$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft File: p24FuDRU7RogkCXoPXXkBXkYksE.mft (raw, json) Hash identifier: 9ADu5RVhtB9OIbDi/wUxsfR3TwRxy5TMZxNwRbwBMFY= Subject key identifier: 9C:D3:86:62:DE:DE:29:87:B8:66:BF:C8:D3:E5:E0:79:84:56:29:1A Authority key identifier: A7:6E:05:B8:34:54:ED:1A:20:90:25:E8:3D:75:E4:05:79:18:92:C1 Certificate issuer: /CN=A914E6AA/serialNumber=A76E05B83454ED1A209025E83D75E405791892C1 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft Manifest number: 0898 Signing time: Thu 24 Apr 2025 22:45:50 +0000 Manifest this update: Thu 24 Apr 2025 22:45:49 +0000 Manifest next update: Thu 01 May 2025 22:45:49 +0000 Files and hashes: 1: p24FuDRU7RogkCXoPXXkBXkYksE.crl (hash: 9XJjuGLBCQrtbX2yw0QqphmyW9mT56UiOjZSVsRooxs=) 2: 078192DE0E0111F08A256F7AC4F9AE02.roa (hash: LXGEYHuadccOutKJ+/tshTQpVwD3yYdPEV04BO81LG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=A76E05B83454ED1A209025E83D75E405791892C1 Validity Not Before: Apr 24 22:45:49 2025 GMT Not After : May 1 22:45:49 2025 GMT Subject: CN=680abf1e-8293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:66:e5:48:d3:c9:b0:43:55:34:ea:ce:0e:55: e0:d1:3d:64:86:26:39:64:9d:58:30:b0:5c:c6:d2: f3:59:8b:0c:32:0c:19:b8:f0:27:cc:e5:ec:7b:ee: 5b:18:aa:1b:a7:51:ef:77:9f:e9:c0:67:6f:6f:20: 6d:04:a4:2d:34:92:cb:4b:45:01:ee:36:32:1b:06: 09:a2:a2:55:54:18:50:af:f6:98:35:72:3e:e6:01: e1:ec:13:45:4b:c3:29:87:8c:5c:a7:50:9f:23:74: df:ac:1c:4a:ac:2e:ed:fe:2e:ba:58:8d:39:c8:d4: 4d:73:22:b6:80:9c:d4:5f:8e:4c:34:68:70:d0:07: b7:b3:b1:82:0f:32:7b:a6:a3:39:7c:eb:ae:d5:ef: 0e:5d:4c:5b:3c:d4:a1:61:37:4d:9c:d8:37:de:42: 48:f4:49:1c:82:dc:f5:43:09:4e:1f:d4:20:82:7f: 2f:32:2f:0b:61:75:b1:3c:46:17:3c:c9:90:28:eb: 86:ec:66:d2:e8:a5:64:52:25:d8:da:4a:68:34:8b: 16:96:14:89:67:29:e1:04:70:10:3c:f9:73:78:67: 31:e3:45:77:3f:6f:ce:f4:da:07:a2:9b:76:0d:d2: 75:5e:c2:79:b3:4c:f7:76:f8:e6:f3:9b:df:e1:b3: 82:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D3:86:62:DE:DE:29:87:B8:66:BF:C8:D3:E5:E0:79:84:56:29:1A X509v3 Authority Key Identifier: keyid:A7:6E:05:B8:34:54:ED:1A:20:90:25:E8:3D:75:E4:05:79:18:92:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:b4:ae:f6:b5:16:80:84:98:0d:90:c4:1e:5a:91:8f:42:0d: e1:5f:aa:98:77:8b:59:ac:f4:c5:75:c5:8c:81:ac:c5:9f:94: e1:04:e8:ea:cf:82:f6:cd:71:8f:c4:78:c0:b0:4d:1d:ad:1c: 0f:aa:de:4b:ed:08:47:05:fe:de:2d:6f:67:0e:f3:10:04:ea: 4e:f0:d4:7e:4d:ef:94:6e:8d:27:40:5b:5d:04:2e:9d:8f:ed: 19:79:00:21:e9:5f:48:eb:b7:54:aa:a0:cb:cb:5e:f3:b4:d5: 9b:ff:13:e0:5f:ef:bc:b1:1b:bd:c8:c4:99:a4:d0:2a:45:74: 6d:01:2d:20:29:9d:dd:e4:69:67:47:b3:db:25:39:96:2f:65: 1d:2e:72:c5:b1:a8:44:ee:83:69:07:19:c4:17:d4:f3:b5:21: 86:2a:90:a4:32:c3:f0:4a:db:96:49:bc:80:5d:dc:1c:41:26: 96:e3:4b:c3:c5:b5:3e:87:d1:fe:d3:d0:68:fe:25:63:1c:6c: 5b:6c:c3:d6:01:80:1f:ac:80:2d:d3:53:97:14:16:55:ad:c4: 8b:5b:3f:4d:39:69:3b:11:04:b6:90:e9:45:c4:a5:29:93:33: ee:c3:d8:07:4c:db:14:15:45:41:7c:47:10:c4:a9:65:ef:db: 0b:3e:10:5d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTZBQTExMC8GA1UEBRMoQTc2RTA1QjgzNDU0RUQxQTIwOTAyNUU4M0Q3NUU0MDU3 OTE4OTJDMTAeFw0yNTA0MjQyMjQ1NDlaFw0yNTA1MDEyMjQ1NDlaMBgxFjAUBgNV BAMTDTY4MGFiZjFlLTgyOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoZuVI08mwQ1U06s4OVeDRPWSGJjlknVgwsFzG0vNZiwwyDBm48CfM5ex77lsY qhunUe93n+nAZ29vIG0EpC00kstLRQHuNjIbBgmiolVUGFCv9pg1cj7mAeHsE0VL wymHjFynUJ8jdN+sHEqsLu3+LrpYjTnI1E1zIraAnNRfjkw0aHDQB7ezsYIPMnum ozl8667V7w5dTFs81KFhN02c2DfeQkj0SRyC3PVDCU4f1CCCfy8yLwthdbE8Rhc8 yZAo64bsZtLopWRSJdjaSmg0ixaWFIlnKeEEcBA8+XN4ZzHjRXc/b8702geim3YN 0nVewnmzTPd2+Obzm9/hs4LXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnNOGYt7e KYe4Zr/I0+XgeYRWKRowHwYDVR0jBBgwFoAUp24FuDRU7RogkCXoPXXkBXkYksEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFNkFBLzhFREIxMDdFQURB ODExRUJBN0M5RjU2N0M0RjlBRTAyL3AyNEZ1RFJVN1JvZ2tDWG9QWFhrQlhrWWtz RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcDI0RnVEUlU3Um9na0NYb1BYWGtCWGtZa3NFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF NkFBLzhFREIxMDdFQURBODExRUJBN0M5RjU2N0M0RjlBRTAyL3AyNEZ1RFJVN1Jv Z2tDWG9QWFhrQlhrWWtzRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEi0rva1FoCEmA2QxB5akY9CDeFfqph3i1ms9MV1xYyBrMWflOEE6OrP gvbNcY/EeMCwTR2tHA+q3kvtCEcF/t4tb2cO8xAE6k7w1H5N75RujSdAW10ELp2P 7Rl5ACHpX0jrt1SqoMvLXvO01Zv/E+Bf77yxG73IxJmk0CpFdG0BLSApnd3kaWdH s9slOZYvZR0ucsWxqETug2kHGcQX1PO1IYYqkKQyw/BK25ZJvIBd3BxBJpbjS8PF tT6H0f7T0Gj+JWMcbFtsw9YBgB+sgC3TU5cUFlWtxItbP005aTsRBLaQ6UXEpSmT M+7D2AdM2xQVRUF8RxDEqWXv2ws+EF0= -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:08 2025 by rpki-client