$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft File: SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json) Hash identifier: fWPNFGvX+rpkcn+Nwb47/GXUiT/XT8BkCOhprmP2WKI= Subject key identifier: A1:8E:A1:02:8E:4C:F1:64:E6:F0:BE:CB:81:BD:12:1A:5B:38:74:E3 Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D Certificate serial: 0455 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft Manifest number: 03A4 Signing time: Sat 05 Apr 2025 01:31:28 +0000 Manifest this update: Sat 05 Apr 2025 01:31:28 +0000 Manifest next update: Sat 12 Apr 2025 01:31:28 +0000 Files and hashes: 1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: akcDJh923/PP/TglrVZ/9GTFK1YVrSrZQPODfLT69bs=) 2: 235C33AA841511EEB8881E26C4F9AE02.roa (hash: +YRAKRYqk613xfLgB0zdZc+SXbgEgwFsbZ4MAXHqfD4=) 3: 91F6CB78CC8411EFB64BE274C4F9AE02.roa (hash: Lyqkbw8kpDEXFRP3wM9V8TcwvtVc37CFnp2p01EAY4g=) 4: FC458FFABD2F11EFACAEDF48C4F9AE02.roa (hash: JhXAK3rvu+eA5A55zrWLUy9P2VWJ9TdInDYIPpvwJmg=) 5: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: j9uwlF1XU1bhm01I4UfNei0qn7GHjRRQXfewbREQbL0=) 6: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: aHmcIpJIE1GcUyI4Yny/qSd6Or3byAxj4bJ8cE5T4kk=) 7: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: tdnv3yegEbxd1X05RwDaloSoRTHWIFMLf521OQY7jzA=) 8: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: aqom3HQAn6x60ccWSgWXEn4twflM44rVgDlrpW0nn+w=) 9: 86EB79708F1011EE9F013A61C4F9AE02.roa (hash: sDLFf0VgNj5OaQd/cLxcgFs+ZmQp2L2QZD8I3VKQq+4=) 10: 5354E6D2DEC411EF8FDA1417C4F9AE02.roa (hash: UvWKns144QkbKtBlCs3U7c+HECBec3nEHRYK9S7sLx0=) 11: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: CYb1AUfDdwBmZIiw43Uzz4pNurCcroPrczZ8tZZSS/s=) 12: FC852C3E239011EFB136C710C4F9AE02.roa (hash: rfdSLa0My4R23E7UhQOzv75R7oc+8cQio+I5/2T2ScI=) 13: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: VWNAPC6UIfMVQch4vSc+1QxFpjuFdCFpkSLGoYnJWLQ=) 14: DD12F48AEC2611EF94F85F09C4F9AE02.roa (hash: STez8mDGGIo+dLC131vZHCpo98lp6VAK6pump85Nkmo=) 15: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: jy6vuCkSSKn5jRqSlZSZkzcBPcsjCkh7JsvXNhpfjoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1109 (0x455) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC75 Validity Not Before: Apr 5 01:31:28 2025 GMT Not After : Apr 12 01:31:28 2025 GMT Subject: CN=67f087f0-f29e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:de:7d:4d:47:f8:91:62:af:88:17:66:37:e7: 1c:b5:51:63:8e:15:3d:c9:4c:e7:aa:26:3d:d9:3b: 0e:2c:c5:2d:67:b8:e0:0b:d0:54:c8:1a:cc:31:4c: 78:18:7c:c3:90:a7:23:dd:5b:fa:8f:2c:04:e0:68: 78:cd:08:e6:07:50:03:03:f2:d1:8e:5b:42:31:57: ce:25:34:b6:b6:31:59:92:a4:50:59:54:67:6a:b7: 94:fc:75:9e:8e:b7:15:e7:7e:13:8b:98:dc:e2:e1: 7f:1d:0d:fd:0d:fb:08:c3:8e:1d:f1:70:b1:c1:b2: 34:5c:58:49:23:5d:c4:14:89:64:9d:8c:7b:43:9c: 0a:aa:19:69:df:a0:60:4f:a0:aa:ba:6b:cd:51:f2: c2:9b:03:b1:e4:59:d1:05:88:27:ab:a1:21:74:79: 