$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft File: cp4vnB2HwhRzUHjP0hxjjgcVe10.mft (raw, json) Hash identifier: q5j/8YfN77BTghDjy74NTKtAujE7erybYIGVA6cIElU= Subject key identifier: D8:3F:18:6D:2A:5C:C4:21:89:EE:CA:B9:A0:60:3D:9B:07:35:3C:82 Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D Certificate issuer: /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft Manifest number: 0202 Signing time: Mon 05 May 2025 01:38:13 +0000 Manifest this update: Mon 05 May 2025 01:38:13 +0000 Manifest next update: Mon 12 May 2025 01:38:13 +0000 Files and hashes: 1: cp4vnB2HwhRzUHjP0hxjjgcVe10.crl (hash: d8HdwMT2GFkilSQrvw5ofHESLXsu9BumRNSyKQF047Y=) 2: 2E2847223DB311EE9375493EC4F9AE02.roa (hash: fpl1QeLbfvQuhkR1/wuQiPy5mkE26myDKA7Pu9M6C4M=) 3: 54AABA183DB011EE9F747386C4F9AE02.roa (hash: ONapLZvUqu3mpJkB9dcSlu94PIbPVn9cCFsHZdZqgAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 01:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D Validity Not Before: May 5 01:38:13 2025 GMT Not After : May 12 01:38:13 2025 GMT Subject: CN=68181685-8aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cc:84:50:ce:72:35:c3:8d:c8:7a:62:4b:ee: 36:4f:8d:9c:8b:17:39:49:c8:ba:1e:e0:95:1e:33: 76:49:5a:a6:73:61:96:a4:21:89:6f:28:2f:8f:ba: 99:94:44:e4:94:45:1f:30:06:4d:4a:c7:11:15:fb: ae:5f:5e:55:df:ac:12:eb:00:73:0e:2a:0b:c2:81: fc:df:a1:f5:30:da:b2:a7:c8:bf:ca:ce:18:65:d9: 3c:45:cc:bd:6e:e4:63:f3:41:2e:ae:12:55:1d:11: 99:aa:d3:e2:94:01:50:90:8a:74:df:1e:69:d1:3f: 03:64:95:bc:d5:8a:f6:2e:a0:65:10:84:e2:11:4a: e8:27:a5:0e:a2:bb:17:7b:68:2a:fa:6f:3b:b8:7a: 17:38:ae:81:0a:00:e4:fe:53:b0:03:fd:0c:f8:a9: 9e:dd:db:24:09:ef:79:3a:17:89:b8:20:ce:36:fa: c4:e4:62:46:57:f2:dc:fb:0e:ca:11:8a:cc:a2:ee: bf:df:c8:d9:c9:75:62:0b:88:d8:24:0b:f6:9f:d8: 40:13:53:70:cb:1b:83:5d:cb:c7:92:e2:87:4c:64: 78:a7:27:ea:12:df:0f:cc:c6:54:74:90:2f:31:59: 4b:6e:ca:02:1c:42:11:1b:ca:cc:85:7b:c8:a7:dc: 65:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3F:18:6D:2A:5C:C4:21:89:EE:CA:B9:A0:60:3D:9B:07:35:3C:82 X509v3 Authority Key Identifier: keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:13:d0:08:94:c7:5d:ee:a9:74:58:3c:fa:ac:e9:64:0c:96: 96:67:8a:46:a6:0b:b8:e9:8b:61:06:ea:20:21:1c:3c:d4:b1: 16:17:b1:fd:ba:0c:20:7f:72:6a:93:6d:23:0a:a6:d1:6d:ac: c4:52:20:67:63:78:16:ce:db:00:a8:dd:65:93:3d:0c:13:b8: 91:74:68:22:89:be:cf:fc:1f:82:38:8c:e3:c9:e2:8e:a6:18: fd:3e:a6:7e:df:91:ae:af:10:54:6e:38:de:91:da:f5:40:af: bf:41:fa:50:f2:03:b9:62:88:74:62:cc:ac:19:d5:f4:16:6e: 36:6c:ec:23:02:cb:92:c0:d7:0a:c9:53:2f:21:66:26:95:70: f0:16:7d:37:34:7a:87:a4:dd:87:fd:70:a4:22:23:d7:b7:71: bc:42:90:fb:6b:b5:a1:67:28:d1:4d:65:1e:a7:a7:de:df:78: ac:f7:31:c7:1c:15:78:9f:8c:f1:2e:ae:5f:87:ec:da:58:75: 51:9b:db:e9:d1:6c:a5:ff:eb:c2:f0:a6:59:6c:9d:a7:47:4d: a8:1c:a2:66:83:d3:d1:a0:58:9e:3a:bf:73:18:e1:dc:51:b5: db:eb:d5:20:7c:6c:45:60:5a:bf:d5:00:68:5d:9e:a4:f2:28: b6:e0:ba:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgwN0ExMTAvBgNVBAUTKDcyOUUyRjlDMUQ4N0MyMTQ3MzUwNzhDRkQyMUM2MzhF MDcxNTdCNUQwHhcNMjUwNTA1MDEzODEzWhcNMjUwNTEyMDEzODEzWjAYMRYwFAYD VQQDEw02ODE4MTY4NS04YWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAosyEUM5yNcONyHpiS+42T42cixc5Sci6HuCVHjN2SVqmc2GWpCGJbygvj7qZ lETklEUfMAZNSscRFfuuX15V36wS6wBzDioLwoH836H1MNqyp8i/ys4YZdk8Rcy9 buRj80EurhJVHRGZqtPilAFQkIp03x5p0T8DZJW81Yr2LqBlEITiEUroJ6UOorsX e2gq+m87uHoXOK6BCgDk/lOwA/0M+Kme3dskCe95OheJuCDONvrE5GJGV/Lc+w7K EYrMou6/38jZyXViC4jYJAv2n9hAE1NwyxuDXcvHkuKHTGR4pyfqEt8PzMZUdJAv MVlLbsoCHEIRG8rMhXvIp9xlTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNg/GG0q XMQhie7KuaBgPZsHNTyCMB8GA1UdIwQYMBaAFHKeL5wdh8IUc1B4z9IcY44HFXtd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODA3QS8wMjYzQUI0ODNF ODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdoUnpVSGpQMGh4ampnY1Zl MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NwNHZuQjJId2hSelVIalAwaHhqamdjVmUxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODA3QS8wMjYzQUI0ODNFODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdo UnpVSGpQMGh4ampnY1ZlMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGE9AIlMdd7ql0WDz6rOlkDJaWZ4pGpgu46YthBuogIRw81LEWF7H9 ugwgf3Jqk20jCqbRbazEUiBnY3gWztsAqN1lkz0ME7iRdGgiib7P/B+COIzjyeKO phj9PqZ+35GurxBUbjjekdr1QK+/QfpQ8gO5Yoh0YsysGdX0Fm42bOwjAsuSwNcK yVMvIWYmlXDwFn03NHqHpN2H/XCkIiPXt3G8QpD7a7WhZyjRTWUep6fe33is9zHH HBV4n4zxLq5fh+zaWHVRm9vp0Wyl/+vC8KZZbJ2nR02oHKJmg9PRoFieOr9zGOHc UbXb69UgfGxFYFq/1QBoXZ6k8ii24Lpu -----END CERTIFICATE-----Generated at Tue May 6 22:51:56 2025 by rpki-client