$ rpki-client -vvf rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft File: I-mD64u3-GulkjUkGhAWDIBSxk4.mft (raw, json) Hash identifier: eAIfvt3MsE/i1U/B0XGfVAKgqysaqXlJ47/KzqovwVU= Subject key identifier: BF:30:E0:E5:FA:80:90:59:1C:8A:12:F5:DD:9E:BA:31:65:EA:90:FC Authority key identifier: 23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E Certificate issuer: /CN=A919EDE5/serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E Certificate serial: 3475 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft Manifest number: 3470 Signing time: Fri 04 Apr 2025 15:03:02 +0000 Manifest this update: Fri 04 Apr 2025 15:03:01 +0000 Manifest next update: Fri 11 Apr 2025 15:03:01 +0000 Files and hashes: 1: I-mD64u3-GulkjUkGhAWDIBSxk4.crl (hash: 4FBvnwL9unFJ/6+Uj9UHo//P8/T8Q/zQqvcU0XgwIFI=) 2: 450B9058E3B511EF8A23824BC4F9AE02.roa (hash: r37bpTTUcU1lH0DUSQwsabLyee9wQt2kebjFicJO4a8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13429 (0x3475) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EDE5 Validity Not Before: Apr 4 15:03:01 2025 GMT Not After : Apr 11 15:03:01 2025 GMT Subject: CN=67eff4a5-e989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2d:a0:cb:89:aa:08:ef:68:e2:c8:9a:c5:75: f1:c1:15:3d:02:90:b7:08:9e:69:95:98:83:a6:c6: 2f:91:ee:87:08:d8:14:9f:32:16:62:a2:79:58:80: e1:59:69:26:e3:e3:58:5d:e3:c4:4c:61:c5:23:9c: 73:c2:bf:eb:4e:ca:e9:ad:79:f0:13:4c:d6:c6:2f: 32:e4:6f:66:38:a6:5a:aa:00:3f:2c:75:0a:e1:4b: ff:bd:52:ce:d3:aa:51:30:31:13:d9:34:71:df:34: 48:45:66:a0:8d:47:bf:5c:6b:da:bc:5a:3d:01:49: fb:dc:34:53:85:dc:a6:9b:af:d0:6b:18:ba:b0:8e: 8f:83:e9:5b:01:11:32:4b:99:42:a2:40:3b:25:89: a1:ba:fb:5c:3a:b4:c5:7f:03:3e:9e:90:a1:21:c1: 00:78:d9:94:7d:42:14:9b:39:ef:cb:e4:ac:01:7c: 47:16:78:5c:78:7d:66:38:df:93:81:5e:fa:a6:5f: 03:b4:25:69:6c:80:ea:70:3d:b9:da:a6:c5:37:1e: b8:ed:a7:6e:9f:a8:77:cc:61:ef:ef:d0:72:71:07: ec:d7:93:a7:b1:2c:27:ee:9b:7e:a0:84:6e:ba:3e: 46:41:49:2d:56:c9:03:ba:a4:ba:45:d6:fe:8b:bd: 87:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:30:E0:E5:FA:80:90:59:1C:8A:12:F5:DD:9E:BA:31:65:EA:90:FC X509v3 Authority Key Identifier: keyid:23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:31:95:6b:9d:1f:7f:8f:ac:79:ef:3a:ff:5a:fd:dc:99:5e: 03:f6:2e:3a:6d:44:80:c2:7d:bb:99:86:40:17:c0:37:cf:1e: 43:89:49:df:4f:6a:34:d3:0e:df:f0:a3:d9:6e:17:4d:dd:71: 9d:af:5c:d3:a4:19:25:be:0b:95:78:52:ef:c3:57:37:35:c6: 5f:e7:1b:7a:6a:db:ac:c2:52:40:ce:ed:9d:9a:ae:20:10:d9: 1f:50:9d:ec:19:84:93:51:8e:f0:4c:7d:02:80:14:1e:2b:02: d1:a5:73:07:d4:b3:bc:f4:f1:6c:b2:bd:66:20:97:7f:64:f8: 98:60:8c:6c:f8:b9:df:68:34:a8:84:6e:ca:fd:32:2c:b5:71: 0b:d7:fe:33:27:9e:b0:f1:12:eb:0d:20:20:c0:9e:64:e7:5a: d7:15:3b:c9:00:ae:ca:dc:8f:c6:56:b5:ec:09:77:bf:65:fc: be:2c:b8:ab:f2:3c:e5:8f:77:85:57:5b:13:de:c6:6c:50:11: 0a:10:a7:24:3d:5c:31:37:76:1c:cd:7f:09:dc:21:e4:36:fe: 4a:57:8e:ab:8b:17:f4:70:74:70:2f:a4:e3:ea:73:27:ee:69: 62:89:f7:46:96:6e:f9:5c:dc:2c:9a:e2:3b:9d:4b:6a:4e:b7: 67:3d:45:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVERTUxMTAvBgNVBAUTKDIzRTk4M0VCOEJCN0Y4NkJBNTkyMzUyNDFBMTAxNjBD ODA1MkM2NEUwHhcNMjUwNDA0MTUwMzAxWhcNMjUwNDExMTUwMzAxWjAYMRYwFAYD VQQDEw02N2VmZjRhNS1lOTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAri2gy4mqCO9o4siaxXXxwRU9ApC3CJ5plZiDpsYvke6HCNgUnzIWYqJ5WIDh WWkm4+NYXePETGHFI5xzwr/rTsrprXnwE0zWxi8y5G9mOKZaqgA/LHUK4Uv/vVLO 06pRMDET2TRx3zRIRWagjUe/XGvavFo9AUn73DRThdymm6/Qaxi6sI6Pg+lbAREy S5lCokA7JYmhuvtcOrTFfwM+npChIcEAeNmUfUIUmznvy+SsAXxHFnhceH1mON+T gV76pl8DtCVpbIDqcD252qbFNx647adun6h3zGHv79BycQfs15OnsSwn7pt+oIRu uj5GQUktVskDuqS6Rdb+i72HMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8w4OX6 gJBZHIoS9d2eujFl6pD8MB8GA1UdIwQYMBaAFCPpg+uLt/hrpZI1JBoQFgyAUsZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RURFNS80QTJCNkNDRTFE OUUxMUUyOUNBMzA5OEUwOEIwMkNEMi9JLW1ENjR1My1HdWxralVrR2hBV0RJQlN4 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ktbUQ2NHUzLUd1bGtqVWtHaEFXRElCU3hrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RURFNS80QTJCNkNDRTFEOUUxMUUyOUNBMzA5OEUwOEIwMkNEMi9JLW1ENjR1My1H dWxralVrR2hBV0RJQlN4azQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1MZVrnR9/j6x57zr/Wv3cmV4D9i46bUSAwn27mYZAF8A3zx5DiUnf T2o00w7f8KPZbhdN3XGdr1zTpBklvguVeFLvw1c3NcZf5xt6atuswlJAzu2dmq4g ENkfUJ3sGYSTUY7wTH0CgBQeKwLRpXMH1LO89PFssr1mIJd/ZPiYYIxs+LnfaDSo hG7K/TIstXEL1/4zJ56w8RLrDSAgwJ5k51rXFTvJAK7K3I/GVrXsCXe/Zfy+LLir 8jzlj3eFV1sT3sZsUBEKEKckPVwxN3YczX8J3CHkNv5KV46rixf0cHRwL6Tj6nMn 7mliifdGlm75XNwsmuI7nUtqTrdnPUW/ -----END CERTIFICATE-----Generated at Fri Apr 4 21:45:43 2025 by rpki-client