$ rpki-client -vvf rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft File: xCIPUDVWR7fICyzovHEmqsLiLTc.mft (raw, json) Hash identifier: AtPDK4GStdl+BogTVUiqWKe25zxg3e4xS/5s/YnTSGw= Subject key identifier: 7E:14:08:AF:71:C1:18:A9:D6:A8:5A:AB:FD:37:3C:0C:28:85:60:9B Authority key identifier: C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 Certificate issuer: /CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Certificate serial: 3498 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft Manifest number: 3482 Signing time: Sun 06 Apr 2025 14:18:24 +0000 Manifest this update: Sun 06 Apr 2025 14:18:23 +0000 Manifest next update: Sun 13 Apr 2025 14:18:23 +0000 Files and hashes: 1: xCIPUDVWR7fICyzovHEmqsLiLTc.crl (hash: 9XPsaIXF7gX18oCYHeaDpPHjyq4fzMyNfaw/icQeHkQ=) 2: 2C5F8752A10D11EFB9BE8476C4F9AE02.roa (hash: Iv390Bd/MJyqbzwOB0bqCA/PrLBJuVtYX/m4XRUDX5k=) 3: 8C2774CA0F3511EF93020023C4F9AE02.roa (hash: jfY5GTg8hmmhErbL9iwX+gxSO1reSXWac9mVO/Xqq1g=) 4: D7ABA864DFE611ED8872DE0EC4F9AE02.roa (hash: 6UO6N8yoyg6+8CvpDMt8iCmfSbV26PbG92dRF9r0otc=) 5: F8E58782A10C11EFA3C0F375C4F9AE02.roa (hash: joxi3OaPnE1De2CkoKX8c3yAH5f2DPtnnESV+trPxbM=) 6: 24C4305A7CD911EEB0B4C962C4F9AE02.roa (hash: 0Wsr5VamrOSe1PRZDclYr+ROoB9PidSlGQIwmrfuBe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 14:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13464 (0x3498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D64D Validity Not Before: Apr 6 14:18:23 2025 GMT Not After : Apr 13 14:18:23 2025 GMT Subject: CN=67f28d2f-af5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:00:ae:f0:b7:29:79:d5:e4:43:0c:f9:1a:83: 6e:d2:69:8e:10:93:d8:89:ce:ff:ba:87:79:56:e5: 72:c3:33:52:d4:9e:cb:7a:ec:80:c3:d7:d7:f3:d7: c8:34:51:1e:c6:d5:45:25:62:34:c7:9f:07:79:6d: d8:0f:71:4d:a5:9b:cc:88:97:d3:1b:54:27:3f:9f: 8a:81:44:f1:69:18:c9:1b:4d:48:49:d6:c6:75:e2: c4:66:8e:86:62:06:01:b0:94:9e:0e:ed:10:57:29: 97:69:ff:49:70:5d:b8:73:6b:d8:95:25:b0:18:70: e5:79:f7:0d:25:ac:74:51:a2:2d:f6:0c:ca:60:6a: 74:a9:40:58:5f:9b:e5:49:aa:1d:39:41:a6:85:00: a5:98:20:7b:0c:ef:97:5e:f1:5a:dc:0f:a4:ee:3b: 78:de:70:18:7f:a3:6c:d4:60:d1:d0:06:ec:42:c9: 01:cb:b9:a5:39:b9:3b:f9:f3:5a:70:ad:78:44:16: a5:f7:9e:f7:18:6e:4b:59:8d:40:24:9b:53:3d:04: 0d:d1:29:da:7a:3c:ae:f8:f5:a1:2d:e6:7c:99:38: e8:37:41:93:8e:58:4f:34:e7:55:70:bf:b8:b4:f2: fd:69:18:47:63:75:7a:2f:6e:da:37:4d:6b:6b:b8: 26:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:14:08:AF:71:C1:18:A9:D6:A8:5A:AB:FD:37:3C:0C:28:85:60:9B