$ rpki-client -vvf rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft File: aRgc9FH4s_7GT8gpi1ItSIylyeY.mft (raw, json) Hash identifier: CLvrpw7oP6UQm5WuDSUqgScmYZSH/YRRTUh8up5jUGw= Subject key identifier: 91:9D:D8:9C:16:E3:D7:C5:3D:46:BF:C0:E1:F2:2C:78:75:FF:79:78 Authority key identifier: 69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6 Certificate issuer: /CN=A916DE3D/serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft Manifest number: 29 Signing time: Thu 03 Apr 2025 07:04:34 +0000 Manifest this update: Thu 03 Apr 2025 07:04:33 +0000 Manifest next update: Thu 10 Apr 2025 07:04:33 +0000 Files and hashes: 1: aRgc9FH4s_7GT8gpi1ItSIylyeY.crl (hash: 0vmZ9XDoaz42C4pniKx1n7BS/8jwnsJTuuC77hZhv5o=) 2: B3266880FD8511EFA4783083C4F9AE02.roa (hash: W6yWEruXPIDPoCs6QL8pnWnNjj8hPqXcENkKFmbbFhk=) 3: 3AA17754FD8211EFB5BB677AC4F9AE02.roa (hash: da3U2GtkpOoVBwWufrocmgg3FRuPwauXLqHebrDKF4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DE3D Validity Not Before: Apr 3 07:04:33 2025 GMT Not After : Apr 10 07:04:33 2025 GMT Subject: CN=67ee3301-2f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c5:2e:dc:8d:a8:1b:09:ff:97:50:89:e0:58: 3c:22:a9:8b:94:a1:77:75:aa:9e:08:a3:c3:6a:73: 86:b3:70:9e:bb:d6:87:5a:7b:96:15:29:96:16:75: a2:a5:1e:60:2d:5d:c6:0e:ed:3c:e4:d3:af:ba:d3: bc:ed:27:9f:53:e8:fe:3a:fe:51:3e:98:20:89:a8: df:e0:39:ae:8f:ca:6c:fb:6e:e9:a7:32:07:06:ae: 8a:71:a1:15:ef:22:03:30:a5:56:9f:34:b5:0c:f3: bf:d0:74:29:92:22:81:00:70:8b:1e:45:cb:62:ae: 66:3f:78:db:3c:48:de:ed:ea:33:04:42:cd:43:aa: 82:51:7c:fb:f6:26:87:51:93:b2:91:3a:87:42:1d: 3c:2c:65:f4:14:a1:79:62:3b:9b:77:0a:64:31:7d: 56:2a:22:71:66:26:72:4c:d0:a6:52:b2:04:0e:f2: f9:59:99:dc:02:d2:9e:d4:e6:46:71:b8:23:30:52: 98:5a:d8:be:83:8c:15:7d:51:3f:74:a7:2b:c0:ff: 92:2f:be:29:c1:9e:8c:a7:92:70:90:23:eb:f2:21: c2:d2:0e:69:6e:ba:ee:8a:f7:76:89:6d:1d:f6:7b: d1:9f:fd:e9:d6:52:89:88:86:7f:99:4d:47:f6:8e: a0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9D:D8:9C:16:E3:D7:C5:3D:46:BF:C0:E1:F2:2C:78:75:FF:79:78 X509v3 Authority Key Identifier: keyid:69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a7:e9:99:ed:02:0c:d6:5d:7d:9f:c7:4b:59:e1:a4:5e:f6: 23:16:82:58:40:fb:67:9f:41:88:0f:11:da:06:5f:62:84:a6: 