$ rpki-client -vvf rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft File: CfwHfzPjrWe_FHdVFno61OrLHnw.mft (raw, json) Hash identifier: tSq/4jeKUS85yNTyv2S2A9wS2fSJdx3m7uc3lKCjijY= Subject key identifier: AB:5E:75:B2:F6:4F:DF:57:3C:67:BC:AB:84:F3:94:04:1F:94:CC:E7 Authority key identifier: 09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C Certificate issuer: /CN=A9161613/serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C Certificate serial: 0614 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft Manifest number: 05B3 Signing time: Thu 24 Apr 2025 23:12:22 +0000 Manifest this update: Thu 24 Apr 2025 23:12:22 +0000 Manifest next update: Thu 01 May 2025 23:12:22 +0000 Files and hashes: 1: CfwHfzPjrWe_FHdVFno61OrLHnw.crl (hash: qhLK3KtSrOQlxZhuelg3ZDcAghYZqsfqAPO0aPicrPc=) 2: ACDC465C7AEF11EFA321CE80C4F9AE02.roa (hash: yBRdcVlJbMlBPrrr56nDrfaeaxDRpo8RSVcl7jjMZG8=) 3: 81618D88E53E11EB9E429C44C4F9AE02.roa (hash: eFJqISAsUQRuhPb6f3Hah2PFjEJHe1r/X4BKPg7b4kE=) 4: 30904BA8329711EE8EC1E923C4F9AE02.roa (hash: APJ8LqbdzO0lCKxbThL64TXLQduxBrfKXGZEsGj8Ew8=) 5: 3A826C8CED9311EFB3825372C4F9AE02.roa (hash: AIcPcPwO0MC9ukAjdNsCx6XwtejcpEw/imMkdJauIwo=) 6: 5BCDBECC9D6311EE8C1C2B7AC4F9AE02.roa (hash: Pe3y0RLjR0FIZwfwi6WYTekm/kM3adNSrKJHDrzMHQ0=) 7: 639394F4B05611EF95B2931BC4F9AE02.roa (hash: C08kfFB3sbHdAzC9hLJnr0tm+lqFd1yHsi8+zNn8y4s=) 8: 8023B518E53E11EB9E429C44C4F9AE02.roa (hash: vSQHxn5/lTR7h5pMBllVKzWJzWkf2IiJr01/df+82mQ=) 9: 167A6086BBD211EEABCC0D23C4F9AE02.roa (hash: bZCNjczNhzUji7LuYcuS6Yg9nvK9y01d14oqtpECLrI=) 10: 80AD3A9AE53E11EB9E429C44C4F9AE02.roa (hash: 0krzqD999T9B24TBVDnqpUMPP33Jo+TAt8qYmCWzmx0=) 11: 7F2A4208E53E11EB9E429C44C4F9AE02.roa (hash: epJMifwD6R2b1WeonhK6+Ptsph58rQyMoEb+/4Q80hY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:12:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1556 (0x614) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161613, serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C Validity Not Before: Apr 24 23:12:22 2025 GMT Not After : May 1 23:12:22 2025 GMT Subject: CN=680ac556-bca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:27:1e:eb:3b:5f:75:f7:0d:da:32:26:b8:2d: 78:7f:3b:2a:c9:a2:79:32:04:bd:6b:61:6f:9c:45: 9b:55:1d:06:66:81:82:f3:50:45:0d:55:36:3a:ec: bb:ae:27:93:cb:3d:48:d5:1d:9d:32:94:5d:58:df: 53:31:77:2c:f1:ea:81:6a:3e:de:76:67:38:dd:ad: 3d:e0:85:0e:26:42:7f:0e:e0:11:d0:f5:7b:dd:57: 2b:6f:77:a6:81:92:50:33:9b:39:b9:a1:b0:c6:36: 38:c7:21:1b:45:8e:5a:14:f9:4a:3e:82:b0:f2:8b: f4:a9:2c:15:45:17:13:e4:40:1b:13:92:8d:c3:72: 51:0d:b6:f2:6d:36:12:00:0e:40:68:f9:fb:a6:6c: 78:7d:d8:e8:74:6c:26:8e:2a:ee:83:bf:51:fb:b0: ae:8c:e9:f1:81:98:ad:d9:16:40:0f:2e:4e:28:0f: 40:63:56:72:39:52:d0:57:91:14:a0:8a:27:0b:2d: 