$ rpki-client -vvf rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft File: n47RxT7pDTyshKZHDEt1lMVXXYU.mft (raw, json) Hash identifier: y8pG6x9hjMnbCEgISrSKkaXFlSzWu+wE5VfDc5m9l/A= Subject key identifier: 2D:15:16:0F:95:F2:C4:48:F1:54:36:C1:FF:A0:90:D5:EF:F6:F0:19 Authority key identifier: 9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85 Certificate issuer: /CN=A912B983/serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85 Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft Manifest number: 0158 Signing time: Thu 13 Mar 2025 02:52:27 +0000 Manifest this update: Thu 13 Mar 2025 02:52:26 +0000 Manifest next update: Thu 20 Mar 2025 02:52:26 +0000 Files and hashes: 1: n47RxT7pDTyshKZHDEt1lMVXXYU.crl (hash: bLbXoZmmCbrPQ13Hpd7DoiJ7uzJQdmzO+QBpuo6uIBQ=) 2: FD4E307AFEA711EDBC673B4BC4F9AE02.roa (hash: /gcnA3lv0gvYzo5Yy1H0Ai0POjgkW7UZBEUoiqUQvoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 02:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B983 Validity Not Before: Mar 13 02:52:26 2025 GMT Not After : Mar 20 02:52:26 2025 GMT Subject: CN=67d2486a-ed0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4e:a8:fe:09:fc:08:26:d8:a5:ec:6b:bd:59: 7f:11:ef:89:a0:42:22:63:fe:86:5d:39:53:eb:ee: 99:2d:2e:cd:76:be:03:44:8e:27:7e:89:6e:e2:89: 7c:62:4d:f1:50:7c:3f:9d:c7:9a:0b:4f:c7:08:17: b1:a6:12:b8:8c:b8:75:b3:f8:5d:30:40:dc:f4:fb: 32:8e:7b:70:c0:53:0d:2d:59:50:64:ab:78:75:ea: 9e:5f:d6:fa:14:c5:96:aa:bb:9e:d1:81:22:a9:2f: 92:17:e5:43:98:56:6d:08:10:02:f8:72:f9:73:e8: 2c:d7:61:93:77:ef:08:60:a6:79:58:e9:83:79:24: 44:c9:c7:e7:f5:9e:44:bd:94:60:c0:ea:70:49:e4: da:2e:8a:4a:c1:4c:ef:7a:f7:22:96:6c:10:34:c2: ce:3e:ed:02:2b:d3:86:fb:ed:c7:78:41:a5:a0:26: d2:66:82:30:bf:e6:10:55:e4:2a:53:14:f3:1e:b1: 98:ca:54:30:38:5b:dd:ac:3a:94:e4:dc:8a:89:c2: 12:ea:11:0d:41:3c:69:ca:bc:6e:b7:db:35:22:c7: e9:fa:0f:00:5e:20:a2:15:87:6f:e1:84:13:90:d3: 7c:8e:31:41:a8:58:cc:94:3a:dc:cf:7e:65:90:64: ec:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:15:16:0F:95:F2:C4:48:F1:54:36:C1:FF:A0:90:D5:EF:F6:F0:19 X509v3 Authority Key Identifier: keyid:9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:35:ca:ee:b2:11:58:c6:63:ca:1c:43:4f:67:52:67:0f:ed: 3c:35:87:19:1e:10:7c:02:e3:96:0c:b9:93:d0:f0:59:18:c2: 2b:05:e4:9b:5b:e8:6d:70:b7:9a:58:e5:0e:3b:43:f9:2f:96: c3:6c:bb:21:ca:fd:2a:65:1d:36:b8:d4:75:15:76:48:bf:e0: b9:68:37:2e:d2:46:99:14:b6:ef:87:64:de:84:bf:57:98:5c: 81:ed:fe:9c:47:91:b4:82:ad:86:79:98:aa:77:d1:b0:f0:23: b9:df:84:18:b9:b9:38:16:08:6f:3f:f9:30:69:3d:eb:00:73: 35:60:50:e6:f0:db:6c:11:fb:c9:76:09:e1:48:fb:ca:8d:6e: de:b8:4e:c4:e3:00:0c:bc:cf:2f:fe:2c:92:eb:39:25:47:cf: b2:18:d0:18:fc:f4:28:86:55:1f:bc:91:07:93:c2:00:fc:ea: 30:72:bd:e2:5e:84:7b:63:ed:6e:a4:af:68:05:bc:fb:8c:b8: e7:12:78:23:88:32:27:dc:2e:09:17:cc:2d:af:26:9c:d2:51: ad:e2:09:b4:88:9c:93:9d:a7:aa:e5:e6:a4:49:fc:2e:1b:51: 66:4f:8d:c8:41:27:07:b0:45:3a:51:fe:ac:70:c7:59:75:e9: d1:29:09:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI5ODMxMTAvBgNVBAUTKDlGOEVEMUM1M0VFOTBEM0NBQzg0QTY0NzBDNEI3NTk0 QzU1NzVEODUwHhcNMjUwMzEzMDI1MjI2WhcNMjUwMzIwMDI1MjI2WjAYMRYwFAYD VQQDEw02N2QyNDg2YS1lZDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyE6o/gn8CCbYpexrvVl/Ee+JoEIiY/6GXTlT6+6ZLS7Ndr4DRI4nfolu4ol8 Yk3xUHw/nceaC0/HCBexphK4jLh1s/hdMEDc9PsyjntwwFMNLVlQZKt4deqeX9b6 FMWWqrue0YEiqS+SF+VDmFZtCBAC+HL5c+gs12GTd+8IYKZ5WOmDeSREycfn9Z5E vZRgwOpwSeTaLopKwUzvevcilmwQNMLOPu0CK9OG++3HeEGloCbSZoIwv+YQVeQq UxTzHrGYylQwOFvdrDqU5NyKicIS6hENQTxpyrxut9s1Isfp+g8AXiCiFYdv4YQT kNN8jjFBqFjMlDrcz35lkGTs2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0VFg+V 8sRI8VQ2wf+gkNXv9vAZMB8GA1UdIwQYMBaAFJ+O0cU+6Q08rISmRwxLdZTFV12F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjk4My9FNkE4QUNFQ0ZF QTIxMUVEQUVGMjkwNDdDNEY5QUUwMi9uNDdSeFQ3cERUeXNoS1pIREV0MWxNVlhY WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240N1J4VDdwRFR5c2hLWkhERXQxbE1WWFhZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjk4My9FNkE4QUNFQ0ZFQTIxMUVEQUVGMjkwNDdDNEY5QUUwMi9uNDdSeFQ3cERU eXNoS1pIREV0MWxNVlhYWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiNcrushFYxmPKHENPZ1JnD+08NYcZHhB8AuOWDLmT0PBZGMIrBeSb W+htcLeaWOUOO0P5L5bDbLshyv0qZR02uNR1FXZIv+C5aDcu0kaZFLbvh2TehL9X mFyB7f6cR5G0gq2GeZiqd9Gw8CO534QYubk4FghvP/kwaT3rAHM1YFDm8NtsEfvJ dgnhSPvKjW7euE7E4wAMvM8v/iyS6zklR8+yGNAY/PQohlUfvJEHk8IA/Oowcr3i XoR7Y+1upK9oBbz7jLjnEngjiDIn3C4JF8wtryac0lGt4gm0iJyTnaeq5eakSfwu G1FmT43IQScHsEU6Uf6scMdZdenRKQlK -----END CERTIFICATE-----Generated at Thu Mar 13 21:28:06 2025 by rpki-client