93:72:99:6c:4f:94:8f:65:26:13:f6:6d:c4:64:57:d0:a1:2a: a3:67:f1:56:83:f2:ea:b4:23:15:4d:7d:1b:26:aa:13:12:3b: 4f:6e:e7:bd:ca:3b:0e:b9:5f:0e:30:cd:30:29:2e:ca:9a:75: 9e:ea:21:34:04:6c:f6:82:a6:82:3b:3c:b0:eb:60:35:12:73: 05:b2:37:05:61:13:51:b2:e7:e0:6d:0a:2e:9e:0e:73:0f:1a: 27:51:c9:f4:35:b4:7b:8d:6f:6e:7d:e0:81:75:c8:bf:12:b0: 68:6d:70:a6:03:27:ee:e7:dd:2d:0a:73:5d:0a:04:4d:2c:de: f8:16:88:ae:34:9f:b7:76:f9:88:d1:89:ee:ba:63:1b:b5:ea: 17:f1:54:23:f2:3b:5a:b2:95:23:f1:21:6b:86:7c:2d:8f:5c: 43:1f:f4:94:54:10:39:07:9b:67:0b:51:0f:12:22:b5:55:67: b1:95:13:f7:69:f9:0b:74:96:35:e8:81:b5:c6:34:eb:be:35: f0:4d:73:1b:01:bc:6c:20:f4:a6:01:91:25:72:a5:94:a0:51: b4:74:a4:7b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 REUzRDExMC8GA1UEBRMoNjkxODFDRjQ1MUY4QjNGRUM2NEZDODI5OEI1MjJENDg4 Q0E1QzlFNjAeFw0yNTA0MDMwNzA0MzNaFw0yNTA0MTAwNzA0MzNaMBgxFjAUBgNV BAMTDTY3ZWUzMzAxLTJmMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzxS7cjagbCf+XUIngWDwiqYuUoXd1qp4Io8Nqc4azcJ671odae5YVKZYWdaKl HmAtXcYO7Tzk06+607ztJ59T6P46/lE+mCCJqN/gOa6Pymz7bumnMgcGropxoRXv IgMwpVafNLUM87/QdCmSIoEAcIseRctirmY/eNs8SN7t6jMEQs1DqoJRfPv2JodR k7KROodCHTwsZfQUoXliO5t3CmQxfVYqInFmJnJM0KZSsgQO8vlZmdwC0p7U5kZx uCMwUpha2L6DjBV9UT90pyvA/5IvvinBnoynknCQI+vyIcLSDmluuu6K93aJbR32 e9Gf/enWUomIhn+ZTUf2jqAzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkZ3YnBbj 18U9Rr/A4fIseHX/eXgwHwYDVR0jBBgwFoAUaRgc9FH4s/7GT8gpi1ItSIylyeYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZERTNEL0ZEMUU0NTUwREU2 NTExRUY4MjQzRUUzMEM0RjlBRTAyL2FSZ2M5Rkg0c183R1Q4Z3BpMUl0U0l5bHll WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYVJnYzlGSDRzXzdHVDhncGkxSXRTSXlseWVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE RTNEL0ZEMUU0NTUwREU2NTExRUY4MjQzRUUzMEM0RjlBRTAyL2FSZ2M5Rkg0c183 R1Q4Z3BpMUl0U0l5bHllWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACun6ZntAgzWXX2fx0tZ4aRe9iMWglhA+2efQYgPEdoGX2KEppNymWxP lI9lJhP2bcRkV9ChKqNn8VaD8uq0IxVNfRsmqhMSO09u573KOw65Xw4wzTApLsqa dZ7qITQEbPaCpoI7PLDrYDUScwWyNwVhE1Gy5+BtCi6eDnMPGidRyfQ1tHuNb259 4IF1yL8SsGhtcKYDJ+7n3S0Kc10KBE0s3vgWiK40n7d2+YjRie66Yxu16hfxVCPy O1qylSPxIWuGfC2PXEMf9JRUEDkHm2cLUQ8SIrVVZ7GVE/dp+Qt0ljXogbXGNOu+ NfBNcxsBvGwg9KYBkSVypZSgUbR0pHs= -----END CERTIFICATE-----Generated at Fri Apr 4 22:42:17 2025 by rpki-client