$ rpki-client -vvf rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft File: -JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft (raw, json) Hash identifier: 3/WMD36T07S0BEu8lwCXNHMQTaEZnMSImW2VwvZ3o3k= Subject key identifier: FD:F8:F2:25:10:A9:CC:F4:BA:59:59:3D:89:39:39:35:15:93:BF:AF Authority key identifier: F8:93:21:50:1C:07:65:E3:51:47:A5:5C:7E:7D:A5:CB:06:C2:9C:04 Certificate issuer: /CN=A916BACE/serialNumber=F89321501C0765E35147A55C7E7DA5CB06C29C04 Certificate serial: 13B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft Manifest number: 13AA Signing time: Fri 04 Apr 2025 17:02:50 +0000 Manifest this update: Fri 04 Apr 2025 17:02:50 +0000 Manifest next update: Fri 11 Apr 2025 17:02:50 +0000 Files and hashes: 1: -JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl (hash: EAo3i7BoBCPXowp/E7aU6ulhJs6s+iOYTsJIbtC2txw=) 2: 1774301E8AF211E89749376EC4F9AE02.roa (hash: 4zJ9/i0D6qT42odGNdGTQH8LvSwP3oB1L9xGXSlqgko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5042 (0x13b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BACE Validity Not Before: Apr 4 17:02:50 2025 GMT Not After : Apr 11 17:02:50 2025 GMT Subject: CN=67f010ba-9ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:eb:23:3d:29:5a:2d:16:7a:d2:ed:8c:55:98: db:d1:ad:0d:3a:7f:68:3f:01:5c:35:49:fa:4e:84: 3a:a2:81:a6:d5:0f:f6:2f:6e:8a:52:a7:3e:46:e8: 35:1c:d5:b4:73:c0:62:e1:53:5c:af:ab:36:30:bb: 81:34:0f:82:01:53:b2:ac:2d:78:0c:61:99:dd:9a: a8:c1:b4:24:9b:c3:5b:9a:4c:9f:ff:cf:f6:fb:f1: a2:1f:f4:8f:32:3b:7b:e5:b8:a1:34:20:4c:61:e3: e5:d5:52:b1:55:84:1a:96:19:b0:e3:76:df:67:9b: a9:56:7c:d9:71:09:e7:c9:1d:56:ca:7e:ed:66:fe: e2:96:c2:1b:89:ed:d3:f6:50:9d:50:dd:82:66:15: ce:d5:a9:a7:98:ce:12:c1:9d:38:fb:72:c0:0b:eb: b5:27:22:c6:71:bc:00:ca:71:28:a3:09:6d:9f:40: 50:50:04:2a:d9:56:76:35:73:ca:5b:66:af:1e:8e: 55:45:9b:79:0a:66:c3:7d:1a:0c:5a:be:63:6b:3a: 98:dc:2e:f7:c1:a1:12:a9:6e:ca:2d:89:b4:40:82: d8:ab:55:39:33:99:b6:e5:3b:24:a1:85:0f:8f:ee: b3:04:37:86:51:51:e5:67:07:22:d6:75:ec:2c:23: 25:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F8:F2:25:10:A9:CC:F4:BA:59:59:3D:89:39:39:35:15:93:BF:AF X509v3 Authority Key Identifier: keyid:F8:93:21:50:1C:07:65:E3:51:47:A5:5C:7E:7D:A5:CB:06:C2:9C:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:2a:66:23:4a:8b:cd:34:b7:fc:cc:7c:aa:9e:61:42:c2:71: 