$ rpki-client -vvf rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft File: D5qo3lPwhe6GWh490qI0TiEwrxQ.mft (raw, json) Hash identifier: z/qhgtiz6BwQ5Un4S7AogeugP+354zqZuUaqdGrfTuY= Subject key identifier: AE:71:B2:06:76:A6:36:A8:41:E5:27:86:36:72:22:1E:52:6F:B9:2A Authority key identifier: 0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14 Certificate issuer: /CN=A916F7BE/serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft Manifest number: 4E Signing time: Sat 29 Mar 2025 06:39:04 +0000 Manifest this update: Sat 29 Mar 2025 06:39:04 +0000 Manifest next update: Sat 05 Apr 2025 06:39:04 +0000 Files and hashes: 1: D5qo3lPwhe6GWh490qI0TiEwrxQ.crl (hash: RVPU8sSQWsa5R9gonAj5G3GeUvBfIWktiiEp0hcWWwU=) 2: 310E8C36A30A11EFB999C96CC4F9AE02.roa (hash: pFRSFI6h6cepGXA89QRHkbEToNAY1QtSMdW9gUz8rz8=) 3: 9AEE04EAA30C11EFB8323D14C4F9AE02.roa (hash: Zk4O88j1RIZ+Ku3IeZORoghBRdg89wRXcbXPFK1V55c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F7BE Validity Not Before: Mar 29 06:39:04 2025 GMT Not After : Apr 5 06:39:04 2025 GMT Subject: CN=67e79588-09a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1f:d1:32:ca:18:6f:b3:62:c9:ed:e3:d4:c0: 43:40:17:ed:c3:1c:56:f8:b6:c9:75:6a:77:17:8f: 4a:d5:21:b9:40:79:0b:6c:cf:bb:63:2f:54:1d:4f: 28:93:30:59:04:7c:db:97:03:b9:55:81:fb:a1:54: 0f:d7:92:d8:08:d6:b2:76:1d:94:02:4c:35:3d:af: 8c:fe:32:b5:28:0d:bf:21:de:2c:26:2a:b7:da:99: be:1a:65:24:1f:a2:2c:e9:2d:a9:b6:9e:9c:57:5b: 15:3d:cd:ab:68:68:82:98:d1:83:8c:44:fc:5e:dc: 44:50:4a:2a:8f:8c:57:81:ad:10:7d:13:d0:b4:a1: ec:f9:24:e2:b8:5d:df:cc:12:a8:3b:8c:38:82:3a: 8a:60:3e:fb:32:ee:24:59:ae:31:c7:4f:92:be:bd: 30:6e:31:0a:09:62:38:bd:d9:10:15:5a:a6:39:f9: 31:76:b0:a0:fc:c2:54:77:83:b8:68:d6:e5:9c:10: 70:54:b3:45:26:1d:4f:03:51:aa:3f:17:68:3c:6e: 45:1b:2a:6e:f7:f4:6e:95:4d:e4:da:92:8b:65:31: 9d:3b:6f:49:37:a7:56:66:40:28:0d:d7:83:2a:8e: 5a:5e:4d:12:7b:75:b8:29:f4:a4:d6:c8:2b:2c:77: 08:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:71:B2:06:76:A6:36:A8:41:E5:27:86:36:72:22:1E:52:6F:B9:2A X509v3 Authority Key Identifier: keyid:0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:59:38:25:56:43:32:f6:05:27:b4:fa:3e:36:e5:c2:03:9d: cd:02:da:56:ac:c1:dc:e3:1e:28:f7:30:66:0d:3c:df:0d:d9: 