$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft File: joN3gQz5wgS7ElhPPltfBQNoJG8.mft (raw, json) Hash identifier: VptU9sv2HKJ6iisYujG8ckBL204ZIQWMPZDdub4zGb8= Subject key identifier: DE:58:C7:3F:30:B7:01:3D:CE:B9:61:D4:C2:FD:7C:B8:FC:B7:62:B7 Authority key identifier: 8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F Certificate issuer: /CN=A913F0E3/serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F Certificate serial: 1ED4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft Manifest number: 1EA9 Signing time: Thu 24 Apr 2025 16:04:00 +0000 Manifest this update: Thu 24 Apr 2025 16:04:00 +0000 Manifest next update: Thu 01 May 2025 16:04:00 +0000 Files and hashes: 1: joN3gQz5wgS7ElhPPltfBQNoJG8.crl (hash: I0zehubw4tjFlDqumYWPZ6Y6LKjARKhBFpZ87iHHDf0=) 2: 48BB49E8763A11EFA077F11CC4F9AE02.roa (hash: kbKWOZNJMc5q48ZGAPJwk/No5hClmF4tRx65umSQzAA=) 3: A63484760E7511F0B651A474C4F9AE02.roa (hash: E5E7M+KU38t2hoCZnvux4qAliD8ibl/Vp9X6gykPlbI=) 4: 2D70A1AE0DFE11F087A25C3FC4F9AE02.roa (hash: yrblWteuMzwUMPHL56NEpj1u/5SILXxLN8wP92DwqIY=) 5: 2E2A74580DFE11F087A25C3FC4F9AE02.roa (hash: fmsgiPf9NAexR5vlu7jiK+Ra4ISg07n1PLjbPNsyZNQ=) 6: 31603938763B11EF810E6D1FC4F9AE02.roa (hash: 7bLJ+6dveh56SJZSGgZCe9J26eijaiEXg9KDAFNqlo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7892 (0x1ed4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F0E3, serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F Validity Not Before: Apr 24 16:04:00 2025 GMT Not After : May 1 16:04:00 2025 GMT Subject: CN=680a60f0-c7bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:29:d8:fa:eb:d8:51:87:34:f8:a6:a0:8f:d3: 91:96:fc:b1:50:95:ee:b4:e9:49:16:a5:9c:9e:ff: 60:8f:13:c3:01:46:fb:70:2b:83:da:10:50:16:7c: 4c:8b:cd:2f:f9:64:b7:6a:78:a5:64:1d:23:ba:82: 78:98:c8:7d:90:27:2a:65:59:c1:d8:17:64:b7:b9: 8d:bf:57:1d:8a:06:cb:91:26:de:71:ac:b0:35:d9: 69:0b:4e:89:46:45:00:d5:b7:52:59:9a:9a:20:74: 48:32:75:20:17:b8:86:d7:ff:46:63:c6:94:88:1d: 17:61:47:00:8b:20:5c:f1:7e:d9:9e:2d:36:1b:1b: 95:eb:29:e8:0c:ed:99:ee:48:7e:5c:0e:85:fd:8a: d5:3f:eb:5c:d1:ac:bd:65:8a:c6:6d:65:5d:8f:26: 67:3a:36:0b:f4:ef:7d:41:bb:7e:b9:ce:7e:cb:9c: 80:3e:77:4f:e7:b0:12:f3:33:e4:88:bd:c2:28:b5: 1c:b1:4f:fc:06:d6:ba:f6:f2:ae:8e:93:de:fb:8d: d1:eb:94:77:a3:6f:c8:52:79:b7:e7:3b:56:58:5a: 32:40:b0:d7:cd:23:24:bc:1c:59:c4:59:4b:40:c6: 77:d8:2a:6c:f9:b2:c1:7c:62:09:05:e3:06:b1:f0: 01:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:58:C7:3F:30:B7:01:3D:CE:B9:61:D4:C2:FD:7C:B8:FC:B7:62:B7 