$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft File: v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft (raw, json) Hash identifier: nnhcUBSoRQ9HCUPA4uoyMsP8J3hnnO+M4YkT/9jUI9M= Subject key identifier: BF:6C:FC:6E:5C:E1:16:F8:5E:5A:32:5F:FD:E5:DD:8C:F0:DE:8C:BD Authority key identifier: BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C Certificate issuer: /CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C Certificate serial: 06BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft Manifest number: 0667 Signing time: Thu 24 Apr 2025 22:35:20 +0000 Manifest this update: Thu 24 Apr 2025 22:35:20 +0000 Manifest next update: Thu 01 May 2025 22:35:20 +0000 Files and hashes: 1: v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl (hash: FfGhHrqhSpzzmEF9j1q7JA70VSX8JRrl7DX7X6uLTNA=) 2: CA44DBE09A9811EBAC99AD22C4F9AE02.roa (hash: wfbzZwER+fTgY++pqgXP/OKLLTSGFpByy89x8B47O4E=) 3: E0AAFE389A2411EBA8913944C4F9AE02.roa (hash: 1D7+OCtGjby5tViOYZaur4l4d2dDZ0m3lkkYo/LV9js=) 4: F2AA224A1A1711F09D6D6923C4F9AE02.roa (hash: T0CswBD2KIPNfh8TN7kP5VLd+HEy8GI9WMF69x1b8Qc=) 5: 971C513C022111EFBBBD7C47C4F9AE02.roa (hash: QuMBlcTc7QujQ/SOoXxGFQuUtssnMEkGa1IbX48EXaw=) 6: 671FC40EE29211EE94348874C4F9AE02.roa (hash: zylwlyfQcRU6ehbr04cNoWE1AgSNT1tCrRy3GfEdHx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:35:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1725 (0x6bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BE9D, serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C Validity Not Before: Apr 24 22:35:20 2025 GMT Not After : May 1 22:35:20 2025 GMT Subject: CN=680abca8-dbc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:87:6b:b6:b8:54:de:b3:dd:ee:c0:7e:50:f4: 73:38:5a:1c:16:2c:15:e7:b7:20:84:24:1c:ef:56: a3:6a:bd:31:66:1b:dd:c8:a7:3b:3e:56:33:68:45: e0:d1:56:7e:08:80:b2:c2:84:84:26:27:e2:79:9f: 68:2e:bf:62:8b:2d:2e:0e:fb:ff:c4:25:d0:56:4c: ea:9a:96:db:4e:6d:48:f2:a9:6a:33:d2:18:03:87: a8:c0:ea:93:a0:7d:b2:9a:09:23:f9:10:0f:00:73: 44:38:31:a8:06:96:4c:e1:da:ea:d2:f1:0c:82:c1: 78:80:49:4d:f5:d0:fd:6b:c5:ac:7d:dc:25:7d:fb: 98:25:40:42:66:77:03:b3:99:9b:28:a0:00:15:b3: 94:9c:9e:bb:fb:33:64:b8:64:29:cc:3d:1a:ca:7c: 34:24:85:0e:42:ef:92:fa:4d:fc:49:a2:04:b0:6e: bf:62:47:15:a1:82:f1:0c:7f:93:32:13:09:19:b2: 43:a5:33:ff:92:31:66:f9:8e:84:37:8c:45:4b:e6: df:20:26:58:0d:da:22:f7:01:23:05:55:55:56:21: 19:9a:60:6c:d3:66:ec:4b:77:17:b5:7b:33:bd:42: fe:04:b1:31:db:6c:27:7a:2e:54:7f:51:10:13:5d: