$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft File: No88k4tgFBJSGjqBkAmXj8_pHn4.mft (raw, json) Hash identifier: yR5qBqVhGQc8lTcjlZ16fdYpcYEMocdHW7ujqKpmohU= Subject key identifier: 52:08:08:F6:AA:0E:0C:A6:2E:99:53:B1:1C:86:72:4B:31:30:60:60 Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E Certificate issuer: /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Certificate serial: 171D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft Manifest number: 1689 Signing time: Thu 24 Apr 2025 16:38:26 +0000 Manifest this update: Thu 24 Apr 2025 16:38:26 +0000 Manifest next update: Thu 01 May 2025 16:38:26 +0000 Files and hashes: 1: No88k4tgFBJSGjqBkAmXj8_pHn4.crl (hash: BYdyuNTxv0Wzkt2i0fRKRtMu8UmlVgqtEAmp9B2IEXk=) 2: 986FA3843F8F11EBA86B1F11C4F9AE02.roa (hash: g4ujWaFHIUcsfNfe71CuG/s3pHzpyQSa/LcK8feuuHQ=) 3: 760F20A2439411EDA0D65E77C4F9AE02.roa (hash: dHZjnobEWvCkJLuRIvZrVbscT5l1hAVdVQPJ8ZrvrKU=) 4: B1D95AEA7F9B11EFBF8E2428C4F9AE02.roa (hash: sMHf6txMDCRkbETYziOSHh9e7HXzX/o0di2YbApGnvs=) 5: EC065A52C28D11EBBCABCA6CC4F9AE02.roa (hash: uPpnoQZGZKxbY1tDf1IppgOlALrQMUGFd/gQhZLvnlg=) 6: F053A1CAC28B11EBBF310469C4F9AE02.roa (hash: o4sVUAvBbfXlH+Fkt0MhUocTngit2NpPuryfYPu2kLw=) 7: 38A5FCB48FC911E8902DFE16C4F9AE02.roa (hash: NWWiuwLgl9RwlWRS8BInX5D7zCXvjEBWjuBg9LiZans=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5917 (0x171d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B18B, serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Validity Not Before: Apr 24 16:38:26 2025 GMT Not After : May 1 16:38:26 2025 GMT Subject: CN=680a6902-f639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b6:59:d4:d7:b9:92:c8:de:9d:c1:f3:b0:da: bb:d3:c1:bd:6e:41:b3:44:91:63:ea:5b:75:b6:68: 3e:7f:06:7d:d1:2b:fc:21:b8:69:b1:15:59:89:1e: 3b:43:09:8f:ac:9e:96:e7:27:cb:fc:a1:17:af:47: 1f:8e:6e:17:c2:78:29:15:7a:a9:0f:9b:f0:4c:e9: 2b:af:a3:4e:ca:7e:5e:53:54:e6:8f:02:23:fa:17: 60:b5:b9:ba:c7:75:7e:70:16:b3:73:e1:74:9b:ee: 71:b9:12:5a:2f:6e:28:2c:93:e6:4b:49:b3:61:da: 45:cb:c9:c3:ae:72:77:99:a7:aa:53:0a:0c:89:66: 19:34:92:49:4c:76:fc:9d:ba:4c:65:91:53:1f:9b: 0d:f5:c2:c7:c2:81:f3:9c:5c:73:9b:d7:0b:c8:84: cb:b9:99:27:97:54:24:e8:31:f5:40:3d:bc:0d:fb: 80:0f:83:3f:09:14:47:a0:11:6c:68:af:94:74:cb: 83:54:52:f4:2d:79:02:5b:d8:e8:c9:22:39:42:69: 53:8a:9a:e6:98:ee:8d:fe:03:43:b3:ca:11:97:ff: ef:3e:7b:34:e5:7d:73:41:9b:94:4d:db:58:fb:54: d0:46:2b:3a:93:d7:6c:87:b3:fb:56:eb:71:0f:8a: 22:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:08:08:F6:AA:0E:0C:A6:2E:99:53:B1:1C:86:72:4B:31:30:60:60 