$ rpki-client -vvf rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft File: RCHzqdfkHW9Ht4b90-eojeQrB7k.mft (raw, json) Hash identifier: lZnNEZ1z8Vs1DTZRjyTX46Qkay+7fB9M+DtQzg77TJQ= Subject key identifier: C6:13:80:B5:0D:53:2D:BE:86:89:37:F4:34:02:98:98:DD:92:D0:75 Authority key identifier: 44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9 Certificate issuer: /CN=A913442A/serialNumber=4421F3A9D7E41D6F47B786FDD3E7A88DE42B07B9 Certificate serial: 0298 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft Manifest number: 0294 Signing time: Fri 25 Apr 2025 01:18:54 +0000 Manifest this update: Fri 25 Apr 2025 01:18:54 +0000 Manifest next update: Fri 02 May 2025 01:18:54 +0000 Files and hashes: 1: RCHzqdfkHW9Ht4b90-eojeQrB7k.crl (hash: 3TDvvzmJfwk7JY1JW3RYeJafwEXnWWxZCutHw0/zxCQ=) 2: 0F9DB8E0FC3D11ECAD619C35C4F9AE02.roa (hash: 5LtQSX5vsNltnL8EwaCWb4W4bCqyFzBXrqfQ3KUZW5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 664 (0x298) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913442A, serialNumber=4421F3A9D7E41D6F47B786FDD3E7A88DE42B07B9 Validity Not Before: Apr 25 01:18:54 2025 GMT Not After : May 2 01:18:54 2025 GMT Subject: CN=680ae2fe-a9f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:09:47:e6:c8:34:70:64:03:14:1e:96:43:1c: 11:61:a2:92:33:63:e9:b4:4e:0d:1b:0d:cb:1c:31: 99:27:bd:1b:77:b8:57:19:da:92:cd:89:1b:60:5e: 76:0b:31:b2:72:a6:ea:70:f3:a5:57:8f:57:ba:2f: 59:b8:43:7f:68:d8:99:6f:d4:90:32:02:1f:32:1a: e6:76:79:ce:90:c3:a9:12:a7:03:6a:01:e6:84:5d: 1f:61:74:a7:bd:33:68:c1:6a:dd:29:a0:df:cb:91: 36:34:2c:ce:af:76:ff:ff:c9:d2:11:51:0b:be:a7: 69:14:48:73:70:b9:92:3b:ab:48:e0:80:c7:9b:fb: a6:b6:b9:b8:7b:71:34:ac:3b:ad:5c:3a:6e:b2:79: 8c:05:f2:69:a7:b9:d9:dd:e5:9d:20:02:03:dc:dd: 73:bc:ee:c8:69:55:82:01:27:3d:90:79:28:57:3d: 82:6c:00:db:75:cd:3a:82:a2:ac:84:f9:67:44:4c: 7a:48:6e:70:c4:db:8e:17:b7:6d:24:97:12:24:2e: c3:71:57:a0:51:e2:3e:1f:a2:cb:18:07:0b:c3:dc: 45:0d:cc:8a:de:3f:7f:71:58:08:ca:35:65:7c:08: 5c:6c:d1:0b:02:ee:00:c2:21:f7:c1:24:1a:bf:07: a4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:13:80:B5:0D:53:2D:BE:86:89:37:F4:34:02:98:98:DD:92:D0:75 X509v3 Authority Key Identifier: keyid:44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:7b:36:8f:d1:6d:be:5b:c3:76:a8:6c:dd:d4:e9:04:ab:1f: 