$ rpki-client -vvf rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft File: Ic_hSZujbpQWt_68gTw8LqkWvEY.mft (raw, json) Hash identifier: vlmkwbutpAQx+tYEqMYxT7Kc2f3EGGmJMUl4R6eKucQ= Subject key identifier: A2:A8:50:2F:35:F3:70:8C:F5:95:7C:82:99:FB:0C:EC:15:B6:08:C3 Authority key identifier: 21:CF:E1:49:9B:A3:6E:94:16:B7:FE:BC:81:3C:3C:2E:A9:16:BC:46 Certificate issuer: /CN=A917B413/serialNumber=21CFE1499BA36E9416B7FEBC813C3C2EA916BC46 Certificate serial: 0AA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft Manifest number: 0AA0 Signing time: Fri 04 Apr 2025 19:39:37 +0000 Manifest this update: Fri 04 Apr 2025 19:39:37 +0000 Manifest next update: Fri 11 Apr 2025 19:39:37 +0000 Files and hashes: 1: Ic_hSZujbpQWt_68gTw8LqkWvEY.crl (hash: jQZTGlM6557QVigP8jZ7os1TmT1VFk6wAArp2hv5Xow=) 2: 498B6EFE942411EA816FC855C4F9AE02.roa (hash: AU3Frw6p1SnNaYVLPNPNSlHZdunuBupMTCIgXK+Ojng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.crl rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2729 (0xaa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B413 Validity Not Before: Apr 4 19:39:37 2025 GMT Not After : Apr 11 19:39:37 2025 GMT Subject: CN=67f03579-420e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1e:23:17:d7:a5:ce:71:61:24:fc:c5:89:25: f7:c2:53:64:aa:58:33:a7:e2:71:c0:dd:01:5a:e6: 52:4b:9f:82:e1:bd:d2:7e:08:f9:77:c3:d0:f6:dc: e8:9a:be:2c:94:e9:60:d0:c6:e9:8c:f1:60:54:be: 06:b9:f0:b8:47:d5:e1:5e:96:0b:91:da:cd:1e:9a: b4:00:4d:ef:48:3f:c7:a3:ee:51:0f:55:2c:c7:f2: 38:ad:45:76:05:c9:9b:75:df:12:14:95:aa:2c:2f: 54:81:90:fa:9e:2a:7f:21:e0:bd:10:dd:c4:61:39: cb:49:3f:c0:8c:f1:b4:cd:e4:8a:b9:a8:c0:a6:60: 16:cc:09:ee:c7:7d:e7:d2:4d:45:5c:a2:2f:5e:1a: 75:e5:9b:d0:db:7d:77:1e:ed:2e:5c:c1:36:77:73: ea:88:bf:7d:1e:82:c6:60:f9:ed:4e:4c:59:4f:8b: 7f:ee:d0:b2:9d:b0:d5:dc:1a:be:64:1e:8e:df:28: 73:b5:12:02:fe:bf:e2:2c:2f:3f:71:51:06:c1:14: f8:f8:a4:5f:ec:af:83:60:79:09:41:a9:4b:e8:1e: 53:60:77:1a:4b:0d:98:4a:0b:74:8c:8f:39:7f:37: 0a:56:5e:76:1f:5f:39:30:26:c4:3e:73:4d:e5:0a: db:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A8:50:2F:35:F3:70:8C:F5:95:7C:82:99:FB:0C:EC:15:B6:08:C3 X509v3 Authority Key Identifier: keyid:21:CF:E1:49:9B:A3:6E:94:16:B7:FE:BC:81:3C:3C:2E:A9:16:BC:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:fc:a2:7d:f0:ca:f7:e9:2c:f2:b5:72:ce:cb:6b:9d:a1:26: 