X509v3 Authority Key Identifier: keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:17:71:8f:35:56:94:7b:cf:33:73:0b:ff:bb:b5:39:f7:99: f7:d7:50:c9:3a:2b:23:f8:5d:fd:84:c8:47:bc:62:08:99:63: ad:68:d6:fc:ea:a3:5c:b2:f1:de:aa:ec:52:33:ce:5c:9b:ee: d0:a6:dc:c5:90:fd:67:59:e4:ac:67:38:9f:b2:06:57:a0:60: 9e:87:4b:ca:2c:3f:89:8a:6d:26:67:8a:85:d8:e0:16:12:1b: f7:af:d8:58:92:f0:34:2e:ca:4c:47:a4:df:d3:2e:b8:1b:e3: 1f:1a:25:3e:48:a6:c4:26:36:df:19:31:b1:7d:50:c4:5d:e7: 80:cf:54:20:70:1b:20:d4:8b:16:d1:da:3d:ac:ff:f2:cc:ac: 7f:28:66:05:86:70:df:a8:20:e4:3b:52:b9:16:15:01:a8:ba: dd:39:21:c8:7f:38:d7:21:db:49:3e:88:6d:8b:bc:a1:ae:ff: e9:95:5d:a1:ae:ca:37:cf:f9:b2:c7:09:12:3d:ee:e0:fe:34: c8:51:fc:2f:e8:17:a3:7a:8c:d5:5a:44:57:67:49:52:f0:14: 00:57:62:38:11:f0:57:8d:5a:e2:dc:ad:21:68:de:f4:53:80: 87:e2:69:bb:f8:83:c1:2f:b5:73:5f:11:b5:a6:d4:37:0a:24: d4:86:5c:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxOEIxMTAvBgNVBAUTKDM2OEYzQzkzOEI2MDE0MTI1MjFBM0E4MTkwMDk5NzhG Q0ZFOTFFN0UwHhcNMjUwNDI0MTYzODI2WhcNMjUwNTAxMTYzODI2WjAYMRYwFAYD VQQDEw02ODBhNjkwMi1mNjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9LZZ1Ne5ksjencHzsNq708G9bkGzRJFj6lt1tmg+fwZ90Sv8IbhpsRVZiR47 QwmPrJ6W5yfL/KEXr0cfjm4XwngpFXqpD5vwTOkrr6NOyn5eU1TmjwIj+hdgtbm6 x3V+cBazc+F0m+5xuRJaL24oLJPmS0mzYdpFy8nDrnJ3maeqUwoMiWYZNJJJTHb8 nbpMZZFTH5sN9cLHwoHznFxzm9cLyITLuZknl1Qk6DH1QD28DfuAD4M/CRRHoBFs aK+UdMuDVFL0LXkCW9joySI5QmlTiprmmO6N/gNDs8oRl//vPns05X1zQZuUTdtY +1TQRis6k9dsh7P7VutxD4oipQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFIICPaq DgymLplTsRyGcksxMGBgMB8GA1UdIwQYMBaAFDaPPJOLYBQSUho6gZAJl4/P6R5+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE4Qi9GOThCNUYwQzIx RjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZCSlNHanFCa0FtWGo4X3BI bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05vODhrNHRnRkJKU0dqcUJrQW1YajhfcEhuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjE4Qi9GOThCNUYwQzIxRjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZC SlNHanFCa0FtWGo4X3BIbjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0F3GPNVaUe88zcwv/u7U595n311DJOisj+F39hMhHvGIImWOtaNb8 6qNcsvHequxSM85cm+7QptzFkP1nWeSsZzifsgZXoGCeh0vKLD+Jim0mZ4qF2OAW Ehv3r9hYkvA0LspMR6Tf0y64G+MfGiU+SKbEJjbfGTGxfVDEXeeAz1QgcBsg1IsW 0do9rP/yzKx/KGYFhnDfqCDkO1K5FhUBqLrdOSHIfzjXIdtJPohti7yhrv/plV2h rso3z/myxwkSPe7g/jTIUfwv6BejeozVWkRXZ0lS8BQAV2I4EfBXjVri3K0haN70 U4CH4mm7+IPBL7VzXxG1ptQ3CiTUhlyp -----END CERTIFICATE-----Generated at Sat Apr 26 16:39:36 2025 by rpki-client