$ rpki-client -vvf rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft File: B7vs0OoIn8ZO4UDdyN26UufZENA.mft (raw, json) Hash identifier: jZVfUjHV9JFD8rwJwwcv0/Z3yyyiZjHOhtcQTqJTxEY= Subject key identifier: 98:E6:53:2C:9B:C2:5B:93:95:D0:E1:67:F5:F2:6C:BC:EF:31:44:DE Authority key identifier: 07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0 Certificate issuer: /CN=A912E64A/serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0 Certificate serial: 05D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft Manifest number: 05C4 Signing time: Thu 24 Apr 2025 22:51:53 +0000 Manifest this update: Thu 24 Apr 2025 22:51:53 +0000 Manifest next update: Thu 01 May 2025 22:51:53 +0000 Files and hashes: 1: B7vs0OoIn8ZO4UDdyN26UufZENA.crl (hash: Wrai5s+BgbMl0AUc9eEoUT4JOslSvZAfmdE2zTjohA0=) 2: 55B56780BABA11EB8A51C234C4F9AE02.roa (hash: 4+8EOl0IVC0WYPREjgU4SQ2gBQ7SWbeC1nS8R2xM7hU=) 3: 55056D1CBABA11EB8A51C234C4F9AE02.roa (hash: Jks+wAurz0A89wXrN9oPKVJZcdKUluPelZM2Gsz3YvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1488 (0x5d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E64A, serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0 Validity Not Before: Apr 24 22:51:53 2025 GMT Not After : May 1 22:51:53 2025 GMT Subject: CN=680ac089-2a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:20:86:27:e3:3a:ba:c2:f4:6c:ab:61:1a:d0: 38:18:32:0a:d4:53:05:29:06:87:fc:5d:b4:70:4c: 52:1b:84:e3:64:5f:3d:e7:84:df:8e:1e:1f:a6:ce: 70:14:b6:8f:52:d6:5c:42:ab:27:fe:8c:38:47:ab: 98:80:1c:af:99:1a:11:04:5e:0a:40:5f:5e:ae:64: c4:2a:77:08:4b:66:e5:78:15:4b:6d:2f:f2:6d:ac: 09:e9:32:a3:a9:d2:8c:69:05:30:9f:b0:3e:6c:ff: b1:ab:c6:9a:98:30:a1:0d:68:2d:b9:94:ca:3e:3f: aa:23:1c:c9:de:a3:c6:a0:09:e6:ae:e7:46:97:dd: 2c:aa:cf:f0:5d:eb:54:41:e6:37:09:b5:6c:76:d2: d4:8e:85:16:a7:4b:f9:e0:5d:8d:65:d8:9d:c6:14: 6b:28:27:77:6c:f5:5a:58:39:1a:a0:f1:6a:e2:50: 87:20:67:72:b4:25:f5:50:e8:de:5f:df:07:40:b8: 98:04:2f:8d:ff:25:50:9c:6d:e3:9f:64:88:79:f7: 66:41:0a:8b:67:f6:0a:4f:8d:4f:d3:0f:cc:52:d4: 0e:13:ac:41:f8:e1:75:f2:19:75:b9:55:87:87:7b: ac:f6:6d:36:8c:b1:7f:b6:7c:cb:5c:d3:38:6f:08: 70:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E6:53:2C:9B:C2:5B:93:95:D0:E1:67:F5:F2:6C:BC:EF:31:44:DE X509v3 Authority Key Identifier: keyid:07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:d4:19:08:90:d7:c8:f5:91:0c:b5:57:ff:2c:b3:89:3e:34: e1:5b:45:e3:5d:54:14:bc:fb:21:27:bd:e7:2e:0b:65:bc:1a: 62:7b:77:e3:b4:c2:38:6b:3b:62:71:cd:20:a4:d5:3d:1a:28: df:80:3a:d0:93:b2:7f:0f:3b:3e:97:68:d6:a0:4b:23:4f:48: ab:4e:e1:7e:dd:07:2f:f6:33:eb:56:70:d4:50:1d:a9:ce:ba: 31:ee:01:5e:28:ed:d8:78:fb:2b:dd:72:e7:8b:9f:87:d5:67: 84:50:aa:bd:26:10:0e:26:cd:59:ca:b9:d3:58:ae:77:d3:43: 77:be:94:f8:17:c6:5b:ce:89:5d:9c:73:01:ce:8b:f6:ee:7f: e4:42:88:59:c3:46:c5:a8:cd:4b:43:e9:e2:48:e4:f3:69:5a: 28:d1:61:2a:f1:ab:06:be:27:7d:73:e0:17:bd:b3:c1:54:51: b5:26:88:8b:2f:f7:d1:13:a9:d7:dc:c0:9d:00:22:49:13:7f: 60:02:ca:8b:08:57:4e:85:35:a1:fe:41:1e:4f:73:a9:82:27: 33:e5:f2:f4:a0:f8:3f:c2:b9:dd:af:8a:42:a5:bb:24:42:4e: e5:78:45:f2:8b:f3:24:de:71:42:f7:05:9d:b5:4d:d0:fa:9a: 5c:e1:e0:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU2NEExMTAvBgNVBAUTKDA3QkJFQ0QwRUEwODlGQzY0RUUxNDBEREM4RERCQTUy RTdEOTEwRDAwHhcNMjUwNDI0MjI1MTUzWhcNMjUwNTAxMjI1MTUzWjAYMRYwFAYD VQQDEw02ODBhYzA4OS0yYTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCCGJ+M6usL0bKthGtA4GDIK1FMFKQaH/F20cExSG4TjZF8954Tfjh4fps5w FLaPUtZcQqsn/ow4R6uYgByvmRoRBF4KQF9ermTEKncIS2bleBVLbS/ybawJ6TKj qdKMaQUwn7A+bP+xq8aamDChDWgtuZTKPj+qIxzJ3qPGoAnmrudGl90sqs/wXetU QeY3CbVsdtLUjoUWp0v54F2NZdidxhRrKCd3bPVaWDkaoPFq4lCHIGdytCX1UOje X98HQLiYBC+N/yVQnG3jn2SIefdmQQqLZ/YKT41P0w/MUtQOE6xB+OF18hl1uVWH h3us9m02jLF/tnzLXNM4bwhwewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJjmUyyb wluTldDhZ/XybLzvMUTeMB8GA1UdIwQYMBaAFAe77NDqCJ/GTuFA3cjdulLn2RDQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTY0QS9DQ0NBNUY1RUJB QjcxMUVCQTMwMjk0MkRDNEY5QUUwMi9CN3ZzME9vSW44Wk80VURkeU4yNlV1ZlpF TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I3dnMwT29JbjhaTzRVRGR5TjI2VXVmWkVOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTY0QS9DQ0NBNUY1RUJBQjcxMUVCQTMwMjk0MkRDNEY5QUUwMi9CN3ZzME9vSW44 Wk80VURkeU4yNlV1ZlpFTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg1BkIkNfI9ZEMtVf/LLOJPjThW0XjXVQUvPshJ73nLgtlvBpie3fj tMI4azticc0gpNU9GijfgDrQk7J/Dzs+l2jWoEsjT0irTuF+3Qcv9jPrVnDUUB2p zrox7gFeKO3YePsr3XLni5+H1WeEUKq9JhAOJs1ZyrnTWK5300N3vpT4F8Zbzold nHMBzov27n/kQohZw0bFqM1LQ+niSOTzaVoo0WEq8asGvid9c+AXvbPBVFG1JoiL L/fRE6nX3MCdACJJE39gAsqLCFdOhTWh/kEeT3Opgicz5fL0oPg/wrndr4pCpbsk Qk7leEXyi/Mk3nFC9wWdtU3Q+ppc4eDm -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:28 2025 by rpki-client