$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft File: p5uCiHAxRBmQsY0aBfnicefnuOY.mft (raw, json) Hash identifier: XSkPoUJKHRVKyBz55dvsMRm2z9Bb3SNVA4CPd8JKTjA= Subject key identifier: 11:41:92:D6:EC:C0:CA:9E:3B:71:3E:F6:19:C3:68:B8:4A:45:64:E9 Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 Certificate issuer: /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft Manifest number: 019D Signing time: Thu 03 Apr 2025 02:52:32 +0000 Manifest this update: Thu 03 Apr 2025 02:52:32 +0000 Manifest next update: Thu 10 Apr 2025 02:52:32 +0000 Files and hashes: 1: p5uCiHAxRBmQsY0aBfnicefnuOY.crl (hash: 5f5sqIE2+nJqzVMAagPSCVY8uJW5+nx6MgMA0Dx/Y40=) 2: 0900F7CA7AE611EF8CE1F784C4F9AE02.roa (hash: W140YuUw38RWGHye5n3YkyDF6hOcdpwcpeuapHj9/oU=) 3: 4DD66E3C347F11EFB73F4074C4F9AE02.roa (hash: IwMTYHcJhnDCmYuEYV2O2JwZjBRHGFoqwvNK7SHib0M=) 4: C8E6CF687AE811EFA0337A38C4F9AE02.roa (hash: tX7lm1nOa6r+dedq7UOBuZmnOgxOghWuASrmaNTRTBw=) 5: 610B51267AE711EFACC0CA34C4F9AE02.roa (hash: Sia8Gi3qcpCvgS981cn17WU6AtoHaTrcG1W6ziIGcuE=) 6: 5D463936C87611EDAC86AA74C4F9AE02.roa (hash: DhLdq1kTF9Xobsk7bvGN3nq1HO2Wf6ttTbcUB3K/bdI=) 7: E98F15362B3811EF926F1555C4F9AE02.roa (hash: 2uRcl4/JP86oXm/PKDdwTqt31tGszZ15TnxmrrEvK14=) 8: 34D5ED1210F511EEBCE2A81EC4F9AE02.roa (hash: WMB572OriY7OKNmhFvdEBkase4yBRTMM9Ky+WZetjbA=) 9: 9F4683A0B86211EDB9EDAD2CC4F9AE02.roa (hash: 9e6WnUGZ2SYgJMci9BvDZ2+QZaGMJqkA1vwlNaja2Rg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BE9A Validity Not Before: Apr 3 02:52:32 2025 GMT Not After : Apr 10 02:52:32 2025 GMT Subject: CN=67edf7f0-bdf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d1:df:2a:10:ad:8b:5a:19:d4:39:fe:5b:3f: df:d5:d4:26:9c:6c:0e:fb:38:f9:31:01:b5:36:bf: 97:fe:54:6d:d8:b2:4a:a7:03:44:3b:ed:be:67:13: d8:da:70:1c:02:22:a2:97:ac:ab:1a:60:c1:9b:15: cd:4c:c9:dd:52:80:91:45:4c:7a:f9:73:4a:17:26: da:a7:33:6a:bc:84:d8:3d:c6:fd:49:f6:17:95:7a: 94:f9:58:c4:4c:d2:91:67:7b:5c:f5:3a:72:e0:4f: b9:5d:1d:93:a5:6c:fd:63:30:ee:4b:fd:07:89:c4: 69:8f:82:9a:09:73:56:9b:20:0b:d4:66:1c:f7:b2: cf:3d:8c:f5:99:59:c6:1c:0d:22:a9:3c:bf:9f:a1: 25:e8:8a:fd:89:02:ea:84:5a:13:30:24:4f:38:c1: 19:e3:48:86:fc:80:aa:bf:d0:48:9d:0b:94:b7:ad: 2d:c8:49:dc:8d:b2:30:d0:1d:dd:18:cb:55:8d:fe: 88:0a:84:35:5f:b3:5e:a8:64:c3:64:13:7d:86:58: ae:e4:28:df:4c:76:a0:d5:d8:5d:e1:6e:8f:c0:13: 99:fd:5d:1f:ec:a0:fe:ce:99:72:4e:fc:f9:9d:3d: 22:28:6d:b1:00:3c:05:ba:55:c7:02:33:ef:6e:29: 3b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:41:92:D6:EC:C0:CA:9E:3B:71:3E:F6:19:C3:68:B8:4A:45:64:E9 