X509v3 Authority Key Identifier: keyid:8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:b5:46:48:7f:7e:4f:cc:85:fe:38:b9:c2:10:43:35:35:f2: 76:70:ff:f6:c9:a5:1f:e3:dc:07:fe:cc:d0:85:eb:d9:cc:e1: ee:ff:66:fa:7c:8c:58:f9:f8:ed:79:6d:e6:28:7b:19:ba:ed: 26:56:26:d7:fd:95:e4:f6:fd:6e:b8:96:e1:85:ea:8a:23:40: 47:8d:87:0c:22:c2:f3:b0:1b:a5:43:3f:32:8f:01:05:c1:7a: 29:ff:1a:d7:71:d8:9b:10:50:a4:1d:2c:96:3f:33:c6:c7:2a: 2b:9c:b5:6d:15:0f:8f:96:4b:93:bd:d4:62:94:b9:e4:d3:8c: b7:06:89:81:6a:5b:7e:53:71:a6:01:23:90:1a:e9:11:ae:83: ea:b3:23:47:c4:2a:88:fc:a3:5f:a6:70:04:dd:48:4b:a6:2a: c5:cb:3b:dc:33:c6:e2:83:a2:3e:c6:86:f1:ce:4f:80:9c:6a: a0:6d:46:ac:e5:83:5c:8a:34:90:41:65:33:e2:f0:40:43:14: 97:b3:f6:9f:a6:9d:68:49:2e:fc:04:1e:9f:46:da:70:ee:be: 24:9b:3e:05:50:5d:32:9b:b3:31:5f:ea:21:2d:e4:f0:fa:b7: 93:d6:0e:9c:8a:f1:0f:44:b5:66:9b:d5:5f:58:17:a0:74:48: aa:4f:aa:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YwRTMxMTAvBgNVBAUTKDhFODM3NzgxMENGOUMyMDRCQjEyNTg0RjNFNUI1RjA1 MDM2ODI0NkYwHhcNMjUwNDI0MTYwNDAwWhcNMjUwNTAxMTYwNDAwWjAYMRYwFAYD VQQDEw02ODBhNjBmMC1jN2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2SnY+uvYUYc0+Kagj9ORlvyxUJXutOlJFqWcnv9gjxPDAUb7cCuD2hBQFnxM i80v+WS3anilZB0juoJ4mMh9kCcqZVnB2Bdkt7mNv1cdigbLkSbecaywNdlpC06J RkUA1bdSWZqaIHRIMnUgF7iG1/9GY8aUiB0XYUcAiyBc8X7Zni02GxuV6ynoDO2Z 7kh+XA6F/YrVP+tc0ay9ZYrGbWVdjyZnOjYL9O99Qbt+uc5+y5yAPndP57AS8zPk iL3CKLUcsU/8Bta69vKujpPe+43R65R3o2/IUnm35ztWWFoyQLDXzSMkvBxZxFlL QMZ32Cps+bLBfGIJBeMGsfABZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5Yxz8w twE9zrlh1ML9fLj8t2K3MB8GA1UdIwQYMBaAFI6Dd4EM+cIEuxJYTz5bXwUDaCRv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjBFMy8yOTE1NzZCRTZC MzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdnUzdFbGhQUGx0ZkJRTm9K RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvTjNnUXo1d2dTN0VsaFBQbHRmQlFOb0pHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjBFMy8yOTE1NzZCRTZCMzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdn UzdFbGhQUGx0ZkJRTm9KRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWtUZIf35PzIX+OLnCEEM1NfJ2cP/2yaUf49wH/szQhevZzOHu/2b6 fIxY+fjteW3mKHsZuu0mVibX/ZXk9v1uuJbhheqKI0BHjYcMIsLzsBulQz8yjwEF wXop/xrXcdibEFCkHSyWPzPGxyornLVtFQ+PlkuTvdRilLnk04y3BomBalt+U3Gm ASOQGukRroPqsyNHxCqI/KNfpnAE3UhLpirFyzvcM8big6I+xobxzk+AnGqgbUas 5YNcijSQQWUz4vBAQxSXs/afpp1oSS78BB6fRtpw7r4kmz4FUF0ym7MxX+ohLeTw +reT1g6civEPRLVmm9VfWBegdEiqT6pd -----END CERTIFICATE-----Generated at Sat Apr 26 15:09:44 2025 by rpki-client