$ rpki-client -vvf rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft File: mKWpVZLATr7Thxa8Hc41F7exLQg.mft (raw, json) Hash identifier: cQ6fXH8xTelhULOKEbLmgC7AGh5Tv0xulGADJ9fnnAg= Subject key identifier: 91:EE:0D:8E:B6:F1:81:9F:29:3C:68:E0:4A:02:5F:30:75:BF:69:39 Authority key identifier: 98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08 Certificate issuer: /CN=A917B647/serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08 Certificate serial: 0581 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft Manifest number: 057C Signing time: Fri 04 Apr 2025 23:24:29 +0000 Manifest this update: Fri 04 Apr 2025 23:24:28 +0000 Manifest next update: Fri 11 Apr 2025 23:24:28 +0000 Files and hashes: 1: mKWpVZLATr7Thxa8Hc41F7exLQg.crl (hash: AI2vHaldT5dYJXpBsxCfb3k6eQzWLaWJY7yDwWy6+9I=) 2: BF8F70C67B8211ED9C4EDD3BC4F9AE02.roa (hash: C2RsYbuvVkPn9nhOkeMiqyxQvhJHdbdxyne9j3bxktw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1409 (0x581) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B647 Validity Not Before: Apr 4 23:24:28 2025 GMT Not After : Apr 11 23:24:28 2025 GMT Subject: CN=67f06a2d-73ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:40:d3:67:34:0b:97:62:a0:54:9d:a3:78:a3: d0:e0:bb:c4:43:53:18:9b:33:2a:60:6c:e1:d5:6b: 62:aa:ac:69:c2:f3:ae:70:cc:11:6f:cb:29:48:1a: c3:36:42:74:31:aa:5a:fa:79:de:f0:5a:5a:59:89: 39:fd:75:ce:e5:46:cf:2c:15:f0:b8:86:b7:66:51: ce:f3:18:88:cc:ba:ea:0d:08:3d:38:a3:47:ee:92: 16:58:fc:03:19:8a:0b:5e:0f:db:5f:0d:d7:a6:bd: 60:26:e4:86:0c:27:2f:4b:82:8b:d0:59:f6:62:81: 90:e6:75:26:83:16:8e:0f:78:4a:72:9d:cf:9b:9c: de:30:52:d3:d2:37:4a:4b:a6:2e:a6:13:68:e6:24: da:5d:3c:7e:4f:7e:cf:10:e9:67:65:c6:1d:5c:e1: 02:3a:bf:73:b0:49:23:3c:0c:ca:5a:4b:31:dc:31: f5:ce:9f:92:df:ba:96:de:ae:e0:77:d3:dc:94:ce: 42:6d:3a:74:f7:4a:3e:82:86:89:4b:c8:36:f6:7a: 30:5d:74:c1:5a:a8:35:12:95:e9:b9:7d:43:b3:d6: a0:1c:4d:89:70:2b:63:15:93:7b:96:96:31:fe:47: a0:75:48:98:8c:45:3f:38:4c:78:33:8b:8e:93:69: 9c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:EE:0D:8E:B6:F1:81:9F:29:3C:68:E0:4A:02:5F:30:75:BF:69:39 X509v3 Authority Key Identifier: keyid:98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:bb:66:be:ea:46:bf:a1:5f:f9:1b:1f:9e:19:44:be:ab:84: 87:04:b5:ee:82:72:de:c9:1f:ac:b5:f3:3b:82:96:ec:7c:a4: 