X509v3 Authority Key Identifier: keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e2:00:a6:27:ac:7c:66:56:0a:37:92:ec:7d:6c:c5:63:bd: 42:42:3b:65:b6:36:55:eb:70:0c:8b:a7:e1:1c:80:21:fb:ff: 28:84:1b:d1:f3:de:7d:03:15:1a:29:da:70:eb:0a:a1:5c:84: 21:15:f2:e0:1d:53:79:30:7d:f4:12:9b:56:7c:12:eb:13:d7: 52:6e:8b:4c:90:be:6e:85:81:68:93:46:fa:cb:6c:a8:da:ee: d6:fa:ad:65:9c:83:fa:cf:4f:0e:9c:37:74:8d:2e:98:bd:1d: 1d:8b:98:cd:d7:86:6d:82:a4:93:78:eb:b1:81:d3:87:4b:23: e1:96:61:73:aa:53:9f:66:61:55:fe:7a:36:30:e4:bb:7f:b9: 86:c3:f5:3a:b1:0d:26:b6:c5:87:be:0b:a3:20:d0:e5:d6:b1: 4b:f0:b1:85:a8:16:f2:76:99:73:55:a7:e5:55:d8:cf:b8:68: af:b8:df:f4:2b:bc:5e:ed:8a:e1:37:12:9d:c2:8b:3b:15:f0: 8e:ca:15:13:2a:fe:e2:6c:38:18:c9:ab:6a:03:cf:99:f8:1a: 76:fd:3e:20:af:52:43:0c:cd:ac:5d:a1:d5:69:7d:8c:14:71: ef:70:43:af:4d:75:31:a4:1a:b9:87:fd:cc:ed:b0:cb:fa:ba: de:28:95:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJFOUExMTAvBgNVBAUTKEE3OUI4Mjg4NzAzMTQ0MTk5MEIxOEQxQTA1RjlFMjcx RTdFN0I4RTYwHhcNMjUwNDAzMDI1MjMyWhcNMjUwNDEwMDI1MjMyWjAYMRYwFAYD VQQDEw02N2VkZjdmMC1iZGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm9HfKhCti1oZ1Dn+Wz/f1dQmnGwO+zj5MQG1Nr+X/lRt2LJKpwNEO+2+ZxPY 2nAcAiKil6yrGmDBmxXNTMndUoCRRUx6+XNKFybapzNqvITYPcb9SfYXlXqU+VjE TNKRZ3tc9Tpy4E+5XR2TpWz9YzDuS/0HicRpj4KaCXNWmyAL1GYc97LPPYz1mVnG HA0iqTy/n6El6Ir9iQLqhFoTMCRPOMEZ40iG/ICqv9BInQuUt60tyEncjbIw0B3d GMtVjf6ICoQ1X7NeqGTDZBN9hliu5CjfTHag1dhd4W6PwBOZ/V0f7KD+zplyTvz5 nT0iKG2xADwFulXHAjPvbik74QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFBktbs wMqeO3E+9hnDaLhKRWTpMB8GA1UdIwQYMBaAFKebgohwMUQZkLGNGgX54nHn57jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkU5QS84RkExRjU2RUI4 NUUxMUVEOEU2RjQyMTNDNEY5QUUwMi9wNXVDaUhBeFJCbVFzWTBhQmZuaWNlZm51 T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A1dUNpSEF4UkJtUXNZMGFCZm5pY2VmbnVPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkU5QS84RkExRjU2RUI4NUUxMUVEOEU2RjQyMTNDNEY5QUUwMi9wNXVDaUhBeFJC bVFzWTBhQmZuaWNlZm51T1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA94gCmJ6x8ZlYKN5LsfWzFY71CQjtltjZV63AMi6fhHIAh+/8ohBvR 8959AxUaKdpw6wqhXIQhFfLgHVN5MH30EptWfBLrE9dSbotMkL5uhYFok0b6y2yo 2u7W+q1lnIP6z08OnDd0jS6YvR0di5jN14ZtgqSTeOuxgdOHSyPhlmFzqlOfZmFV /no2MOS7f7mGw/U6sQ0mtsWHvgujINDl1rFL8LGFqBbydplzVaflVdjPuGivuN/0 K7xe7YrhNxKdwos7FfCOyhUTKv7ibDgYyatqA8+Z+Bp2/T4gr1JDDM2sXaHVaX2M FHHvcEOvTXUxpBq5h/3M7bDL+rreKJUe -----END CERTIFICATE-----Generated at Fri Apr 4 18:29:07 2025 by rpki-client