$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft File: rwJRH3yA38Do7VBvZjD2e9ZADgk.mft (raw, json) Hash identifier: 18tjoGr8sng+eSGl0zTO0q+zQDlpNuCfXHYShZA9pU4= Subject key identifier: 3F:F5:B6:4B:F1:A8:BA:D5:09:09:2D:FE:23:68:E3:95:82:DC:CD:19 Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Certificate serial: 1405 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft Manifest number: 13F2 Signing time: Wed 16 Apr 2025 16:56:09 +0000 Manifest this update: Wed 16 Apr 2025 16:56:09 +0000 Manifest next update: Wed 23 Apr 2025 16:56:09 +0000 Files and hashes: 1: rwJRH3yA38Do7VBvZjD2e9ZADgk.crl (hash: sWSpxQbpfmIciWMxCIk3kBSagfz3fvM6fc2QQtSdOdk=) 2: 4C6227D2B69B11EFA181E00AC4F9AE02.roa (hash: 3UDqux2pyFF/Bk7qZfNBKUplKVtNPBgZPpnXk8snk4g=) 3: 26F19BD2EFFE11EDA34BD84DC4F9AE02.roa (hash: OwQjzjq4z1p3OKHRKYKyS/M55XVWZ+v6tClUy+yiWnc=) 4: 7F444842C3A411ED8EFA6F13C4F9AE02.roa (hash: PdnkTM08eG2sjPAy8+yW/MtnozIOdAkbD6OPtta7i0w=) 5: 7EA2ADC0C3A411ED8EFA6F13C4F9AE02.roa (hash: TNsMJFZbcdKegim5sz+iSFbDGvmlLTbjneRhrtC2NlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 16:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5125 (0x1405) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Validity Not Before: Apr 16 16:56:09 2025 GMT Not After : Apr 23 16:56:09 2025 GMT Subject: CN=67ffe129-e553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3b:de:00:56:e1:08:91:78:e6:8e:cf:20:44: 25:cd:ac:de:9c:9b:7c:71:74:f5:00:0a:54:f1:c0: fe:ad:d5:1d:6d:ea:8e:37:63:6c:6d:aa:76:88:ff: 6b:6f:61:35:87:2a:6c:d7:f8:18:a9:38:b0:1c:61: 85:26:4c:27:80:a3:49:c8:78:76:5f:9e:71:dd:2f: d9:6c:73:a5:dc:d6:1b:83:1c:76:52:28:bd:1b:d5: ce:04:1e:65:73:58:5c:64:3a:ad:0f:02:fe:42:c5: 03:10:2f:34:cb:01:1f:3a:34:a3:5d:8d:ee:4a:e7: 1a:ff:83:b3:a2:08:e7:56:86:2b:92:cf:2a:b5:c4: 8c:a2:39:7d:c1:d5:85:87:e8:92:2d:6d:ea:be:f4: 95:81:be:b3:a5:ba:50:b3:8c:72:6b:4a:87:3b:69: 06:b4:fa:22:75:54:f1:12:71:51:1b:ad:cb:4f:fa: 2a:49:f9:fe:6d:4f:90:4c:b4:2e:69:63:fe:12:9b: 89:db:c6:f7:8b:6a:e7:3a:40:1f:54:4d:eb:41:19: 9b:b7:8f:f6:72:a6:7f:60:8d:1b:98:0e:47:4a:77: 00:69:7e:75:ce:86:d9:75:2d:f6:13:27:07:1c:67: 11:d8:fa:bb:72:c1:fe:5d:b2:bd:58:fa:0e:60:67: 6f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F5:B6:4B:F1:A8:BA:D5:09:09:2D:FE:23:68:E3:95:82:DC:CD:19 X509v3 Authority Key Identifier: keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:e5:ac:bf:76:c8:40:3b:90:ff:d0:c5:c6:52:cc:c3:9c:ed: 8f:40:e6:0a:88:43:be:6a:a5:6e:8d:03:1a:0c:76:96:2d:53: 8c:4b:7e:8d:7c:ce:14:7d:5c:49:83:7f:b1:f2:3a:40:9d:13: 6e:19:96:00:5e:47:8a:63:28:71:f7:ae:95:84:a3:ba:ed:75: 49:64:ed:e4:e8:fe:5a:6f:c4:d0:83:a7:68:5d:2e:09:8f:28: 88:b4:cc:f9:e3:98:a5:74:e6:12:9b:1a:1f:cc:48:6e:f1:ff: ea:03:89:9e:fd:e9:16:09:13:0a:e1:11:f0:93:b5:14:59:ac: 45:a6:d4:08:04:8d:58:3e:d4:bc:e2:17:e6:3d:be:c2:ed:f9: 79:a1:c0:77:f2:e8:f6:e6:4f:3d:c7:14:db:2c:5f:3f:5f:ac: 8c:4f:5d:54:e2:4e:19:04:98:05:84:38:c0:bb:52:d7:dc:af: ba:0d:6b:f0:31:06:11:b7:1a:05:f5:4f:f8:52:b0:4a:15:81: 10:5a:ae:6e:37:84:1f:af:88:47:b2:94:e0:3a:26:39:85:2e: 81:21:8c:c9:0e:73:71:0d:72:bf:8d:34:0d:54:fa:f7:41:4b: 34:a2:a0:69:df:95:db:90:d9:3e:75:b1:64:2a:44:00:d6:4c: 75:13:1e:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC RDY0MDBFMDkwHhcNMjUwNDE2MTY1NjA5WhcNMjUwNDIzMTY1NjA5WjAYMRYwFAYD VQQDEw02N2ZmZTEyOS1lNTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDveAFbhCJF45o7PIEQlzazenJt8cXT1AApU8cD+rdUdbeqON2Nsbap2iP9r b2E1hyps1/gYqTiwHGGFJkwngKNJyHh2X55x3S/ZbHOl3NYbgxx2Uii9G9XOBB5l c1hcZDqtDwL+QsUDEC80ywEfOjSjXY3uSuca/4OzogjnVoYrks8qtcSMojl9wdWF h+iSLW3qvvSVgb6zpbpQs4xya0qHO2kGtPoidVTxEnFRG63LT/oqSfn+bU+QTLQu aWP+EpuJ28b3i2rnOkAfVE3rQRmbt4/2cqZ/YI0bmA5HSncAaX51zobZdS32EycH HGcR2Pq7csH+XbK9WPoOYGdvBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/1tkvx qLrVCQkt/iNo45WC3M0ZMB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEI0QS8wQURCMTdDMDgwMEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4 RG83VkJ2WmpEMmU5WkFEZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQ5ay/dshAO5D/0MXGUszDnO2PQOYKiEO+aqVujQMaDHaWLVOMS36N fM4UfVxJg3+x8jpAnRNuGZYAXkeKYyhx966VhKO67XVJZO3k6P5ab8TQg6doXS4J jyiItMz545ildOYSmxofzEhu8f/qA4me/ekWCRMK4RHwk7UUWaxFptQIBI1YPtS8 4hfmPb7C7fl5ocB38uj25k89xxTbLF8/X6yMT11U4k4ZBJgFhDjAu1LX3K+6DWvw MQYRtxoF9U/4UrBKFYEQWq5uN4Qfr4hHspTgOiY5hS6BIYzJDnNxDXK/jTQNVPr3 QUs0oqBp35XbkNk+dbFkKkQA1kx1Ex5M -----END CERTIFICATE-----Generated at Thu Apr 17 15:02:04 2025 by rpki-client