X509v3 Authority Key Identifier: keyid:C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e2:2f:54:d3:ca:00:d6:ee:48:28:72:49:8f:e5:b1:07:10: 08:98:f3:7b:d3:a2:b2:a1:71:63:e3:b5:aa:b5:a6:a7:c2:ca: 4e:7b:b1:11:d7:68:18:60:6e:6b:fe:1d:76:ec:1d:ae:a7:c8: 4e:fe:e6:80:b8:74:a1:80:fd:69:dc:91:ae:67:e2:64:ab:7e: e6:b4:42:11:d0:93:c0:be:53:2a:a3:30:c3:ab:65:23:28:2e: be:24:fb:ee:e3:81:4d:9b:df:e2:fd:d5:3f:2f:83:2f:fd:22: 25:24:e7:f4:3d:29:12:4b:70:f5:00:fd:9f:89:a9:7c:cb:ae: c5:68:4a:e2:f2:09:7f:9c:a9:c1:7b:b2:21:17:db:46:75:44: fe:e1:ab:20:9c:d8:0e:a2:53:08:17:db:25:0e:79:78:cb:90: 63:20:81:a3:37:27:88:f5:b8:ad:5c:55:26:13:27:1e:c7:a9: 98:e4:c0:e5:49:0e:77:a0:09:ce:63:d9:10:d7:50:1b:09:c2: 4f:5f:cf:b3:56:28:a4:4c:6e:42:6f:ba:72:4e:83:6f:73:d4: ce:a6:cb:3b:74:bd:9f:d1:aa:78:87:9e:ae:b9:88:1d:50:92: e6:11:8c:d0:79:e8:ad:de:dc:90:ea:59:c7:bf:b0:fb:63:80: 44:eb:c9:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2NEQxMTAvBgNVBAUTKEM0MjIwRjUwMzU1NjQ3QjdDODBCMkNFOEJDNzEyNkFB QzJFMjJEMzcwHhcNMjUwNDA2MTQxODIzWhcNMjUwNDEzMTQxODIzWjAYMRYwFAYD VQQDEw02N2YyOGQyZi1hZjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwCu8LcpedXkQwz5GoNu0mmOEJPYic7/uod5VuVywzNS1J7LeuyAw9fX89fI NFEextVFJWI0x58HeW3YD3FNpZvMiJfTG1QnP5+KgUTxaRjJG01ISdbGdeLEZo6G YgYBsJSeDu0QVymXaf9JcF24c2vYlSWwGHDlefcNJax0UaIt9gzKYGp0qUBYX5vl SaodOUGmhQClmCB7DO+XXvFa3A+k7jt43nAYf6Ns1GDR0AbsQskBy7mlObk7+fNa cK14RBal9573GG5LWY1AJJtTPQQN0Snaejyu+PWhLeZ8mTjoN0GTjlhPNOdVcL+4 tPL9aRhHY3V6L27aN01ra7gmDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH4UCK9x wRip1qhaq/03PAwohWCbMB8GA1UdIwQYMBaAFMQiD1A1Vke3yAss6LxxJqrC4i03 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY0RC9EOTMzM0ZFNDFE NkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3ZklDeXpvdkhFbXFzTGlM VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDSVBVRFZXUjdmSUN5em92SEVtcXNMaUxUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDY0RC9EOTMzM0ZFNDFENkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3 ZklDeXpvdkhFbXFzTGlMVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv4i9U08oA1u5IKHJJj+WxBxAImPN706KyoXFj47WqtaanwspOe7ER 12gYYG5r/h127B2up8hO/uaAuHShgP1p3JGuZ+Jkq37mtEIR0JPAvlMqozDDq2Uj KC6+JPvu44FNm9/i/dU/L4Mv/SIlJOf0PSkSS3D1AP2fial8y67FaEri8gl/nKnB e7IhF9tGdUT+4asgnNgOolMIF9slDnl4y5BjIIGjNyeI9bitXFUmEycex6mY5MDl SQ53oAnOY9kQ11AbCcJPX8+zViikTG5Cb7pyToNvc9TOpss7dL2f0ap4h56uuYgd UJLmEYzQeeit3tyQ6lnHv7D7Y4BE68kn -----END CERTIFICATE-----Generated at Mon Apr 7 04:49:01 2025 by rpki-client