$ rpki-client -vvf rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft File: 4659B01pZ-L0n_njuNebv6KAmpI.mft (raw, json) Hash identifier: pUbgRDUi2jLNfkRGpWqLYPMwsh7waqCuDJCNY/SUB/A= Subject key identifier: 2E:12:50:89:4C:66:D0:0D:79:B0:E9:FC:5F:FB:42:37:DA:8A:80:95 Authority key identifier: E3:AE:7D:07:4D:69:67:E2:F4:9F:F9:E3:B8:D7:9B:BF:A2:80:9A:92 Certificate issuer: /CN=A918A695/serialNumber=E3AE7D074D6967E2F49FF9E3B8D79BBFA2809A92 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft Manifest number: 78 Signing time: Thu 17 Apr 2025 05:35:17 +0000 Manifest this update: Thu 17 Apr 2025 05:35:17 +0000 Manifest next update: Thu 24 Apr 2025 05:35:17 +0000 Files and hashes: 1: 4659B01pZ-L0n_njuNebv6KAmpI.crl (hash: rJ3bqEzXZORIK36R3oQek6Pal3LwOwEARvfG1NsWGmg=) 2: 0DE9C0F2691E11EF86B94667C4F9AE02.roa (hash: 13S0uPk78cTkONRaoiB2NygyvHW1IriAd1JcSvRHXys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.crl rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 05:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A695, serialNumber=E3AE7D074D6967E2F49FF9E3B8D79BBFA2809A92 Validity Not Before: Apr 17 05:35:17 2025 GMT Not After : Apr 24 05:35:17 2025 GMT Subject: CN=68009315-c9aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:20:51:0d:e6:75:78:32:7e:ba:5b:b2:40:8c: 7f:28:9e:8d:90:fd:6e:b0:6d:78:d7:0b:02:13:09: 33:7a:8f:39:c1:86:08:45:22:01:75:9d:e5:4d:a1: 0c:57:55:7f:58:9e:fe:78:b7:04:44:9e:d4:9c:2f: ca:12:18:d9:77:2c:0c:2a:45:77:2f:34:d5:02:1a: 4c:04:de:88:f1:d5:46:47:9e:d1:16:28:3d:69:43: ab:71:0b:32:b6:72:3c:bf:a3:ae:63:af:78:65:d1: 48:65:53:86:22:f8:f5:46:8d:2e:12:d9:d9:f5:3d: 75:78:b7:b9:62:1c:64:4a:01:e3:f5:bf:ba:cc:1c: e6:bd:4a:36:d8:80:2d:4f:42:29:df:5b:68:4a:3f: 52:d6:60:3e:56:54:1a:57:9a:4b:93:8d:8f:94:80: d0:7e:4f:29:b5:a3:ce:a5:87:0d:79:1d:5b:cc:fc: 9b:d1:b8:a9:4a:17:f3:96:0e:3c:86:37:17:46:b2: 04:bc:19:55:cf:ac:8a:31:e5:50:3e:25:08:de:e1: 44:24:e6:0c:07:40:9b:0a:2d:75:3c:45:e3:d4:2b: 6c:32:9d:0e:d1:de:7f:5a:48:f7:05:50:dc:1d:45: e6:11:3d:c4:7c:0a:15:82:06:e6:cb:9e:ad:39:e2: 33:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:12:50:89:4C:66:D0:0D:79:B0:E9:FC:5F:FB:42:37:DA:8A:80:95 X509v3 Authority Key Identifier: keyid:E3:AE:7D:07:4D:69:67:E2:F4:9F:F9:E3:B8:D7:9B:BF:A2:80:9A:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:b9:eb:2a:e0:9d:8d:1b:98:74:2c:df:8e:da:d3:f7:d4:9d: 