$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft File: AxycJuW6sbAa8YoLsblwq1dzRWs.mft (raw, json) Hash identifier: 5hdTpNXjOwiYIUMOjUf+/mhlj2oLu9Mufbw8xqDy950= Subject key identifier: 5A:2F:8E:00:A0:29:05:4B:AA:CA:BD:FE:27:75:77:4F:26:FB:98:0E Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B Certificate issuer: /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B Certificate serial: 061B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft Manifest number: 05DC Signing time: Fri 04 Apr 2025 23:20:40 +0000 Manifest this update: Fri 04 Apr 2025 23:20:39 +0000 Manifest next update: Fri 11 Apr 2025 23:20:39 +0000 Files and hashes: 1: AxycJuW6sbAa8YoLsblwq1dzRWs.crl (hash: Bc+bow0wvtDIjzaJLWcHGIwBOi8tctAYn1wlztiI3qQ=) 2: D4F00AA6E93611EFBAE3D429C4F9AE02.roa (hash: xs6HzUV9auGrtAjORHs99oazL9QK3Zu9xjTbyLehRxw=) 3: F2CF477E50C711EF8B03E673C4F9AE02.roa (hash: btGjIQwgSn7JJwZL2buYiqMnVUjDHCpTzcRyOHOVV9w=) 4: 3B428CDA8AE011EF90B73462C4F9AE02.roa (hash: 57IRG/hk+CbShhSRohuNNMRM6NtPI2s9mEQB7EL1Rs8=) 5: E88EE726E93611EF9E3FF729C4F9AE02.roa (hash: u370YT6QH5DpsdPy5I/afz4i/hBzlnjUSOrXsWTFJNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:20:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1563 (0x61b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D8D9 Validity Not Before: Apr 4 23:20:39 2025 GMT Not After : Apr 11 23:20:39 2025 GMT Subject: CN=67f06947-e83b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:32:f7:91:64:d4:13:41:13:1d:aa:67:6d:0e: 30:d8:08:bb:b8:9a:b1:a1:ab:b3:63:3c:78:06:2a: a5:21:3a:9b:d5:f9:23:ec:d7:2f:d4:b7:aa:67:b8: f7:da:b4:f1:08:d5:a9:99:b9:38:ca:86:e0:e9:55: 10:e5:a3:91:88:45:c6:37:c5:3e:81:ac:52:18:27: 0a:3a:49:8b:eb:16:ba:79:7f:7a:ef:9d:4e:ae:77: 35:fa:c1:92:6b:15:77:e8:22:68:dd:fc:18:3d:74: 09:bb:52:6d:b5:49:3d:1c:0b:45:ca:c0:48:68:7d: 8f:f3:e9:a7:3b:7a:d7:29:0e:8d:a3:33:48:ca:c6: 06:f6:db:78:b9:64:49:c3:79:a8:b8:48:87:35:d8: 08:03:7d:12:e8:20:1f:44:0f:f8:5b:54:4c:0a:33: dd:ce:de:ab:96:20:12:be:c0:5b:a8:bd:c1:3c:bc: fd:66:67:08:95:fc:17:ed:b9:ba:d2:ca:f7:00:28: 96:4f:41:bd:4b:1a:83:5a:37:78:47:05:64:49:bc: 51:89:97:55:0f:42:af:c4:c1:8c:99:c2:45:ea:3c: cc:99:6a:3a:0e:17:46:84:70:9c:54:50:95:96:98: 23:cc:01:45:f3:46:3f:92:7a:b2:b3:82:a1:63:bf: 48:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:2F:8E:00:A0:29:05:4B:AA:CA:BD:FE:27:75:77:4F:26:FB:98:0E X509v3 Authority Key Identifier: keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b0:97:8b:50:9e:f2:88:20:da:32:31:b7:3d:a1:fd:d2:81: 58:68:65:9e:7b:a0:d3:65:cf:19:38:0a:e0:61:b6:70:c2:52: 2c:d6:89:bc:cb:0e:b4:fb:55:c6:9b:14:42:c7:6b:fe:6e:15: 8c:8f:1a:3d:16:9e:ca:fe:ae:bb:3c:e0:64:85:6f:89:3e:6b: c9:41:03:b1:11:6f:e4:84:02:ba:06:b7:f8:c6:2f:24:77:4f: 0a:01:86:9e:51:5b:7b:16:57:95:40:c6:6b:00:87:71:88:9a: 3a:f6:4f:f7:60:b9:06:9a:da:54:60:a8:ae:c4:17:8a:d2:d8: 94:d0:af:04:10:73:22:8c:fd:62:59:60:32:6b:ab:5f:d4:14: 70:54:8e:9b:be:a3:3a:9c:84:b3:7e:d2:63:f3:37:23:7e:19: d9:b0:76:9a:29:39:5b:10:d2:c6:b8:36:83:6c:54:af:68:fe: fe:c1:07:66:10:95:54:8d:94:2e:c9:8b:ea:6f:3e:0a:68:e8: 3b:51:96:8f:9a:b1:13:be:dc:aa:96:40:b9:cf:02:46:ca:97: 87:44:32:27:ff:eb:ac:44:ba:be:76:54:a7:43:9c:54:3b:eb: 14:cd:8c:30:30:c9:27:f8:3b:0d:c9:5e:21:a9:d5:ec:9c:24: 00:43:25:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ4RDkxMTAvBgNVBAUTKDAzMUM5QzI2RTVCQUIxQjAxQUYxOEEwQkIxQjk3MEFC NTc3MzQ1NkIwHhcNMjUwNDA0MjMyMDM5WhcNMjUwNDExMjMyMDM5WjAYMRYwFAYD VQQDEw02N2YwNjk0Ny1lODNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjL3kWTUE0ETHapnbQ4w2Ai7uJqxoauzYzx4BiqlITqb1fkj7Ncv1LeqZ7j3 2rTxCNWpmbk4yobg6VUQ5aORiEXGN8U+gaxSGCcKOkmL6xa6eX96751Ornc1+sGS axV36CJo3fwYPXQJu1JttUk9HAtFysBIaH2P8+mnO3rXKQ6NozNIysYG9tt4uWRJ w3mouEiHNdgIA30S6CAfRA/4W1RMCjPdzt6rliASvsBbqL3BPLz9ZmcIlfwX7bm6 0sr3ACiWT0G9SxqDWjd4RwVkSbxRiZdVD0KvxMGMmcJF6jzMmWo6DhdGhHCcVFCV lpgjzAFF80Y/knqys4KhY79I0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFovjgCg KQVLqsq9/id1d08m+5gOMB8GA1UdIwQYMBaAFAMcnCblurGwGvGKC7G5cKtXc0Vr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDhEOS81NDgzQkZCNkM4 RkIxMUVCQkE1QkFFNTFDNEY5QUUwMi9BeHljSnVXNnNiQWE4WW9Mc2Jsd3ExZHpS V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F4eWNKdVc2c2JBYThZb0xzYmx3cTFkelJXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDhEOS81NDgzQkZCNkM4RkIxMUVCQkE1QkFFNTFDNEY5QUUwMi9BeHljSnVXNnNi QWE4WW9Mc2Jsd3ExZHpSV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfsJeLUJ7yiCDaMjG3PaH90oFYaGWee6DTZc8ZOArgYbZwwlIs1om8 yw60+1XGmxRCx2v+bhWMjxo9Fp7K/q67POBkhW+JPmvJQQOxEW/khAK6Brf4xi8k d08KAYaeUVt7FleVQMZrAIdxiJo69k/3YLkGmtpUYKiuxBeK0tiU0K8EEHMijP1i WWAya6tf1BRwVI6bvqM6nISzftJj8zcjfhnZsHaaKTlbENLGuDaDbFSvaP7+wQdm EJVUjZQuyYvqbz4KaOg7UZaPmrETvtyqlkC5zwJGypeHRDIn/+usRLq+dlSnQ5xU O+sUzYwwMMkn+DsNyV4hqdXsnCQAQyVQ -----END CERTIFICATE-----Generated at Sat Apr 5 12:39:16 2025 by rpki-client