6f:9c:57:fe:1b:d5:60:88:37:6c:cf:c2:84:b8:68: 13:32:03:a7:5e:c6:94:ed:64:b6:82:f7:e9:c9:d0: 95:22:71:1a:19:f4:22:fe:38:de:1e:a0:fc:a5:f0: 09:ea:6e:ac:53:4a:d0:ad:61:aa:6a:fc:37:1d:25: f7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5E:75:B2:F6:4F:DF:57:3C:67:BC:AB:84:F3:94:04:1F:94:CC:E7 X509v3 Authority Key Identifier: keyid:09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:51:82:19:5a:cc:ac:12:18:52:6c:f2:99:1b:e8:b6:af:5c: 75:c9:f1:6c:21:ef:ee:41:91:a2:ba:4f:85:9f:35:37:5a:4a: ca:db:f3:d5:61:7a:73:aa:3b:7f:f8:72:f4:d7:ef:5f:13:f9: 4e:ce:e0:9b:ec:e2:95:8d:af:cd:6b:7f:63:8c:2d:28:1f:3c: 67:aa:74:0a:a3:65:ad:24:83:6b:31:fb:01:e3:b8:9e:d0:4e: 59:56:34:58:98:89:5f:e6:de:f9:b2:9e:78:f0:a9:6d:77:9c: b5:4e:4a:83:8d:4b:ea:ca:17:35:9c:99:8e:bd:6e:d6:b3:ec: 76:20:e9:11:54:2c:2a:e9:0e:48:8e:59:08:44:f4:87:41:01: 67:47:cc:9c:b5:26:5b:53:51:e5:3e:05:fb:f3:87:97:25:ce: 18:ea:6d:c5:8e:b1:33:1d:70:f7:28:78:f4:2f:02:b3:14:83: b0:a7:64:21:d8:d1:10:ac:86:75:af:47:af:fc:5b:15:53:e5: b3:ee:37:51:cb:db:6c:0a:91:a7:6b:99:b2:fd:4f:fe:72:6c: 7a:21:64:0b:66:3a:f1:2d:59:31:c4:47:23:2d:67:49:fc:dc: 35:4b:ba:d1:45:0a:52:cd:b3:b2:09:34:4c:9a:53:bb:21:49: d0:f1:76:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE2MTMxMTAvBgNVBAUTKDA5RkMwNzdGMzNFM0FENjdCRjE0Nzc1NTE2N0EzQUQ0 RUFDQjFFN0MwHhcNMjUwNDI0MjMxMjIyWhcNMjUwNTAxMjMxMjIyWjAYMRYwFAYD VQQDEw02ODBhYzU1Ni1iY2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySce6ztfdfcN2jImuC14fzsqyaJ5MgS9a2FvnEWbVR0GZoGC81BFDVU2Ouy7 rieTyz1I1R2dMpRdWN9TMXcs8eqBaj7edmc43a094IUOJkJ/DuAR0PV73Vcrb3em gZJQM5s5uaGwxjY4xyEbRY5aFPlKPoKw8ov0qSwVRRcT5EAbE5KNw3JRDbbybTYS AA5AaPn7pmx4fdjodGwmjirug79R+7CujOnxgZit2RZADy5OKA9AY1ZyOVLQV5EU oIonCy1vnFf+G9VgiDdsz8KEuGgTMgOnXsaU7WS2gvfpydCVInEaGfQi/jjeHqD8 pfAJ6m6sU0rQrWGqavw3HSX3TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtedbL2 T99XPGe8q4TzlAQflMznMB8GA1UdIwQYMBaAFAn8B38z461nvxR3VRZ6OtTqyx58 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTYxMy8zMDk5MjY2OEU1 MzkxMUVCOEE1QjkyNzFDNEY5QUUwMi9DZndIZnpQanJXZV9GSGRWRm5vNjFPckxI bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Nmd0hmelBqcldlX0ZIZFZGbm82MU9yTEhudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTYxMy8zMDk5MjY2OEU1MzkxMUVCOEE1QjkyNzFDNEY5QUUwMi9DZndIZnpQanJX ZV9GSGRWRm5vNjFPckxIbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTUYIZWsysEhhSbPKZG+i2r1x1yfFsIe/uQZGiuk+FnzU3WkrK2/PV YXpzqjt/+HL01+9fE/lOzuCb7OKVja/Na39jjC0oHzxnqnQKo2WtJINrMfsB47ie 0E5ZVjRYmIlf5t75sp548Kltd5y1TkqDjUvqyhc1nJmOvW7Ws+x2IOkRVCwq6Q5I jlkIRPSHQQFnR8yctSZbU1HlPgX784eXJc4Y6m3FjrEzHXD3KHj0LwKzFIOwp2Qh 2NEQrIZ1r0ev/FsVU+Wz7jdRy9tsCpGna5my/U/+cmx6IWQLZjrxLVkxxEcjLWdJ /Nw1S7rRRQpSzbOyCTRMmlO7IUnQ8XYL -----END CERTIFICATE-----Generated at Sat Apr 26 13:06:20 2025 by rpki-client