$ rpki-client -vvf rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft File: IffNCqAWhDVSmHRj5kIpcu8DnOg.mft (raw, json) Hash identifier: dlFsL0gDs6r1Yj80+5g0XAaSc8I5T1Sa6YVT6oGkMCw= Subject key identifier: 7D:8E:7F:7D:94:E5:9E:33:C6:10:DE:73:1C:2E:01:06:BD:78:42:9E Authority key identifier: 21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 Certificate issuer: /CN=A919710C/serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Certificate serial: 0452 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft Manifest number: 044B Signing time: Sat 29 Mar 2025 00:29:08 +0000 Manifest this update: Sat 29 Mar 2025 00:29:08 +0000 Manifest next update: Sat 05 Apr 2025 00:29:08 +0000 Files and hashes: 1: IffNCqAWhDVSmHRj5kIpcu8DnOg.crl (hash: A0mBptlsgbJQnFE3VzrwaEjW2VPqQRSh+A7so/meEE0=) 2: F47ED252878B11EEA8C62644C4F9AE02.roa (hash: qTXBNw7mfhaErKZnovnNFuD402t8u0aLC3Cx70bCvCg=) 3: E097013E910C11EFB994E187C4F9AE02.roa (hash: 6iwr6VYb5feSdMcufjsCe6jPARf4GSvhQnloLGq2csk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1106 (0x452) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919710C Validity Not Before: Mar 29 00:29:08 2025 GMT Not After : Apr 5 00:29:08 2025 GMT Subject: CN=67e73ed4-9edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5f:2f:cc:cc:fe:fc:eb:4a:a2:d3:9c:b8:77: 4b:99:3d:63:de:da:f2:b8:cc:94:99:18:d0:04:d9: 60:9e:8a:06:40:4d:1c:f2:ab:f3:ae:92:43:03:78: 9e:18:97:76:aa:9b:8e:1e:ba:3d:56:cf:d4:ba:ca: 91:8c:06:6a:f2:a9:69:18:bd:fc:17:e5:7e:53:5c: 58:d5:83:35:7e:36:7f:a1:7b:c3:a1:7a:44:32:b7: 89:49:5a:48:e6:c5:d8:23:86:92:ba:00:81:75:4b: 07:23:ce:de:16:99:11:21:92:bf:71:4f:bc:f8:b4: 2a:d5:96:8b:c1:87:96:92:27:7e:88:48:32:1d:9b: cc:36:22:56:5e:6b:1a:0b:fb:74:af:41:44:b4:75: ce:a4:5e:65:17:b7:50:a0:f9:08:1c:96:d9:c6:27: 61:28:78:3e:4f:dc:37:f0:7a:93:95:6c:c3:c2:8b: af:56:fd:c9:cb:a5:70:29:c9:67:c1:58:87:b2:b6: 56:12:d0:d9:58:3f:07:55:a0:0f:3c:c5:9e:e4:6c: 8a:86:2a:a2:63:c4:0d:0b:c4:8a:71:b8:e1:db:b3: 17:94:3e:ea:0c:0a:35:39:73:e7:f7:de:af:d5:c0: 0b:ae:be:76:56:21:8b:84:c0:ed:b1:c0:c7:ca:a2: 13:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:8E:7F:7D:94:E5:9E:33:C6:10:DE:73:1C:2E:01:06:BD:78:42:9E X509v3 Authority Key Identifier: keyid:21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:c1:cc:de:86:f2:f3:7d:9d:93:44:5e:86:1c:7f:d2:52:6b: a1:07:55:4f:3c:24:07:1b:ee:f2:5a:f5:ba:79:e7:46:bf:29: fc:61:ba:53:6b:20:b6:7c:ef:cd:7e:ab:57:24:95:0e:e8:96: 8a:50:6f:3b:9b:87:d4:22:ee:e3:b1:3e:21:60:50:95:ff:28: 04:93:9a:f9:1a:fc:fb:c2:34:07:61:9e:b6:89:bf:66:14:15: 37:9e:f9:ab:f1:bd:3f:60:74:12:e5:c7:6e:fc:cd:14:73:91: 7e:42:f3:4a:1e:b0:d6:30:83:33:92:77:1f:aa:09:c1:0d:46: 45:15:96:0f:74:ff:d3:37:2e:91:cf:77:6d:12:ae:58:d9:8c: bd:e7:9d:f2:01:df:c2:29:a5:10:42:2e:b0:77:1e:24:36:55: 8c:6e:ad:62:ec:56:54:93:f2:a0:e2:01:9c:66:16:8d:75:27: 33:40:97:14:1a:cc:29:26:6f:be:0a:0c:a8:07:6f:84:85:a0: 0a:33:53:cc:bc:2c:a0:b9:5d:58:f2:e5:60:20:4d:dd:7b:a7: 48:7c:8d:ab:f3:56:ad:54:52:ab:48:6f:df:6d:8d:db:04:c4: 0a:09:c8:27:e3:7a:ab:da:27:70:86:c3:46:ca:24:c8:9b:63: 60:8b:3a:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxMEMxMTAvBgNVBAUTKDIxRjdDRDBBQTAxNjg0MzU1Mjk4NzQ2M0U2NDIyOTcy RUYwMzlDRTgwHhcNMjUwMzI5MDAyOTA4WhcNMjUwNDA1MDAyOTA4WjAYMRYwFAYD VQQDEw02N2U3M2VkNC05ZWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzV8vzMz+/OtKotOcuHdLmT1j3tryuMyUmRjQBNlgnooGQE0c8qvzrpJDA3ie GJd2qpuOHro9Vs/UusqRjAZq8qlpGL38F+V+U1xY1YM1fjZ/oXvDoXpEMreJSVpI 5sXYI4aSugCBdUsHI87eFpkRIZK/cU+8+LQq1ZaLwYeWkid+iEgyHZvMNiJWXmsa C/t0r0FEtHXOpF5lF7dQoPkIHJbZxidhKHg+T9w38HqTlWzDwouvVv3Jy6VwKcln wViHsrZWEtDZWD8HVaAPPMWe5GyKhiqiY8QNC8SKcbjh27MXlD7qDAo1OXPn996v 1cALrr52ViGLhMDtscDHyqITqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2Of32U 5Z4zxhDecxwuAQa9eEKeMB8GA1UdIwQYMBaAFCH3zQqgFoQ1Uph0Y+ZCKXLvA5zo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzEwQy8yRjM2NzYxMjRC NjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hEVlNtSFJqNWtJcGN1OERu T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmZk5DcUFXaERWU21IUmo1a0lwY3U4RG5PZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzEwQy8yRjM2NzYxMjRCNjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hE VlNtSFJqNWtJcGN1OERuT2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFwczehvLzfZ2TRF6GHH/SUmuhB1VPPCQHG+7yWvW6eedGvyn8YbpT ayC2fO/NfqtXJJUO6JaKUG87m4fUIu7jsT4hYFCV/ygEk5r5Gvz7wjQHYZ62ib9m FBU3nvmr8b0/YHQS5cdu/M0Uc5F+QvNKHrDWMIMzkncfqgnBDUZFFZYPdP/TNy6R z3dtEq5Y2Yy9553yAd/CKaUQQi6wdx4kNlWMbq1i7FZUk/Kg4gGcZhaNdSczQJcU GswpJm++CgyoB2+EhaAKM1PMvCyguV1Y8uVgIE3de6dIfI2r81atVFKrSG/fbY3b BMQKCcgn43qr2idwhsNGyiTIm2Ngizrw -----END CERTIFICATE-----Generated at Fri Apr 4 22:01:42 2025 by rpki-client