ec:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:6C:FC:6E:5C:E1:16:F8:5E:5A:32:5F:FD:E5:DD:8C:F0:DE:8C:BD X509v3 Authority Key Identifier: keyid:BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:70:1d:3c:51:f6:c4:03:2a:f9:2d:bf:75:97:f1:82:c9:9e: 61:8f:57:64:93:f5:0e:ad:14:54:1d:23:97:1b:ee:c7:69:7e: a8:c6:df:33:c4:be:1e:7e:6e:b0:3b:92:d2:92:35:15:82:c5: 08:7d:40:ec:40:0d:6a:db:70:79:fc:d1:99:b9:57:f7:1e:d5: 6d:65:b9:ef:96:13:01:64:ea:de:a2:6f:a3:6c:a0:b1:c4:bb: b7:55:fe:61:da:27:e5:fd:28:0d:91:d3:4a:a7:40:fb:b3:65: 12:03:cf:b6:d0:60:2d:7f:6c:37:28:dd:9b:1a:27:a7:af:12: 9b:05:8d:f9:ea:29:09:4e:40:be:48:96:20:37:88:f4:ec:3b: f2:26:6e:5d:03:8b:17:d7:02:22:48:98:9b:c8:7a:7f:2f:ef: 22:4f:ce:fa:f9:fb:4e:8d:b0:ad:45:e5:22:29:cd:7a:88:41: 83:37:f3:0a:40:21:63:e2:f8:91:8a:2a:42:99:00:76:63:22: 20:40:c4:01:10:dc:12:26:dc:1c:4a:b4:43:f9:e5:b2:5a:a8: 54:c4:be:18:37:85:97:3d:95:40:21:b2:c6:51:05:fb:1f:14: 88:71:60:74:b9:0a:9c:e3:b1:6c:df:a7:4f:ed:ff:ee:5c:5d: 97:13:81:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJFOUQxMTAvBgNVBAUTKEJGNkFEMUFCQzlEOTE2MTlBMDkyODdGQjZDNjRGNDY0 N0I5RkQzMUMwHhcNMjUwNDI0MjIzNTIwWhcNMjUwNTAxMjIzNTIwWjAYMRYwFAYD VQQDEw02ODBhYmNhOC1kYmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYdrtrhU3rPd7sB+UPRzOFocFiwV57cghCQc71ajar0xZhvdyKc7PlYzaEXg 0VZ+CICywoSEJifieZ9oLr9iiy0uDvv/xCXQVkzqmpbbTm1I8qlqM9IYA4eowOqT oH2ymgkj+RAPAHNEODGoBpZM4drq0vEMgsF4gElN9dD9a8WsfdwlffuYJUBCZncD s5mbKKAAFbOUnJ67+zNkuGQpzD0aynw0JIUOQu+S+k38SaIEsG6/YkcVoYLxDH+T MhMJGbJDpTP/kjFm+Y6EN4xFS+bfICZYDdoi9wEjBVVVViEZmmBs02bsS3cXtXsz vUL+BLEx22wnei5Uf1EQE13sowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9s/G5c 4Rb4XloyX/3l3Yzw3oy9MB8GA1UdIwQYMBaAFL9q0avJ2RYZoJKH+2xk9GR7n9Mc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkU5RC9EMzA1RTRFRTk5 MEUxMUVCODlCNzZENjhDNEY5QUUwMi92MnJScThuWkZobWdrb2Y3YkdUMFpIdWYw eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YyclJxOG5aRmhtZ2tvZjdiR1QwWkh1ZjB4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkU5RC9EMzA1RTRFRTk5MEUxMUVCODlCNzZENjhDNEY5QUUwMi92MnJScThuWkZo bWdrb2Y3YkdUMFpIdWYweHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0cB08UfbEAyr5Lb91l/GCyZ5hj1dkk/UOrRRUHSOXG+7HaX6oxt8z xL4efm6wO5LSkjUVgsUIfUDsQA1q23B5/NGZuVf3HtVtZbnvlhMBZOreom+jbKCx xLu3Vf5h2ifl/SgNkdNKp0D7s2USA8+20GAtf2w3KN2bGienrxKbBY356ikJTkC+ SJYgN4j07DvyJm5dA4sX1wIiSJibyHp/L+8iT876+ftOjbCtReUiKc16iEGDN/MK QCFj4viRiipCmQB2YyIgQMQBENwSJtwcSrRD+eWyWqhUxL4YN4WXPZVAIbLGUQX7 HxSIcWB0uQqc47Fs36dP7f/uXF2XE4GQ -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:53 2025 by rpki-client