$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft File: rwJRH3yA38Do7VBvZjD2e9ZADgk.mft (raw, json) Hash identifier: yauspFLa/MmUHcNnbtHXgG2dWd2WZ69syH5y25fx83o= Subject key identifier: 6C:80:58:F8:AC:3F:AB:CE:90:4F:1B:D0:A8:3C:A0:A6:E2:8A:3F:C2 Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Certificate serial: 1409 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft Manifest number: 13F6 Signing time: Thu 24 Apr 2025 16:57:23 +0000 Manifest this update: Thu 24 Apr 2025 16:57:22 +0000 Manifest next update: Thu 01 May 2025 16:57:22 +0000 Files and hashes: 1: rwJRH3yA38Do7VBvZjD2e9ZADgk.crl (hash: 4g6KFrb2VwOatkZWAmQijkPOn6jmmuyvUbnpO84M/7s=) 2: 4C6227D2B69B11EFA181E00AC4F9AE02.roa (hash: 3UDqux2pyFF/Bk7qZfNBKUplKVtNPBgZPpnXk8snk4g=) 3: 26F19BD2EFFE11EDA34BD84DC4F9AE02.roa (hash: OwQjzjq4z1p3OKHRKYKyS/M55XVWZ+v6tClUy+yiWnc=) 4: 7F444842C3A411ED8EFA6F13C4F9AE02.roa (hash: PdnkTM08eG2sjPAy8+yW/MtnozIOdAkbD6OPtta7i0w=) 5: 7EA2ADC0C3A411ED8EFA6F13C4F9AE02.roa (hash: TNsMJFZbcdKegim5sz+iSFbDGvmlLTbjneRhrtC2NlE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5129 (0x1409) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Validity Not Before: Apr 24 16:57:22 2025 GMT Not After : May 1 16:57:22 2025 GMT Subject: CN=680a6d73-4816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:c3:11:ad:7f:f6:71:f9:49:6a:5b:5e:28: b2:e2:5c:8b:0c:74:bf:e2:9d:bc:d8:41:34:7e:e7: 6b:c7:47:e5:02:58:8c:63:79:19:ff:e1:8d:ea:8f: 2a:50:f2:c1:58:ac:5e:98:ba:2f:5c:aa:f9:80:af: d1:48:de:55:b5:e9:0f:d6:bc:e4:73:50:ab:a2:6e: ac:84:bb:36:3a:da:ad:bc:2b:b3:92:93:ba:94:04: 09:5e:82:b4:f3:39:83:e6:4a:a8:e1:01:43:5e:ff: a7:d1:bb:00:6a:b3:96:c1:28:d7:25:c5:85:ae:17: 69:03:28:10:d8:eb:88:07:25:d2:59:cc:8c:57:0c: d4:82:9b:29:b0:81:38:05:1e:33:a5:ed:4b:e9:b5: 55:48:d9:15:67:0b:37:8b:2f:f1:58:4d:48:51:4f: 72:4e:c0:fa:28:0b:74:c4:92:63:3a:72:51:79:81: d6:af:69:0d:e7:2a:ff:d6:38:07:52:09:ec:97:3b: 83:54:64:65:95:ef:df:d4:51:f2:6e:70:36:e3:02: 7a:fa:6e:7e:3f:32:c5:b6:9a:06:b0:33:c2:90:06: c3:3c:75:b6:f9:3f:af:6a:9d:da:c6:ac:ea:98:8f: 75:07:70:49:35:0a:3f:54:f9:83:23:f4:57:fd:eb: 37:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:80:58:F8:AC:3F:AB:CE:90:4F:1B:D0:A8:3C:A0:A6:E2:8A:3F:C2 X509v3 Authority Key Identifier: keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:5e:a7:6a:26:03:1a:b2:35:65:15:ae:d2:14:bc:73:23:7e: c5:b2:c7:44:bc:e3:d5:ca:65:c6:59:da:35:3d:0e:51:71:e0: 7c:29:a1:9b:59:5f:34:c9:51:a0:5f:a9:e3:8c:13:e3:b3:f1: 31:d3:20:fb:b0:8e:31:49:a7:9f:df:bf:49:e1:14:37:ad:01: 03:fa:15:92:31:c0:bb:7c:6d:1d:cf:42:e3:7b:f6:bd:dd:6e: 06:05:68:77:6d:e3:b2:48:68:ea:36:12:4f:ea:f8:61:57:5e: 1e:40:fb:85:91:55:64:73:7d:40:34:0d:a4:d8:09:10:e5:6d: e3:d7:cf:a0:5c:2d:db:76:78:1d:73:ec:64:15:09:79:31:74: de:b9:29:69:ba:ee:77:01:85:87:dd:5f:b5:eb:07:58:fd:b9: 36:51:7d:d4:92:ad:20:6a:6a:8b:42:47:bd:bf:8f:ca:a9:52: db:ea:d9:be:88:aa:5f:98:c2:ea:4a:89:3d:80:e8:95:9a:8f: 5f:51:65:2f:40:9a:a6:21:d2:1b:f1:4d:22:fd:46:44:7a:e8: cb:c0:74:db:fc:6f:bd:5f:87:74:f0:af:34:99:4c:62:7b:43: 01:ac:d6:15:07:98:9c:b8:bb:13:df:0d:1a:f8:3e:8a:d6:07: a8:9c:0b:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC RDY0MDBFMDkwHhcNMjUwNDI0MTY1NzIyWhcNMjUwNTAxMTY1NzIyWjAYMRYwFAYD VQQDEw02ODBhNmQ3My00ODE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwy/DEa1/9nH5SWpbXiiy4lyLDHS/4p282EE0fudrx0flAliMY3kZ/+GN6o8q UPLBWKxemLovXKr5gK/RSN5VtekP1rzkc1Crom6shLs2OtqtvCuzkpO6lAQJXoK0 8zmD5kqo4QFDXv+n0bsAarOWwSjXJcWFrhdpAygQ2OuIByXSWcyMVwzUgpspsIE4 BR4zpe1L6bVVSNkVZws3iy/xWE1IUU9yTsD6KAt0xJJjOnJReYHWr2kN5yr/1jgH UgnslzuDVGRlle/f1FHybnA24wJ6+m5+PzLFtpoGsDPCkAbDPHW2+T+vap3axqzq mI91B3BJNQo/VPmDI/RX/es3jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyAWPis P6vOkE8b0Kg8oKbiij/CMB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEI0QS8wQURCMTdDMDgwMEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4 RG83VkJ2WmpEMmU5WkFEZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTXqdqJgMasjVlFa7SFLxzI37FssdEvOPVymXGWdo1PQ5RceB8KaGb WV80yVGgX6njjBPjs/Ex0yD7sI4xSaef379J4RQ3rQED+hWSMcC7fG0dz0Lje/a9 3W4GBWh3beOySGjqNhJP6vhhV14eQPuFkVVkc31ANA2k2AkQ5W3j18+gXC3bdngd c+xkFQl5MXTeuSlpuu53AYWH3V+16wdY/bk2UX3Ukq0gamqLQke9v4/KqVLb6tm+ iKpfmMLqSok9gOiVmo9fUWUvQJqmIdIb8U0i/UZEeujLwHTb/G+9X4d08K80mUxi e0MBrNYVB5icuLsT3w0a+D6K1geonAs7 -----END CERTIFICATE-----Generated at Sat Apr 26 13:01:13 2025 by rpki-client