$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft File: iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft (raw, json) Hash identifier: QXF+psEIgk2z1gfKBVETdDBUqdEHc6MJm06oREj+D7M= Subject key identifier: 8F:2B:C0:37:97:8A:69:FA:20:C3:2B:40:99:65:4D:78:40:33:CA:93 Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5 Certificate issuer: /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5 Certificate serial: 1314 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft Manifest number: 12BB Signing time: Thu 24 Apr 2025 17:07:40 +0000 Manifest this update: Thu 24 Apr 2025 17:07:40 +0000 Manifest next update: Thu 01 May 2025 17:07:40 +0000 Files and hashes: 1: iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl (hash: fB4dL5CcHQh6vUqbk1LKcfSwG24cX/xp+bGvlAI5/Yo=) 2: C6618F98BD0511EB9BB8C97CC4F9AE02.roa (hash: MpSwwr6a+AIoc+TObg4xTyGo2LybXSMxQRZJjtl6eX0=) 3: 349FE3280DA811EBB62F0126C4F9AE02.roa (hash: P8l1FNXOYT7PgZwkM5WwT5I4kFXlU2g1aMiRVrxecW0=) 4: 1BC96D8C1BA111EA8BDD6114C4F9AE02.roa (hash: fuwDNiZ3+QLVhkbit4ZnZ+4J6WBC2B0ArdJyFk12B18=) 5: 429A130C13D811EEBE72B647C4F9AE02.roa (hash: gCSPbOmfN88YObA69zovcSPPL1AYU9CNWO0gKhcOASM=) 6: 93E44A3C2E7F11ED9AA3A30AC4F9AE02.roa (hash: CQoH7dF+prokYvHDbMofZqTT8CWUOmwoH8dvQkA7+eE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:07:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4884 (0x1314) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5 Validity Not Before: Apr 24 17:07:40 2025 GMT Not After : May 1 17:07:40 2025 GMT Subject: CN=680a6fdc-2091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:34:9b:8d:fe:73:65:a4:0b:f7:28:d9:c7:c5: 22:00:13:30:2b:19:a1:c3:42:0c:6f:4a:69:c2:f8: aa:10:56:ef:3a:89:5e:02:a7:f4:1d:6a:92:48:83: 34:50:a8:55:a6:28:10:37:12:0e:46:fa:44:e4:30: d0:7d:1e:de:2b:d1:1d:12:b2:75:8c:28:1a:6e:a4: 03:4c:93:01:a3:1b:f0:ca:51:ec:49:da:f7:77:98: 62:d0:7f:37:2c:40:1a:c2:dc:69:f4:61:28:98:b8: 58:9c:9e:14:5a:80:18:23:c9:63:e0:14:62:7c:27: 4a:3a:91:4e:c5:b7:04:01:a5:a7:4f:40:6c:54:2a: 49:69:c0:5e:bb:a3:d9:a4:3d:a1:4b:89:8e:00:ce: af:f6:3f:78:94:f0:96:b2:94:37:5f:30:38:83:a0: 3b:f2:8c:fc:5a:38:f3:09:0f:87:fc:4e:39:17:f5: 41:7d:86:06:7f:13:bd:d5:0a:14:f4:47:e3:64:d8: 3a:fa:2a:09:7e:54:26:fb:eb:78:dd:b9:bb:88:f9: f4:37:f7:0b:26:12:da:74:46:fc:9d:c6:58:d3:e9: f9:16:3d:3b:9b:55:15:e2:52:78:37:b7:d5:5f:55: e0:d6:a0:e3:c3:44:e3:36:cc:f2:fb:78:47:bc:b7: 6d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2B:C0:37:97:8A:69:FA:20:C3:2B:40:99:65:4D:78:40:33:CA:93 X509v3 