$ rpki-client -vvf rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.mft File: F_RkaDqcrP_uOS3atV7AQQwpaqE.mft (raw, json) Hash identifier: xXNNr+JLnBBTP7xBY1GQuaZNaXqI4m9FnquRh8JLspw= Subject key identifier: 79:37:BE:F1:53:3C:D7:AC:D8:9E:10:D7:D3:65:3A:C7:B8:AA:19:B3 Authority key identifier: 17:F4:64:68:3A:9C:AC:FF:EE:39:2D:DA:B5:5E:C0:41:0C:29:6A:A1 Certificate issuer: /CN=A911549E/serialNumber=17F464683A9CACFFEE392DDAB55EC0410C296AA1 Certificate serial: 01C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_RkaDqcrP_uOS3atV7AQQwpaqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.mft Manifest number: 01BE Signing time: Fri 25 Apr 2025 02:15:53 +0000 Manifest this update: Fri 25 Apr 2025 02:15:52 +0000 Manifest next update: Fri 02 May 2025 02:15:52 +0000 Files and hashes: 1: F_RkaDqcrP_uOS3atV7AQQwpaqE.crl (hash: OPJI5e+GCd4kNVFTV28eTjeIBsLzl1H1hgrQ0Q/jQVo=) 2: 6F873B3A7CD211EDA61A1836C4F9AE02.roa (hash: elMEoeZr1kMxHEzZvAxYI3biX1cRxKVaLlWrHacBWyE=) 3: 6EFEE12C7CD211EDA61A1836C4F9AE02.roa (hash: mnezjCyzKusiAqMtaUmdzOLSoLAbXHzaPhqGAX/1w/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.crl rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_RkaDqcrP_uOS3atV7AQQwpaqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911549E, serialNumber=17F464683A9CACFFEE392DDAB55EC0410C296AA1 Validity Not Before: Apr 25 02:15:52 2025 GMT Not After : May 2 02:15:52 2025 GMT Subject: CN=680af058-27f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ca:79:18:9c:83:81:92:e5:bf:df:fa:76:4f: 23:21:e4:d4:8f:9d:1a:0e:b5:af:1f:d8:6c:06:e6: 91:56:25:d8:17:ed:b7:82:11:17:7b:3d:4f:ca:f5: 8a:50:80:cb:9b:78:0e:b8:ae:81:36:b2:43:5b:47: ac:9b:cc:a4:1a:33:3e:bf:ac:f3:ea:28:c8:52:09: 29:01:5f:8d:e5:c9:50:99:cd:76:7e:55:80:e0:59: c9:a5:b9:6d:3f:e2:05:37:60:07:01:5b:47:f4:a6: 1d:ab:f5:c7:2e:bf:8e:3a:ee:63:8a:01:df:11:2a: 75:4a:c7:59:78:4d:a4:27:a9:c7:ed:fb:84:df:5f: 09:ad:cc:88:9d:a0:ad:2c:5c:2c:ef:0c:aa:df:1e: ce:03:3e:84:11:8e:f4:39:28:71:9d:4e:4e:58:30: 1d:a2:1e:20:b9:49:c9:cd:52:a1:1d:ea:d7:3b:79: a9:c8:03:f6:26:2e:b3:dd:27:9f:1a:02:10:1d:1f: d2:2c:96:19:ed:60:b7:91:7d:5b:ff:50:8c:a9:68: a3:8c:dc:25:85:5e:6c:4c:37:4d:29:a2:54:e5:64: 41:27:28:84:1c:8b:ee:68:1b:4a:86:8e:e7:bf:a2: 68:6a:d9:0a:95:81:5d:6a:2b:5f:7f:3a:41:93:17: 1d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:37:BE:F1:53:3C:D7:AC:D8:9E:10:D7:D3:65:3A:C7:B8:AA:19:B3 X509v3 Authority Key Identifier: