$ rpki-client -vvf rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft File: An8FUlFPJEqU7j8GVypK9zNWVzc.mft (raw, json) Hash identifier: oYeR5Ce9H7/crBjNr/bVmgQuDBQ+VrJJTjVYBwRTqVg= Subject key identifier: E6:76:CE:B5:AD:2F:14:C1:49:1D:95:B6:72:12:47:45:29:32:61:1E Authority key identifier: 02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37 Certificate issuer: /CN=A913E042/serialNumber=027F0552514F244A94EE3F06572A4AF733565737 Certificate serial: 01F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft Manifest number: 01F1 Signing time: Thu 01 May 2025 01:41:20 +0000 Manifest this update: Thu 01 May 2025 01:41:20 +0000 Manifest next update: Thu 08 May 2025 01:41:20 +0000 Files and hashes: 1: An8FUlFPJEqU7j8GVypK9zNWVzc.crl (hash: b9QDDiKKMj6z9H14guc/g58tcVJPQg4/4wKZ6VT4YlU=) 2: 7B00C6B83F1D11ED8A66DC5AC4F9AE02.roa (hash: 2Fh4hwQIdZbln/uQFk/hnm7n5pbTcIACPB8cEmZ2S3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.crl rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 01:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 504 (0x1f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E042, serialNumber=027F0552514F244A94EE3F06572A4AF733565737 Validity Not Before: May 1 01:41:20 2025 GMT Not After : May 8 01:41:20 2025 GMT Subject: CN=6812d140-1cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ca:45:ed:7b:57:d1:4a:33:33:71:91:2c:5e: a8:07:c5:e4:9e:5e:04:90:9f:ee:16:bb:48:4b:02: cf:27:24:ca:21:78:a2:bb:f2:94:41:74:fb:69:ae: f4:ef:15:46:37:73:c6:69:7d:70:8e:90:e3:85:15: c6:f1:1d:68:01:72:73:9b:96:de:53:e1:45:30:21: 0e:46:75:9e:c2:40:a8:55:0e:43:2b:cb:9f:7c:2f: 3a:cd:d2:b6:5e:16:fb:39:ea:8e:bf:38:76:0b:aa: 93:f0:af:22:d3:96:89:64:66:8b:32:8d:4f:66:0b: a6:00:c2:9d:8a:2e:85:92:c3:75:78:ac:f5:38:5c: d3:3d:0c:30:43:42:72:94:52:e5:d0:5d:cd:e2:eb: 96:7d:b7:b3:fe:b5:e3:ac:af:bc:82:85:c8:2d:94: 01:cf:1f:ca:44:eb:5d:7b:0e:24:ea:a0:07:3d:3d: cb:7c:61:a5:f5:d2:7b:38:4b:85:90:73:0c:ed:4d: f3:df:13:d1:cf:8b:e9:9c:da:55:df:5a:38:e8:e3: e2:d6:0d:8a:f0:d6:34:cf:f7:08:59:cd:70:47:f4: 51:17:cb:ab:23:8f:d7:23:e9:74:67:af:b7:76:fc: 17:61:1a:8b:c4:69:90:40:7e:28:73:ef:37:3e:1c: 0b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:76:CE:B5:AD:2F:14:C1:49:1D:95:B6:72:12:47:45:29:32:61:1E X509v3 Authority Key Identifier: keyid:02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:05:26:d5:4c:03:c7:46:8f:b6:cf:71:bb:7f:6f:50:7f:cf: 