$ rpki-client -vvf rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft File: P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft (raw, json) Hash identifier: z/3CzvhKgWrbKbR56Aamou7X/tVy2VO5fODyzLvqRPo= Subject key identifier: 29:5E:BF:25:B8:45:67:E8:51:5E:1A:52:52:F3:E7:D6:F1:26:60:F2 Authority key identifier: 3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8 Certificate issuer: /CN=A914C59A/serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8 Certificate serial: 05CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft Manifest number: 05C7 Signing time: Thu 24 Apr 2025 22:49:05 +0000 Manifest this update: Thu 24 Apr 2025 22:49:05 +0000 Manifest next update: Thu 01 May 2025 22:49:05 +0000 Files and hashes: 1: P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl (hash: bOOvmVQp7buCg/IfgOyLzzJwwyY3DAPWT9XxQjkdGhY=) 2: 69559D4CB7AD11EBAA08131AC4F9AE02.roa (hash: zmi3D3ZPX2TqlG5JSej9XeFDCHoCKSFWiJUGsTwAEOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:49:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1483 (0x5cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C59A, serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8 Validity Not Before: Apr 24 22:49:05 2025 GMT Not After : May 1 22:49:05 2025 GMT Subject: CN=680abfe1-6847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b5:2c:fa:6a:83:97:b6:b8:d6:c0:87:1e:f1: 73:83:89:9c:5e:81:f1:86:a8:ab:c0:54:a9:31:fd: 94:b9:a0:98:ab:5e:19:b3:97:53:f7:50:15:43:d3: 79:e7:3f:be:e4:f8:97:7d:09:dc:c3:af:38:a9:3c: 24:c6:2c:40:40:8c:82:18:18:3d:d7:65:64:72:2a: 85:c3:ea:0e:69:cb:48:fb:6a:af:e8:4c:f0:e6:0f: db:3e:16:6a:61:6d:ce:03:bf:e2:7a:16:50:35:f7: a8:f0:96:dc:e2:67:14:2f:2a:7a:74:66:d9:17:be: a7:bd:47:3e:1b:c9:d3:9d:ce:77:b4:29:91:ef:cd: a8:3b:a3:66:8e:80:b5:62:ec:b5:c5:2a:54:90:26: 71:47:e0:7b:dd:af:56:b1:b2:47:77:e2:12:1b:ac: bf:72:6c:1b:66:08:a0:fd:66:9f:11:c3:99:7b:cd: 41:90:41:81:38:22:61:e7:ba:98:bf:9a:9f:b6:27: 20:71:cf:34:a6:03:5b:65:f8:35:eb:da:ac:41:76: 85:03:0b:ac:a7:0f:ed:cf:a8:11:c5:c1:e4:10:21: 71:6d:4a:f1:a7:e2:44:e4:56:01:bb:b2:c3:92:ba: 5a:69:ad:78:c5:56:b0:ae:5b:3f:f3:b1:22:8e:97: e8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5E:BF:25:B8:45:67:E8:51:5E:1A:52:52:F3:E7:D6:F1:26:60:F2 X509v3 Authority Key Identifier: keyid:3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:58:06:31:a8:f6:42:05:99:35:c1:ae:11:5f:c4:3d:10:dd: 7c:a2:c6:e2:48:36:95:f5:aa:0f:cf:5b:ed:7b:df:40:1d:f7: 61:a3:80:3d:b3:6e:72:e7:d5:d4:46:14:99:bf:45:d4:2f:b0: 1b:c3:36:a9:88:b3:56:87:c1:d1:5a:18:2b:4a:60:d9:f4:42: d3:c5:22:ac:7f:c0:20:c5:54:8f:c9:64:9a:2f:f4:80:0e:b1: 18:2e:3d:9b:69:c2:a2:bf:f9:18:b5:c4:2b:fd:65:e2:61:e7: b4:d7:77:79:48:3c:0c:c9:f0:b6:10:a6:5c:08:a2:ae:e6:f9: 72:88:f7:81:cc:52:12:ac:83:c0:4d:23:68:01:03:53:63:e9: 23:ee:8f:f5:a1:0f:dc:97:b8:17:a2:03:1a:9b:db:01:1b:31: b1:22:65:a5:b7:cb:90:d5:33:33:d4:69:81:99:4c:22:ba:af: 5e:45:c3:9a:2c:d3:40:31:2c:69:3e:1e:6a:e3:0c:7e:a8:c0: 99:f5:b3:31:1c:e2:d6:ee:ab:98:e8:26:f0:59:87:10:24:d8: f9:54:de:86:5e:32:94:cd:33:6e:12:8f:3b:c0:a6:44:c2:8e: 55:0e:80:0b:76:ea:46:f5:df:0b:ed:c5:05:ad:0d:c8:ad:08: b9:98:46:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM1OUExMTAvBgNVBAUTKDNGQ0ExOTFGMTU2OEFBN0E5REQxNjBGRDYwOTg5OTg5 MzM2QzgyQjgwHhcNMjUwNDI0MjI0OTA1WhcNMjUwNTAxMjI0OTA1WjAYMRYwFAYD VQQDEw02ODBhYmZlMS02ODQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLUs+mqDl7a41sCHHvFzg4mcXoHxhqirwFSpMf2UuaCYq14Zs5dT91AVQ9N5 5z++5PiXfQncw684qTwkxixAQIyCGBg912VkciqFw+oOactI+2qv6Ezw5g/bPhZq YW3OA7/iehZQNfeo8Jbc4mcULyp6dGbZF76nvUc+G8nTnc53tCmR782oO6NmjoC1 Yuy1xSpUkCZxR+B73a9WsbJHd+ISG6y/cmwbZgig/WafEcOZe81BkEGBOCJh57qY v5qfticgcc80pgNbZfg169qsQXaFAwuspw/tz6gRxcHkECFxbUrxp+JE5FYBu7LD krpaaa14xVawrls/87EijpfogwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClevyW4 RWfoUV4aUlLz59bxJmDyMB8GA1UdIwQYMBaAFD/KGR8VaKp6ndFg/WCYmYkzbIK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzU5QS9CRDI1NEVGMkI3 QUExMUVCQkI5MjIzMTVDNEY5QUUwMi9QOG9aSHhWb3FucWQwV0Q5WUppWmlUTnNn cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A4b1pIeFZvcW5xZDBXRDlZSmlaaVROc2dyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzU5QS9CRDI1NEVGMkI3QUExMUVCQkI5MjIzMTVDNEY5QUUwMi9QOG9aSHhWb3Fu cWQwV0Q5WUppWmlUTnNncmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbWAYxqPZCBZk1wa4RX8Q9EN18osbiSDaV9aoPz1vte99AHfdho4A9 s25y59XURhSZv0XUL7AbwzapiLNWh8HRWhgrSmDZ9ELTxSKsf8AgxVSPyWSaL/SA DrEYLj2bacKiv/kYtcQr/WXiYee013d5SDwMyfC2EKZcCKKu5vlyiPeBzFISrIPA TSNoAQNTY+kj7o/1oQ/cl7gXogMam9sBGzGxImWlt8uQ1TMz1GmBmUwiuq9eRcOa LNNAMSxpPh5q4wx+qMCZ9bMxHOLW7quY6CbwWYcQJNj5VN6GXjKUzTNuEo87wKZE wo5VDoALdupG9d8L7cUFrQ3IrQi5mEZ6 -----END CERTIFICATE-----Generated at Sat Apr 26 03:43:58 2025 by rpki-client