$ rpki-client -vvf rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft File: F4L8LE0koOJkDRWzGQ3umPNrjzw.mft (raw, json) Hash identifier: X1tizjr35rUfMDmGCEX7FgCMe4GH6sLwLyzwlL89zXE= Subject key identifier: 5F:3B:E7:BE:BF:40:55:F0:33:18:C6:54:79:5A:DD:15:9F:06:50:78 Authority key identifier: 17:82:FC:2C:4D:24:A0:E2:64:0D:15:B3:19:0D:EE:98:F3:6B:8F:3C Certificate issuer: /CN=A912E92E/serialNumber=1782FC2C4D24A0E2640D15B3190DEE98F36B8F3C Certificate serial: 0835 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4L8LE0koOJkDRWzGQ3umPNrjzw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft Manifest number: 35DC Signing time: Sat 26 Apr 2025 15:58:01 +0000 Manifest this update: Sat 26 Apr 2025 15:58:00 +0000 Manifest next update: Sat 03 May 2025 15:58:00 +0000 Files and hashes: 1: F4L8LE0koOJkDRWzGQ3umPNrjzw.crl (hash: 8HGm7uBzXoWoJIsdaUz0geLM1sccRTdi+1PYr9KD7Xk=) 2: 8595A74A373C11ECA3E8C51BC4F9AE02.roa (hash: +veyd8W47YCvCuitg3o8ThOGXu4XRgXC3k1LgL4ZMH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.crl rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4L8LE0koOJkDRWzGQ3umPNrjzw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2101 (0x835) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E92E, serialNumber=1782FC2C4D24A0E2640D15B3190DEE98F36B8F3C Validity Not Before: Apr 26 15:58:00 2025 GMT Not After : May 3 15:58:00 2025 GMT Subject: CN=680d0289-83a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b2:1a:68:86:a0:1b:97:5f:93:5d:2f:0a:8c: d0:3a:08:99:3b:b0:c0:39:4d:0c:cb:70:ee:61:68: 80:f5:05:b2:4e:0c:ad:fc:45:59:81:0e:e3:d8:fb: 5d:29:6d:de:34:a9:1f:8d:ec:d0:fd:8c:62:e9:a3: 6d:8b:e0:30:be:c7:66:12:59:17:e9:81:ad:13:a3: 2a:97:2e:12:90:75:80:a6:f6:8a:ca:7c:98:81:40: d4:30:11:b9:51:fc:bc:65:3f:a6:6e:1e:0f:66:87: 15:2b:24:90:f8:30:c2:3c:95:d6:fb:f4:dc:c9:e1: 5b:91:d2:2b:8a:5e:7a:74:37:e4:7c:9b:46:f0:8a: 9b:7f:b5:45:91:1b:8f:85:48:b8:1a:f1:5b:fb:80: 95:48:ec:66:a2:a6:30:58:87:16:44:0a:e0:ca:ba: 30:52:c5:11:7c:01:17:69:3c:c5:51:59:09:60:78: fb:87:9a:99:c9:da:a8:ce:a9:4d:95:ee:3a:f5:0b: 87:9c:ec:2f:d5:c3:97:dd:4b:94:41:a7:2a:50:bb: 63:7f:ed:a1:6d:f5:0f:bb:b2:01:59:bf:24:e1:20: 1f:91:ea:00:57:6e:e6:eb:28:01:4b:d4:35:05:f8: dd:67:f2:e1:fb:60:26:ad:bd:81:b8:5c:61:80:37: ba:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:3B:E7:BE:BF:40:55:F0:33:18:C6:54:79:5A:DD:15:9F:06:50:78 X509v3 Authority Key Identifier: keyid:17:82:FC:2C:4D:24:A0:E2:64:0D:15:B3:19:0D:EE:98:F3:6B:8F:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4L8LE0koOJkDRWzGQ3umPNrjzw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:8b:2c:4f:ab:84:7d:3d:8c:c4:21:b4:2b:35:86:b5:c4:99: 0d:c7:57:88:b5:cb:d1:59:a1:25:9e:e8:5b:72:96:04:86:aa: e8:93:5e:14:ba:36:8f:3f:41:60:e4:fa:25:8b:2a:74:c7:3b: c8:f1:ea:99:3f:5c:9f:32:5a:c0:b9:60:53:40:aa:49:0e:2a: 8b:9a:57:25:56:6f:94:e9:55:26:03:61:1d:97:1f:0d:1a:76: be:a8:ea:4e:8e:38:c3:95:fd:ba:35:59:0a:2e:60:d4:db:5e: 42:c8:1e:9e:fe:54:5c:03:ea:72:8a:fb:7f:ce:84:0c:ee:1a: 36:52:ae:0e:4b:66:f7:3e:af:ed:af:97:27:bc:8c:90:7f:5a: 85:ce:97:0d:2d:ec:59:6b:5d:ca:6d:e9:e2:e3:7a:19:5d:ab: 28:c7:6d:ab:35:10:d9:2f:d8:7f:ff:2a:53:f9:16:b1:b5:02: 4a:bf:fd:e6:b9:f0:eb:47:b9:88:5e:ca:7c:28:4a:6d:ca:2d: 66:87:cd:31:db:e1:be:ae:f7:bf:73:59:f0:36:b7:5e:ec:2b: 00:1c:67:1e:01:7a:e4:fb:08:dd:7a:a1:9b:21:88:58:1f:80: e9:03:39:16:d6:a9:b1:7f:05:b1:15:ac:4f:a6:f8:4e:c4:54: 82:b2:e8:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5MkUxMTAvBgNVBAUTKDE3ODJGQzJDNEQyNEEwRTI2NDBEMTVCMzE5MERFRTk4 RjM2QjhGM0MwHhcNMjUwNDI2MTU1ODAwWhcNMjUwNTAzMTU1ODAwWjAYMRYwFAYD VQQDEw02ODBkMDI4OS04M2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLIaaIagG5dfk10vCozQOgiZO7DAOU0My3DuYWiA9QWyTgyt/EVZgQ7j2Ptd KW3eNKkfjezQ/Yxi6aNti+AwvsdmElkX6YGtE6Mqly4SkHWApvaKynyYgUDUMBG5 Ufy8ZT+mbh4PZocVKySQ+DDCPJXW+/TcyeFbkdIril56dDfkfJtG8Iqbf7VFkRuP hUi4GvFb+4CVSOxmoqYwWIcWRArgyrowUsURfAEXaTzFUVkJYHj7h5qZydqozqlN le469QuHnOwv1cOX3UuUQacqULtjf+2hbfUPu7IBWb8k4SAfkeoAV27m6ygBS9Q1 BfjdZ/Lh+2Amrb2BuFxhgDe6JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF87576/ QFXwMxjGVHla3RWfBlB4MB8GA1UdIwQYMBaAFBeC/CxNJKDiZA0VsxkN7pjza488 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTkyRS9BMDA5OUE4MDI3 RDExMUU2QUU3QkYyN0NDNEY5QUUwMi9GNEw4TEUwa29PSmtEUld6R1EzdW1QTnJq encuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y0TDhMRTBrb09Ka0RSV3pHUTN1bVBOcmp6dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTkyRS9BMDA5OUE4MDI3RDExMUU2QUU3QkYyN0NDNEY5QUUwMi9GNEw4TEUwa29P SmtEUld6R1EzdW1QTnJqencubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLiyxPq4R9PYzEIbQrNYa1xJkNx1eItcvRWaElnuhbcpYEhqrok14U ujaPP0Fg5Poliyp0xzvI8eqZP1yfMlrAuWBTQKpJDiqLmlclVm+U6VUmA2Edlx8N Gna+qOpOjjjDlf26NVkKLmDU215CyB6e/lRcA+pyivt/zoQM7ho2Uq4OS2b3Pq/t r5cnvIyQf1qFzpcNLexZa13Kbeni43oZXasox22rNRDZL9h//ypT+RaxtQJKv/3m ufDrR7mIXsp8KEptyi1mh80x2+G+rve/c1nwNrde7CsAHGceAXrk+wjdeqGbIYhY H4DpAzkW1qmxfwWxFaxPpvhOxFSCsugB -----END CERTIFICATE-----Generated at Sun Apr 27 04:31:58 2025 by rpki-client