keyid:17:F4:64:68:3A:9C:AC:FF:EE:39:2D:DA:B5:5E:C0:41:0C:29:6A:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_RkaDqcrP_uOS3atV7AQQwpaqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:68:6a:1e:8c:ad:c9:71:9c:3d:02:13:90:ef:77:9c:b6:76: ce:f3:cf:8f:9c:1f:39:6b:30:57:31:68:a0:f7:ea:66:65:62: 6a:73:f4:15:33:6a:7a:9a:74:b9:7c:1a:8b:6a:0f:7e:64:db: 4c:51:88:c3:00:57:75:f7:20:ef:a7:ab:e2:ac:70:cf:40:0e: fd:0d:80:17:61:0c:76:28:f6:6a:fe:80:cb:a3:cb:26:dd:5e: 83:63:f7:5b:20:21:af:32:23:09:9d:aa:5c:2b:11:55:57:9d: 75:d6:20:c4:d0:a0:b5:32:a6:77:86:e9:0d:47:b6:e8:63:b6: f6:d2:62:56:64:f7:64:90:51:00:a6:65:f0:18:f7:7c:d2:99: 07:b6:21:ee:f1:d5:a1:72:17:4a:c5:7a:2c:b6:ff:06:8b:c3: 8e:77:0f:7f:84:68:9a:8c:91:4d:47:b4:11:a6:31:d3:11:15: 48:c2:56:1b:87:d4:36:68:b1:97:f8:a4:ba:0d:c9:d7:38:1d: ed:bf:bd:b8:3f:7b:6d:da:65:b7:0b:05:64:6e:48:51:c6:58: 53:82:ad:86:15:2d:4d:81:f7:85:a9:6d:3f:da:56:54:f0:c2: 59:29:36:cb:29:13:95:3b:8d:50:c9:2c:f3:92:52:d8:bb:21: a1:49:db:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU0OUUxMTAvBgNVBAUTKDE3RjQ2NDY4M0E5Q0FDRkZFRTM5MkREQUI1NUVDMDQx MEMyOTZBQTEwHhcNMjUwNDI1MDIxNTUyWhcNMjUwNTAyMDIxNTUyWjAYMRYwFAYD VQQDEw02ODBhZjA1OC0yN2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Mp5GJyDgZLlv9/6dk8jIeTUj50aDrWvH9hsBuaRViXYF+23ghEXez1PyvWK UIDLm3gOuK6BNrJDW0esm8ykGjM+v6zz6ijIUgkpAV+N5clQmc12flWA4FnJpblt P+IFN2AHAVtH9KYdq/XHLr+OOu5jigHfESp1SsdZeE2kJ6nH7fuE318JrcyInaCt LFws7wyq3x7OAz6EEY70OShxnU5OWDAdoh4guUnJzVKhHerXO3mpyAP2Ji6z3Sef GgIQHR/SLJYZ7WC3kX1b/1CMqWijjNwlhV5sTDdNKaJU5WRBJyiEHIvuaBtKho7n v6JoatkKlYFdaitffzpBkxcdyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHk3vvFT PNes2J4Q19NlOse4qhmzMB8GA1UdIwQYMBaAFBf0ZGg6nKz/7jkt2rVewEEMKWqh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTQ5RS9CMjI1QjE5QzdD Q0QxMUVEOUY4RTBCMkZDNEY5QUUwMi9GX1JrYURxY3JQX3VPUzNhdFY3QVFRd3Bh cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfUmthRHFjclBfdU9TM2F0VjdBUVF3cGFxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTQ5RS9CMjI1QjE5QzdDQ0QxMUVEOUY4RTBCMkZDNEY5QUUwMi9GX1JrYURxY3JQ X3VPUzNhdFY3QVFRd3BhcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwaGoejK3JcZw9AhOQ73ectnbO88+PnB85azBXMWig9+pmZWJqc/QV M2p6mnS5fBqLag9+ZNtMUYjDAFd19yDvp6virHDPQA79DYAXYQx2KPZq/oDLo8sm 3V6DY/dbICGvMiMJnapcKxFVV5111iDE0KC1MqZ3hukNR7boY7b20mJWZPdkkFEA pmXwGPd80pkHtiHu8dWhchdKxXostv8Gi8OOdw9/hGiajJFNR7QRpjHTERVIwlYb h9Q2aLGX+KS6DcnXOB3tv724P3tt2mW3CwVkbkhRxlhTgq2GFS1NgfeFqW0/2lZU 8MJZKTbLKROVO41QySzzklLYuyGhSds+ -----END CERTIFICATE-----Generated at Sat Apr 26 17:05:16 2025 by rpki-client