$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft File: _knCz373vPtEQkWD30SkczIILFk.mft (raw, json) Hash identifier: W8le3+suPKPVevscQULQ5mi5jgcnIK3BVuL3qmC5seY= Subject key identifier: 1D:9C:59:E1:37:B5:72:98:B8:3E:90:6C:24:1A:81:F2:C1:EA:9C:8B Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59 Certificate issuer: /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59 Certificate serial: 0613 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft Manifest number: 0601 Signing time: Wed 02 Apr 2025 22:54:44 +0000 Manifest this update: Wed 02 Apr 2025 22:54:44 +0000 Manifest next update: Wed 09 Apr 2025 22:54:44 +0000 Files and hashes: 1: _knCz373vPtEQkWD30SkczIILFk.crl (hash: 5IfLI2OkApa4xHOy7ci/fwAypOgprzuC3IBWEpuZKao=) 2: B1C90C7A20EC11EF964FFE2CC4F9AE02.roa (hash: u+IddtnEZ3PpaS5wkgvcnMQ5NxiRiCy+krC9UIm0AEs=) 3: B2602B2820EC11EF964FFE2CC4F9AE02.roa (hash: GTvoFugBA+uCvfRWo4LUswGkHyD24NgsZWWXmqE2VNc=) 4: 6A80A1DA930011EFAF2ACC48C4F9AE02.roa (hash: z3se8A09zx2Huzx3cHt2XniXO/IZyEE/vV6YRsvSpe0=) 5: 68219776A41311EBBF911855C4F9AE02.roa (hash: ItkS9hhBxUUr7QTrdN4qhsm8OMGF5bAvi1QRQ2K74xw=) 6: 3F82CC6E234E11EFAF9F0F60C4F9AE02.roa (hash: WKwWhbPawyOzgAjOsk/HfPjPqc+lQeKAyZrRcRmfwlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:54:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1555 (0x613) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B4A3 Validity Not Before: Apr 2 22:54:44 2025 GMT Not After : Apr 9 22:54:44 2025 GMT Subject: CN=67edc034-1957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:76:e4:91:de:63:84:12:ed:f9:1d:49:11:b1: 59:02:b7:30:06:4f:4a:0e:22:cf:af:d7:40:b6:b7: 43:a7:a2:dd:13:a6:f8:e4:89:9a:eb:4a:cc:6c:52: 82:3d:26:97:de:de:aa:16:e8:a6:53:ad:ac:1e:00: 99:bb:81:11:20:ca:b5:fd:1e:28:02:c1:0c:93:83: 02:f5:bc:39:51:22:55:7a:0b:9d:8f:b9:eb:1f:62: 0b:47:85:32:63:15:f6:ef:23:32:ad:01:73:91:a3: 5b:80:49:cf:20:8d:83:2a:94:4e:a4:17:82:52:88: 56:73:df:54:89:b5:27:d8:89:d3:23:44:ba:8c:a4: 31:b6:e9:6a:dc:7b:cb:ff:b7:d6:53:08:e7:c6:73: bf:5d:38:68:2c:7a:81:c1:53:76:55:cb:a9:53:f3: 80:5e:0f:e1:3f:51:cc:69:c4:e3:8b:21:fc:6f:f0: 79:6b:a7:1b:8c:70:53:42:79:3b:c8:19:21:72:25: a1:b0:0e:93:27:82:3b:2e:dd:e0:76:4e:c0:1d:69: 69:44:04:dc:98:8e:de:46:8c:26:60:42:3f:5a:3f: 2e:9e:1a:15:07:80:39:42:16:56:37:ec:35:9e:11: 6e:65:c5:88:96:27:45:40:f9:d9:b8:f8:b9:d5:93: 36:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9C:59:E1:37:B5:72:98:B8:3E:90:6C:24:1A:81:F2:C1:EA:9C:8B