$ rpki-client -vvf rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft File: 4jfSzTuh8bknVF8kSZKHKtCvwwU.mft (raw, json) Hash identifier: oEs3Zr+1NciRVA9hBwcKEeBRvqQx+hnJjfw1nwd9v1M= Subject key identifier: 9F:F3:F7:37:9E:82:A6:28:D3:AA:DA:82:D6:38:50:FB:7D:79:D0:42 Authority key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 Certificate issuer: /CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Certificate serial: 08DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft Manifest number: 08C1 Signing time: Thu 24 Apr 2025 20:23:21 +0000 Manifest this update: Thu 24 Apr 2025 20:23:21 +0000 Manifest next update: Thu 01 May 2025 20:23:21 +0000 Files and hashes: 1: 4jfSzTuh8bknVF8kSZKHKtCvwwU.crl (hash: yrHP2rfW5qGFHPRj6yVIJohwc1zSiWqzkQpfxsfLMrk=) 2: 4C5CCE6EB46A11EAB5A01176C4F9AE02.roa (hash: YmROt2RnH3UdNIAXBylk68JRdbwoGmgzkhxTYT8yZZA=) 3: 9FCAD654781E11EB808A544BC4F9AE02.roa (hash: jI9GJ3mUj7/g+UDfOOrVVqKbgOohmwcRp94iSUpENxA=) 4: 4B3A4250B46A11EAB5A01176C4F9AE02.roa (hash: 65R5M+eBFk+Sri4/ilXTe6yj4G3UYq+q394nSZKR7qQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2266 (0x8da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912512F, serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Validity Not Before: Apr 24 20:23:21 2025 GMT Not After : May 1 20:23:21 2025 GMT Subject: CN=680a9db9-a660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5d:23:07:4d:ac:19:47:9c:93:01:4a:e6:cb: b5:c4:24:15:4a:12:1b:ff:72:3b:85:fc:75:81:83: 4a:83:c1:2a:85:f9:ac:25:47:be:ab:4b:72:11:ff: bb:ea:fa:76:a5:e6:85:cc:ab:ed:8b:9e:e9:04:63: f8:eb:da:9f:02:83:67:61:19:78:15:32:66:5d:91: 73:24:b2:b3:01:85:f5:46:c4:57:a8:a3:e4:46:cd: c0:2f:d5:c5:91:44:f2:45:8e:2b:67:b3:2f:0d:6c: 5c:cc:0b:50:ec:c7:d6:b9:ba:6f:de:00:46:e6:e8: ca:59:86:7c:2b:9c:5a:99:65:bf:45:62:6c:cd:7c: d2:dc:82:68:6d:4b:77:f5:88:32:a0:35:7d:a7:0a: 7c:de:35:1c:91:9f:c3:a4:6a:cd:94:7e:cd:60:0a: 9e:80:56:22:2f:8b:d3:4b:3b:3b:1f:5f:ff:0f:14: d6:2c:9c:6f:19:3f:a2:ad:8b:e3:dc:a3:c6:e4:23: 12:ad:b3:19:3f:a2:52:4e:90:f9:64:b7:30:a5:9e: f5:31:57:7d:1b:cb:b5:79:bc:a0:d9:8e:0c:f4:c0: 33:3f:94:95:4a:d1:f7:e1:7c:6f:ec:5f:b1:5d:f5: 25:7a:79:05:93:e6:1b:95:22:23:94:10:b8:b7:2f: 62:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F3:F7:37:9E:82:A6:28:D3:AA:DA:82:D6:38:50:FB:7D:79:D0:42 X509v3 Authority Key Identifier: keyid:E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:74:68:3a:bd:57:73:92:bc:c2:2c:bb:65:3d:39:f1:b5:01: