNMjUwNDIzMTY0NDE3WjAYMRYwFAYD VQQDEw02N2ZmZGU2Mi01MDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA58DpKvxnuljUGe1v75h/IFoAO0fSRDFgP548DNOTvqqARSp33RiTXh+NjTCH CP+M4+en+z1qo+savv+fVPN95kfXHzN6PwIKgHYc8TS3YHZb5gcTHow5ku48NPg7 RpoFuX6wOT7dc3OhHktOPhG6tNlh80Eo4zbkMNLzTcbiPHBju5ODJQzb7VwUaeo+ nSWxqV+vKtQX8rV8+AMwGCQ8gvkgFyWRuGlKboZtRuIJVtEmEpb/LCRVG5HQKkH6 cBWM5v73ttEdqkBXXdhN6Qqr0csXdsBWuCYrZRLA3QcktOjbjnQoBGItIdPfsO/K IIfZgpZNwVCL/bC3bNuUoKe0fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwOJeJq Ue8gLRhlZc9vhNUDRVr3MB8GA1UdIwQYMBaAFAlY8JfK5Cl98nKC5Bg+OvFCTI9+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODE0Qi9GQjYwNkY1NjE2 MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tYM3ljb0xrR0Q0NjhVSk1q MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0NWandsOHJrS1gzeWNvTGtHRDQ2OFVKTWozNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODE0Qi9GQjYwNkY1NjE2MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tY M3ljb0xrR0Q0NjhVSk1qMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMVMPgbqQ4CIPJyoK1vPDaB9BCG7KKHzw1BP/QxkGUc5RAWnTQBmZJ GWTPUTNmaQfTRe+04kKX7Ir5xLjYgoi6F8c/rWSCtiuuCOp15T0yBWct6PQU6g0t /tqEnEXOv9TdM0r2X0UvCxDSvao6rIYtPbcJrjA0U6i7ORzEqrYV1oe1lp0/6wqs 7KEl6BxYWP9Aq+8OEufLqXzu18SxDTrdkfFzzJ6ZuCxYNSG6KC24S8apCkuHBHMo 1a/XpYq9bU5KVCqophRjZQYWWT1EdIgaj83HW4FWC5Evywsfix0z+NoDm6FqKhDP E6YetY4Dmter6Jc+9snJDXLUKTDX90W8 -----END CERTIFICATE-----Generated at Thu Apr 17 20:28:34 2025 by rpki-client