72:df:ee:bc:65:57:02:a4:13:45:7a:97:91:4f:7f: 24:8d:b7:4c:60:b4:fa:eb:29:87:32:ba:ad:58:4b: d9:61:ac:67:c6:c2:cc:65:7f:ce:df:a3:d9:fb:45: a4:ca:d9:39:9b:7c:62:f1:4b:5d:d4:b3:04:e3:93: ac:6d:15:e7:7d:a6:12:57:91:7e:7a:e6:fb:6b:d0: 38:bf:5b:4e:64:c3:80:13:07:8f:90:d5:8a:2e:8a: 3f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:8E:A1:02:8E:4C:F1:64:E6:F0:BE:CB:81:BD:12:1A:5B:38:74:E3 X509v3 Authority Key Identifier: keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:3a:d5:65:7e:75:a8:33:ab:68:24:67:1d:db:15:05:34:06: 7c:69:d0:24:3f:74:56:97:7d:36:81:61:de:6f:bc:85:1d:13: 72:bf:54:f0:76:90:ef:ec:a0:bf:89:57:a1:4c:ae:77:93:0e: bb:e6:f4:c8:88:40:f2:af:b9:b1:34:25:7a:75:0d:8f:aa:79: 55:d0:ca:81:16:7c:d9:bc:a8:8f:54:94:53:b0:9c:f1:f2:2a: c4:bc:c6:a7:c4:77:f6:22:96:b7:00:22:66:2b:53:31:c7:78: d7:72:49:6d:f4:7f:20:c3:bf:74:da:44:28:3f:ef:ff:b0:22: b8:36:36:a6:a0:57:19:50:11:a3:eb:03:f0:2c:df:65:fe:e8: 64:16:2a:c3:31:5d:b8:59:a6:3d:92:81:a7:8e:12:8c:9d:39: 29:88:d9:93:29:a7:c3:dc:6f:61:1f:2f:26:0d:9b:67:75:13: cb:46:4d:d3:50:2d:5f:b4:a4:95:65:9f:68:58:ea:42:68:04: 85:3c:cf:37:81:d6:db:9a:b8:af:05:10:76:cf:53:5d:b6:51: f4:7b:33:9f:56:35:f0:60:f6:5e:5b:ad:c2:d6:39:0e:40:8b: 2a:0b:96:68:fc:8a:13:55:ee:22:30:e1:d9:35:99:7a:52:80: 91:c8:3a:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNzUxMTAvBgNVBAUTKDQ4MkU1QTZFMDg5NkEyNjZBOTFBNDA2NkMwNkY0QjRF RDk4NDY0OUQwHhcNMjUwNDA1MDEzMTI4WhcNMjUwNDEyMDEzMTI4WjAYMRYwFAYD VQQDEw02N2YwODdmMC1mMjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAud59TUf4kWKviBdmN+cctVFjjhU9yUznqiY92TsOLMUtZ7jgC9BUyBrMMUx4 GHzDkKcj3Vv6jywE4Gh4zQjmB1ADA/LRjltCMVfOJTS2tjFZkqRQWVRnareU/HWe jrcV534Ti5jc4uF/HQ39DfsIw44d8XCxwbI0XFhJI13EFIlknYx7Q5wKqhlp36Bg T6CqumvNUfLCmwOx5FnRBYgnq6EhdHly3+68ZVcCpBNFepeRT38kjbdMYLT66ymH MrqtWEvZYaxnxsLMZX/O36PZ+0Wkytk5m3xi8Utd1LME45OsbRXnfaYSV5F+eub7 a9A4v1tOZMOAEwePkNWKLoo/NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGOoQKO TPFk5vC+y4G9EhpbOHTjMB8GA1UdIwQYMBaAFEguWm4IlqJmqRpAZsBvS07ZhGSd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM3NS8zQUE1REVFMERE NTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29tYXBHa0Jtd0c5TFR0bUVa SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDNWFiZ2lXb21hcEdrQm13RzlMVHRtRVpKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkM3NS8zQUE1REVFMERENTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29t YXBHa0Jtd0c5TFR0bUVaSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByOtVlfnWoM6toJGcd2xUFNAZ8adAkP3RWl302gWHeb7yFHRNyv1Tw dpDv7KC/iVehTK53kw675vTIiEDyr7mxNCV6dQ2PqnlV0MqBFnzZvKiPVJRTsJzx 8irEvManxHf2Ipa3ACJmK1Mxx3jXcklt9H8gw7902kQoP+//sCK4NjamoFcZUBGj 6wPwLN9l/uhkFirDMV24WaY9koGnjhKMnTkpiNmTKafD3G9hHy8mDZtndRPLRk3T UC1ftKSVZZ9oWOpCaASFPM83gdbbmrivBRB2z1NdtlH0ezOfVjXwYPZeW63C1jkO QIsqC5Zo/IoTVe4iMOHZNZl6UoCRyDqu -----END CERTIFICATE-----Generated at Sat Apr 5 19:10:57 2025 by rpki-client