eb:77:0f:4f:1b:7d:ce:6b:53:1a:13:af:bd:88:26:e3:0d:db: e1:e7:16:c9:58:57:e5:f8:5c:73:95:4a:77:e4:5b:76:69:4e: 44:bb:59:9c:94:e5:a4:f6:cd:3f:30:d8:1b:10:11:20:d6:5e: 9d:44:fe:b5:14:d8:f1:e9:a8:dc:95:5c:d9:de:c3:01:1e:0a: e9:a4:1a:da:78:55:cd:df:5d:35:99:6a:c3:de:ec:a2:29:53: cd:73:cd:5e:b0:00:37:36:c1:9d:4b:1f:6b:49:fa:3c:84:ac: 9c:c9:9d:bf:16:5b:0a:2e:77:68:4e:52:06:35:e7:93:d2:4b: 64:01:e3:08:d9:89:2a:01:65:6c:a1:73:48:e6:f0:6a:96:31: 24:a7:e8:e1:65:3c:38:8a:c6:3a:bc:e3:80:ad:69:6f:47:1a: 76:2a:14:f3:43:4c:80:db:e9:6b:01:7f:59:b5:10:57:67:e4: 95:c5:fe:8f:aa:67:dc:2b:e8:c0:0f:c6:5a:b9:c5:70:e6:1e: 6b:8b:18:8c:ed:9e:89:07:91:45:d9:77:4f:72:22:5e:8b:0e: 37:ee:58:53:9c:8a:11:01:bd:1a:2f:64:4c:62:85:70:5a:e6: 91:90:73:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxMkYxMTAvBgNVBAUTKEUyMzdEMkNEM0JBMUYxQjkyNzU0NUYyNDQ5OTI4NzJB RDBBRkMzMDUwHhcNMjUwNDI0MjAyMzIxWhcNMjUwNTAxMjAyMzIxWjAYMRYwFAYD VQQDEw02ODBhOWRiOS1hNjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsF0jB02sGUeckwFK5su1xCQVShIb/3I7hfx1gYNKg8EqhfmsJUe+q0tyEf+7 6vp2peaFzKvti57pBGP469qfAoNnYRl4FTJmXZFzJLKzAYX1RsRXqKPkRs3AL9XF kUTyRY4rZ7MvDWxczAtQ7MfWubpv3gBG5ujKWYZ8K5xamWW/RWJszXzS3IJobUt3 9YgyoDV9pwp83jUckZ/DpGrNlH7NYAqegFYiL4vTSzs7H1//DxTWLJxvGT+irYvj 3KPG5CMSrbMZP6JSTpD5ZLcwpZ71MVd9G8u1ebyg2Y4M9MAzP5SVStH34Xxv7F+x XfUlenkFk+YblSIjlBC4ty9iYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/z9zee gqYo06ragtY4UPt9edBCMB8GA1UdIwQYMBaAFOI30s07ofG5J1RfJEmShyrQr8MF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTEyRi80QjhCRkZFQ0I0 NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhia25WRjhrU1pLSEt0Q3Z3 d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRqZlN6VHVoOGJrblZGOGtTWktIS3RDdnd3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTEyRi80QjhCRkZFQ0I0NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhi a25WRjhrU1pLSEt0Q3Z3d1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQdGg6vVdzkrzCLLtlPTnxtQHrdw9PG33Oa1MaE6+9iCbjDdvh5xbJ WFfl+FxzlUp35Ft2aU5Eu1mclOWk9s0/MNgbEBEg1l6dRP61FNjx6ajclVzZ3sMB HgrppBraeFXN3101mWrD3uyiKVPNc81esAA3NsGdSx9rSfo8hKycyZ2/FlsKLndo TlIGNeeT0ktkAeMI2YkqAWVsoXNI5vBqljEkp+jhZTw4isY6vOOArWlvRxp2KhTz Q0yA2+lrAX9ZtRBXZ+SVxf6PqmfcK+jAD8ZaucVw5h5rixiM7Z6JB5FF2XdPciJe iw437lhTnIoRAb0aL2RMYoVwWuaRkHNz -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:55 2025 by rpki-client