$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft File: R8vvcL1VuVMzMbi8wumClWOizpQ.mft (raw, json) Hash identifier: vvCs7A3C5rmMfm0SneBOQZKMDBOSq5rXF8TDUj6WMtM= Subject key identifier: D6:E1:2F:8E:3B:09:0B:64:CB:8E:5F:66:4B:93:73:93:34:9E:A5:F8 Authority key identifier: 47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94 Certificate issuer: /CN=A9142A1D/serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94 Certificate serial: 0627 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft Manifest number: 0613 Signing time: Thu 24 Apr 2025 22:38:48 +0000 Manifest this update: Thu 24 Apr 2025 22:38:47 +0000 Manifest next update: Thu 01 May 2025 22:38:47 +0000 Files and hashes: 1: R8vvcL1VuVMzMbi8wumClWOizpQ.crl (hash: xXWJDjoTaw2SHLABUjzBOUjfHH9Sqh+9QIi7DpFw190=) 2: 440BBCC8D50411EB8AB09711C4F9AE02.roa (hash: qO/kt1cMyB8zrA4ykFY3E6NDvsrSs/t7vGIuj96fEPU=) 3: 0C65AFCECE8511ECAEF2C52BC4F9AE02.roa (hash: 5VW5u5nV4cWkOhmuhHmaXAMAI+xByp0pPJ4g2dPBTqE=) 4: 2C9AF3A2659411EDA3257D0AC4F9AE02.roa (hash: l5U4Aj0G/of9H3Qhhfeqyo1Zivkl+XdCF8RMvmc+X6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1575 (0x627) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A1D, serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94 Validity Not Before: Apr 24 22:38:47 2025 GMT Not After : May 1 22:38:47 2025 GMT Subject: CN=680abd78-7cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:35:02:67:8c:3c:ea:a9:36:f1:e3:2e:9c:83: 83:71:c4:ab:1b:16:98:b8:6a:82:26:4b:6c:f6:bc: 74:80:05:89:db:83:f7:ed:a5:19:a5:80:2b:44:a1: 4f:12:90:d3:0e:fe:b4:70:6d:fc:7b:8b:28:ce:37: d6:16:4d:2f:50:a9:89:c8:fa:c2:38:bd:ad:80:b0: 02:a0:1f:2a:20:b7:da:94:01:e2:a2:d8:c5:9b:ba: 3a:b1:b2:da:b8:25:17:e7:c8:24:59:ab:c6:92:e9: 11:da:a8:b8:d8:03:98:53:1a:8e:e6:81:70:04:66: 56:bd:7b:a0:30:05:1f:9f:69:9e:9a:e3:ea:da:d4: f7:d9:ca:7d:6a:6f:83:de:99:f9:92:db:85:3a:3c: c7:8f:f8:a7:b5:26:a2:e0:ef:83:0f:da:4d:e9:3b: fe:6b:5a:b2:7d:74:20:77:ac:3b:bb:c6:1d:ab:c3: 1c:72:c2:00:08:d2:ec:2e:6d:23:4c:b6:fc:7e:fd: 27:a8:33:99:fa:d4:53:e1:b7:9b:de:17:fa:d1:69: 15:2d:16:8f:37:f1:92:c7:14:42:72:98:5c:09:3e: 94:05:e2:d4:73:e4:20:7c:a7:14:00:17:b0:26:b4: dc:a9:77:85:79:e6:d6:3e:a0:a4:a5:e8:0e:a0:5f: 26:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E1:2F:8E:3B:09:0B:64:CB:8E:5F:66:4B:93:73:93:34:9E:A5:F8 X509v3 Authority Key Identifier: