$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft File: P1VrwCUQM7zlcvxsirdgrMSXBZM.mft (raw, json) Hash identifier: pm2PGx9JHqtqowO0o+Egy0JqeGHRrlWMmQvtnF1Pa58= Subject key identifier: 0C:2A:62:12:28:0F:70:BA:F1:AD:BD:26:68:4E:2C:0A:ED:33:3E:6F Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 Certificate issuer: /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Certificate serial: 1511 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft Manifest number: 14F9 Signing time: Fri 04 Apr 2025 16:55:16 +0000 Manifest this update: Fri 04 Apr 2025 16:55:16 +0000 Manifest next update: Fri 11 Apr 2025 16:55:16 +0000 Files and hashes: 1: P1VrwCUQM7zlcvxsirdgrMSXBZM.crl (hash: y1IRFDKb4UaRkEjtR7ebcMnFtzLMCpBD+tWQP0hBNd8=) 2: 9FA735ECEAF811ED9E2D1958C4F9AE02.roa (hash: FWIDt/35tjXzYDAaJr6JPEdTAM9ltuTBwSshOGLzQq8=) 3: 65C8C388EAFB11ED9F4DC557C4F9AE02.roa (hash: Kp7JQHpvsFVUlwVn2Rd475yiWHy2VFRWMrKOyE7B2hQ=) 4: F148BE6E511611EE85A7E634C4F9AE02.roa (hash: A4LpXw3tE6LtFJwAxqSanLcmZLfbY18U0yu4iIEqyks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5393 (0x1511) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CF42 Validity Not Before: Apr 4 16:55:16 2025 GMT Not After : Apr 11 16:55:16 2025 GMT Subject: CN=67f00ef4-4da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a1:ba:d8:e4:56:7f:54:a1:8a:38:43:d9:ba: 6f:6a:2f:3a:db:0a:ff:cb:c7:0e:fb:18:51:60:51: ca:f9:38:f3:5d:83:3d:52:c5:ab:92:bd:e7:5e:ec: 32:8c:f8:ac:1f:ce:d2:2c:bb:7f:9b:a5:0d:04:7c: 7b:2e:32:c2:2a:aa:88:5f:85:a2:89:a3:82:7f:34: 98:c0:1a:6d:4b:99:95:98:56:58:49:7c:14:14:8e: 43:79:10:1a:2a:dc:6d:fa:0c:5b:13:fe:3b:57:29: 35:86:03:42:ac:25:81:84:33:7c:20:9d:3e:ed:46: d2:6b:7c:21:cc:ad:85:01:e0:fa:21:29:c2:c9:51: 2f:a0:79:d7:6b:bd:32:81:84:f4:62:9f:0b:27:8b: b8:b4:63:2e:65:37:4d:d1:99:a9:95:3d:47:95:66: 3a:05:71:3c:bc:00:2a:64:14:bf:eb:0a:7a:de:38: 28:f5:d0:0f:f6:f0:ba:ec:fc:16:1b:43:12:96:78: 70:3a:0d:23:40:a1:5f:97:fb:68:fe:c1:3d:99:26: 17:11:ae:ce:ed:5d:b0:79:40:d4:de:b0:2a:ca:7a: 25:58:83:72:d1:88:05:22:35:86:0b:05:f5:dc:32: e9:7c:a4:79:b9:c5:f6:98:f5:89:55:ed:98:55:76: bf:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2A:62:12:28:0F:70:BA:F1:AD:BD:26:68:4E:2C:0A:ED:33:3E:6F X509v3 Authority Key Identifier: keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:be:d5:12:34:0d:13:27:8c:d3:ca:1f:be:69:be:f9:61:b4: c9:21:d6:d5:1b:3d:52:fa:e2:a8:47:80:52:c1:32:fb:07:36: 37:98:ad:aa:47:2d:68:96:79:4f:94:1e:c4:e6:55:3a:48:6b: 05:08:72:78:8f:ed:0d:27:95:0e:12:7a:e6:c8:4c:8f:bf:80: 2e:a2:23:18:ed:47:5a:53:5a:0d:0b:ad:34:78:10:c9:e1:68: 82:e3:fb:d3:cd:62:d2:23:f7:cf:1a:a4:9d:ed:eb:61:f3:6b: 4c:a3:d2:86:a3:65:0f:9a:3e:3f:9e:21:75:b8:4c:29:7d:ab: 19:00:7d:55:b7:be:7a:6d:f8:48:88:db:45:8d:0c:10:83:6b: ae:05:b6:6d:02:8c:da:e2:e2:dd:13:45:1e:92:30:fa:12:27: 47:43:8e:a8:ef:8d:3f:76:60:4a:7d:56:cd:c4:80:d3:aa:fb: 0c:6c:6d:96:96:e4:60:df:a1:f1:2b:7f:85:99:e2:49:20:41: 22:e2:96:52:d7:9a:24:80:ab:89:4a:d2:7f:47:08:6d:da:10: 52:52:16:45:d4:fb:f4:fe:f1:98:2d:49:ac:25:a4:de:09:48: 8d:6c:ed:87:0a:d7:2b:bf:81:d1:4c:07:6d:8a:82:43:9f:0c: 39:5e:af:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNGNDIxMTAvBgNVBAUTKDNGNTU2QkMwMjUxMDMzQkNFNTcyRkM2QzhBQjc2MEFD QzQ5NzA1OTMwHhcNMjUwNDA0MTY1NTE2WhcNMjUwNDExMTY1NTE2WjAYMRYwFAYD VQQDEw02N2YwMGVmNC00ZGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKG62ORWf1ShijhD2bpvai862wr/y8cO+xhRYFHK+TjzXYM9UsWrkr3nXuwy jPisH87SLLt/m6UNBHx7LjLCKqqIX4WiiaOCfzSYwBptS5mVmFZYSXwUFI5DeRAa Ktxt+gxbE/47Vyk1hgNCrCWBhDN8IJ0+7UbSa3whzK2FAeD6ISnCyVEvoHnXa70y gYT0Yp8LJ4u4tGMuZTdN0ZmplT1HlWY6BXE8vAAqZBS/6wp63jgo9dAP9vC67PwW G0MSlnhwOg0jQKFfl/to/sE9mSYXEa7O7V2weUDU3rAqynolWINy0YgFIjWGCwX1 3DLpfKR5ucX2mPWJVe2YVXa/WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwqYhIo D3C68a29JmhOLArtMz5vMB8GA1UdIwQYMBaAFD9Va8AlEDO85XL8bIq3YKzElwWT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0Y0Mi83QTZBQkZDQzRD QzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03emxjdnhzaXJkZ3JNU1hC Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AxVnJ3Q1VRTTd6bGN2eHNpcmRnck1TWEJaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0Y0Mi83QTZBQkZDQzRDQzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03 emxjdnhzaXJkZ3JNU1hCWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSvtUSNA0TJ4zTyh++ab75YbTJIdbVGz1S+uKoR4BSwTL7BzY3mK2q Ry1olnlPlB7E5lU6SGsFCHJ4j+0NJ5UOEnrmyEyPv4AuoiMY7UdaU1oNC600eBDJ 4WiC4/vTzWLSI/fPGqSd7eth82tMo9KGo2UPmj4/niF1uEwpfasZAH1Vt756bfhI iNtFjQwQg2uuBbZtAoza4uLdE0UekjD6EidHQ46o740/dmBKfVbNxIDTqvsMbG2W luRg36HxK3+FmeJJIEEi4pZS15okgKuJStJ/Rwht2hBSUhZF1Pv0/vGYLUmsJaTe CUiNbO2HCtcrv4HRTAdtioJDnww5Xq9l -----END CERTIFICATE-----Generated at Sun Apr 6 16:16:59 2025 by rpki-client