$ rpki-client -vvf rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft File: 40soVCBWzp4GUP78CrEkIWy1-cE.mft (raw, json) Hash identifier: 5gO4UCwFIW1pI+pck/FqdjM/CAum+ISj4KhVv3nYPrQ= Subject key identifier: EA:FA:41:D4:EB:F3:DD:64:64:A0:3D:90:F6:2E:4D:00:FE:ED:0E:10 Authority key identifier: E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1 Certificate issuer: /CN=A911C6E1/serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1 Certificate serial: 02D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft Manifest number: 02C9 Signing time: Fri 25 Apr 2025 01:10:06 +0000 Manifest this update: Fri 25 Apr 2025 01:10:05 +0000 Manifest next update: Fri 02 May 2025 01:10:05 +0000 Files and hashes: 1: 40soVCBWzp4GUP78CrEkIWy1-cE.crl (hash: 7hjpAxiq7VOAwfs5ghTpn8XHeXfnVjKikk5mzzjZy5g=) 2: FB1BF574E7E411EC84283679C4F9AE02.roa (hash: ZM5rRUd00+nBfPasOFVmxXpUPYX0MShZkN1FXso/iDI=) 3: FBB9FE90E7E411EC84283679C4F9AE02.roa (hash: pjNUbtH7HoaOJ7Yp/zo9LBV9AiGXTeeEg0CufDMnsg0=) 4: 43CEF64C5E7111EDAD328E21C4F9AE02.roa (hash: CMs488Hhl5oLPF4YmVkuRaqJu0RzsjH0FTfUHm+gkes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 725 (0x2d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C6E1, serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1 Validity Not Before: Apr 25 01:10:05 2025 GMT Not After : May 2 01:10:05 2025 GMT Subject: CN=680ae0ee-0bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:84:60:17:9d:56:95:ee:f9:3c:5a:09:aa:d3: b9:45:c2:a5:80:33:75:ce:81:9c:fa:cb:29:b4:c6: 87:c0:6d:01:30:f6:14:b8:4a:b6:c0:78:e0:c7:53: 44:fd:9b:57:a5:d2:12:dc:ba:a8:0b:73:8a:a4:bc: 26:48:fb:a4:4e:43:3d:81:b1:3b:04:ea:26:e3:54: 4a:11:b3:61:c8:2c:0e:a0:fb:c0:2b:d0:84:9f:09: b6:14:d1:8c:2e:a2:d9:96:8a:ae:7e:4a:a6:35:f1: 07:ea:80:9a:f0:79:20:b8:9a:aa:ff:8b:60:c7:b2: c8:56:dd:74:da:e7:5a:03:88:a2:13:f6:21:2c:5e: c3:1d:12:a9:f2:e0:9c:96:a3:e7:34:fc:db:bc:33: ad:18:65:3c:ad:04:15:41:9a:b3:2d:e0:19:87:21: 59:6f:71:06:17:a6:76:52:04:1a:75:d8:28:d2:3d: 9a:95:f0:0e:f7:1d:ad:d0:b5:b9:7b:64:70:f9:46: f6:b4:a3:fe:a6:e1:2c:33:a1:4c:97:0c:84:c8:3d: 65:e1:5a:69:6e:6d:6f:a3:71:7d:6b:3c:ad:9c:59: a8:5b:99:66:4a:7d:bb:69:f3:a6:65:21:da:e7:95: 13:74:4b:06:ab:b1:b2:19:a5:56:21:94:e7:fc:8d: c2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FA:41:D4:EB:F3:DD:64:64:A0:3D:90:F6:2E:4D:00:FE:ED:0E:10 X509v3 Authority Key Identifier: keyid:E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:0f:05:e2:7b:a0:1c:46:6a:a5:d0:91:b7:ce:ba:58:45:b1: 9f:cb:77:51:af:3d:4b:3b:94:14:1c:24:6e:bb:cc:71:81:b4: f1:85:b9:ef:ab:2d:2c:b5:18:a7:ff:df:90:9d:fc:12:4d:c7: a9:cb:8d:fd:c6:68:ca:dc:24:7d:b1:de:1b:96:f8:64:81:79: cd:76:4e:6e:cf:5f:dd:67:65:66:e9:3d:b0:fb:9d:02:cb:b9: 1f:3d:68:e9:00:b7:3f:f9:bf:3e:54:23:7c:86:f6:52:44:e9: 51:ee:20:45:4f:e0:4b:b3:97:6c:5c:ce:38:b9:e2:9a:c8:82: f0:c9:c6:77:c7:ef:99:53:f5:c1:4f:6d:13:92:15:05:3f:76: 13:98:34:00:e1:d8:89:dd:31:75:bd:e8:fb:16:13:aa:b9:1d: 2a:45:f5:f4:98:f7:39:1d:8a:aa:0f:19:08:0f:90:42:1a:71: bf:54:77:23:8d:b7:32:51:cd:8d:4e:87:fc:65:cb:c3:09:24: 28:c2:5a:08:eb:a6:af:33:de:e6:1b:84:ad:80:18:ae:8b:e2: 11:45:f3:b4:e5:03:c3:68:3c:12:d4:9c:75:33:28:cd:f1:9b: 45:14:98:40:9b:56:d1:45:5c:a3:c4:ef:82:3b:b8:bd:af:93: 65:ec:ff:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2RTExMTAvBgNVBAUTKEUzNEIyODU0MjA1NkNFOUUwNjUwRkVGQzBBQjEyNDIx NkNCNUY5QzEwHhcNMjUwNDI1MDExMDA1WhcNMjUwNTAyMDExMDA1WjAYMRYwFAYD VQQDEw02ODBhZTBlZS0wYmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo4RgF51Wle75PFoJqtO5RcKlgDN1zoGc+ssptMaHwG0BMPYUuEq2wHjgx1NE /ZtXpdIS3LqoC3OKpLwmSPukTkM9gbE7BOom41RKEbNhyCwOoPvAK9CEnwm2FNGM LqLZloqufkqmNfEH6oCa8HkguJqq/4tgx7LIVt102udaA4iiE/YhLF7DHRKp8uCc lqPnNPzbvDOtGGU8rQQVQZqzLeAZhyFZb3EGF6Z2UgQaddgo0j2alfAO9x2t0LW5 e2Rw+Ub2tKP+puEsM6FMlwyEyD1l4Vppbm1vo3F9azytnFmoW5lmSn27afOmZSHa 55UTdEsGq7GyGaVWIZTn/I3CQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOr6QdTr 891kZKA9kPYuTQD+7Q4QMB8GA1UdIwQYMBaAFONLKFQgVs6eBlD+/AqxJCFstfnB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzZFMS9BNTdEODZEOEU3 REUxMUVDOEQ4QzVDNURDNEY5QUUwMi80MHNvVkNCV3pwNEdVUDc4Q3JFa0lXeTEt Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwc29WQ0JXenA0R1VQNzhDckVrSVd5MS1jRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzZFMS9BNTdEODZEOEU3REUxMUVDOEQ4QzVDNURDNEY5QUUwMi80MHNvVkNCV3pw NEdVUDc4Q3JFa0lXeTEtY0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWDwXie6AcRmql0JG3zrpYRbGfy3dRrz1LO5QUHCRuu8xxgbTxhbnv qy0stRin/9+QnfwSTcepy439xmjK3CR9sd4blvhkgXnNdk5uz1/dZ2Vm6T2w+50C y7kfPWjpALc/+b8+VCN8hvZSROlR7iBFT+BLs5dsXM44ueKayILwycZ3x++ZU/XB T20TkhUFP3YTmDQA4diJ3TF1vej7FhOquR0qRfX0mPc5HYqqDxkID5BCGnG/VHcj jbcyUc2NTof8ZcvDCSQowloI66avM97mG4StgBiui+IRRfO05QPDaDwS1Jx1MyjN 8ZtFFJhAm1bRRVyjxO+CO7i9r5Nl7P+2 -----END CERTIFICATE-----Generated at Sat Apr 26 05:22:20 2025 by rpki-client