X509v3 Authority Key Identifier: keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c8:89:99:14:61:57:2a:20:b6:2d:dc:cb:b0:1f:3d:a0:c2: c0:80:a6:ee:5a:2d:d0:6b:7b:97:58:9b:f9:55:d3:70:43:cf: 64:7b:08:99:68:30:c1:72:a9:cc:74:50:7a:72:b7:51:e6:0c: 7e:36:99:0e:29:b2:0e:cc:61:c8:ce:f5:7d:13:36:ef:63:05: 64:35:a1:70:a7:d1:13:ae:85:3c:50:44:e2:95:da:74:3a:11: d3:60:2b:7e:10:62:f5:9d:13:0d:cc:7d:a4:b0:7e:71:a8:26: 30:6c:f7:0d:3e:a0:e3:c3:0b:69:3e:41:87:a0:3d:db:01:f1: ba:c8:02:27:f5:2d:20:c7:7f:bd:d2:ff:04:68:34:85:5d:fe: db:61:f3:e4:c0:97:dc:ed:32:64:4e:9a:73:63:b6:a9:dd:42: 97:45:12:a7:c2:97:76:77:21:93:a4:df:be:85:f6:6e:95:8b: b3:f8:ec:d2:e4:81:a3:a9:34:0d:29:0a:06:59:6d:8c:10:46: ec:f4:2a:9a:ef:21:5c:ed:a4:5e:fb:fc:40:95:4c:c1:fe:d4: 20:f3:14:38:b7:0a:6a:d2:aa:44:c8:84:5f:d5:a1:7a:7f:78: 95:d7:6e:c4:e6:d2:9c:b7:e8:16:c4:24:cf:2e:4d:31:16:09: 30:77:e3:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI0QTMxMTAvBgNVBAUTKEZFNDlDMkNGN0VGN0JDRkI0NDQyNDU4M0RGNDRBNDcz MzIwODJDNTkwHhcNMjUwNDAyMjI1NDQ0WhcNMjUwNDA5MjI1NDQ0WjAYMRYwFAYD VQQDEw02N2VkYzAzNC0xOTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXbkkd5jhBLt+R1JEbFZArcwBk9KDiLPr9dAtrdDp6LdE6b45Ima60rMbFKC PSaX3t6qFuimU62sHgCZu4ERIMq1/R4oAsEMk4MC9bw5USJVegudj7nrH2ILR4Uy YxX27yMyrQFzkaNbgEnPII2DKpROpBeCUohWc99UibUn2InTI0S6jKQxtulq3HvL /7fWUwjnxnO/XThoLHqBwVN2VcupU/OAXg/hP1HMacTjiyH8b/B5a6cbjHBTQnk7 yBkhciWhsA6TJ4I7Lt3gdk7AHWlpRATcmI7eRowmYEI/Wj8unhoVB4A5QhZWN+w1 nhFuZcWIlidFQPnZuPi51ZM2ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2cWeE3 tXKYuD6QbCQagfLB6pyLMB8GA1UdIwQYMBaAFP5Jws9+97z7REJFg99EpHMyCCxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjRBMy82RDYyQzhDNEEw NDIxMUVCODFCRkZEMUZDNEY5QUUwMi9fa25DejM3M3ZQdEVRa1dEMzBTa2N6SUlM RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rbkN6MzczdlB0RVFrV0QzMFNrY3pJSUxGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjRBMy82RDYyQzhDNEEwNDIxMUVCODFCRkZEMUZDNEY5QUUwMi9fa25DejM3M3ZQ dEVRa1dEMzBTa2N6SUlMRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsyImZFGFXKiC2LdzLsB89oMLAgKbuWi3Qa3uXWJv5VdNwQ89kewiZ aDDBcqnMdFB6crdR5gx+NpkOKbIOzGHIzvV9EzbvYwVkNaFwp9ETroU8UETildp0 OhHTYCt+EGL1nRMNzH2ksH5xqCYwbPcNPqDjwwtpPkGHoD3bAfG6yAIn9S0gx3+9 0v8EaDSFXf7bYfPkwJfc7TJkTppzY7ap3UKXRRKnwpd2dyGTpN++hfZulYuz+OzS 5IGjqTQNKQoGWW2MEEbs9Cqa7yFc7aRe+/xAlUzB/tQg8xQ4twpq0qpEyIRf1aF6 f3iV127E5tKct+gWxCTPLk0xFgkwd+Ow -----END CERTIFICATE-----Generated at Fri Apr 4 21:58:01 2025 by rpki-client