$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft File: cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft (raw, json) Hash identifier: CW8rXh+X4iCGXPfA4AjrPNs8VmdWQwKwsKDk+7enpuE= Subject key identifier: 0C:BD:3B:F1:7B:88:6F:CF:EC:9B:CE:8A:77:99:72:A1:BA:4A:28:2E Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F Certificate issuer: /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Certificate serial: 1309 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft Manifest number: 12B6 Signing time: Thu 24 Apr 2025 17:07:43 +0000 Manifest this update: Thu 24 Apr 2025 17:07:42 +0000 Manifest next update: Thu 01 May 2025 17:07:42 +0000 Files and hashes: 1: cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl (hash: uPMMK4xKJ1vYbr8LbbfGEqQGdoh+gLNgGQL+bmL4yJ4=) 2: 3B38CB22BA7011EA80520A63C4F9AE02.roa (hash: RkoS7hrQ2QANNm5sx/5d46X4OvIfq/xZ9DC2wpSUEMo=) 3: 2227B66CF97B11EFA2B83631C4F9AE02.roa (hash: Qmv4NznXsRfVMeI2JKAwy+QoVAJUJQXFMJng7cjxgg4=) 4: 75522B0A002B11EA855CA925C4F9AE02.roa (hash: dlzvcYSMpJJECDfUD2ttn05KUyNlgHjyRd5FKOecZPA=) 5: 6E0B5938066711EFA1505F46C4F9AE02.roa (hash: o9qMusGN5GDjUkb5guKhyMehJeu6p5DVF2ITp61z0FM=) 6: 8C163A62FD4611EE8FAE061EC4F9AE02.roa (hash: SPUciNl7sWVHesGHpuLeYdUCLi+DEMRmn3hpjUZkkzo=) 7: EB429364CA3811EE99BEB838C4F9AE02.roa (hash: CxE2LzQTUSnICEBxSLSJi2DaFZfd5DCFRNbdjbleYco=) 8: DEF977A6E53611EB81682769C4F9AE02.roa (hash: hs6gBEHf+NcXloE+gZDvY1hGrieoi7+2YWZ5lbTwNRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4873 (0x1309) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Validity Not Before: Apr 24 17:07:42 2025 GMT Not After : May 1 17:07:42 2025 GMT Subject: CN=680a6fde-3eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:04:57:e9:a0:8a:76:66:9b:18:b4:34:d9:18: ae:cf:0e:10:2e:de:d3:96:3e:fd:3e:33:c9:98:fe: 9b:81:d0:60:83:2b:ec:34:5b:6a:3e:ff:35:36:01: 91:63:4a:f7:55:71:02:6a:65:72:aa:a5:0e:27:74: 8e:0b:02:8c:ea:74:fe:10:7c:24:90:4d:5b:cd:d2: ad:12:0f:0e:34:54:e5:88:e9:bf:d1:ba:fe:eb:a1: af:97:c7:dc:50:79:b3:12:d5:02:9d:53:20:ad:1e: 7e:8b:aa:1a:55:cb:13:c1:2a:ac:29:91:7e:2a:86: db:17:0d:82:56:24:b1:35:78:18:bb:14:83:77:65: da:7e:37:e4:4f:23:c1:8f:fa:05:be:51:ff:3b:0a: 3b:7a:a1:77:b8:a4:b3:24:99:1a:19:ff:06:50:2a: f5:08:fe:82:b8:0b:99:d2:37:00:46:80:28:78:c4: b7:aa:14:e0:2f:b5:8a:d1:5e:e9:ad:96:38:19:16: bb:84:3d:4a:dc:1c:c1:95:1a:58:1f:c7:0f:b1:0b: 92:5c:68:e4:19:98:1d:d7:30:fb:cd:8e:36:e6:b4: 0c:87:f8:5b:fe:c4:54:21:95:9d:7f:c5:98:94:f6: 8d:8d:bd:26:10:be:51:cd:f6:3e:0b:d0:3e:94:de: 