$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft File: tKlqre7ce-3VfWL8mknqCz_29Qw.mft (raw, json) Hash identifier: iTNStEV015XIW1LY+XOAvJrbhOvgO0FxLV0ZS+xOmhg= Subject key identifier: DB:3E:B4:7A:D9:DB:45:A4:20:8F:56:A3:55:9C:40:E4:3A:7F:2E:DC Authority key identifier: B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C Certificate issuer: /CN=A916A983/serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C Certificate serial: 125B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft Manifest number: 1254 Signing time: Wed 12 Mar 2025 17:04:26 +0000 Manifest this update: Wed 12 Mar 2025 17:04:25 +0000 Manifest next update: Wed 19 Mar 2025 17:04:25 +0000 Files and hashes: 1: tKlqre7ce-3VfWL8mknqCz_29Qw.crl (hash: EvRWs5DsG4g+ZeNFrUS13lYjX3SRcuz0FMqxnkRl0Mo=) 2: 1C839F861BA111EA8BDD6114C4F9AE02.roa (hash: /xC7PbFaPdYR1z14EMh8nZ3np50j+H8RH/0TSNmCnBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 17:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4699 (0x125b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983 Validity Not Before: Mar 12 17:04:25 2025 GMT Not After : Mar 19 17:04:25 2025 GMT Subject: CN=67d1be99-2323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a5:f9:01:f6:98:4b:1a:32:f7:3c:51:f7:98: bf:02:a2:98:61:a8:94:42:7f:3c:9e:14:ba:57:6d: 28:d9:94:32:5a:8b:2a:d2:a6:70:2c:42:5c:e1:80: ba:f0:ec:52:e9:f0:83:d9:4e:10:d6:9f:e9:11:22: 28:97:e0:a5:e4:32:6b:76:be:cf:95:bb:29:17:9f: 53:d4:10:4e:61:de:ed:72:79:bc:5e:20:c5:a0:b8: 6d:a5:71:12:27:9c:2f:1f:22:77:bc:0b:87:9c:29: a6:cf:c0:4c:e7:6a:98:6b:fe:30:7d:97:ba:f8:2d: 12:c9:23:2b:6c:f1:9e:8c:ca:4b:d4:6f:96:53:13: 7d:53:1e:1b:f4:25:9a:9d:b6:8d:b6:89:26:90:04: 20:e5:d1:0a:35:fd:3f:72:37:f4:d1:91:7f:52:35: 79:bd:33:9a:07:18:9f:67:a4:ed:0d:a6:41:23:e9: 1c:85:d7:9a:25:99:26:8b:5b:df:1b:b9:44:92:f0: 51:a3:cb:c9:60:04:52:c3:0a:07:02:87:42:dd:2e: 2e:59:55:7a:b4:39:d4:30:74:b3:e9:df:0b:02:88: 2b:71:0b:70:5b:e6:88:fa:e9:fe:2b:4b:78:53:a0: 68:4f:4c:2f:eb:63:24:29:31:6c:aa:56:6e:f7:40: b0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:3E:B4:7A:D9:DB:45:A4:20:8F:56:A3:55:9C:40:E4:3A:7F:2E:DC X509v3 Authority Key Identifier: keyid:B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:2c:80:77:47:f8:89:27:f8:23:bc:32:44:83:dc:83:e3:93: 6f:9a:a7:75:6e:14:cc:cf:b1:f9:10:aa:ce:07:0c:f6:45:7e: 51:38:41:29:e3:d6:55:a9:36:f9:30:51:a8:ba:ee:b6:95:3c: e1:6c:8c:f9:70:f1:48:32:c4:f9:83:87:b0:6e:62:a4:43:1e: 37:3a:36:b4:1d:d4:21:0a:31:7b:7c:54:e0:a8:d0:90:05:de: 20:30:84:7a:f1:db:9d:00:68:02:92:b0:26:15:d2:d9:f2:63: fb:5b:a1:52:58:fb:80:71:cf:61:2b:33:21:63:c3:c2:10:f4: 1b:06:7c:02:6b:f1:53:9d:3d:b6:55:59:73:a1:51:f8:2a:1d: 5d:43:cd:98:c8:56:56:d0:dc:4e:61:88:32:e7:68:82:0c:e5: 0b:f6:e6:56:ea:7e:ef:53:99:3c:9a:b2:f2:40:cd:68:60:f9: bb:48:22:3f:55:d2:2b:7b:7a:ce:d5:57:fc:f6:d4:36:11:11: da:c8:68:95:96:56:b4:c5:b5:b4:20:22:d5:c5:5d:62:8b:99: d1:18:18:f8:c4:cf:5a:48:4a:d3:1f:3d:20:28:ce:7a:4a:e4: 04:e0:77:30:9b:36:85:8c:1f:7f:72:e2:fd:6b:26:a2:32:f8: a6:ab:35:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICElswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKEI0QTk2QUFERUVEQzdCRURENTdENjJGQzlBNDlFQTBC M0ZGNkY1MEMwHhcNMjUwMzEyMTcwNDI1WhcNMjUwMzE5MTcwNDI1WjAYMRYwFAYD VQQDEw02N2QxYmU5OS0yMzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKX5AfaYSxoy9zxR95i/AqKYYaiUQn88nhS6V20o2ZQyWosq0qZwLEJc4YC6 8OxS6fCD2U4Q1p/pESIol+Cl5DJrdr7PlbspF59T1BBOYd7tcnm8XiDFoLhtpXES J5wvHyJ3vAuHnCmmz8BM52qYa/4wfZe6+C0SySMrbPGejMpL1G+WUxN9Ux4b9CWa nbaNtokmkAQg5dEKNf0/cjf00ZF/UjV5vTOaBxifZ6TtDaZBI+kchdeaJZkmi1vf G7lEkvBRo8vJYARSwwoHAodC3S4uWVV6tDnUMHSz6d8LAogrcQtwW+aI+un+K0t4 U6BoT0wv62MkKTFsqlZu90CwrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNs+tHrZ 20WkII9Wo1WcQOQ6fy7cMB8GA1UdIwQYMBaAFLSpaq3u3Hvt1X1i/JpJ6gs/9vUM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8yOEIxQjYxQ0NE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi90S2xxcmU3Y2UtM1ZmV0w4bWtucUN6XzI5 UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3RLbHFyZTdjZS0zVmZXTDhta25xQ3pfMjlRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8yOEIxQjYxQ0NEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi90S2xxcmU3Y2Ut M1ZmV0w4bWtucUN6XzI5UXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpLIB3R/iJJ/gjvDJEg9yD45Nvmqd1bhTMz7H5EKrOBwz2RX5ROEEp 49ZVqTb5MFGouu62lTzhbIz5cPFIMsT5g4ewbmKkQx43Oja0HdQhCjF7fFTgqNCQ Bd4gMIR68dudAGgCkrAmFdLZ8mP7W6FSWPuAcc9hKzMhY8PCEPQbBnwCa/FTnT22 VVlzoVH4Kh1dQ82YyFZW0NxOYYgy52iCDOUL9uZW6n7vU5k8mrLyQM1oYPm7SCI/ VdIre3rO1Vf89tQ2ERHayGiVlla0xbW0ICLVxV1ii5nRGBj4xM9aSErTHz0gKM56 SuQE4HcwmzaFjB9/cuL9ayaiMvimqzX/ -----END CERTIFICATE-----Generated at Thu Mar 13 21:28:34 2025 by rpki-client