$ rpki-client -vvf rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft File: cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft (raw, json) Hash identifier: AQZCxEX1yb1Hryas4Najngyj+HIT8eS3EV2rWHkEkFE= Subject key identifier: 0B:06:89:84:44:95:6A:13:2D:12:2C:44:09:80:27:46:9E:41:45:7B Authority key identifier: 70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87 Certificate issuer: /CN=A919D49F/serialNumber=707D48605A0D85772F90DC4B1172BEF30294A087 Certificate serial: 104D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft Manifest number: 1046 Signing time: Tue 08 Apr 2025 17:24:29 +0000 Manifest this update: Tue 08 Apr 2025 17:24:28 +0000 Manifest next update: Tue 15 Apr 2025 17:24:28 +0000 Files and hashes: 1: cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl (hash: 10JfrnAegGvM7PxAyIE/TRhZawveQAnozbI5p/KNtZ0=) 2: 74087358355111E99EC82E0AC4F9AE02.roa (hash: tyb0mMEVFvr0b00WBN86r+sNpOhKC86WXh33owud0/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 17:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4173 (0x104d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D49F Validity Not Before: Apr 8 17:24:28 2025 GMT Not After : Apr 15 17:24:28 2025 GMT Subject: CN=67f55bcd-7317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0e:32:2d:b9:d0:40:7a:a1:c3:03:78:1d:76: 46:23:44:32:81:7b:78:fd:5f:46:b2:5b:8d:bf:0d: a6:72:85:73:d8:64:1b:13:59:21:0f:08:ef:dc:e9: f7:29:53:6c:8a:16:81:b7:f7:c7:e7:80:b1:c5:26: 7a:e0:1d:f0:e4:e4:fb:55:ec:22:32:40:57:8d:5d: 47:96:7c:8d:93:da:ba:e1:76:30:04:2c:33:84:d1: 16:1a:2b:34:76:17:53:5a:fa:3e:fc:9f:22:2e:4a: 17:1d:5f:0d:e2:4d:e9:3d:50:5a:f5:e8:d2:3b:d2: af:85:3e:d9:a5:aa:21:16:f7:9b:79:c6:6e:81:af: 2a:05:32:6c:23:21:89:33:f7:ff:e8:66:86:65:23: bc:7f:aa:2c:45:51:c4:0f:37:9c:41:79:db:d9:04: 6c:34:de:ca:5a:2c:4f:05:7d:fd:9a:7e:8b:b9:f9: e3:4e:2d:19:6c:58:8a:64:b1:4f:59:a4:32:b3:99: 80:d5:94:6c:3b:df:62:44:d3:16:71:7b:b6:ce:51: de:70:f2:bd:46:8e:c2:1c:89:02:04:28:0a:b5:de: 17:9c:46:35:9d:bd:af:8d:00:79:a5:6f:02:7b:b4: 5c:a0:3c:72:06:b6:30:6f:40:6a:66:07:a5:9e:d5: 07:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:06:89:84:44:95:6A:13:2D:12:2C:44:09:80:27:46:9E:41:45:7B X509v3 Authority Key Identifier: keyid:70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:71:52:96:5f:90:c0:7b:af:2f:f0:33:1c:85:c8:11:0d:f6: 70:90:1e:1e:23:29:17:3e:72:88:b0:e2:5b:69:3e:5b:51:5b: 71:1d:2f:79:51:49:d8:b3:73:dc:81:bf:4f:59:e9:b1:69:31: a6:8c:87:c4:7c:f6:2e:e9:a1:73:d5:d3:26:b7:27:f9:c7:65: 61:1b:cc:81:bf:dd:cc:4e:49:74:4d:09:0d:2c:56:0e:02:56: 8a:f7:75:47:0f:5c:f1:64:63:4e:c2:fd:43:77:db:14:8b:84: 87:a3:1a:4a:2b:37:70:a4:38:2c:b0:37:23:ae:9a:5a:9d:6f: 5b:38:d4:73:5e:0e:e5:6a:2f:2e:d5:3e:03:9a:af:6e:9f:6e: 00:87:2a:a7:f6:5e:67:ae:2c:65:47:d4:a4:9c:67:3c:28:78: 74:4a:8f:15:1e:6d:22:85:ea:06:2c:10:41:10:c2:27:fd:8c: 06:c6:b4:db:0a:59:d5:ac:fe:db:0b:e1:94:36:f2:6d:7a:6b: ca:90:79:e7:5d:04:51:6a:ee:9a:5c:72:3e:68:54:a5:ea:bf: 8f:ca:53:51:c5:20:67:0e:31:d0:f0:f6:7e:a1:d2:20:a0:9e: 03:8a:d2:29:0e:7f:d6:bf:75:f4:14:40:2d:bc:50:30:90:63: 52:e5:51:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ0OUYxMTAvBgNVBAUTKDcwN0Q0ODYwNUEwRDg1NzcyRjkwREM0QjExNzJCRUYz MDI5NEEwODcwHhcNMjUwNDA4MTcyNDI4WhcNMjUwNDE1MTcyNDI4WjAYMRYwFAYD VQQDEw02N2Y1NWJjZC03MzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxg4yLbnQQHqhwwN4HXZGI0QygXt4/V9GsluNvw2mcoVz2GQbE1khDwjv3On3 KVNsihaBt/fH54CxxSZ64B3w5OT7VewiMkBXjV1HlnyNk9q64XYwBCwzhNEWGis0 dhdTWvo+/J8iLkoXHV8N4k3pPVBa9ejSO9KvhT7ZpaohFvebecZuga8qBTJsIyGJ M/f/6GaGZSO8f6osRVHEDzecQXnb2QRsNN7KWixPBX39mn6LufnjTi0ZbFiKZLFP WaQys5mA1ZRsO99iRNMWcXu2zlHecPK9Ro7CHIkCBCgKtd4XnEY1nb2vjQB5pW8C e7RcoDxyBrYwb0BqZgelntUH8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAsGiYRE lWoTLRIsRAmAJ0aeQUV7MB8GA1UdIwQYMBaAFHB9SGBaDYV3L5DcSxFyvvMClKCH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDQ5Ri8wQkFDODU1NjM1 NTExMUU5OThBNTBBMEFDNEY5QUUwMi9jSDFJWUZvTmhYY3ZrTnhMRVhLLTh3S1Vv SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NIMUlZRm9OaFhjdmtOeExFWEstOHdLVW9JYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDQ5Ri8wQkFDODU1NjM1NTExMUU5OThBNTBBMEFDNEY5QUUwMi9jSDFJWUZvTmhY Y3ZrTnhMRVhLLTh3S1VvSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQcVKWX5DAe68v8DMchcgRDfZwkB4eIykXPnKIsOJbaT5bUVtxHS95 UUnYs3Pcgb9PWemxaTGmjIfEfPYu6aFz1dMmtyf5x2VhG8yBv93MTkl0TQkNLFYO AlaK93VHD1zxZGNOwv1Dd9sUi4SHoxpKKzdwpDgssDcjrppanW9bONRzXg7lai8u 1T4Dmq9un24Ahyqn9l5nrixlR9SknGc8KHh0So8VHm0iheoGLBBBEMIn/YwGxrTb ClnVrP7bC+GUNvJtemvKkHnnXQRRau6aXHI+aFSl6r+PylNRxSBnDjHQ8PZ+odIg oJ4DitIpDn/Wv3X0FEAtvFAwkGNS5VEc -----END CERTIFICATE-----Generated at Thu Apr 10 22:12:25 2025 by rpki-client