0b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:BD:3B:F1:7B:88:6F:CF:EC:9B:CE:8A:77:99:72:A1:BA:4A:28:2E X509v3 Authority Key Identifier: keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:3f:e2:df:19:6e:73:aa:69:8e:2c:20:64:47:a8:b0:19:4b: c4:b3:c6:31:bc:7b:f2:3a:94:0e:ee:67:04:e1:0e:f2:e6:1d: c5:18:38:fc:5f:7b:7d:52:86:e5:24:a4:1c:22:24:f3:ad:84: c2:d3:4e:6b:c4:79:9c:99:9b:ab:73:f0:9d:50:a0:05:8f:34: 55:6f:35:d8:5f:42:f6:9a:4b:27:9a:87:25:b1:cb:92:cf:da: 39:52:7f:bd:d4:4a:c8:18:8d:00:60:82:5a:53:ee:37:90:08: 99:cd:cc:de:2d:fd:97:f8:f3:51:f9:41:27:19:67:1c:0d:4d: c7:89:cb:e2:0f:d2:8e:45:4c:40:0c:fa:3d:6d:42:be:4b:78: 7f:99:0f:c4:f5:24:5e:89:95:9f:64:cf:e4:01:d2:b5:d8:61: d4:b8:94:aa:b9:f6:3e:7b:25:69:eb:0e:7b:88:3b:f3:7b:8e: 22:f2:e8:e1:dc:12:a5:53:8e:ab:e7:1c:8e:19:ef:d0:88:69: 51:4d:90:6a:fa:98:96:81:c1:f9:6e:3a:b2:51:0e:3f:a3:8b: 18:4c:b7:03:49:9e:9b:7f:97:da:79:45:b0:da:7f:2e:80:6b: f8:fc:78:64:31:f7:83:a7:1b:1b:a5:3b:20:72:50:cf:6b:92: df:af:b9:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDcxNTY1RjJEN0I5MjRDRDcyQjQ1NUI2OEI2NjcxOTQw MTBCQjFBOUYwHhcNMjUwNDI0MTcwNzQyWhcNMjUwNTAxMTcwNzQyWjAYMRYwFAYD VQQDEw02ODBhNmZkZS0zZWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywRX6aCKdmabGLQ02Riuzw4QLt7Tlj79PjPJmP6bgdBggyvsNFtqPv81NgGR Y0r3VXECamVyqqUOJ3SOCwKM6nT+EHwkkE1bzdKtEg8ONFTliOm/0br+66Gvl8fc UHmzEtUCnVMgrR5+i6oaVcsTwSqsKZF+KobbFw2CViSxNXgYuxSDd2XafjfkTyPB j/oFvlH/Owo7eqF3uKSzJJkaGf8GUCr1CP6CuAuZ0jcARoAoeMS3qhTgL7WK0V7p rZY4GRa7hD1K3BzBlRpYH8cPsQuSXGjkGZgd1zD7zY425rQMh/hb/sRUIZWdf8WY lPaNjb0mEL5RzfY+C9A+lN4LUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAy9O/F7 iG/P7JvOineZcqG6SiguMB8GA1UdIwQYMBaAFHFWXy17kkzXK0VbaLZnGUAQuxqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8xNjczMEQyMENE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1ROY3JSVnRvdG1jWlFCQzdH cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWWmZMWHVTVE5jclJWdG90bWNaUUJDN0dwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8xNjczMEQyMENEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1RO Y3JSVnRvdG1jWlFCQzdHcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbP+LfGW5zqmmOLCBkR6iwGUvEs8YxvHvyOpQO7mcE4Q7y5h3FGDj8 X3t9UoblJKQcIiTzrYTC005rxHmcmZurc/CdUKAFjzRVbzXYX0L2mksnmoclscuS z9o5Un+91ErIGI0AYIJaU+43kAiZzczeLf2X+PNR+UEnGWccDU3HicviD9KORUxA DPo9bUK+S3h/mQ/E9SReiZWfZM/kAdK12GHUuJSqufY+eyVp6w57iDvze44i8ujh 3BKlU46r5xyOGe/QiGlRTZBq+piWgcH5bjqyUQ4/o4sYTLcDSZ6bf5faeUWw2n8u gGv4/HhkMfeDpxsbpTsgclDPa5Lfr7nG -----END CERTIFICATE-----Generated at Sat Apr 26 14:19:01 2025 by rpki-client