$ rpki-client -vvf rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft File: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft (raw, json) Hash identifier: NHx9o6l0FdNuGwpRyk9fD8lp1iJ3i0fUMSVSA7CuqT8= Subject key identifier: EF:AA:EB:F2:5C:D5:C5:07:64:95:6B:33:EF:B5:15:05:A2:99:B5:5B Authority key identifier: A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3 Certificate issuer: /CN=A912CED3/serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3 Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft Manifest number: B0 Signing time: Fri 25 Apr 2025 05:08:13 +0000 Manifest this update: Fri 25 Apr 2025 05:08:13 +0000 Manifest next update: Fri 02 May 2025 05:08:13 +0000 Files and hashes: 1: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl (hash: aXmcWTm4Fwn0J2tlFvsGmroPSevf09JtFDTOZyU4DOc=) 2: A5DE28B4216E11EF88CCA84FC4F9AE02.roa (hash: TnSpnLe7j6/9wTqsNRxeaAfjz8zUewbXt/4PsMyvpP4=) 3: A6550254216E11EF88CCA84FC4F9AE02.roa (hash: hgy+s41tW18ZsoIITX25VfjzDwvg0uuSJ0bvy5UWIIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CED3, serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3 Validity Not Before: Apr 25 05:08:13 2025 GMT Not After : May 2 05:08:13 2025 GMT Subject: CN=680b18bd-13b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:51:64:25:eb:76:db:53:ae:82:36:f9:a5:96: 9c:e0:1d:5e:5b:c1:3d:6e:1d:20:af:c7:6a:4b:93: d2:5f:b1:62:60:ac:32:4f:31:77:ed:49:c3:78:e7: 51:c3:32:70:a9:53:74:ab:02:ea:c6:f7:64:62:5d: 71:f1:47:2f:09:da:2b:72:b1:60:d3:4e:52:52:16: d8:8b:58:9a:87:e2:a5:c6:e6:26:94:77:cd:2b:e0: 15:8b:07:c0:25:07:89:eb:5b:9f:d5:73:6a:f6:92: ae:89:29:76:81:6b:1c:d5:d4:72:87:a1:b5:29:46: 0e:15:e7:74:8d:a3:c6:76:72:f6:0d:0a:f0:3d:3e: 0b:60:fc:87:1a:eb:2b:56:58:e2:ee:83:6b:47:a7: ae:42:1d:d6:de:d5:62:80:dd:a5:b8:b4:d0:22:31: d7:37:31:06:05:db:85:6f:2a:09:32:00:04:6e:f5: aa:20:3a:b5:40:34:7e:d3:b5:95:bc:27:f9:2e:32: 03:95:07:41:06:3e:e2:db:97:62:f2:25:6c:5c:dc: aa:87:1d:88:ab:7e:15:4c:f8:62:05:b6:d1:cf:8e: 45:a6:2b:92:fd:9b:11:27:c9:16:7e:c5:70:39:ac: 09:b6:ae:7c:ec:81:ae:ec:8e:a5:8b:7c:95:c2:c6: fe:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:AA:EB:F2:5C:D5:C5:07:64:95:6B:33:EF:B5:15:05:A2:99:B5:5B X509v3 Authority Key Identifier: keyid:A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:17:ab:32:f7:b0:08:46:d6:4e:5b:9d:1c:e3:5a:68:c6:ad: f6:99:d0:82:b1:6d:92:6a:38:24:c2:ec:60:12:f3:4b:97:af: 7c:e0:a4:b3:5e:a5:fe:65:d6:4c:01:cc:60:ce:5f:67:61:f0: 44:e1:2f:fe:29:ab:cd:9d:fb:d1:85:5d:d8:0b:93:e5:2e:d2: 41:3b:5b:48:af:df:3e:b2:0e:80:07:9d:54:76:37:8b:8c:ff: 85:b1:f5:58:e0:59:fe:a1:fb:ca:4b:c4:a8:1e:b3:ca:0e:e0: 57:7a:22:a1:9d:bc:a7:e1:10:73:f9:fa:fc:5b:e3:a9:a9:ec: 87:16:4c:75:03:bf:9a:e2:a9:b0:da:ba:7b:ba:d6:eb:aa:e6: 12:2e:3a:9a:be:3a:56:0b:f2:e3:95:0a:3c:8c:86:fc:d4:5c: 97:27:6c:96:a1:55:d7:4d:14:dd:2a:7a:2d:58:1d:58:3a:2e: ee:76:a0:4b:8a:0d:a4:31:a7:53:a5:19:96:dd:7d:f9:de:10: fd:ec:ef:b5:91:bf:76:3a:e6:77:ab:60:67:86:73:0d:af:37: 3e:aa:97:1f:55:6d:c1:cd:23:1c:39:b1:65:d6:b7:c9:56:b1: 78:74:9a:bc:48:c9:87:b6:f5:d5:dd:9d:e2:2d:4c:66:e1:3f: 89:7f:3f:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNFRDMxMTAvBgNVBAUTKEE3NDFFQjQxMEQ0QjhFNDZGRjQ4QUI3MEExREEwMDZB M0RDRjQxQTMwHhcNMjUwNDI1MDUwODEzWhcNMjUwNTAyMDUwODEzWjAYMRYwFAYD VQQDEw02ODBiMThiZC0xM2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlFkJet221Ougjb5pZac4B1eW8E9bh0gr8dqS5PSX7FiYKwyTzF37UnDeOdR wzJwqVN0qwLqxvdkYl1x8UcvCdorcrFg005SUhbYi1iah+KlxuYmlHfNK+AViwfA JQeJ61uf1XNq9pKuiSl2gWsc1dRyh6G1KUYOFed0jaPGdnL2DQrwPT4LYPyHGusr Vlji7oNrR6euQh3W3tVigN2luLTQIjHXNzEGBduFbyoJMgAEbvWqIDq1QDR+07WV vCf5LjIDlQdBBj7i25di8iVsXNyqhx2Iq34VTPhiBbbRz45FpiuS/ZsRJ8kWfsVw OawJtq587IGu7I6li3yVwsb+qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+q6/Jc 1cUHZJVrM++1FQWimbVbMB8GA1UdIwQYMBaAFKdB60ENS45G/0ircKHaAGo9z0Gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0VEMy8zQzE2MUZBNjIx NkMxMUVGODBCMTUzMkJDNEY5QUUwMi9wMEhyUVExTGprYl9TS3R3b2RvQWFqM1BR YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwSHJRUTFMamtiX1NLdHdvZG9BYWozUFFhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0VEMy8zQzE2MUZBNjIxNkMxMUVGODBCMTUzMkJDNEY5QUUwMi9wMEhyUVExTGpr Yl9TS3R3b2RvQWFqM1BRYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAF6sy97AIRtZOW50c41poxq32mdCCsW2SajgkwuxgEvNLl6984KSz XqX+ZdZMAcxgzl9nYfBE4S/+KavNnfvRhV3YC5PlLtJBO1tIr98+sg6AB51UdjeL jP+FsfVY4Fn+ofvKS8SoHrPKDuBXeiKhnbyn4RBz+fr8W+OpqeyHFkx1A7+a4qmw 2rp7utbrquYSLjqavjpWC/LjlQo8jIb81FyXJ2yWoVXXTRTdKnotWB1YOi7udqBL ig2kMadTpRmW3X353hD97O+1kb92OuZ3q2BnhnMNrzc+qpcfVW3BzSMcObFl1rfJ VrF4dJq8SMmHtvXV3Z3iLUxm4T+Jfz/m -----END CERTIFICATE-----Generated at Sat Apr 26 14:18:58 2025 by rpki-client