keyid:47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:47:7c:36:35:ea:2f:75:58:00:79:e0:22:3c:3c:c6:34:28: 5b:16:c6:a6:04:c1:bc:29:63:ed:b4:44:df:dd:ff:28:1d:d8: 36:0d:9d:35:ae:a5:6d:bf:78:5f:8e:8a:09:24:1a:81:2a:28: d9:cd:5d:2b:76:63:c9:c7:90:cd:17:6f:42:52:06:47:ea:e8: 37:93:5c:e5:14:c5:5e:d5:65:de:5a:fd:85:33:e0:4a:bf:35: 6f:4a:1d:c1:e5:43:d5:5b:43:e2:dc:49:eb:d1:d8:33:f1:63: 59:c1:89:c1:fe:b8:ea:af:92:dc:57:5a:c1:17:1f:0b:d7:3a: 2c:a3:a4:5d:09:cb:ff:6e:b6:db:54:07:9d:f5:a6:67:88:58: e2:64:1c:da:5c:53:c3:3e:20:ce:e3:a8:6d:71:8f:a1:bc:b3: 48:8e:7e:63:46:9d:ea:38:6d:e2:41:47:b7:00:8e:d4:3a:a9: fc:dc:86:91:ef:26:d6:f9:35:64:5d:f9:cb:d1:29:5b:0c:0e: f2:3a:8d:32:b1:28:72:07:76:d0:d6:89:c1:0e:7b:4a:4b:5b: 84:ec:f6:0c:2b:9b:de:30:d1:91:82:dc:b4:bc:ad:6f:20:72: f0:d2:62:92:32:6e:ca:e3:b4:19:be:95:8b:37:d5:0c:5a:10: 23:9e:c6:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBMUQxMTAvBgNVBAUTKDQ3Q0JFRjcwQkQ1NUI5NTMzMzMxQjhCQ0MyRTk4Mjk1 NjNBMkNFOTQwHhcNMjUwNDI0MjIzODQ3WhcNMjUwNTAxMjIzODQ3WjAYMRYwFAYD VQQDEw02ODBhYmQ3OC03Y2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTUCZ4w86qk28eMunIODccSrGxaYuGqCJkts9rx0gAWJ24P37aUZpYArRKFP EpDTDv60cG38e4sozjfWFk0vUKmJyPrCOL2tgLACoB8qILfalAHiotjFm7o6sbLa uCUX58gkWavGkukR2qi42AOYUxqO5oFwBGZWvXugMAUfn2memuPq2tT32cp9am+D 3pn5ktuFOjzHj/intSai4O+DD9pN6Tv+a1qyfXQgd6w7u8Ydq8MccsIACNLsLm0j TLb8fv0nqDOZ+tRT4beb3hf60WkVLRaPN/GSxxRCcphcCT6UBeLUc+QgfKcUABew JrTcqXeFeebWPqCkpegOoF8mrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbhL447 CQtky45fZkuTc5M0nqX4MB8GA1UdIwQYMBaAFEfL73C9VblTMzG4vMLpgpVjos6U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkExRC80NTRCQ0RBNDlF OTQxMUVCQkM4MERGMjBDNEY5QUUwMi9SOHZ2Y0wxVnVWTXpNYmk4d3VtQ2xXT2l6 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I4dnZjTDFWdVZNek1iaTh3dW1DbFdPaXpwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkExRC80NTRCQ0RBNDlFOTQxMUVCQkM4MERGMjBDNEY5QUUwMi9SOHZ2Y0wxVnVW TXpNYmk4d3VtQ2xXT2l6cFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2R3w2NeovdVgAeeAiPDzGNChbFsamBMG8KWPttETf3f8oHdg2DZ01 rqVtv3hfjooJJBqBKijZzV0rdmPJx5DNF29CUgZH6ug3k1zlFMVe1WXeWv2FM+BK vzVvSh3B5UPVW0Pi3Enr0dgz8WNZwYnB/rjqr5LcV1rBFx8L1zoso6RdCcv/brbb VAed9aZniFjiZBzaXFPDPiDO46htcY+hvLNIjn5jRp3qOG3iQUe3AI7UOqn83IaR 7ybW+TVkXfnL0SlbDA7yOo0ysShyB3bQ1onBDntKS1uE7PYMK5veMNGRgty0vK1v IHLw0mKSMm7K47QZvpWLN9UMWhAjnsal -----END CERTIFICATE-----Generated at Sat Apr 26 14:13:21 2025 by rpki-client