4d:73:95:6e:cc:50:45:e0:97:04:33:f7:4f:b9:4f:07:68:48: de:95:29:e7:9f:c8:10:d2:c7:ce:a6:9e:3f:e4:b5:ba:c2:eb: 4d:81:f8:fa:b5:0f:5b:02:27:12:9d:6c:f1:42:fe:63:19:75: 5c:56:12:ad:9e:ad:f4:92:52:1d:e4:52:ca:73:91:87:a8:11: 78:a6:39:23:ea:2f:b3:9b:02:57:a2:12:0f:97:2e:ea:a5:d4: 6f:32:9b:4c:41:ea:cf:7f:73:e1:72:01:9d:b0:a6:3b:27:a8: 4f:d5:ab:be:ef:88:72:b3:c3:c2:b3:59:cd:9d:5e:a6:ba:eb: de:b2:ea:15:f4:f0:d0:06:5d:6a:6f:5a:41:82:6e:30:f2:ba: 16:71:69:e6:47:19:e8:e7:88:4f:33:03:41:77:5a:11:e1:f6: 49:e2:6f:ec:b8:06:62:da:d9:ff:e6:2d:2c:8b:05:14:d0:6d: 20:78:34:cf:f1:2f:21:b8:64:db:f1:1f:55:8b:5a:23:5f:d5: 6e:78:e2:5a:a0:6f:59:19:53:46:4b:6d:ea:9c:00:ec:ca:c7: 2c:5a:48:e9:9c:30:5f:a3:4f:7d:70:35:ef:62:9d:63:85:db: 3c:88:69:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJBQ0UxMTAvBgNVBAUTKEY4OTMyMTUwMUMwNzY1RTM1MTQ3QTU1QzdFN0RBNUNC MDZDMjlDMDQwHhcNMjUwNDA0MTcwMjUwWhcNMjUwNDExMTcwMjUwWjAYMRYwFAYD VQQDEw02N2YwMTBiYS05ZWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+sjPSlaLRZ60u2MVZjb0a0NOn9oPwFcNUn6ToQ6ooGm1Q/2L26KUqc+Rug1 HNW0c8Bi4VNcr6s2MLuBNA+CAVOyrC14DGGZ3ZqowbQkm8Nbmkyf/8/2+/GiH/SP Mjt75bihNCBMYePl1VKxVYQalhmw43bfZ5upVnzZcQnnyR1Wyn7tZv7ilsIbie3T 9lCdUN2CZhXO1amnmM4SwZ04+3LAC+u1JyLGcbwAynEoowltn0BQUAQq2VZ2NXPK W2avHo5VRZt5CmbDfRoMWr5jazqY3C73waESqW7KLYm0QILYq1U5M5m25TskoYUP j+6zBDeGUVHlZwci1nXsLCMlcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP348iUQ qcz0ullZPYk5OTUVk7+vMB8GA1UdIwQYMBaAFPiTIVAcB2XjUUelXH59pcsGwpwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkFDRS9BNjYyNzIzQzhB RjExMUU4OTlBN0NFNkRDNEY5QUUwMi8tSk1oVUJ3SFplTlJSNlZjZm4ybHl3YkNu QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KTWhVQndIWmVOUlI2VmNmbjJseXdiQ25BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkFDRS9BNjYyNzIzQzhBRjExMUU4OTlBN0NFNkRDNEY5QUUwMi8tSk1oVUJ3SFpl TlJSNlZjZm4ybHl3YkNuQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9KmYjSovNNLf8zHyqnmFCwnFNc5VuzFBF4JcEM/dPuU8HaEjelSnn n8gQ0sfOpp4/5LW6wutNgfj6tQ9bAicSnWzxQv5jGXVcVhKtnq30klId5FLKc5GH qBF4pjkj6i+zmwJXohIPly7qpdRvMptMQerPf3PhcgGdsKY7J6hP1au+74hys8PC s1nNnV6muuvesuoV9PDQBl1qb1pBgm4w8roWcWnmRxno54hPMwNBd1oR4fZJ4m/s uAZi2tn/5i0siwUU0G0geDTP8S8huGTb8R9Vi1ojX9VueOJaoG9ZGVNGS23qnADs yscsWkjpnDBfo099cDXvYp1jhds8iGm5 -----END CERTIFICATE-----Generated at Sun Apr 6 16:36:07 2025 by rpki-client