$ rpki-client -vvf rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft File: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft (raw, json) Hash identifier: lXTVqv2oFW62nYN8YBkWUHdOy3ls99nGV8ncHSBOplM= Subject key identifier: 9A:DE:89:72:49:FF:E5:6A:6E:EC:49:5A:F2:CC:FF:DC:FB:F7:43:B8 Authority key identifier: 0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 Certificate issuer: /CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Certificate serial: 03F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft Manifest number: 03E1 Signing time: Fri 25 Apr 2025 00:19:12 +0000 Manifest this update: Fri 25 Apr 2025 00:19:12 +0000 Manifest next update: Fri 02 May 2025 00:19:12 +0000 Files and hashes: 1: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl (hash: h7aPwkFCYKYQhyz7NLgRMYwI4OsP90x1gwWwjeAcKgc=) 2: 4B167396E74111EC80E35542C4F9AE02.roa (hash: bHN8Wd0Zu68QTsipkyferF9uwGKu6L4i92pMNTEMusM=) 3: 8AEE4940EAB511ECBBDE3C50C4F9AE02.roa (hash: mO2TDz8iVH1QjiN6s50lIdAYCPwhB4UYqdlU/m/h8sE=) 4: 8A4C662AEAB511ECBBDE3C50C4F9AE02.roa (hash: J8gquWVTmRgJWJ3mBG8a1mA8su1ptSNi3imZDckI5g0=) 5: 91A286509F0811ECAE659F82C4F9AE02.roa (hash: RqwnZfnau7RkdBU68iXpJ/pJr2ocars1rJf1vcp1FOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1013 (0x3f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E9C1, serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Validity Not Before: Apr 25 00:19:12 2025 GMT Not After : May 2 00:19:12 2025 GMT Subject: CN=680ad500-0d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:73:3b:14:8f:52:e3:b6:e4:cd:b4:2f:70:e2: 67:d2:71:67:44:05:6d:07:47:2e:d3:1f:a4:e5:e0: 17:23:29:2e:80:b1:12:f5:bc:92:6a:7a:4e:37:22: 04:0c:36:e1:07:02:75:f9:88:39:0f:29:60:c3:d5: cc:88:fe:91:48:80:8e:5a:c9:e4:b3:c2:b6:6f:75: 8e:15:38:53:3f:b8:7b:99:bf:34:1b:9a:e3:53:2d: 8d:00:70:11:d4:97:99:42:55:57:c4:cb:e2:3a:fd: ff:3d:85:8f:fb:66:00:c5:24:f4:7c:a8:ae:c6:e8: 09:4c:82:c3:98:ea:42:1b:62:bf:b7:ae:38:03:cd: f5:45:72:19:87:5c:1d:b4:91:7e:32:ab:77:4a:77: 10:84:fb:ee:56:14:4b:e8:9a:85:6c:7a:3c:3f:84: 7f:f7:0a:27:bb:03:e6:3c:6f:a8:d6:21:8c:f2:7a: f3:1e:a4:11:d5:fe:09:cc:8c:2b:fa:92:8a:57:44: 6d:c1:2a:29:c4:99:aa:54:94:5c:27:fb:20:47:8a: ec:4d:0b:96:07:c2:0c:c5:1a:22:6e:54:56:62:c1: b5:19:2b:18:91:af:fd:5a:a3:f7:b3:5d:49:1d:4d: db:c4:bb:dc:f2:ca:16:da:ee:a1:a8:6b:1a:96:97: 76:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DE:89:72:49:FF:E5:6A:6E:EC:49:5A:F2:CC:FF:DC:FB:F7:43:B8 X509v3 Authority