$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft File: _4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft (raw, json) Hash identifier: oU+0TZL53UEYeSXdMylnfvs7xEkVsXKZSr38s/LndpQ= Subject key identifier: D8:8B:80:74:85:DD:33:B0:6E:2D:A5:8E:FA:83:45:63:48:FB:4A:FB Authority key identifier: FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA Certificate issuer: /CN=A915BC98/serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft Manifest number: 3C Signing time: Fri 25 Apr 2025 07:00:55 +0000 Manifest this update: Fri 25 Apr 2025 07:00:55 +0000 Manifest next update: Fri 02 May 2025 07:00:55 +0000 Files and hashes: 1: _4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl (hash: YtE56a0XOl9k02SjPs1ctrK9c7W59f0mfc+ZvisrpTI=) 2: 13B46272139511F0BAC02735C4F9AE02.roa (hash: lunzyAvH2WnGuuqjQcMC7tzE6PiUkG2ZqHNZmlQ3Mow=) 3: 0AAD710010B111F0A46DA723C4F9AE02.roa (hash: bk09MGKmA1KtNu/8fLfir0D9n+KVGE5j0LJioJGLi+A=) 4: 9C2A80FA099011F08EA9F20BC4F9AE02.roa (hash: goFGLeo3cJQ5XXhESgnKHMy4NdQpSGyyQNhR1oIebe0=) 5: 71A92448186E11F083760527C4F9AE02.roa (hash: fEhJNoYQsvAhpUWy30zyzhm+f82+0YX6EDfhlwxFPqw=) 6: 95E16734187411F099AC2133C4F9AE02.roa (hash: GF8rCTpf/VJlJeNEZPKA8ehDu40GNOcfTE2tHrOTJPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BC98, serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA Validity Not Before: Apr 25 07:00:55 2025 GMT Not After : May 2 07:00:55 2025 GMT Subject: CN=680b3327-3548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a8:e5:47:71:50:51:f7:5f:74:fe:85:fa:fe: 22:1a:43:01:f4:f3:fa:3a:81:9d:a7:c7:52:e2:3b: 17:a6:4a:42:f3:23:8f:95:0f:1c:5f:ed:a0:33:89: 7e:42:c5:a5:ca:56:e0:4a:0c:ff:d2:ab:c0:e3:c9: 1b:59:ba:06:96:60:20:8b:d4:d1:6b:90:3a:6d:de: 07:0c:6d:dc:28:08:d1:b5:d0:6d:95:47:43:79:68: a8:b0:d7:bf:14:34:a5:93:54:47:f3:d1:2d:b7:d0: f3:b2:fa:dd:1b:e8:d9:42:3d:97:85:53:a7:a9:07: e6:83:55:3e:69:29:16:02:6b:90:fe:0e:34:8c:84: c0:91:61:b7:21:e7:99:94:b9:5c:11:b0:95:11:55: 82:66:2a:2b:c1:0a:8e:ab:ce:2a:71:17:a7:40:86: a1:05:9d:27:66:48:54:23:e0:4d:dd:ed:dd:1c:36: e2:d4:5a:7b:15:2b:93:89:90:35:53:a0:45:1c:70: 48:a0:c4:9d:20:29:ec:d6:a6:54:a8:a8:85:3c:11: 7d:2b:7c:70:6c:4e:74:18:5d:97:dc:f2:6f:a5:9f: 36:b3:e0:78:f8:03:86:7e:4e:d6:e5:c2:e2:2d:e0: 57:28:eb:de:83:bf:e4:a0:89:75:ec:9c:33:9b:c6: dc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:8B:80:74:85:DD:33:B0:6E:2D:A5:8E:FA:83:45:63:48:FB:4A:FB X509v3 Authority Key Identifier: keyid:FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:75:97:1f:9c:ca:72:de:16:ce:cc:bb:6d:85:e6:3a:d2:b1: 01:de:cf:af:c6:5e:fe:e9:77:a8:19:30:f8:0c:af:b4:e8:ba: 42:c2:63:6e:f7:53:71:c2:cd:44:4e:82:16:27:0e:45:f9:1d: 46:d3:c5:7c:73:fd:9e:72:17:a3:7d:cb:a4:48:17:c9:bc:30: 3e:da:20:ff:ed:3c:a8:cd:ce:bc:d9:b1:6e:45:10:40:6c:12: 2d:0c:20:4c:3f:dc:bd:a6:31:90:ab:00:b5:37:64:ac:35:38: 24:b6:03:30:2d:43:ac:ad:bf:26:aa:02:0a:f6:38:bb:18:be: 93:0e:6f:bd:0c:32:b5:96:3e:2f:c7:d7:72:79:3c:3f:7f:e6: cc:07:1d:72:32:66:4e:47:50:83:42:3d:a3:e5:14:ca:f5:95: 7f:48:4b:f4:50:8d:fe:7c:e2:c8:bf:6a:92:19:9d:38:eb:60: bd:b5:5e:98:5a:d8:bf:ed:4d:83:ec:40:b4:a5:cf:ab:58:a8: 78:07:d9:6e:7f:f9:3c:77:a5:03:3a:9a:46:b1:15:5f:35:8f: c3:6f:47:16:a2:bb:8b:ee:dd:ee:eb:00:b3:4d:86:4e:ce:81: 61:70:40:7d:3e:7a:cf:51:03:f3:00:0d:bd:34:63:a5:4d:85: a0:57:b4:b2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QkM5ODExMC8GA1UEBRMoRkY4Q0NCRTYxODc1NUExRjUxOTlCRDBDODI3NjBFOEVE QjhGODVCQTAeFw0yNTA0MjUwNzAwNTVaFw0yNTA1MDIwNzAwNTVaMBgxFjAUBgNV BAMTDTY4MGIzMzI3LTM1NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2qOVHcVBR9190/oX6/iIaQwH08/o6gZ2nx1LiOxemSkLzI4+VDxxf7aAziX5C xaXKVuBKDP/Sq8DjyRtZugaWYCCL1NFrkDpt3gcMbdwoCNG10G2VR0N5aKiw178U NKWTVEfz0S230POy+t0b6NlCPZeFU6epB+aDVT5pKRYCa5D+DjSMhMCRYbch55mU uVwRsJURVYJmKivBCo6rzipxF6dAhqEFnSdmSFQj4E3d7d0cNuLUWnsVK5OJkDVT oEUccEigxJ0gKezWplSoqIU8EX0rfHBsTnQYXZfc8m+lnzaz4Hj4A4Z+TtblwuIt 4Fco696Dv+SgiXXsnDObxtzNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2IuAdIXd M7BuLaWO+oNFY0j7SvswHwYDVR0jBBgwFoAU/4zL5hh1Wh9Rmb0MgnYOjtuPhbow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCQzk4L0FCQUZGNUVBMDYx MjExRjA4RTlBRTUyOUM0RjlBRTAyL180ekw1aGgxV2g5Um1iME1nbllPanR1UGhi by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvXzR6TDVoaDFXaDlSbWIwTWduWU9qdHVQaGJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC Qzk4L0FCQUZGNUVBMDYxMjExRjA4RTlBRTUyOUM0RjlBRTAyL180ekw1aGgxV2g5 Um1iME1nbllPanR1UGhiby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADN1lx+cynLeFs7Mu22F5jrSsQHez6/GXv7pd6gZMPgMr7ToukLCY273 U3HCzUROghYnDkX5HUbTxXxz/Z5yF6N9y6RIF8m8MD7aIP/tPKjNzrzZsW5FEEBs Ei0MIEw/3L2mMZCrALU3ZKw1OCS2AzAtQ6ytvyaqAgr2OLsYvpMOb70MMrWWPi/H 13J5PD9/5swHHXIyZk5HUINCPaPlFMr1lX9IS/RQjf584si/apIZnTjrYL21Xpha 2L/tTYPsQLSlz6tYqHgH2W5/+Tx3pQM6mkaxFV81j8NvRxaiu4vu3e7rALNNhk7O gWFwQH0+es9RA/MADb00Y6VNhaBXtLI= -----END CERTIFICATE-----Generated at Sat Apr 26 12:55:41 2025 by rpki-client