$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft File: CrPxFJz1w7raaFscahN5tojXQ4Q.mft (raw, json) Hash identifier: eClHcJGhlSJW/GqzdhUWWpVEcTGWaAhEKz9qzhzQZXU= Subject key identifier: 9B:B2:AA:E0:C9:38:EF:55:6F:79:2B:5C:9A:AD:0B:91:11:58:EE:FB Authority key identifier: 0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84 Certificate issuer: /CN=A913DF1E/serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384 Certificate serial: 0247 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft Manifest number: 023D Signing time: Fri 25 Apr 2025 01:40:30 +0000 Manifest this update: Fri 25 Apr 2025 01:40:29 +0000 Manifest next update: Fri 02 May 2025 01:40:29 +0000 Files and hashes: 1: CrPxFJz1w7raaFscahN5tojXQ4Q.crl (hash: r8sQnEm09Mwgr4JXRsFfOu3qPfFKFaowLXd41YHxE7Y=) 2: 899B070834D511ED99B1921FC4F9AE02.roa (hash: 59L53XZQZjjT2hN0a9eIPXDObrfGJobgfFbYtXLEctM=) 3: D58286CA1F9D11EDA5DD9842C4F9AE02.roa (hash: L9Ip2okOSQMq2psn2x0tTtvnTzOcLa7ive90M13do6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 583 (0x247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DF1E, serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384 Validity Not Before: Apr 25 01:40:29 2025 GMT Not After : May 2 01:40:29 2025 GMT Subject: CN=680ae80e-2f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3b:c1:86:e5:94:c1:50:c3:53:18:12:8d:6f: ca:78:e8:ff:13:86:5a:c3:0c:a5:04:0a:3d:73:3a: c0:28:7c:ae:c0:9f:b6:f0:ec:54:5d:63:c8:38:7e: 22:f5:46:1e:8b:d4:ad:75:11:dc:d4:f9:dc:f8:ee: fb:74:c5:67:74:c0:76:39:cf:cf:02:34:bf:af:2b: f6:85:b0:59:8c:37:3c:ce:22:ce:f9:78:14:a7:a5: 56:8c:08:fd:3b:a3:b1:da:cd:a4:b5:3d:ec:59:6a: c4:bc:35:bb:a4:27:5b:0a:22:f6:23:bf:75:16:d0: 0b:f9:48:12:c9:9a:41:ef:cf:98:44:dc:23:7e:69: 78:e1:b3:33:21:7e:c0:55:a2:24:87:3e:b7:ca:95: bd:cc:0c:dd:f6:86:7e:fe:39:46:eb:c1:0c:eb:f3: c6:00:a5:42:6e:20:d0:3e:dd:12:e2:0c:28:db:a7: 32:8f:4b:29:5f:4a:23:65:52:53:6e:b4:fc:3e:49: f9:5a:34:28:dd:2c:46:2e:85:9c:e5:46:a2:9b:a1: fc:ec:2b:00:05:fe:49:a1:2c:6c:2b:76:f2:3d:f9: 5f:40:1d:07:bd:23:ef:66:a4:2d:c9:01:f7:54:43: 77:b7:ae:e2:42:40:9e:5d:f0:a8:3e:ed:3c:c6:43: aa:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B2:AA:E0:C9:38:EF:55:6F:79:2B:5C:9A:AD:0B:91:11:58:EE:FB X509v3 Authority Key Identifier: keyid:0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:28:55:11:95:9d:d2:86:50:fe:8a:21:75:a9:e5:d4:d4:e7: dd:f7:74:2f:54:42:6b:c2:eb:fb:fe:f1:f5:b0:d2:b8:0f:49: 3d:98:12:34:33:d7:5e:b0:a8:ce:d4:a9:00:02:a3:9e:6a:6a: 48:3e:82:b0:39:db:30:7a:57:3e:f3:5e:f6:a1:e7:e5:86:ff: 98:72:19:55:b6:8b:cc:25:93:52:75:4a:9f:9d:1b:9d:65:f3: 2a:2c:61:fd:da:b4:00:f3:1f:21:12:44:b2:d7:18:31:eb:b8: 33:1d:06:04:c2:9c:17:c3:34:89:3b:79:38:e9:1c:74:e2:77: 9a:61:dc:5a:64:36:bd:fb:84:20:32:69:48:50:a8:06:fd:69: b5:de:d2:54:ed:60:84:2e:33:40:a3:50:3b:f3:8a:6f:77:60: 7e:d5:0c:55:e4:38:6c:94:20:3b:4a:16:14:eb:29:db:94:62: ca:18:d6:3f:44:a1:36:ea:48:e8:e0:38:98:46:bd:06:4e:9b: 7d:35:42:04:be:b7:77:a3:3c:0f:ff:56:48:a3:3f:6e:6b:ad: da:2c:d1:3a:c8:d9:67:c1:f3:9d:6f:8c:73:31:0b:cd:ed:b7: 2f:8a:86:85:92:3a:fa:c1:40:0b:a5:73:0f:f7:be:6b:2a:38: 29:5f:d6:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RGMUUxMTAvBgNVBAUTKDBBQjNGMTE0OUNGNUMzQkFEQTY4NUIxQzZBMTM3OUI2 ODhENzQzODQwHhcNMjUwNDI1MDE0MDI5WhcNMjUwNTAyMDE0MDI5WjAYMRYwFAYD VQQDEw02ODBhZTgwZS0yZjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zvBhuWUwVDDUxgSjW/KeOj/E4ZawwylBAo9czrAKHyuwJ+28OxUXWPIOH4i 9UYei9StdRHc1Pnc+O77dMVndMB2Oc/PAjS/ryv2hbBZjDc8ziLO+XgUp6VWjAj9 O6Ox2s2ktT3sWWrEvDW7pCdbCiL2I791FtAL+UgSyZpB78+YRNwjfml44bMzIX7A VaIkhz63ypW9zAzd9oZ+/jlG68EM6/PGAKVCbiDQPt0S4gwo26cyj0spX0ojZVJT brT8Pkn5WjQo3SxGLoWc5Uaim6H87CsABf5JoSxsK3byPflfQB0HvSPvZqQtyQH3 VEN3t67iQkCeXfCoPu08xkOqyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJuyquDJ OO9Vb3krXJqtC5ERWO77MB8GA1UdIwQYMBaAFAqz8RSc9cO62mhbHGoTebaI10OE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREYxRS9DQzY1QTY2QTFG OUExMUVEODM1Q0FBM0ZDNEY5QUUwMi9DclB4Rkp6MXc3cmFhRnNjYWhONXRvalhR NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyUHhGSnoxdzdyYWFGc2NhaE41dG9qWFE0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REYxRS9DQzY1QTY2QTFGOUExMUVEODM1Q0FBM0ZDNEY5QUUwMi9DclB4Rkp6MXc3 cmFhRnNjYWhONXRvalhRNFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoKFURlZ3ShlD+iiF1qeXU1Ofd93QvVEJrwuv7/vH1sNK4D0k9mBI0 M9desKjO1KkAAqOeampIPoKwOdswelc+8172oeflhv+YchlVtovMJZNSdUqfnRud ZfMqLGH92rQA8x8hEkSy1xgx67gzHQYEwpwXwzSJO3k46Rx04neaYdxaZDa9+4Qg MmlIUKgG/Wm13tJU7WCELjNAo1A784pvd2B+1QxV5DhslCA7ShYU6ynblGLKGNY/ RKE26kjo4DiYRr0GTpt9NUIEvrd3ozwP/1ZIoz9ua63aLNE6yNlnwfOdb4xzMQvN 7bcvioaFkjr6wUALpXMP975rKjgpX9aF -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:39 2025 by rpki-client