48:74:8a:33:67:8d:eb:48:9a:d1:37:a2:02:1f:50:7b:ba:05: e5:8a:3b:5b:9f:3e:17:11:69:1c:9b:29:44:02:ea:e1:99:ae: 98:5b:22:70:be:e6:6f:a7:3a:e3:50:aa:b2:86:f5:0c:5f:75: 27:b2:da:72:3f:58:2f:33:48:71:ec:dd:2d:24:f7:d0:14:67: d3:62:7c:62:88:2c:12:c3:aa:35:27:4c:ba:1a:6e:1f:df:d8: 47:ee:50:26:ba:3f:7f:6d:ba:64:f0:80:22:9c:e5:c6:d1:a0: 54:6b:9b:c3:c7:2a:e3:e7:f8:df:4a:9b:aa:1a:db:f5:58:d1: 55:c7:52:6c:5e:9c:fb:4e:b7:59:5d:51:55:b2:5d:37:76:b5: 22:0b:5b:5b:e3:ec:86:c2:84:ed:8b:25:a6:14:b3:b0:8a:42: 4c:f6:6f:ae:05:e6:f1:ba:6b:91:a6:61:d8:a1:0a:6c:97:34: 47:63:4d:5b:3a:74:44:db:cc:b3:4e:6b:bc:e7:5d:f6:8d:32: 3f:4b:08:b5:74:c2:ce:f1:ee:63:e1:8f:bc:47:99:03:00:83: 67:2b:d4:4d:eb:3d:82:16:6d:db:ae:5e:0c:89:44:0d:ca:2c: 24:40:b9:dd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QTY5NTExMC8GA1UEBRMoRTNBRTdEMDc0RDY5NjdFMkY0OUZGOUUzQjhENzlCQkZB MjgwOUE5MjAeFw0yNTA0MTcwNTM1MTdaFw0yNTA0MjQwNTM1MTdaMBgxFjAUBgNV BAMTDTY4MDA5MzE1LWM5YWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrIFEN5nV4Mn66W7JAjH8ono2Q/W6wbXjXCwITCTN6jznBhghFIgF1neVNoQxX VX9Ynv54twREntScL8oSGNl3LAwqRXcvNNUCGkwE3ojx1UZHntEWKD1pQ6txCzK2 cjy/o65jr3hl0UhlU4Yi+PVGjS4S2dn1PXV4t7liHGRKAeP1v7rMHOa9SjbYgC1P QinfW2hKP1LWYD5WVBpXmkuTjY+UgNB+Tym1o86lhw15HVvM/JvRuKlKF/OWDjyG NxdGsgS8GVXPrIox5VA+JQje4UQk5gwHQJsKLXU8RePUK2wynQ7R3n9aSPcFUNwd ReYRPcR8ChWCBubLnq054jMfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULhJQiUxm 0A15sOn8X/tCN9qKgJUwHwYDVR0jBBgwFoAU4659B01pZ+L0n/njuNebv6KAmpIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBNjk1LzhERUZFODBFNjkx RDExRUZCOEZEMUU2NEM0RjlBRTAyLzQ2NTlCMDFwWi1MMG5fbmp1TmVidjZLQW1w SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNDY1OUIwMXBaLUwwbl9uanVOZWJ2NktBbXBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB Njk1LzhERUZFODBFNjkxRDExRUZCOEZEMUU2NEM0RjlBRTAyLzQ2NTlCMDFwWi1M MG5fbmp1TmVidjZLQW1wSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAO56yrgnY0bmHQs347a0/fUnUh0ijNnjetImtE3ogIfUHu6BeWKO1uf PhcRaRybKUQC6uGZrphbInC+5m+nOuNQqrKG9QxfdSey2nI/WC8zSHHs3S0k99AU Z9NifGKILBLDqjUnTLoabh/f2EfuUCa6P39tumTwgCKc5cbRoFRrm8PHKuPn+N9K m6oa2/VY0VXHUmxenPtOt1ldUVWyXTd2tSILW1vj7IbChO2LJaYUs7CKQkz2b64F 5vG6a5GmYdihCmyXNEdjTVs6dETbzLNOa7znXfaNMj9LCLV0ws7x7mPhj7xHmQMA g2cr1E3rPYIWbduuXgyJRA3KLCRAud0= -----END CERTIFICATE-----Generated at Sat Apr 19 05:34:58 2025 by rpki-client