$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft File: E4zRCkd43g41kR6cnJRPSyHE2wk.mft (raw, json) Hash identifier: Y6SZ1XUthrmf/+FwGyndMX+G3titfJUuu3B81C5UEhY= Subject key identifier: C3:55:CA:49:CB:F6:CA:89:C3:FC:6A:50:D0:50:21:39:55:19:EB:6A Authority key identifier: 13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 Certificate issuer: /CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Certificate serial: 0C8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft Manifest number: 0C78 Signing time: Sat 26 Apr 2025 18:08:40 +0000 Manifest this update: Sat 26 Apr 2025 18:08:40 +0000 Manifest next update: Sat 03 May 2025 18:08:40 +0000 Files and hashes: 1: E4zRCkd43g41kR6cnJRPSyHE2wk.crl (hash: /r1QVZjnViy1+sLeIHeUlVvRpOQpwZQCi0UthmC0r9g=) 2: 1FC5063AE0D411ECB6C0B01CC4F9AE02.roa (hash: logqdhARGTyBkzJX/eotDYOSUYMcRn8n6eQk1B3sltA=) 3: 0827E4147F7911EC86DE4B56C4F9AE02.roa (hash: CFNa1CRrRXsw2NlqSuSKe2rvDg2ywkEC8x6fBZFbOK4=) 4: 41CBB5B87F7611ECAD50FA4EC4F9AE02.roa (hash: GtVkTj6lkgw7RXe+n4R0d/g9GkOJM8psiPRDO4atRDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3213 (0xc8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F9C, serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Validity Not Before: Apr 26 18:08:40 2025 GMT Not After : May 3 18:08:40 2025 GMT Subject: CN=680d2128-3e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1e:85:0d:5a:28:45:1b:0a:1f:28:d5:7a:b5: 28:47:ec:f0:9e:31:ef:09:fe:80:8a:2c:d9:21:9a: 78:80:a7:ad:f7:c2:39:c1:7e:b9:bf:8f:83:28:96: a3:4d:3b:87:53:28:d7:81:a8:ac:c6:28:a5:56:12: 20:10:17:77:86:45:89:86:84:5e:5c:48:02:2c:e2: d0:bf:a3:ca:2e:26:85:ad:b1:9c:38:6d:e2:87:a5: 8c:90:04:7f:02:33:63:ab:10:7d:af:40:54:6e:15: b8:15:e9:26:80:10:09:31:f9:e2:98:48:c4:20:84: 33:95:8c:7a:6d:21:40:10:b9:c6:7c:93:ec:a8:d4: ad:5c:fc:80:e5:e4:b1:18:a3:50:a2:f9:46:41:5b: 5c:20:66:3f:a2:9b:ab:53:4d:63:8a:b9:8e:a5:e1: 5b:ca:ee:87:28:e8:43:46:9d:fd:a4:16:89:87:51: 95:aa:59:42:b6:64:ba:1a:75:61:eb:fe:bd:00:26: 5e:3c:f5:c8:ad:88:81:fb:50:eb:17:24:9d:84:d6: 67:38:b1:12:2a:1c:15:7f:69:d4:d3:b4:c5:04:64: 06:b1:0a:3b:5e:12:0d:4d:9b:dd:a1:af:1b:4e:34: d9:8a:9f:57:9e:cd:b1:f8:77:f0:63:e4:07:79:dc: 6d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:55:CA:49:CB:F6:CA:89:C3:FC:6A:50:D0:50:21:39:55:19:EB:6A X509v3 Authority Key Identifier: keyid:13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:1c:a7:2e:f9:75:b2:47:31:ed:57:13:e0:17:01:da:cd:16: 