$ rpki-client -vvf rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft File: fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft (raw, json) Hash identifier: ScCs1zQUcrk3VVx56NNEHRqncPU+nxjDDyM5j/XQidk= Subject key identifier: 3B:C1:3A:0F:4F:4C:DC:66:E9:94:FE:11:20:D7:CE:A6:69:6D:0C:39 Authority key identifier: 7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01 Certificate issuer: /CN=A916892A/serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft Manifest number: 83 Signing time: Fri 25 Apr 2025 05:36:53 +0000 Manifest this update: Fri 25 Apr 2025 05:36:52 +0000 Manifest next update: Fri 02 May 2025 05:36:52 +0000 Files and hashes: 1: fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl (hash: 4Ri1P078CgtWwzeoDR35Mu2k99WBdm4VfQmelhpCBDU=) 2: 53287AF45DDF11EF9B31E965C4F9AE02.roa (hash: l9NwgF2p4gRADdXEDeNTklsFvOfiw2xnBPOYK8nZgtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:36:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916892A, serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801 Validity Not Before: Apr 25 05:36:52 2025 GMT Not After : May 2 05:36:52 2025 GMT Subject: CN=680b1f75-761b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:68:ad:cc:15:8c:a0:6e:4f:d7:22:eb:7a:55: a2:9d:e8:1b:8d:9c:fb:52:07:a6:cb:ec:82:54:da: 04:08:5e:a6:60:25:32:5b:99:00:4a:bb:f4:c4:e2: c1:87:7c:8e:61:9b:ec:ff:5d:71:93:99:74:52:9e: 07:d8:75:03:01:43:a0:0f:39:09:3f:fa:27:45:92: 3f:5d:0f:04:c6:7b:b5:1e:b4:41:78:a7:e0:62:78: 41:94:7c:98:72:fc:01:0e:34:d5:07:04:7e:76:27: e7:0d:43:19:47:fe:d6:b0:7c:f3:71:48:f9:fc:40: 24:2f:ac:3e:2f:bb:2a:ed:8c:dc:a2:5e:ac:4f:c7: b9:24:fb:c6:76:c1:41:b0:35:82:07:c9:26:ab:ee: 09:15:af:e8:fc:64:51:d8:01:2c:a8:5e:c8:4c:1a: 84:94:c6:32:5e:2f:3f:a7:5a:cd:19:8d:c0:b6:d9: 23:a2:46:02:bd:36:44:ea:01:8b:03:d5:78:87:10: 71:df:71:b7:4c:45:67:a3:29:dc:62:0f:c9:e8:be: f2:a1:3e:01:31:f8:62:8f:eb:8b:37:f1:e0:2c:2f: c1:9a:3c:42:5b:61:2f:a6:7a:90:03:10:ff:b7:52: 4e:a1:50:39:11:b8:88:dd:f3:25:bd:45:7c:f9:34: a5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C1:3A:0F:4F:4C:DC:66:E9:94:FE:11:20:D7:CE:A6:69:6D:0C:39 X509v3 Authority Key Identifier: keyid:7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:7e:69:53:46:d0:23:c5:24:bd:95:de:52:6e:a4:4e:38:5c: a3:a0:e4:dc:c2:53:9a:dc:c8:ab:32:29:a1:61:52:9b:fb:34: 4b:2c:db:61:c7:fd:7b:c6:b1:66:e9:5b:99:cd:22:7f:4c:df: 92:70:26:c4:5a:32:a9:2c:85:c2:fb:67:6e:6f:9c:20:73:87: 76:f0:7e:ef:60:5c:eb:f7:bc:07:20:e7:0f:b8:30:30:0c:72: 40:3f:80:95:29:33:4b:69:c3:98:cd:26:2b:87:8a:d4:fe:9c: d8:50:d4:f1:54:d2:67:72:b3:13:ec:da:48:a8:a8:d7:67:61: 23:c5:ef:df:ad:21:51:46:de:be:c6:39:89:c5:83:ae:80:05: 59:dc:ba:58:10:47:9c:4a:dd:e4:28:e1:8f:08:cd:bc:b3:01: 72:30:19:e0:c4:1d:b2:11:0c:21:7e:45:b8:e0:79:6c:ad:00: 13:be:99:06:6a:3c:03:ad:ae:21:33:2e:41:f8:f1:af:41:5d: c5:e0:cf:86:ac:b0:ce:23:32:35:e3:ce:9a:58:3f:10:33:17: 11:82:76:37:43:83:8e:aa:08:d3:cf:72:df:83:49:bb:d2:30: 63:2e:50:dc:3e:ac:bf:ae:19:a9:6f:bf:4d:9c:6a:f4:79:fb: 28:d9:41:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5MkExMTAvBgNVBAUTKDdEMTcyMjhGNDQ1RTE4NEIxNDg0OUJFNDA4RkJEOURC Mjk3QkI4MDEwHhcNMjUwNDI1MDUzNjUyWhcNMjUwNTAyMDUzNjUyWjAYMRYwFAYD VQQDEw02ODBiMWY3NS03NjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumitzBWMoG5P1yLrelWinegbjZz7Ugemy+yCVNoECF6mYCUyW5kASrv0xOLB h3yOYZvs/11xk5l0Up4H2HUDAUOgDzkJP/onRZI/XQ8Exnu1HrRBeKfgYnhBlHyY cvwBDjTVBwR+difnDUMZR/7WsHzzcUj5/EAkL6w+L7sq7Yzcol6sT8e5JPvGdsFB sDWCB8kmq+4JFa/o/GRR2AEsqF7ITBqElMYyXi8/p1rNGY3AttkjokYCvTZE6gGL A9V4hxBx33G3TEVnoyncYg/J6L7yoT4BMfhij+uLN/HgLC/BmjxCW2EvpnqQAxD/ t1JOoVA5EbiI3fMlvUV8+TSlAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDvBOg9P TNxm6ZT+ESDXzqZpbQw5MB8GA1UdIwQYMBaAFH0XIo9EXhhLFISb5Aj72dspe7gB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODkyQS8wQzUyNkRDRTVE REYxMUVGOEI1ODMzNjVDNEY5QUUwMi9mUmNpajBSZUdFc1VoSnZrQ1B2WjJ5bDd1 QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSY2lqMFJlR0VzVWhKdmtDUHZaMnlsN3VBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODkyQS8wQzUyNkRDRTVEREYxMUVGOEI1ODMzNjVDNEY5QUUwMi9mUmNpajBSZUdF c1VoSnZrQ1B2WjJ5bDd1QUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIfmlTRtAjxSS9ld5SbqROOFyjoOTcwlOa3MirMimhYVKb+zRLLNth x/17xrFm6VuZzSJ/TN+ScCbEWjKpLIXC+2dub5wgc4d28H7vYFzr97wHIOcPuDAw DHJAP4CVKTNLacOYzSYrh4rU/pzYUNTxVNJncrMT7NpIqKjXZ2Ejxe/frSFRRt6+ xjmJxYOugAVZ3LpYEEecSt3kKOGPCM28swFyMBngxB2yEQwhfkW44HlsrQATvpkG ajwDra4hMy5B+PGvQV3F4M+GrLDOIzI1486aWD8QMxcRgnY3Q4OOqgjTz3Lfg0m7 0jBjLlDcPqy/rhmpb79NnGr0efso2UFt -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:07 2025 by rpki-client