67:96:45:82:6f:40:d5:9f:5d:95:48:d3:ba:ec:1d:f6:cf:2a: c7:e7:9b:df:37:c5:5d:b0:68:36:0f:9c:e4:2a:b2:46:58:7f: 6d:cc:e3:63:1f:0d:05:e5:a0:fa:a3:36:d1:fd:18:0a:2c:3a: 78:d7:53:5a:a5:36:f0:e4:45:1e:f3:6d:72:c6:5c:f4:68:19: be:17:8e:a3:ac:f1:6b:55:20:fa:a5:c8:f5:b8:2e:f2:b7:2d: 14:b0:fe:cd:b2:3d:b7:d7:49:34:f5:90:a4:0b:13:c7:b9:49: 9b:7d:1d:25:ec:a0:89:e8:61:02:8a:57:d1:77:7f:13:71:cb: 8e:7d:b4:d0:62:56:93:a2:58:9d:ab:35:96:21:41:11:1f:cf: 3f:34:65:2c:4f:61:e9:fd:5b:d5:f4:1d:2e:ea:8a:7e:57:0a: 4c:9d:f2:58:7f:00:28:ff:9e:ac:d5:7d:4e:70:32:75:99:d7: f2:03:d3:22:40:09:bb:ca:8a:d7:7c:52:96:66:d4:31:71:08: 53:80:49:03:cb:3f:31:40:b2:9d:f8:f3:46:36:de:2e:8c:ab: a7:cf:da:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I2NDcxMTAvBgNVBAUTKDk4QTVBOTU1OTJDMDRFQkVEMzg3MTZCQzFEQ0UzNTE3 QjdCMTJEMDgwHhcNMjUwNDA0MjMyNDI4WhcNMjUwNDExMjMyNDI4WjAYMRYwFAYD VQQDEw02N2YwNmEyZC03M2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0DTZzQLl2KgVJ2jeKPQ4LvEQ1MYmzMqYGzh1WtiqqxpwvOucMwRb8spSBrD NkJ0Mapa+nne8FpaWYk5/XXO5UbPLBXwuIa3ZlHO8xiIzLrqDQg9OKNH7pIWWPwD GYoLXg/bXw3Xpr1gJuSGDCcvS4KL0Fn2YoGQ5nUmgxaOD3hKcp3Pm5zeMFLT0jdK S6YuphNo5iTaXTx+T37PEOlnZcYdXOECOr9zsEkjPAzKWksx3DH1zp+S37qW3q7g d9PclM5CbTp090o+goaJS8g29nowXXTBWqg1EpXpuX1Ds9agHE2JcCtjFZN7lpYx /kegdUiYjEU/OEx4M4uOk2mcrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHuDY62 8YGfKTxo4EoCXzB1v2k5MB8GA1UdIwQYMBaAFJilqVWSwE6+04cWvB3ONRe3sS0I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjY0Ny8wMTU3QkFERUQy NDkxMUVCQTA0QjRDM0JDNEY5QUUwMi9tS1dwVlpMQVRyN1RoeGE4SGM0MUY3ZXhM UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21LV3BWWkxBVHI3VGh4YThIYzQxRjdleExRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjY0Ny8wMTU3QkFERUQyNDkxMUVCQTA0QjRDM0JDNEY5QUUwMi9tS1dwVlpMQVRy N1RoeGE4SGM0MUY3ZXhMUWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCou2a+6ka/oV/5Gx+eGUS+q4SHBLXugnLeyR+stfM7gpbsfKRnlkWC b0DVn12VSNO67B32zyrH55vfN8VdsGg2D5zkKrJGWH9tzONjHw0F5aD6ozbR/RgK LDp411NapTbw5EUe821yxlz0aBm+F46jrPFrVSD6pcj1uC7yty0UsP7Nsj2310k0 9ZCkCxPHuUmbfR0l7KCJ6GECilfRd38TccuOfbTQYlaTolidqzWWIUERH88/NGUs T2Hp/VvV9B0u6op+VwpMnfJYfwAo/56s1X1OcDJ1mdfyA9MiQAm7yorXfFKWZtQx cQhTgEkDyz8xQLKd+PNGNt4ujKunz9pp -----END CERTIFICATE-----Generated at Sat Apr 5 03:58:23 2025 by rpki-client