99:4b:ef:38:9b:4c:ea:b7:02:d3:bd:c4:ec:59:d7:58:e0:bf: 7c:1d:e7:3e:cf:75:4a:33:63:8a:73:cf:c7:ee:35:97:44:aa: dd:c2:9b:30:c4:26:06:37:38:b1:43:bf:e5:9b:93:97:72:b6: 55:7b:4f:7b:84:dd:46:91:1b:9a:a4:a8:e0:51:4c:f3:18:b7: b8:1f:07:62:f8:3b:5d:9a:0b:e7:23:e2:e2:b8:05:cd:03:ad: ac:1c:44:8b:c2:80:74:09:f3:72:a9:be:a9:43:f7:33:10:65: 7e:41:58:cb:72:e7:51:1f:2e:c5:b9:d5:78:1d:92:bb:51:f7: df:06:2b:42:45:1c:79:0f:9b:e8:d2:85:96:f9:44:3c:2e:19: c3:05:96:7f:12:0c:ca:f3:70:30:3b:1e:86:f3:0f:82:60:96: ae:7f:17:fe:41:69:c0:47:54:79:68:72:ba:79:aa:1e:41:45: d3:2b:34:51:68:75:b9:5b:90:50:8e:85:18:ba:4d:60:0f:de: fa:72:19:af:98:1b:9c:0b:d3:56:21:eb:e4:f1:0d:39:d5:91: 78:44:8a:a8:50:27:d7:03:a3:85:2d:38:8d:bc:72:16:88:64: 09:e5:6a:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0MTMxMTAvBgNVBAUTKDIxQ0ZFMTQ5OUJBMzZFOTQxNkI3RkVCQzgxM0MzQzJF QTkxNkJDNDYwHhcNMjUwNDA0MTkzOTM3WhcNMjUwNDExMTkzOTM3WjAYMRYwFAYD VQQDEw02N2YwMzU3OS00MjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuB4jF9elznFhJPzFiSX3wlNkqlgzp+JxwN0BWuZSS5+C4b3Sfgj5d8PQ9tzo mr4slOlg0MbpjPFgVL4GufC4R9XhXpYLkdrNHpq0AE3vSD/Ho+5RD1Usx/I4rUV2 Bcmbdd8SFJWqLC9UgZD6nip/IeC9EN3EYTnLST/AjPG0zeSKuajApmAWzAnux33n 0k1FXKIvXhp15ZvQ2313Hu0uXME2d3PqiL99HoLGYPntTkxZT4t/7tCynbDV3Bq+ ZB6O3yhztRIC/r/iLC8/cVEGwRT4+KRf7K+DYHkJQalL6B5TYHcaSw2YSgt0jI85 fzcKVl52H185MCbEPnNN5QrbsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKoUC81 83CM9ZV8gpn7DOwVtgjDMB8GA1UdIwQYMBaAFCHP4Umbo26UFrf+vIE8PC6pFrxG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjQxMy9COEZDQTdCQTUx NkUxMUVBOTgwQTI4N0VDNEY5QUUwMi9JY19oU1p1amJwUVd0XzY4Z1R3OExxa1d2 RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljX2hTWnVqYnBRV3RfNjhnVHc4THFrV3ZFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjQxMy9COEZDQTdCQTUxNkUxMUVBOTgwQTI4N0VDNEY5QUUwMi9JY19oU1p1amJw UVd0XzY4Z1R3OExxa1d2RVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0/KJ98Mr36SzytXLOy2udoSaZS+84m0zqtwLTvcTsWddY4L98Hec+ z3VKM2OKc8/H7jWXRKrdwpswxCYGNzixQ7/lm5OXcrZVe097hN1GkRuapKjgUUzz GLe4Hwdi+DtdmgvnI+LiuAXNA62sHESLwoB0CfNyqb6pQ/czEGV+QVjLcudRHy7F udV4HZK7UfffBitCRRx5D5vo0oWW+UQ8LhnDBZZ/EgzK83AwOx6G8w+CYJaufxf+ QWnAR1R5aHK6eaoeQUXTKzRRaHW5W5BQjoUYuk1gD976chmvmBucC9NWIevk8Q05 1ZF4RIqoUCfXA6OFLTiNvHIWiGQJ5WpK -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:35 2025 by rpki-client