$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft File: ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft (raw, json) Hash identifier: wlccbeZMGYfYjC5ne5CkE8Lfc3KeFSD9xGclssReR6s= Subject key identifier: B7:45:6A:C3:C8:8A:C4:50:71:BD:5A:1F:E3:0F:13:16:B0:D3:7D:D9 Authority key identifier: 76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67 Certificate issuer: /CN=A919DC79/serialNumber=76CD021E0C281DA5FE64D87803553808889A1167 Certificate serial: 0B8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft Manifest number: 0B83 Signing time: Fri 18 Apr 2025 19:07:22 +0000 Manifest this update: Fri 18 Apr 2025 19:07:22 +0000 Manifest next update: Fri 25 Apr 2025 19:07:22 +0000 Files and hashes: 1: ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl (hash: ccDg62RKZY9r1ksoVRgsHS3ohwkKe9qn5iSec5leTpU=) 2: FB5C375499DB11EBBC50C376C4F9AE02.roa (hash: 5Tmm0+rmyNGdrIMpYadnPDVCCaqTEqx1NCKBxNGJPGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 18:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2959 (0xb8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC79, serialNumber=76CD021E0C281DA5FE64D87803553808889A1167 Validity Not Before: Apr 18 19:07:22 2025 GMT Not After : Apr 25 19:07:22 2025 GMT Subject: CN=6802a2ea-a2c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:fa:c2:4e:2a:17:2a:12:b3:89:49:42:8d:ec: 31:14:e8:0f:43:e3:5d:52:0e:75:60:00:2e:01:16: 5b:3e:9d:dd:5d:cf:3c:60:a9:c2:2a:6d:29:f9:3f: c4:f7:df:25:0c:df:3e:03:ee:90:c2:3a:1a:2c:d3: cb:16:dd:d4:d3:5a:21:04:57:0a:7b:11:ba:0f:58: 48:6d:66:e4:e9:97:c0:a7:ab:19:e3:67:3e:07:31: 08:9c:b7:95:ab:a6:a3:58:1e:72:eb:6a:b7:ed:c3: 9b:87:ac:92:09:8f:9e:76:e1:45:b2:79:71:80:5b: 7e:42:e5:86:fd:f8:5b:65:1c:9d:46:a8:8a:fa:84: d4:43:90:b3:f0:84:6c:71:7b:f3:58:94:7e:73:cc: 40:aa:22:e8:fe:27:b2:87:80:92:7a:8b:f8:57:7d: 2d:a4:52:39:ee:51:5c:f4:07:76:49:1c:29:0f:ae: da:9c:c3:70:f9:cb:e1:6e:10:8d:9e:c8:1c:e8:35: 59:ca:65:a2:4e:89:72:a8:c5:95:de:98:a9:69:74: 05:a4:d2:3b:f6:b7:f1:85:c4:fe:e7:cf:66:92:6c: 4f:28:02:85:29:50:ff:19:4b:d6:d7:a2:ff:93:f7: e4:86:5c:ac:f5:42:c0:67:d6:9b:51:bd:08:cc:84: 2b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:45:6A:C3:C8:8A:C4:50:71:BD:5A:1F:E3:0F:13:16:B0:D3:7D:D9 X509v3 Authority Key Identifier: keyid:76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c6:a6:06:88:b4:68:09:b4:75:ec:a2:cd:0e:7a:98:7c:91: 39:94:1e:09:c2:87:cc:b7:49:cf:81:6e:03:8a:d1:f6:ae:de: 60:b6:8d:60:2f:f6:f4:ec:ba:50:3c:6b:4e:11:e0:21:28:19: 3d:cf:fb:75:1f:03:cf:1f:3f:c5:3b:9b:d7:6a:07:ae:ca:a6: 4d:7b:c4:78:5f:cb:11:7f:f9:9c:ba:82:b9:9b:e5:85:34:c0: 07:b4:a7:be:77:9b:95:d3:75:4f:db:30:1a:3e:47:22:f1:b3: 4f:c3:b0:d3:9f:c2:e7:be:b1:4a:f5:c6:32:af:b2:f4:63:cf: 25:c8:a5:af:89:c3:b4:bd:c1:8c:f9:1e:b2:3a:44:0f:6f:67: 8d:3a:62:85:b0:24:69:13:15:92:2c:59:4e:4f:9b:b9:a8:46: 9a:e6:e4:86:30:af:c3:26:9a:63:f5:5c:9b:ea:be:50:c1:2a: aa:43:63:ab:4b:24:7a:28:ea:32:19:54:e2:55:2a:ca:26:3e: 7c:9c:93:14:7d:81:63:cf:df:80:53:40:8a:b0:e0:b0:b1:ac: 00:c5:e1:38:8a:17:2f:34:37:a0:d7:cc:24:f2:5d:14:28:8a: b9:6c:ba:74:a3:10:09:5c:cd:f2:97:f3:99:a5:84:18:66:4e: a8:80:d8:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzkxMTAvBgNVBAUTKDc2Q0QwMjFFMEMyODFEQTVGRTY0RDg3ODAzNTUzODA4 ODg5QTExNjcwHhcNMjUwNDE4MTkwNzIyWhcNMjUwNDI1MTkwNzIyWjAYMRYwFAYD VQQDEw02ODAyYTJlYS1hMmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7/rCTioXKhKziUlCjewxFOgPQ+NdUg51YAAuARZbPp3dXc88YKnCKm0p+T/E 998lDN8+A+6QwjoaLNPLFt3U01ohBFcKexG6D1hIbWbk6ZfAp6sZ42c+BzEInLeV q6ajWB5y62q37cObh6ySCY+eduFFsnlxgFt+QuWG/fhbZRydRqiK+oTUQ5Cz8IRs cXvzWJR+c8xAqiLo/ieyh4CSeov4V30tpFI57lFc9Ad2SRwpD67anMNw+cvhbhCN nsgc6DVZymWiTolyqMWV3pipaXQFpNI79rfxhcT+589mkmxPKAKFKVD/GUvW16L/ k/fkhlys9ULAZ9abUb0IzIQrxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdFasPI isRQcb1aH+MPExaw033ZMB8GA1UdIwQYMBaAFHbNAh4MKB2l/mTYeANVOAiImhFn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3OS9BNjNGOTNENjI3 Q0UxMUVBOEU0MDdFNUJDNEY5QUUwMi9kczBDSGd3b0hhWC1aTmg0QTFVNENJaWFF V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RzMENIZ3dvSGFYLVpOaDRBMVU0Q0lpYUVXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REM3OS9BNjNGOTNENjI3Q0UxMUVBOEU0MDdFNUJDNEY5QUUwMi9kczBDSGd3b0hh WC1aTmg0QTFVNENJaWFFV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtxqYGiLRoCbR17KLNDnqYfJE5lB4JwofMt0nPgW4DitH2rt5gto1g L/b07LpQPGtOEeAhKBk9z/t1HwPPHz/FO5vXageuyqZNe8R4X8sRf/mcuoK5m+WF NMAHtKe+d5uV03VP2zAaPkci8bNPw7DTn8LnvrFK9cYyr7L0Y88lyKWvicO0vcGM +R6yOkQPb2eNOmKFsCRpExWSLFlOT5u5qEaa5uSGMK/DJppj9Vyb6r5QwSqqQ2Or SyR6KOoyGVTiVSrKJj58nJMUfYFjz9+AU0CKsOCwsawAxeE4ihcvNDeg18wk8l0U KIq5bLp0oxAJXM3yl/OZpYQYZk6ogNjn -----END CERTIFICATE-----Generated at Sat Apr 19 02:09:02 2025 by rpki-client