$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft File: cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft (raw, json) Hash identifier: xNRKmOwrqgNuzQvWRaBg04DS8UW0JwbyGkoX/LnsgnQ= Subject key identifier: FF:01:BA:2A:CE:EB:DF:64:29:E0:68:B5:C2:D3:49:E1:D6:C9:0B:29 Authority key identifier: 70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1 Certificate issuer: /CN=A913CA4B/serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1 Certificate serial: 08D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft Manifest number: 089C Signing time: Thu 24 Apr 2025 20:31:10 +0000 Manifest this update: Thu 24 Apr 2025 20:31:09 +0000 Manifest next update: Thu 01 May 2025 20:31:09 +0000 Files and hashes: 1: cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl (hash: +Olf5jQnJIH9DHaPdeIcFpCngDtSjif7h0EPpugxymQ=) 2: 7206C9B0B9A911EE82CE6832C4F9AE02.roa (hash: 1BGCuCR8/5XNnfEBqosQ71/PFSfQ7yzaxtqH4ChrsGI=) 3: C714F71CBF9B11EA9CDFD642C4F9AE02.roa (hash: WQhWvpsGEUoUyhuwJrl1CNiZNORHG8GhG41+pFuVnQM=) 4: E6EBBE4A64CA11EE97188C5DC4F9AE02.roa (hash: FPmK/ZWN45BRsvOMGslxfKU8yKPfXq+QEtu+U3CAeqM=) 5: 60D4C96008DA11EEA1B2EE78C4F9AE02.roa (hash: 9dLmROiC4Lw0+lnZo79JQvbFk0n5gZqA79ORbR1QB2I=) 6: C7A523E6BF9B11EA9CDFD642C4F9AE02.roa (hash: /9KNehkZXA610WgWCgrhBX7+tDPfjbkeRPHfwTNaPSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:31:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2264 (0x8d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CA4B, serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1 Validity Not Before: Apr 24 20:31:09 2025 GMT Not After : May 1 20:31:09 2025 GMT Subject: CN=680a9f8d-d5f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a4:fe:5b:54:5d:81:ab:ce:bf:ae:43:e7:52: 81:12:e3:59:3e:5a:af:b7:34:d3:0b:24:9b:82:cd: ff:01:22:41:25:9a:f6:5f:4d:09:1c:1d:1c:5d:62: 4b:ad:73:df:17:9e:fd:04:7b:8d:46:6d:47:43:dc: df:c5:03:c1:6a:9f:23:85:62:43:67:be:0b:e5:e1: 3f:14:da:73:c9:53:6f:72:98:e3:ad:bd:ce:81:c7: bc:29:39:a1:f5:86:00:3f:34:86:4a:b0:6a:1a:18: 54:58:94:de:91:3b:95:c0:f4:7c:9c:08:06:50:2e: 7e:02:b1:2d:8b:b4:4f:d0:94:df:77:07:1c:c5:ad: 81:ca:cb:15:a1:60:ae:84:67:dc:71:fb:71:a6:3d: 77:c4:dc:82:2f:29:98:fe:c4:bc:34:e2:f2:29:c6: 21:c9:37:13:ae:38:6f:4f:ce:55:98:67:9e:22:59: 3c:38:ba:82:fd:4a:29:7c:57:f2:3b:88:78:fe:28: c1:0f:05:a8:62:0c:d5:19:0c:02:71:8d:87:0e:88: bd:4e:98:79:26:72:81:dd:09:e9:be:d7:11:c9:ff: 5f:62:77:f3:fd:a7:3a:c3:38:5d:50:35:b3:4b:52: 2f:61:23:a6:e8:02:4f:c4:46:18:ff:05:5d:92:b8: 82:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:01:BA:2A:CE:EB:DF:64:29:E0:68:B5:C2:D3:49:E1:D6:C9:0B:29 X509v3 Authority Key Identifier: keyid:70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:e6:20:fe:4f:cc:f4:47:48:a7:28:3b:a5:3a:6b:e0:76:b6: cb:28:e9:8b:32:26:e0:b9:44:88:69:91:44:f2:ec:bb:c4:d4: 81:bf:b2:ce:b4:d9:1d:05:5b:50:0f:3c:b3:cc:5e:7c:61:5f: e5:d9:11:0e:08:8c:09:9a:40:6b:05:2d:fb:2e:e9:23:40:54: 9b:3a:75:34:bf:1e:80:4f:f9:70:0e:80:8b:7b:1c:34:f5:f7: 90:91:20:e5:54:a9:14:4a:a8:11:5f:d2:2e:96:90:32:32:cb: b8:8a:e0:0f:a6:f2:80:43:f2:b9:25:ce:47:a5:c8:40:f7:c1: 20:d1:25:6d:45:28:7c:1e:a3:d6:31:7e:36:18:d3:37:34:1b: 5b:43:37:3a:ed:82:29:17:d4:6d:8f:40:ff:78:7b:7c:da:54: 60:f3:e8:60:22:98:c8:17:13:75:0f:bc:ff:37:10:06:1e:42: 7c:23:cb:a7:ab:65:68:20:06:26:20:dd:70:1e:6d:58:f0:6e: 7a:6d:c8:29:75:1a:73:74:f9:18:a8:97:d0:09:36:94:4f:0b: db:54:b0:b0:08:ba:ff:f5:31:62:f8:d8:33:a8:a7:c0:8f:78: 9d:1e:68:02:58:67:db:a5:7c:d2:33:ac:9e:aa:df:cd:e1:1a: 55:14:d1:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBNEIxMTAvBgNVBAUTKDcwOTIxMENGNzYxRUM2N0ZCMzk0RUE1ODk2QTVDNjQ3 QjMwNUVFRjEwHhcNMjUwNDI0MjAzMTA5WhcNMjUwNTAxMjAzMTA5WjAYMRYwFAYD VQQDEw02ODBhOWY4ZC1kNWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzaT+W1RdgavOv65D51KBEuNZPlqvtzTTCySbgs3/ASJBJZr2X00JHB0cXWJL rXPfF579BHuNRm1HQ9zfxQPBap8jhWJDZ74L5eE/FNpzyVNvcpjjrb3Ogce8KTmh 9YYAPzSGSrBqGhhUWJTekTuVwPR8nAgGUC5+ArEti7RP0JTfdwccxa2ByssVoWCu hGfccftxpj13xNyCLymY/sS8NOLyKcYhyTcTrjhvT85VmGeeIlk8OLqC/UopfFfy O4h4/ijBDwWoYgzVGQwCcY2HDoi9Tph5JnKB3QnpvtcRyf9fYnfz/ac6wzhdUDWz S1IvYSOm6AJPxEYY/wVdkriCnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8BuirO 699kKeBotcLTSeHWyQspMB8GA1UdIwQYMBaAFHCSEM92HsZ/s5TqWJalxkezBe7x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0E0Qi9EQzJGMDQzMkJG ODAxMUVBOTZGRTRBNjhDNEY5QUUwMi9jSklRejNZZXhuLXpsT3BZbHFYR1I3TUY3 dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKSVF6M1lleG4temxPcFlscVhHUjdNRjd2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0E0Qi9EQzJGMDQzMkJGODAxMUVBOTZGRTRBNjhDNEY5QUUwMi9jSklRejNZZXhu LXpsT3BZbHFYR1I3TUY3dkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCE5iD+T8z0R0inKDulOmvgdrbLKOmLMibguUSIaZFE8uy7xNSBv7LO tNkdBVtQDzyzzF58YV/l2REOCIwJmkBrBS37LukjQFSbOnU0vx6AT/lwDoCLexw0 9feQkSDlVKkUSqgRX9IulpAyMsu4iuAPpvKAQ/K5Jc5HpchA98Eg0SVtRSh8HqPW MX42GNM3NBtbQzc67YIpF9Rtj0D/eHt82lRg8+hgIpjIFxN1D7z/NxAGHkJ8I8un q2VoIAYmIN1wHm1Y8G56bcgpdRpzdPkYqJfQCTaUTwvbVLCwCLr/9TFi+NgzqKfA j3idHmgCWGfbpXzSM6yeqt/N4RpVFNEh -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:05 2025 by rpki-client