$ rpki-client -vvf rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft File: pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft (raw, json) Hash identifier: 4xER17K1sjtWMo/9tmtfNvuGyZGaVk3XzW/NGdVUiiU= Subject key identifier: 9E:12:BD:19:82:57:29:49:E0:69:E4:4D:81:64:34:CF:4B:94:C0:10 Authority key identifier: A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3 Certificate issuer: /CN=A916A763/serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3 Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft Manifest number: 0138 Signing time: Sat 12 Apr 2025 12:42:29 +0000 Manifest this update: Sat 12 Apr 2025 12:42:29 +0000 Manifest next update: Sat 19 Apr 2025 12:42:29 +0000 Files and hashes: 1: pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl (hash: ufkTkmVJKYp/X+nrmEESRUHfOtaHYvWWCDfEiMNklEk=) 2: 966CB516179B11F080B9434CC4F9AE02.roa (hash: R5V6cNUR7QLj7LU1QU6TMYs4Bu+rino6/Kk8saAW2NA=) 3: E540D148177F11F0AF8FDD33C4F9AE02.roa (hash: GGvQ/Rd1O99FftmYMrHsk3pOEDgmTHyM+G+A5w+K4/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 12:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A763, serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3 Validity Not Before: Apr 12 12:42:29 2025 GMT Not After : Apr 19 12:42:29 2025 GMT Subject: CN=67fa5fb5-ea6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:91:c9:ba:0b:71:b1:8e:7c:f6:22:d0:51:77: 8f:d2:08:0f:39:67:74:6c:fa:7e:3e:41:23:bb:db: ae:79:15:b6:7c:1b:07:b0:6f:58:b7:e1:04:11:33: f8:b2:2c:6f:f8:8a:1b:c6:d3:d3:d2:a3:29:b2:92: ff:a6:47:d8:d6:31:0b:ca:7a:8e:6a:94:07:ff:6d: 63:76:75:8d:6a:f0:24:6a:21:04:82:fc:38:99:33: 2e:08:8c:2f:80:0f:f6:13:e7:b4:76:8c:47:02:61: 60:57:37:eb:1f:6c:31:6f:00:c8:25:aa:9c:ca:e1: 0a:44:9a:28:4f:01:0b:3f:8d:0c:fc:59:ca:e8:ff: 07:38:78:4b:06:d4:cd:d7:11:5b:db:83:10:db:c8: 2a:89:5e:41:98:dd:0d:62:c6:64:8b:89:70:f0:15: 53:81:e6:92:15:bf:62:8e:a5:38:ef:ad:35:17:73: b5:02:41:fc:db:16:15:14:3d:69:5d:1a:1e:03:19: 22:d2:df:74:26:7c:c4:4b:f3:b8:78:99:fb:9d:60: 71:96:66:aa:44:1a:b0:dc:a2:8d:55:6a:17:4a:2e: 2e:12:a7:60:f9:97:c4:34:0f:da:70:d4:4f:ec:fc: 25:b4:07:75:8d:5b:4b:40:11:f8:bb:c6:d3:69:7a: d1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:12:BD:19:82:57:29:49:E0:69:E4:4D:81:64:34:CF:4B:94:C0:10 X509v3 Authority Key Identifier: keyid:A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:34:4d:eb:0c:2a:6e:36:b6:a1:dc:ed:32:ac:c4:4d:80:12: 4a:b6:9c:28:07:a0:35:6d:c9:e1:91:cd:83:4f:5f:e5:f8:4f: 1e:87:6c:12:74:4c:00:85:43:70:2e:b9:95:4c:9c:9e:b9:9a: ef:c6:d7:68:cc:a4:13:97:b5:c2:7e:b6:2f:25:02:c1:04:ed: c5:83:8c:c0:b8:8b:fe:dc:d2:d6:9e:b7:04:87:34:05:68:21: 46:a9:29:46:f3:4c:79:73:a0:2e:58:e6:24:19:86:75:df:9f: fa:56:f1:fa:d1:39:8e:c1:68:59:66:5d:55:e3:2f:74:1b:f6: 2d:60:1a:3b:69:79:43:ef:e9:af:7e:30:e6:3f:fa:d8:a5:1b: f6:ce:17:41:3b:9c:89:2f:0d:d9:b3:96:32:78:3f:b4:30:ee: 6d:99:2f:5b:10:56:2a:ac:cd:f6:de:23:ef:16:c6:4a:fb:22: 62:2c:e9:95:e0:32:3d:07:4f:42:cc:ec:7e:60:e7:69:be:81: 63:40:2b:01:c7:52:43:83:d8:8f:69:7f:de:e1:2b:c7:17:15: 0f:1e:76:c0:2c:2f:e0:98:38:a6:05:f1:e9:ad:f6:ca:4a:11: 28:1f:02:d8:c6:5b:35:45:db:93:c0:f1:e8:c7:ce:c1:aa:97: 3f:4d:2a:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE3NjMxMTAvBgNVBAUTKEE1NUQzRkY4QTg1QkUxMDNCNTgzNzUwRDc3OTQzRjQ3 Qzk3NkY1QjMwHhcNMjUwNDEyMTI0MjI5WhcNMjUwNDE5MTI0MjI5WjAYMRYwFAYD VQQDEw02N2ZhNWZiNS1lYTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpHJugtxsY589iLQUXeP0ggPOWd0bPp+PkEju9uueRW2fBsHsG9Yt+EEETP4 sixv+IobxtPT0qMpspL/pkfY1jELynqOapQH/21jdnWNavAkaiEEgvw4mTMuCIwv gA/2E+e0doxHAmFgVzfrH2wxbwDIJaqcyuEKRJooTwELP40M/FnK6P8HOHhLBtTN 1xFb24MQ28gqiV5BmN0NYsZki4lw8BVTgeaSFb9ijqU47601F3O1AkH82xYVFD1p XRoeAxki0t90JnzES/O4eJn7nWBxlmaqRBqw3KKNVWoXSi4uEqdg+ZfENA/acNRP 7PwltAd1jVtLQBH4u8bTaXrRKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4SvRmC VylJ4GnkTYFkNM9LlMAQMB8GA1UdIwQYMBaAFKVdP/ioW+EDtYN1DXeUP0fJdvWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTc2My83MUY3OUMxQzQy NDIxMUVFQTdGMkNBMTJDNEY5QUUwMi9wVjBfLUtoYjRRTzFnM1VOZDVRX1I4bDI5 Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BWMF8tS2hiNFFPMWczVU5kNVFfUjhsMjliTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTc2My83MUY3OUMxQzQyNDIxMUVFQTdGMkNBMTJDNEY5QUUwMi9wVjBfLUtoYjRR TzFnM1VOZDVRX1I4bDI5Yk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABNE3rDCpuNrah3O0yrMRNgBJKtpwoB6A1bcnhkc2DT1/l+E8eh2wS dEwAhUNwLrmVTJyeuZrvxtdozKQTl7XCfrYvJQLBBO3Fg4zAuIv+3NLWnrcEhzQF aCFGqSlG80x5c6AuWOYkGYZ135/6VvH60TmOwWhZZl1V4y90G/YtYBo7aXlD7+mv fjDmP/rYpRv2zhdBO5yJLw3Zs5YyeD+0MO5tmS9bEFYqrM323iPvFsZK+yJiLOmV 4DI9B09CzOx+YOdpvoFjQCsBx1JDg9iPaX/e4SvHFxUPHnbALC/gmDimBfHprfbK ShEoHwLYxls1RduTwPHox87Bqpc/TSo7 -----END CERTIFICATE-----Generated at Sat Apr 12 19:16:47 2025 by rpki-client