20:67:97:62:2e:db:af:d1:fe:a1:a0:62:26:82:e6:d1:f7:f0: 36:21:60:2a:48:53:38:72:d2:f6:84:80:c2:2a:0c:d9:6e:05: b7:6c:05:5d:58:53:45:be:99:97:85:b3:00:63:c6:79:e4:a5: 8d:fd:f3:77:06:3e:34:13:18:d4:92:be:a2:ce:47:ec:ce:dd: 6e:e3:96:89:1a:73:0d:c0:4e:56:9b:71:55:4a:0e:27:9b:0d: d6:40:fb:7f:0a:6e:69:a4:fd:12:2a:7e:2e:71:b9:34:e4:a1: a4:f6:fd:07:9a:1a:2f:53:77:43:24:8d:e6:0e:bf:c3:bb:32: 41:0f:c5:7c:47:92:3e:db:ee:ed:6a:00:b5:fc:60:35:21:f6: c8:c6:af:21:57:5b:a7:75:7a:eb:39:61:4f:d9:f4:1d:38:a8: 95:86:a9:a3:86:14:06:45:a6:ac:f7:22:50:55:5e:ab:01:f6: b7:2d:2d:e0:48:33:cb:6b:f3:f9:73:15:84:6e:c4:4f:f7:e2: 64:1a:c0:16:c7:87:62:df:aa:67:dc:8f:20:13:67:fe:90:58: 92:01:9c:12:f1:42:cf:85:dd:bc:56:d3:0a:ea:be:e6:b7:63: 1d:47:08:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UwNDIxMTAvBgNVBAUTKDAyN0YwNTUyNTE0RjI0NEE5NEVFM0YwNjU3MkE0QUY3 MzM1NjU3MzcwHhcNMjUwNTAxMDE0MTIwWhcNMjUwNTA4MDE0MTIwWjAYMRYwFAYD VQQDEw02ODEyZDE0MC0xY2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8MpF7XtX0UozM3GRLF6oB8Xknl4EkJ/uFrtISwLPJyTKIXiiu/KUQXT7aa70 7xVGN3PGaX1wjpDjhRXG8R1oAXJzm5beU+FFMCEORnWewkCoVQ5DK8uffC86zdK2 Xhb7OeqOvzh2C6qT8K8i05aJZGaLMo1PZgumAMKdii6FksN1eKz1OFzTPQwwQ0Jy lFLl0F3N4uuWfbez/rXjrK+8goXILZQBzx/KROtdew4k6qAHPT3LfGGl9dJ7OEuF kHMM7U3z3xPRz4vpnNpV31o46OPi1g2K8NY0z/cIWc1wR/RRF8urI4/XI+l0Z6+3 dvwXYRqLxGmQQH4oc+83PhwLkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZ2zrWt LxTBSR2VtnISR0UpMmEeMB8GA1UdIwQYMBaAFAJ/BVJRTyRKlO4/BlcqSvczVlc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTA0Mi9BRTlCMUI2RTNF NEExMUVEQkMwNjUzN0RDNEY5QUUwMi9BbjhGVWxGUEpFcVU3ajhHVnlwSzl6TldW emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FuOEZVbEZQSkVxVTdqOEdWeXBLOXpOV1Z6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTA0Mi9BRTlCMUI2RTNFNEExMUVEQkMwNjUzN0RDNEY5QUUwMi9BbjhGVWxGUEpF cVU3ajhHVnlwSzl6TldWemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpBSbVTAPHRo+2z3G7f29Qf88gZ5diLtuv0f6hoGImgubR9/A2IWAq SFM4ctL2hIDCKgzZbgW3bAVdWFNFvpmXhbMAY8Z55KWN/fN3Bj40ExjUkr6izkfs zt1u45aJGnMNwE5Wm3FVSg4nmw3WQPt/Cm5ppP0SKn4ucbk05KGk9v0HmhovU3dD JI3mDr/DuzJBD8V8R5I+2+7tagC1/GA1IfbIxq8hV1undXrrOWFP2fQdOKiVhqmj hhQGRaas9yJQVV6rAfa3LS3gSDPLa/P5cxWEbsRP9+JkGsAWx4di36pn3I8gE2f+ kFiSAZwS8ULPhd28VtMK6r7mt2MdRwgN -----END CERTIFICATE-----Generated at Fri May 2 02:00:50 2025 by rpki-client