3d:ab:fd:42:3f:ae:8a:d0:48:97:c7:69:27:7f:5b:3d:f2:a0: cc:55:67:ef:ce:68:14:9a:93:b8:05:14:29:80:5a:61:b9:7f: 91:a2:a1:6d:48:87:7e:82:1a:24:e1:26:39:39:21:05:d5:97: 2c:dc:6d:bc:e5:12:a6:2f:4e:ee:33:a6:72:5e:e1:36:4a:e1: 21:94:db:63:3d:f2:86:15:1d:7b:45:2f:8f:30:03:b5:f6:f5: 65:65:35:ac:32:33:9d:42:fe:de:c7:10:43:65:58:a6:c2:ac: 54:71:ac:b8:bc:58:78:96:b9:df:f1:48:60:33:c2:83:d1:4d: f5:da:6d:6f:88:2a:11:3e:2a:92:71:1e:63:d9:29:17:99:79: 79:49:c4:f4:16:b4:79:ae:75:5b:34:1a:6f:1c:2a:59:92:51: 38:ba:14:5c:23:cf:1b:cf:bd:97:f9:a0:a8:c8:4f:d5:b5:31: 4e:51:47:29:cd:7c:af:46:c8:b5:05:8e:7f:a9:38:94:b0:3b: 9d:42:90:57:ae:61:9f:c5:be:2d:ea:30:49:5c:94:5d:db:a9: 9f:ba:d4:a7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RjdCRTExMC8GA1UEBRMoMEY5QUE4REU1M0YwODVFRTg2NUExRTNERDJBMjM0NEUy MTMwQUYxNDAeFw0yNTAzMjkwNjM5MDRaFw0yNTA0MDUwNjM5MDRaMBgxFjAUBgNV BAMTDTY3ZTc5NTg4LTA5YTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLH9Eyyhhvs2LJ7ePUwENAF+3DHFb4tsl1ancXj0rVIblAeQtsz7tjL1QdTyiT MFkEfNuXA7lVgfuhVA/XktgI1rJ2HZQCTDU9r4z+MrUoDb8h3iwmKrfamb4aZSQf oizpLam2npxXWxU9zatoaIKY0YOMRPxe3ERQSiqPjFeBrRB9E9C0oez5JOK4Xd/M Eqg7jDiCOopgPvsy7iRZrjHHT5K+vTBuMQoJYji92RAVWqY5+TF2sKD8wlR3g7ho 1uWcEHBUs0UmHU8DUao/F2g8bkUbKm739G6VTeTakotlMZ07b0k3p1ZmQCgN14Mq jlpeTRJ7dbgp9KTWyCssdwghAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrnGyBnam NqhB5SeGNnIiHlJvuSowHwYDVR0jBBgwFoAUD5qo3lPwhe6GWh490qI0TiEwrxQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZGN0JFLzA5Q0UzMjY0OUNG RTExRUY4RUVDOTA0QUM0RjlBRTAyL0Q1cW8zbFB3aGU2R1doNDkwcUkwVGlFd3J4 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRDVxbzNsUHdoZTZHV2g0OTBxSTBUaUV3cnhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZG N0JFLzA5Q0UzMjY0OUNGRTExRUY4RUVDOTA0QUM0RjlBRTAyL0Q1cW8zbFB3aGU2 R1doNDkwcUkwVGlFd3J4US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALpZOCVWQzL2BSe0+j425cIDnc0C2laswdzjHij3MGYNPN8N2T2r/UI/ rorQSJfHaSd/Wz3yoMxVZ+/OaBSak7gFFCmAWmG5f5GioW1Ih36CGiThJjk5IQXV lyzcbbzlEqYvTu4zpnJe4TZK4SGU22M98oYVHXtFL48wA7X29WVlNawyM51C/t7H EENlWKbCrFRxrLi8WHiWud/xSGAzwoPRTfXabW+IKhE+KpJxHmPZKReZeXlJxPQW tHmudVs0Gm8cKlmSUTi6FFwjzxvPvZf5oKjIT9W1MU5RRynNfK9GyLUFjn+pOJSw O51CkFeuYZ/Fvi3qMElclF3bqZ+61Kc= -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:41 2025 by rpki-client