$ rpki-client -vvf rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft File: 0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft (raw, json) Hash identifier: N/lfC/mxOKnPq1nV7RqcMXVhjGY49LCMHXWNBsNFOPc= Subject key identifier: 0E:84:37:9E:4E:11:13:BF:D7:D0:04:91:BA:72:B0:5D:3F:F0:B3:E0 Authority key identifier: D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89 Certificate issuer: /CN=A917039B/serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89 Certificate serial: 031C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft Manifest number: 0316 Signing time: Sat 29 Mar 2025 01:24:12 +0000 Manifest this update: Sat 29 Mar 2025 01:24:11 +0000 Manifest next update: Sat 05 Apr 2025 01:24:11 +0000 Files and hashes: 1: 0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl (hash: cdLnRbF7wqep/a6Xz6JtAVxk0kK9gSHOqi0KN/U6XF0=) 2: A26E4F16C13411ECA5838429C4F9AE02.roa (hash: JGWjIhX5RIjoHrKhwJbgn3Pu8vTcZZqlk7E2DqruuO8=) 3: A1CB8D62C13411ECA5838429C4F9AE02.roa (hash: wILHqpy9Ti/8MJSzUe1aVFwRV4mS5BPVF4SBXg86ZeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 01:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 796 (0x31c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917039B Validity Not Before: Mar 29 01:24:11 2025 GMT Not After : Apr 5 01:24:11 2025 GMT Subject: CN=67e74bbb-cd8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a6:98:69:e6:55:69:a0:fa:83:19:eb:d3:56: 5a:14:3c:c6:66:eb:fa:31:b3:81:96:e1:7f:ee:0e: 12:e7:30:d5:d8:60:75:ef:3f:ae:d8:1a:7d:5c:26: 72:c5:e3:ce:d1:d6:65:be:97:fb:fe:b4:61:4d:e0: 98:6d:bc:91:3d:62:e2:ca:bb:79:0b:1b:0b:aa:88: 3e:1c:26:d1:78:4c:08:53:35:34:b5:97:f5:09:3c: 8d:a3:42:b6:5b:48:bd:25:cd:01:2f:7a:a1:16:66: 01:21:f3:27:de:db:55:64:a6:c4:5a:35:19:0d:66: b7:bb:33:5c:dd:80:07:30:55:70:28:d1:5b:13:4a: 40:e5:db:a2:c8:79:4a:2d:12:4b:bc:87:54:ed:4d: d0:7e:0e:99:28:72:9a:9d:07:cd:dd:71:49:a8:7e: 3c:2e:fb:f3:06:63:52:f7:3a:6d:0a:a8:f4:eb:39: ca:65:b8:b7:5d:9a:c8:4f:b0:b3:06:35:87:b3:f9: aa:7b:1e:41:f0:da:1d:9b:71:40:9e:76:fb:71:aa: 68:1e:b0:56:6f:05:3f:b7:55:52:e0:80:13:4a:14: 1b:be:2c:43:85:ff:4c:73:03:08:0e:a9:ac:7f:74: db:f3:b5:6d:ce:06:9c:c4:9c:1b:37:31:c3:bf:df: 12:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:84:37:9E:4E:11:13:BF:D7:D0:04:91:BA:72:B0:5D:3F:F0:B3:E0 X509v3 Authority Key Identifier: keyid:D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:d9:98:9b:a4:da:b5:9d:8c:a0:90:57:e8:6d:37:97:13:0f: 26:f7:b8:26:72:13:77:e3:f4:cd:78:be:1c:40:72:a8:c9:99: 7c:33:07:bd:62:66:a2:45:10:54:59:1b:29:29:7e:f9:31:03: b5:1f:56:c4:82:75:7a:6e:38:98:1e:6f:72:5a:4c:12:6c:ea: f2:7a:cf:1e:2c:65:ba:77:03:35:26:1f:a1:6a:59:d7:2b:8a: 4d:5e:4a:1f:f6:22:4d:f0:c4:f1:15:18:0a:a9:2c:e7:8f:f1: a9:69:82:19:c2:e4:18:dd:8a:69:b5:b1:d9:b3:18:80:ab:cc: 88:b4:ad:f8:90:4a:d2:db:be:31:7c:c2:23:d6:8d:5e:98:2d: 84:ec:70:97:d7:3c:bd:49:68:11:0e:25:30:35:79:08:b2:b5: f3:75:d8:d9:c3:72:40:71:ee:ec:15:ec:89:f1:81:56:8c:79: 39:0f:bc:3b:fa:fa:f9:2d:e2:de:bc:ce:36:4a:f5:19:24:e3: 31:95:7d:20:60:b7:fc:5f:d6:31:fb:f1:3d:f7:c1:96:10:4b: 5c:fb:23:f6:d4:7d:ab:9d:28:75:f1:93:69:85:5e:52:ce:6e: ef:b0:78:e2:3b:8f:29:e6:79:e7:b6:5a:e3:35:9d:d4:a2:21: f5:b8:fa:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzOUIxMTAvBgNVBAUTKEQyMTAyMkMwMEYwREJCRTU4QTk5QTFFNjczRDNBRTFD NURGRENCODkwHhcNMjUwMzI5MDEyNDExWhcNMjUwNDA1MDEyNDExWjAYMRYwFAYD VQQDEw02N2U3NGJiYi1jZDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqqaYaeZVaaD6gxnr01ZaFDzGZuv6MbOBluF/7g4S5zDV2GB17z+u2Bp9XCZy xePO0dZlvpf7/rRhTeCYbbyRPWLiyrt5CxsLqog+HCbReEwIUzU0tZf1CTyNo0K2 W0i9Jc0BL3qhFmYBIfMn3ttVZKbEWjUZDWa3uzNc3YAHMFVwKNFbE0pA5duiyHlK LRJLvIdU7U3Qfg6ZKHKanQfN3XFJqH48LvvzBmNS9zptCqj06znKZbi3XZrIT7Cz BjWHs/mqex5B8Nodm3FAnnb7capoHrBWbwU/t1VS4IATShQbvixDhf9McwMIDqms f3Tb87VtzgacxJwbNzHDv98S5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6EN55O ERO/19AEkbpysF0/8LPgMB8GA1UdIwQYMBaAFNIQIsAPDbvlipmh5nPTrhxd/cuJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDM5Qi85OUY1NDQ3OEMx MzExMUVDOTZCNUUwMjVDNEY5QUUwMi8waEFpd0E4TnUtV0ttYUhtYzlPdUhGMzl5 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBoQWl3QThOdS1XS21hSG1jOU91SEYzOXk0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDM5Qi85OUY1NDQ3OEMxMzExMUVDOTZCNUUwMjVDNEY5QUUwMi8waEFpd0E4TnUt V0ttYUhtYzlPdUhGMzl5NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDT2ZibpNq1nYygkFfobTeXEw8m97gmchN34/TNeL4cQHKoyZl8Mwe9 YmaiRRBUWRspKX75MQO1H1bEgnV6bjiYHm9yWkwSbOryes8eLGW6dwM1Jh+halnX K4pNXkof9iJN8MTxFRgKqSznj/GpaYIZwuQY3YpptbHZsxiAq8yItK34kErS274x fMIj1o1emC2E7HCX1zy9SWgRDiUwNXkIsrXzddjZw3JAce7sFeyJ8YFWjHk5D7w7 +vr5LeLevM42SvUZJOMxlX0gYLf8X9Yx+/E998GWEEtc+yP21H2rnSh18ZNphV5S zm7vsHjiO48p5nnntlrjNZ3UoiH1uPoR -----END CERTIFICATE-----Generated at Fri Apr 4 22:06:34 2025 by rpki-client