Key Identifier: keyid:0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:53:1f:68:79:6d:d1:47:d3:41:73:ee:ad:8e:45:95:41:03: 56:3e:b9:37:fc:d3:66:5f:56:94:8f:f6:9d:ac:23:44:9e:e0: 34:7c:b6:f3:d4:30:f2:3a:e5:ca:b1:24:e5:95:6f:87:a8:85: 22:3b:33:b8:ff:ef:47:8e:ce:e8:02:ae:05:60:fc:7a:94:65: 8c:43:87:24:c4:e9:62:74:fd:e1:36:be:f9:56:c0:bc:bb:b6: c6:43:0d:13:2a:d3:ad:6a:9f:1f:e1:11:5f:e2:d3:fc:71:8d: 8c:16:fb:17:47:3b:5c:b9:7f:72:b4:3d:29:b9:77:f2:a9:ba: 82:9f:96:2f:b3:61:25:31:e8:16:cb:27:e9:e6:8c:bc:08:32: 67:b9:ce:b7:ef:01:04:5a:86:07:18:76:74:c0:a7:3e:7d:7a: f6:30:0c:86:39:6b:fc:a9:1d:e3:bc:8c:66:e4:1d:c7:b1:51: b2:fd:3a:d4:ac:bc:b7:17:69:bf:ea:7c:78:d1:a6:26:f6:28: 30:11:e0:c3:72:cf:ed:6f:9b:8b:4e:27:b4:99:d0:bc:2c:97: 09:bd:21:a8:f5:f5:72:02:59:09:1e:89:a4:eb:d9:fe:03:c2: f9:fe:d1:10:2e:a6:4a:b8:78:b9:d5:5b:3c:9d:9f:69:0c:b3: c5:12:0f:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU5QzExMTAvBgNVBAUTKDBBMURFMThERkM5OEU0QUNCM0ZBMjMzMzY4MTA1QTcz RDFENDE5RjMwHhcNMjUwNDI1MDAxOTEyWhcNMjUwNTAyMDAxOTEyWjAYMRYwFAYD VQQDEw02ODBhZDUwMC0wZDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXM7FI9S47bkzbQvcOJn0nFnRAVtB0cu0x+k5eAXIykugLES9bySanpONyIE DDbhBwJ1+Yg5Dylgw9XMiP6RSICOWsnks8K2b3WOFThTP7h7mb80G5rjUy2NAHAR 1JeZQlVXxMviOv3/PYWP+2YAxST0fKiuxugJTILDmOpCG2K/t644A831RXIZh1wd tJF+Mqt3SncQhPvuVhRL6JqFbHo8P4R/9wonuwPmPG+o1iGM8nrzHqQR1f4JzIwr +pKKV0RtwSopxJmqVJRcJ/sgR4rsTQuWB8IMxRoiblRWYsG1GSsYka/9WqP3s11J HU3bxLvc8soW2u6hqGsalpd2ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJreiXJJ /+VqbuxJWvLM/9z790O4MB8GA1UdIwQYMBaAFAod4Y38mOSss/ojM2gQWnPR1Bnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTlDMS9FRTcwMkY0NDdB QzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVLeXotaU16YUJCYWM5SFVH Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoM2hqZnlZNUt5ei1pTXphQkJhYzlIVUdmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTlDMS9FRTcwMkY0NDdBQzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVL eXotaU16YUJCYWM5SFVHZk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClUx9oeW3RR9NBc+6tjkWVQQNWPrk3/NNmX1aUj/adrCNEnuA0fLbz 1DDyOuXKsSTllW+HqIUiOzO4/+9Hjs7oAq4FYPx6lGWMQ4ckxOlidP3hNr75VsC8 u7bGQw0TKtOtap8f4RFf4tP8cY2MFvsXRztcuX9ytD0puXfyqbqCn5Yvs2ElMegW yyfp5oy8CDJnuc637wEEWoYHGHZ0wKc+fXr2MAyGOWv8qR3jvIxm5B3HsVGy/TrU rLy3F2m/6nx40aYm9igwEeDDcs/tb5uLTie0mdC8LJcJvSGo9fVyAlkJHomk69n+ A8L5/tEQLqZKuHi51Vs8nZ9pDLPFEg9M -----END CERTIFICATE-----Generated at Sat Apr 26 05:05:25 2025 by rpki-client