$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft File: RoxqeSq7PkX-7iIo0o54AxNytFU.mft (raw, json) Hash identifier: CFJ21ZrnI6rNH/pB9qFV2qfL/jbSpKoihec244UlrnI= Subject key identifier: BA:47:C7:A7:C2:78:06:F2:67:ED:21:83:5A:EE:EB:4B:67:30:5F:D7 Authority key identifier: 46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55 Certificate issuer: /CN=A912DD15/serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455 Certificate serial: 0194 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft Manifest number: 018E Signing time: Fri 25 Apr 2025 02:44:39 +0000 Manifest this update: Fri 25 Apr 2025 02:44:38 +0000 Manifest next update: Fri 02 May 2025 02:44:38 +0000 Files and hashes: 1: RoxqeSq7PkX-7iIo0o54AxNytFU.crl (hash: p9Q9zGig8ij3DaKZGTsjDOJ2a1pGGBMn1Qv3MCqqsXI=) 2: 43CE5D5A236911EEAC33285DC4F9AE02.roa (hash: frHxqt/yG7rr6fCbelfcQdfPa8QFjBnwgHPUnZu57so=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:44:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DD15, serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455 Validity Not Before: Apr 25 02:44:38 2025 GMT Not After : May 2 02:44:38 2025 GMT Subject: CN=680af717-667a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6f:24:01:51:4a:24:95:4e:c8:eb:fd:31:7a: e3:4d:c0:d0:40:df:b6:a9:19:fa:82:c1:a1:63:c0: f7:eb:e0:67:79:01:4d:35:7b:16:50:01:22:a6:b2: 90:e1:b2:0f:04:10:b1:82:a9:cf:42:06:ec:7b:50: df:cb:00:7c:00:55:69:ca:b3:a0:2f:cf:79:f3:5b: 09:bb:70:f9:18:5e:e8:aa:c5:ba:e7:36:8b:d1:f9: dc:a1:68:d4:61:72:74:f2:5c:77:ef:04:9f:42:48: 3a:c0:4f:16:83:b1:a0:9d:5b:78:1d:01:1b:15:ff: b8:65:1e:e3:e5:10:71:47:20:6c:f1:fc:0b:11:22: 96:ed:11:15:24:fe:bb:28:73:b8:7b:df:e6:5d:05: 25:55:14:a0:13:cd:4f:1b:22:a6:f5:4c:99:04:82: a1:03:6a:a2:c6:e6:55:0c:0e:35:fa:85:18:61:2b: ac:95:c8:d7:e8:6a:0c:87:19:ed:e8:d7:e6:72:5b: 65:90:1c:37:21:8b:26:b4:08:e7:16:b9:e5:c9:4f: f7:4d:72:e0:5f:bb:f1:be:8f:3b:13:6e:f8:cf:a2: a6:d5:cf:1d:a5:8d:b5:8e:8d:9f:69:d9:09:26:0c: af:ed:9f:62:61:87:1d:03:e6:ed:37:1e:df:88:57: 8f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:47:C7:A7:C2:78:06:F2:67:ED:21:83:5A:EE:EB:4B:67:30:5F:D7 X509v3 Authority Key Identifier: keyid:46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:a9:95:5a:af:0f:4e:7f:2c:d7:c8:76:a8:50:82:c6:9a:1d: e8:0b:f5:d6:24:2e:d9:58:e2:9e:cd:99:fb:a5:9e:93:2f:3b: d4:f9:34:4d:5c:84:ca:9e:56:bb:a1:c1:db:91:81:7c:c1:5b: 43:8f:4f:6b:b4:8f:61:a2:74:93:f5:88:03:d0:e5:75:f6:81: 0b:68:93:43:34:f4:c3:a4:2b:95:6e:f3:f1:2b:99:03:d5:b0: cd:e5:98:84:cd:ea:e0:32:f8:d4:d7:c6:3b:ca:5b:d2:fc:6e: 4d:68:f9:db:76:65:a0:90:33:a9:29:fb:36:3a:7f:7d:de:8e: a2:2e:36:1a:d5:76:07:12:b6:36:62:cd:80:95:0f:f0:e8:ae: 40:07:d8:58:98:69:01:25:f6:dd:05:79:25:79:0c:96:f9:64: 8f:0b:08:b0:07:62:fe:91:39:bd:7f:15:af:42:a1:28:bc:8e: c7:e2:12:a4:5f:84:d8:01:ac:da:85:db:90:c0:36:66:04:ae: 96:50:18:a8:bc:e9:8c:77:53:94:67:e9:6a:d3:ae:b3:9c:1e: 18:b8:73:29:c9:95:55:d9:0b:a5:db:d7:ab:a2:2f:a5:65:cb: f5:3f:b5:ef:c2:e1:e4:f1:96:1f:d0:b4:f5:c5:b8:d0:ef:fa: 17:8f:d1:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkREMTUxMTAvBgNVBAUTKDQ2OEM2QTc5MkFCQjNFNDVGRUVFMjIyOEQyOEU3ODAz MTM3MkI0NTUwHhcNMjUwNDI1MDI0NDM4WhcNMjUwNTAyMDI0NDM4WjAYMRYwFAYD VQQDEw02ODBhZjcxNy02NjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnG8kAVFKJJVOyOv9MXrjTcDQQN+2qRn6gsGhY8D36+BneQFNNXsWUAEiprKQ 4bIPBBCxgqnPQgbse1DfywB8AFVpyrOgL89581sJu3D5GF7oqsW65zaL0fncoWjU YXJ08lx37wSfQkg6wE8Wg7GgnVt4HQEbFf+4ZR7j5RBxRyBs8fwLESKW7REVJP67 KHO4e9/mXQUlVRSgE81PGyKm9UyZBIKhA2qixuZVDA41+oUYYSuslcjX6GoMhxnt 6NfmcltlkBw3IYsmtAjnFrnlyU/3TXLgX7vxvo87E274z6Km1c8dpY21jo2fadkJ Jgyv7Z9iYYcdA+btNx7fiFePuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpHx6fC eAbyZ+0hg1ru60tnMF/XMB8GA1UdIwQYMBaAFEaMankquz5F/u4iKNKOeAMTcrRV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREQxNS9CREFEQTg2MEND NTIxMUVEQTgyOTFEMTBDNEY5QUUwMi9Sb3hxZVNxN1BrWC03aUlvMG81NEF4Tnl0 RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JveHFlU3E3UGtYLTdpSW8wbzU0QXhOeXRGVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REQxNS9CREFEQTg2MENDNTIxMUVEQTgyOTFEMTBDNEY5QUUwMi9Sb3hxZVNxN1Br WC03aUlvMG81NEF4Tnl0RlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNqZVarw9OfyzXyHaoUILGmh3oC/XWJC7ZWOKezZn7pZ6TLzvU+TRN XITKnla7ocHbkYF8wVtDj09rtI9honST9YgD0OV19oELaJNDNPTDpCuVbvPxK5kD 1bDN5ZiEzergMvjU18Y7ylvS/G5NaPnbdmWgkDOpKfs2On993o6iLjYa1XYHErY2 Ys2AlQ/w6K5AB9hYmGkBJfbdBXkleQyW+WSPCwiwB2L+kTm9fxWvQqEovI7H4hKk X4TYAazahduQwDZmBK6WUBiovOmMd1OUZ+lq066znB4YuHMpyZVV2Qul29eroi+l Zcv1P7XvwuHk8ZYf0LT1xbjQ7/oXj9GZ -----END CERTIFICATE-----Generated at Sat Apr 26 16:46:23 2025 by rpki-client