$ rpki-client -vvf rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft File: jZcXcn1ujusjgHsxPAWNA1b_4WI.mft (raw, json) Hash identifier: MsfO4VrDBQ2fFKsT/jCnrbawXZ54MZbSuokSR+jUNxM= Subject key identifier: 07:24:B0:F0:BE:1A:A8:11:21:D0:31:89:E7:EC:23:FA:BB:C4:E5:84 Authority key identifier: 8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 Certificate issuer: /CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft Manifest number: 7D Signing time: Sat 05 Apr 2025 05:56:43 +0000 Manifest this update: Sat 05 Apr 2025 05:56:43 +0000 Manifest next update: Sat 12 Apr 2025 05:56:43 +0000 Files and hashes: 1: jZcXcn1ujusjgHsxPAWNA1b_4WI.crl (hash: QcIsG3MwIqMICxSw1YvRTygXlJ2Bj+nFAhaUe2eq/Ms=) 2: 6104609C5A1111EFA655393FC4F9AE02.roa (hash: 9c45BaBlVMR7XX0xhpD8nfBMrjtsUQUJEJfn4sWwe5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B53B Validity Not Before: Apr 5 05:56:43 2025 GMT Not After : Apr 12 05:56:43 2025 GMT Subject: CN=67f0c61b-fcd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d9:e4:de:55:07:8d:f3:be:43:dd:bb:b8:cd: 06:9c:43:75:7c:2d:90:ec:4a:5c:d2:37:78:73:5e: eb:f3:1b:14:f4:59:a4:91:08:82:1d:06:d4:fc:12: a3:ea:f9:d0:fb:c8:84:06:95:c1:f3:be:31:16:a6: 27:3f:48:d6:62:94:3d:da:2b:19:e0:1d:88:28:fc: db:a9:33:bf:fa:b5:b3:81:b2:bf:b5:b9:d2:cc:d9: ce:82:73:37:0b:ee:58:0b:25:79:1b:60:70:ab:fb: db:37:64:4e:d6:7f:7d:87:63:56:5d:c4:f6:98:5f: 92:be:e8:2b:4f:89:fd:00:e7:4f:1a:06:64:15:74: f2:c3:04:b4:f9:36:f5:b1:38:d3:5c:18:78:2c:26: e4:3a:e7:85:2d:e8:40:e3:9e:9a:b6:83:05:f1:d0: 46:6e:35:df:09:63:01:f4:28:93:df:bb:73:5b:58: 91:10:2f:06:76:4a:11:c0:a0:d4:01:89:2d:4a:5c: f7:c4:72:b0:b2:90:86:29:c2:a6:60:0b:ee:6c:7a: 1b:90:b4:04:48:b5:57:a3:a1:23:f9:55:f7:38:1a: 36:0d:77:05:19:b7:55:9e:58:bc:84:c6:9e:f8:47: c2:25:f6:bd:0a:b4:e3:af:f6:0d:80:71:87:4b:57: 24:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:24:B0:F0:BE:1A:A8:11:21:D0:31:89:E7:EC:23:FA:BB:C4:E5:84 X509v3 Authority Key Identifier: keyid:8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:2d:e2:7e:40:16:49:4f:6d:1c:fb:80:0b:99:60:bc:59:6a: e7:2e:d5:9b:02:f7:48:c9:34:ec:43:79:f9:48:05:aa:e4:8d: 54:52:bd:a8:82:cc:10:a8:ca:df:94:e2:8c:cd:3c:c6:19:6f: 04:cd:3f:f3:72:20:1e:6c:47:d3:fe:91:23:b5:fc:df:9e:17: 02:b7:25:f2:fb:39:d7:e6:e2:50:07:db:66:b1:ef:8c:0d:35: fd:57:45:f0:66:38:49:0e:c2:7a:1a:09:3c:f8:53:b5:bd:b2: a8:81:6b:ad:91:13:ee:04:61:43:9c:d5:23:e1:8d:cb:16:4e: c7:72:d2:89:2a:bb:83:6d:1c:69:54:56:5a:fb:87:28:58:99: 05:7b:30:cc:d7:40:eb:b7:b1:79:93:f7:97:74:ed:d0:15:d5: db:b9:40:f1:2a:e4:13:ca:fd:09:65:a5:c7:9d:d0:d5:f4:f5: 2f:e4:3d:ca:59:02:0b:8a:15:06:56:9a:a3:87:ea:f2:a9:43: a3:d3:91:28:36:e6:ea:b7:8a:2a:9a:67:9f:13:38:01:85:48: 51:79:eb:19:66:46:64:ae:16:32:d5:e7:3c:11:ae:73:03:c1: a4:8f:f1:2c:c0:c1:c5:35:ad:c6:ec:7f:34:d0:6b:78:17:c0: e9:6e:32:4d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QjUzQjExMC8GA1UEBRMoOEQ5NzE3NzI3RDZFOEVFQjIzODA3QjMxM0MwNThEMDM1 NkZGRTE2MjAeFw0yNTA0MDUwNTU2NDNaFw0yNTA0MTIwNTU2NDNaMBgxFjAUBgNV BAMTDTY3ZjBjNjFiLWZjZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDG2eTeVQeN875D3bu4zQacQ3V8LZDsSlzSN3hzXuvzGxT0WaSRCIIdBtT8EqPq +dD7yIQGlcHzvjEWpic/SNZilD3aKxngHYgo/NupM7/6tbOBsr+1udLM2c6CczcL 7lgLJXkbYHCr+9s3ZE7Wf32HY1ZdxPaYX5K+6CtPif0A508aBmQVdPLDBLT5NvWx ONNcGHgsJuQ654Ut6EDjnpq2gwXx0EZuNd8JYwH0KJPfu3NbWJEQLwZ2ShHAoNQB iS1KXPfEcrCykIYpwqZgC+5sehuQtARItVejoSP5Vfc4GjYNdwUZt1WeWLyExp74 R8Il9r0KtOOv9g2AcYdLVyQnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBySw8L4a qBEh0DGJ5+wj+rvE5YQwHwYDVR0jBBgwFoAUjZcXcn1ujusjgHsxPAWNA1b/4WIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCNTNCLzIwMzIzQTgyNTlE RDExRUZCQUQ0QzI4NkM0RjlBRTAyL2paY1hjbjF1anVzamdIc3hQQVdOQTFiXzRX SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvalpjWGNuMXVqdXNqZ0hzeFBBV05BMWJfNFdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC NTNCLzIwMzIzQTgyNTlERDExRUZCQUQ0QzI4NkM0RjlBRTAyL2paY1hjbjF1anVz amdIc3hQQVdOQTFiXzRXSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHIt4n5AFklPbRz7gAuZYLxZaucu1ZsC90jJNOxDeflIBarkjVRSvaiC zBCoyt+U4ozNPMYZbwTNP/NyIB5sR9P+kSO1/N+eFwK3JfL7Odfm4lAH22ax74wN Nf1XRfBmOEkOwnoaCTz4U7W9sqiBa62RE+4EYUOc1SPhjcsWTsdy0okqu4NtHGlU Vlr7hyhYmQV7MMzXQOu3sXmT95d07dAV1du5QPEq5BPK/Qllpced0NX09S/kPcpZ AguKFQZWmqOH6vKpQ6PTkSg25uq3iiqaZ58TOAGFSFF56xlmRmSuFjLV5zwRrnMD waSP8SzAwcU1rcbsfzTQa3gXwOluMk0= -----END CERTIFICATE-----Generated at Sat Apr 5 19:22:31 2025 by rpki-client