45:d9:49:13:f4:d8:b8:69:73:ec:2b:88:23:15:5a:73:ef:a9: b1:0a:fb:3a:63:25:f5:fd:5b:15:e1:f4:1e:c6:77:24:21:2c: 6a:73:1d:58:b6:b1:11:e5:29:dc:c6:7c:02:87:2a:c0:51:60: a9:ff:cc:00:ca:57:d9:40:b6:53:55:d0:68:1e:7d:bb:0f:e0: fc:94:ca:75:4f:f7:8c:44:2f:81:5e:fd:5e:04:72:b3:40:f9: 49:d7:f6:4b:a9:29:ad:af:fa:0e:60:11:ff:cb:01:2e:92:89: df:22:d3:31:2d:19:d0:ec:ff:f2:33:27:d0:6f:89:74:1e:9e: 32:21:1b:a2:6a:37:37:67:45:8c:10:c8:6e:d4:0b:1f:66:ca: 75:df:b5:98:af:c0:8f:ce:d4:72:32:c0:01:e1:2d:2e:84:f8: 97:47:7b:df:64:0e:4d:17:ae:63:e3:83:83:f8:2d:7a:03:0d: 46:54:dc:dc:46:24:35:57:27:48:52:17:59:8e:ed:41:2d:24: 17:fc:a6:44:f7:a0:16:22:e2:19:c1:08:51:8e:7c:69:bb:ac: 98:6c:0c:13:0b:5a:ef:a8:53:99:90:48:a4:b4:64:06:5d:87: c8:68:2b:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ0MkExMTAvBgNVBAUTKDQ0MjFGM0E5RDdFNDFENkY0N0I3ODZGREQzRTdBODhE RTQyQjA3QjkwHhcNMjUwNDI1MDExODU0WhcNMjUwNTAyMDExODU0WjAYMRYwFAYD VQQDEw02ODBhZTJmZS1hOWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2QlH5sg0cGQDFB6WQxwRYaKSM2PptE4NGw3LHDGZJ70bd7hXGdqSzYkbYF52 CzGycqbqcPOlV49Xui9ZuEN/aNiZb9SQMgIfMhrmdnnOkMOpEqcDagHmhF0fYXSn vTNowWrdKaDfy5E2NCzOr3b//8nSEVELvqdpFEhzcLmSO6tI4IDHm/umtrm4e3E0 rDutXDpusnmMBfJpp7nZ3eWdIAID3N1zvO7IaVWCASc9kHkoVz2CbADbdc06gqKs hPlnREx6SG5wxNuOF7dtJJcSJC7DcVegUeI+H6LLGAcLw9xFDcyK3j9/cVgIyjVl fAhcbNELAu4AwiH3wSQavwekSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYTgLUN Uy2+hok39DQCmJjdktB1MB8GA1UdIwQYMBaAFEQh86nX5B1vR7eG/dPnqI3kKwe5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDQyQS9BQjRFNTI0NEZD MzkxMUVDOTVDODEzODdDNEY5QUUwMi9SQ0h6cWRma0hXOUh0NGI5MC1lb2plUXJC N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JDSHpxZGZrSFc5SHQ0YjkwLWVvamVRckI3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDQyQS9BQjRFNTI0NEZDMzkxMUVDOTVDODEzODdDNEY5QUUwMi9SQ0h6cWRma0hX OUh0NGI5MC1lb2plUXJCN2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVezaP0W2+W8N2qGzd1OkEqx9F2UkT9Ni4aXPsK4gjFVpz76mxCvs6 YyX1/VsV4fQexnckISxqcx1YtrER5SncxnwChyrAUWCp/8wAylfZQLZTVdBoHn27 D+D8lMp1T/eMRC+BXv1eBHKzQPlJ1/ZLqSmtr/oOYBH/ywEukonfItMxLRnQ7P/y MyfQb4l0Hp4yIRuiajc3Z0WMEMhu1AsfZsp137WYr8CPztRyMsAB4S0uhPiXR3vf ZA5NF65j44OD+C16Aw1GVNzcRiQ1VydIUhdZju1BLSQX/KZE96AWIuIZwQhRjnxp u6yYbAwTC1rvqFOZkEiktGQGXYfIaCs7 -----END CERTIFICATE-----Generated at Sat Apr 26 13:38:44 2025 by rpki-client