79:c2:29:4e:9e:ab:db:9f:03:64:74:c2:e3:ee:0d:ee:2c:50: 26:76:44:ad:8f:3c:b9:5d:a8:8f:e5:d9:e9:34:e5:ca:12:31: 06:09:33:35:45:fe:39:32:aa:cd:20:7b:7d:77:21:f5:6b:15: 4f:6a:b9:74:94:f8:ea:a4:74:68:35:82:0a:dc:68:39:45:3e: 25:30:e7:53:3a:70:2a:56:38:05:5b:4d:0c:46:ef:15:ef:31: d6:df:b7:2b:6c:0d:3b:23:a3:53:4b:89:6a:d0:59:9a:58:eb: a8:67:8d:39:b5:4e:61:4d:b1:ee:c7:de:84:95:87:b0:21:69: 9d:78:16:d4:bd:c4:06:8a:0e:53:d9:4b:9e:ce:a2:e0:6c:aa: c2:e7:82:b0:d0:05:1e:d6:24:df:50:ae:8a:bd:0b:95:a9:28: 04:97:9b:c4:9f:6c:f1:10:3f:53:d6:3d:42:ec:7a:be:bd:95: f8:fa:10:01:b9:b5:1a:14:62:ec:c2:7a:9c:38:31:22:b2:e6: 6e:13:6b:22:3b:86:a0:3c:56:77:98:16:f0:9c:95:d1:78:c5: fe:ac:c2:3c:0d:e6:81:92:59:f9:75:ab:aa:81:9a:ce:00:7c: da:2c:3e:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBGOUMxMTAvBgNVBAUTKDEzOENEMTBBNDc3OERFMEUzNTkxMUU5QzlDOTQ0RjRC MjFDNERCMDkwHhcNMjUwNDI2MTgwODQwWhcNMjUwNTAzMTgwODQwWjAYMRYwFAYD VQQDEw02ODBkMjEyOC0zZTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzR6FDVooRRsKHyjVerUoR+zwnjHvCf6AiizZIZp4gKet98I5wX65v4+DKJaj TTuHUyjXgaisxiilVhIgEBd3hkWJhoReXEgCLOLQv6PKLiaFrbGcOG3ih6WMkAR/ AjNjqxB9r0BUbhW4FekmgBAJMfnimEjEIIQzlYx6bSFAELnGfJPsqNStXPyA5eSx GKNQovlGQVtcIGY/opurU01jirmOpeFbyu6HKOhDRp39pBaJh1GVqllCtmS6GnVh 6/69ACZePPXIrYiB+1DrFySdhNZnOLESKhwVf2nU07TFBGQGsQo7XhINTZvdoa8b TjTZip9Xns2x+HfwY+QHedxtnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNVyknL 9sqJw/xqUNBQITlVGetqMB8GA1UdIwQYMBaAFBOM0QpHeN4ONZEenJyUT0shxNsJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEY5Qy8yOUNCMDIwRUZB MEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNnNDFrUjZjbkpSUFN5SEUy d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U0elJDa2Q0M2c0MWtSNmNuSlJQU3lIRTJ3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEY5Qy8yOUNCMDIwRUZBMEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNn NDFrUjZjbkpSUFN5SEUyd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcHKcu+XWyRzHtVxPgFwHazRZ5wilOnqvbnwNkdMLj7g3uLFAmdkSt jzy5XaiP5dnpNOXKEjEGCTM1Rf45MqrNIHt9dyH1axVParl0lPjqpHRoNYIK3Gg5 RT4lMOdTOnAqVjgFW00MRu8V7zHW37crbA07I6NTS4lq0FmaWOuoZ405tU5hTbHu x96ElYewIWmdeBbUvcQGig5T2UuezqLgbKrC54Kw0AUe1iTfUK6KvQuVqSgEl5vE n2zxED9T1j1C7Hq+vZX4+hABubUaFGLswnqcODEisuZuE2siO4agPFZ3mBbwnJXR eMX+rMI8DeaBkln5dauqgZrOAHzaLD48 -----END CERTIFICATE-----Generated at Sun Apr 27 10:26:53 2025 by rpki-client