Authority Key Identifier: keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:03:7c:d2:e0:f3:82:72:5d:a0:b2:e2:88:7e:0b:f5:e6:a9: f8:49:3d:b2:ec:73:15:0c:d8:5e:8c:49:e1:ed:ba:46:ae:60: 52:66:15:36:99:fa:4a:6d:2c:ba:17:c4:9d:59:ef:b3:73:83: 6c:fe:ad:35:64:33:2d:49:46:ee:14:40:7e:2e:f7:da:13:85: 4c:26:66:cf:a0:ce:a7:65:23:b6:a2:dd:a0:d0:4a:05:3a:81: ea:f0:65:31:f5:21:bd:25:8f:0a:1f:eb:f0:ef:3c:5b:a4:fa: cf:a9:f1:2d:fd:ab:a7:b8:3f:54:ee:4e:6a:cc:89:ba:6e:db: c0:bf:d6:ee:60:3f:94:dc:90:65:e4:20:32:69:de:8f:b1:94: 9c:05:b0:a9:81:c7:87:47:f5:5f:f7:10:d3:78:ba:31:6d:2f: a5:d1:dd:c5:c9:06:a5:b9:44:a6:d6:61:c1:70:a2:4f:e1:db: a6:f6:71:d3:ce:39:51:ab:9a:47:c9:a5:b4:eb:9a:df:44:a6: d2:71:72:61:95:03:36:2d:af:4b:73:62:71:c5:7d:e5:87:e0: 2a:8b:b7:25:56:c2:b5:bd:d7:79:51:75:40:56:40:bb:ba:90: 80:03:aa:ab:97:fc:ff:d7:fd:14:6c:bb:53:3f:bb:a5:3c:b2: c8:f9:dd:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICExQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDg4RDg3QjEwMkY1QzI3NzFDMzY3MDY0RTIwNDlCNjhB OTAzQzcxQjUwHhcNMjUwNDI0MTcwNzQwWhcNMjUwNTAxMTcwNzQwWjAYMRYwFAYD VQQDEw02ODBhNmZkYy0yMDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTSbjf5zZaQL9yjZx8UiABMwKxmhw0IMb0ppwviqEFbvOoleAqf0HWqSSIM0 UKhVpigQNxIORvpE5DDQfR7eK9EdErJ1jCgabqQDTJMBoxvwylHsSdr3d5hi0H83 LEAawtxp9GEomLhYnJ4UWoAYI8lj4BRifCdKOpFOxbcEAaWnT0BsVCpJacBeu6PZ pD2hS4mOAM6v9j94lPCWspQ3XzA4g6A78oz8WjjzCQ+H/E45F/VBfYYGfxO91QoU 9EfjZNg6+ioJflQm++t43bm7iPn0N/cLJhLadEb8ncZY0+n5Fj07m1UV4lJ4N7fV X1Xg1qDjw0TjNszy+3hHvLdt/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI8rwDeX imn6IMMrQJllTXhAM8qTMB8GA1UdIwQYMBaAFIjYexAvXCdxw2cGTiBJtoqQPHG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8wRTA4MkU3MkNE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9pTmg3RUM5Y0ozSERad1pPSUVtMmlwQThj YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lOaDdFQzljSjNIRFp3Wk9JRW0yaXBBOGNiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8wRTA4MkU3MkNEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9pTmg3RUM5Y0oz SERad1pPSUVtMmlwQThjYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMA3zS4POCcl2gsuKIfgv15qn4ST2y7HMVDNhejEnh7bpGrmBSZhU2 mfpKbSy6F8SdWe+zc4Ns/q01ZDMtSUbuFEB+LvfaE4VMJmbPoM6nZSO2ot2g0EoF OoHq8GUx9SG9JY8KH+vw7zxbpPrPqfEt/aunuD9U7k5qzIm6btvAv9buYD+U3JBl 5CAyad6PsZScBbCpgceHR/Vf9xDTeLoxbS+l0d3FyQaluUSm1mHBcKJP4dum9nHT zjlRq5pHyaW065rfRKbScXJhlQM2La9Lc2JxxX3lh+Aqi7clVsK1vdd5UXVAVkC7 upCAA6qrl/z/1/0UbLtTP7ulPLLI+d3R -----END CERTIFICATE-----Generated at Sat Apr 26 16:52:39 2025 by rpki-client