$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft File: yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft (raw, json) Hash identifier: kS4Ek2cSk41HVaYnOHczri5yLv+sAmPykqdPIFX2hng= Subject key identifier: BC:30:AA:8C:40:14:3C:F6:A8:92:C4:10:32:68:E3:FB:E0:AC:CE:FC Authority key identifier: C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34 Certificate issuer: /CN=A912AC33/serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634 Certificate serial: 0404 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft Manifest number: 03F8 Signing time: Fri 25 Apr 2025 00:15:53 +0000 Manifest this update: Fri 25 Apr 2025 00:15:53 +0000 Manifest next update: Fri 02 May 2025 00:15:53 +0000 Files and hashes: 1: yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl (hash: Dkizh8W5NXOdgXB9Tn904moch50DU2U3yBgE7wCkY5g=) 2: E4804004737211EC866EAC24C4F9AE02.roa (hash: NdcrODMvzPxbGahsHjIC859CSUu00GxcxQ7bS9fv+uc=) 3: 204CB89672C011EC809A5933C4F9AE02.roa (hash: Gfvw/vl1mymWE2Hz3blrobSO5Bvy6xdNCRghpmsy0TE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:15:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1028 (0x404) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC33, serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634 Validity Not Before: Apr 25 00:15:53 2025 GMT Not After : May 2 00:15:53 2025 GMT Subject: CN=680ad439-5377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d1:bf:bc:4a:d3:55:99:02:f5:64:16:ba:3e: 46:61:e6:89:77:80:9d:82:7b:f7:c7:15:ba:73:4d: f4:b9:09:64:b5:e2:93:e5:97:38:fc:dc:1c:f2:e8: 46:c0:b7:61:6b:f5:87:b8:22:30:3a:f0:77:4b:63: 3f:8a:c8:a1:9c:7b:90:3d:02:82:88:84:1f:5f:b9: 71:ba:36:a2:27:00:ce:12:b4:60:25:44:10:6a:1d: b1:9a:72:eb:f2:c9:5c:bc:a6:24:ca:3b:c3:60:c9: 14:5c:62:99:de:5c:65:e8:36:9f:a1:e9:a1:0d:57: 69:cb:3c:2d:ff:e9:c7:2e:91:e2:4f:8c:95:bf:89: ed:6e:23:d8:59:61:65:c0:ed:19:96:d6:74:b2:84: 84:15:af:b5:f3:2e:3a:77:4c:60:61:37:c5:0a:91: b4:19:14:82:17:48:8b:ee:c4:9d:97:ee:36:70:75: 27:00:41:e4:e1:fa:44:2e:dc:8c:da:f4:c1:ad:a2: e5:f7:c3:a8:d4:d9:fb:24:4a:8c:9f:d2:38:42:ba: b9:d9:d8:b3:48:f2:a3:8d:33:c3:67:01:07:d5:da: 80:30:5a:58:08:c2:89:ce:32:71:ab:c0:fd:14:67: 94:c3:f0:b3:69:a8:8c:7d:d3:00:3d:c6:2c:a0:b0: f0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:30:AA:8C:40:14:3C:F6:A8:92:C4:10:32:68:E3:FB:E0:AC:CE:FC X509v3 Authority Key Identifier: keyid:C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:66:f2:ee:fc:0a:30:91:9a:cf:ed:8f:00:51:9e:24:e8:cb: fd:79:41:20:7a:91:33:63:b9:a4:2d:dd:fb:6d:b7:64:ce:93: 98:26:a8:e6:52:b2:9b:dc:40:49:91:16:e3:cb:d7:61:15:1a: 1f:bc:27:f8:fa:d2:1b:85:b6:32:ab:69:4b:72:2d:0c:b3:8a: dc:4c:d7:c4:7f:6b:c9:5a:dd:a4:5b:a5:6f:51:6b:36:ed:5f: f6:7b:ad:52:ca:67:a9:74:40:2c:eb:86:9f:83:9c:3c:d4:64: 74:0e:43:16:26:ee:11:ba:5d:60:a0:de:fb:37:19:e4:f3:d1: 1e:21:d5:87:f4:47:96:9b:53:a5:2b:50:cd:27:68:f3:6a:c4: f7:17:6b:99:54:8d:34:76:f3:bb:5b:e6:28:2c:08:e6:cc:26: 98:a6:26:8d:c8:47:cd:04:82:68:1e:57:fc:3a:73:2e:3d:28: 9f:43:30:48:d7:7e:a5:65:81:cb:0b:98:2f:87:32:25:cf:1f: 15:47:a7:4c:fc:3e:a0:56:98:b8:e3:b7:1c:3a:23:42:68:68: e1:21:2f:b2:aa:20:58:3c:6c:da:01:29:8f:85:13:88:81:8e: 0d:66:4a:72:08:e9:88:0c:f3:2a:ad:3e:51:11:7d:2f:dc:fc: 3b:e0:dd:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDMzMxMTAvBgNVBAUTKEM5NUNFOUQxQjZCMzEwODFDMDI1RDQ2QTNBMTY3RkNG REZBNzI2MzQwHhcNMjUwNDI1MDAxNTUzWhcNMjUwNTAyMDAxNTUzWjAYMRYwFAYD VQQDEw02ODBhZDQzOS01Mzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9G/vErTVZkC9WQWuj5GYeaJd4Cdgnv3xxW6c030uQlkteKT5Zc4/Nwc8uhG wLdha/WHuCIwOvB3S2M/isihnHuQPQKCiIQfX7lxujaiJwDOErRgJUQQah2xmnLr 8slcvKYkyjvDYMkUXGKZ3lxl6DafoemhDVdpyzwt/+nHLpHiT4yVv4ntbiPYWWFl wO0ZltZ0soSEFa+18y46d0xgYTfFCpG0GRSCF0iL7sSdl+42cHUnAEHk4fpELtyM 2vTBraLl98Oo1Nn7JEqMn9I4Qrq52dizSPKjjTPDZwEH1dqAMFpYCMKJzjJxq8D9 FGeUw/CzaaiMfdMAPcYsoLDw7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwwqoxA FDz2qJLEEDJo4/vgrM78MB8GA1UdIwQYMBaAFMlc6dG2sxCBwCXUajoWf8/fpyY0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzMy8wNEIzMzQ4ODcy QkMxMUVDODYxMTZENUVDNEY5QUUwMi95VnpwMGJhekVJSEFKZFJxT2haX3o5LW5K alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lWenAwYmF6RUlIQUpkUnFPaFpfejktbkpqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUMzMy8wNEIzMzQ4ODcyQkMxMUVDODYxMTZENUVDNEY5QUUwMi95VnpwMGJhekVJ SEFKZFJxT2haX3o5LW5KalEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjZvLu/AowkZrP7Y8AUZ4k6Mv9eUEgepEzY7mkLd37bbdkzpOYJqjm UrKb3EBJkRbjy9dhFRofvCf4+tIbhbYyq2lLci0Ms4rcTNfEf2vJWt2kW6VvUWs2 7V/2e61SymepdEAs64afg5w81GR0DkMWJu4Rul1goN77Nxnk89EeIdWH9EeWm1Ol K1DNJ2jzasT3F2uZVI00dvO7W+YoLAjmzCaYpiaNyEfNBIJoHlf8OnMuPSifQzBI 136lZYHLC5gvhzIlzx8VR6dM/D6gVpi447ccOiNCaGjhIS+yqiBYPGzaASmPhROI gY4NZkpyCOmIDPMqrT5REX0v3Pw74N0f -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:52 2025 by rpki-client