$ rpki-client -vvf rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft File: 0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft (raw, json) Hash identifier: OeN1QdZyvJXzrrWEzF/DUfVsdcq7dvAC0ac+8LeD8Sk= Subject key identifier: F3:9D:6E:A3:F0:B1:E5:D8:6F:C9:16:C1:F6:4B:90:EC:13:7B:2F:68 Authority key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC Certificate issuer: /CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC Certificate serial: 188A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft Manifest number: 1824 Signing time: Thu 24 Apr 2025 16:34:14 +0000 Manifest this update: Thu 24 Apr 2025 16:34:14 +0000 Manifest next update: Thu 01 May 2025 16:34:14 +0000 Files and hashes: 1: 0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl (hash: PISDI7EQ1KBnPWPfdrjLIbBAvoUJfk9v+ekwGrEugL8=) 2: B6928054843011EAB4270B83C4F9AE02.roa (hash: AfFQg7J3TlHD2s+ga44OATb388/m/bM7kWgvzaZnkvM=) 3: A108D60CF92E11EA8946AD6AC4F9AE02.roa (hash: P+ojUz12doT6YBWDAEohI7M/ZBVLVfv2zRK1JgxRWZI=) 4: A084D2B2F92E11EA8946AD6AC4F9AE02.roa (hash: 3WTQb9InUjzjpsYZoB/tC2okIAQpQba8dHrj64ClTNk=) 5: B5629336843011EAB4270B83C4F9AE02.roa (hash: brcGrznN7YUOque7HNGJe/GAZIGkw+wWBsFfKknawHM=) 6: E3ED0E12882611EAA5182C45C4F9AE02.roa (hash: xoiu9gu24j0V9ox4CMyHbYzSi+kjbvuhulCbW4bW+zw=) 7: B728544E843011EAB4270B83C4F9AE02.roa (hash: HHabCzaN7G1jH6qYRUCZ3UjwnhtlDwTdKNnKhWcX5tc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:34:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6282 (0x188a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B33E, serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC Validity Not Before: Apr 24 16:34:14 2025 GMT Not After : May 1 16:34:14 2025 GMT Subject: CN=680a6806-c5a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c4:a0:3a:8f:db:6a:f9:94:d0:da:e2:bd:06: 1e:bf:05:92:e1:9e:28:99:e4:19:41:c6:04:8d:8e: b8:ab:32:b0:8b:a7:82:4c:a6:e6:69:45:7e:61:80: 5c:1e:82:f7:41:94:38:7c:2a:d2:19:ec:d8:dc:70: 7b:f2:bb:aa:84:c7:eb:10:18:4f:41:f7:1c:ad:85: 9e:6f:31:c2:69:67:d0:af:e5:68:dd:ff:69:b4:49: c2:a6:2f:68:44:df:dc:e4:46:17:4d:43:4a:9e:85: 8d:97:16:29:27:91:76:e1:66:63:cf:c3:a0:c4:37: 51:89:cc:d3:45:e1:7f:80:95:a8:4c:87:fa:71:5a: b3:b1:d2:3e:03:62:10:c2:17:b0:9f:56:ea:ca:ba: da:0c:5f:95:36:35:7e:28:f5:48:48:07:b2:f1:39: a8:e5:19:85:02:da:57:75:3b:3d:c8:78:fe:c1:b5: 0e:59:cd:2e:03:25:5d:70:1c:58:37:6a:3f:c9:64: a1:4d:39:06:df:0a:11:31:ea:da:9f:85:52:bf:8f: 85:a2:e5:d2:df:66:1c:55:d0:64:12:9c:78:77:71: 03:85:29:57:e7:6d:e3:7c:08:64:76:89:a0:6d:59: d2:08:47:94:b5:d1:5e:2b:5b:d0:1e:65:e8:3b:db: ec:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9D:6E:A3:F0:B1:E5:D8:6F:C9:16:C1:F6:4B:90:EC:13:7B:2F:68 X509v3 Authority Key Identifier: keyid:D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:b9:e9:f9:d7:c0:42:27:54:d9:3c:2d:86:b1:4e:f3:84:a0: 4c:d7:d0:2b:dd:7a:d2:4a:50:8d:cc:bb:61:22:c2:36:fa:cf: af:7a:10:4b:a3:c3:c9:ed:20:d3:4c:62:bd:47:49:50:b9:50: 69:c7:7a:8c:a9:58:41:12:d0:8a:b3:d7:e4:a2:40:ee:af:fa: f1:be:0d:de:55:b1:88:d2:06:9e:f8:e7:f1:5d:93:32:95:ab: dd:b9:89:57:ec:6c:ae:32:24:8d:63:06:d3:03:24:7d:a1:36: 4b:da:3d:13:cd:be:0e:6e:66:db:14:d5:9d:b7:09:36:e5:38: 91:11:df:9d:f8:61:7f:e8:19:ce:91:9e:b9:a0:42:dc:62:7b: 0b:c8:1a:b6:0c:54:34:0b:e9:9e:1e:83:e1:4b:3c:0d:0a:5c: 73:ac:56:09:ee:53:d4:4d:1d:50:b3:26:3c:da:fc:ed:0a:0f: 46:78:52:73:c5:91:be:67:39:6e:ae:d6:ef:a2:13:d3:ec:dc: ab:eb:52:f1:3c:2c:6b:70:2a:12:29:f1:62:54:0b:54:21:aa: 11:90:7d:08:fb:f5:13:d6:02:a3:61:1d:47:49:5c:c3:79:df: 0f:ab:7a:0a:0e:df:91:d2:02:18:5b:ae:4e:48:84:40:55:67: ec:9a:12:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIzM0UxMTAvBgNVBAUTKEQwMDcyRURFQjY3RTE3NTJBQjc1MjI2M0E0RkQ5NDUw REQzQTMzRUMwHhcNMjUwNDI0MTYzNDE0WhcNMjUwNTAxMTYzNDE0WjAYMRYwFAYD VQQDEw02ODBhNjgwNi1jNWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8SgOo/bavmU0NrivQYevwWS4Z4omeQZQcYEjY64qzKwi6eCTKbmaUV+YYBc HoL3QZQ4fCrSGezY3HB78ruqhMfrEBhPQfccrYWebzHCaWfQr+Vo3f9ptEnCpi9o RN/c5EYXTUNKnoWNlxYpJ5F24WZjz8OgxDdRiczTReF/gJWoTIf6cVqzsdI+A2IQ whewn1bqyrraDF+VNjV+KPVISAey8Tmo5RmFAtpXdTs9yHj+wbUOWc0uAyVdcBxY N2o/yWShTTkG3woRMeran4VSv4+FouXS32YcVdBkEpx4d3EDhSlX523jfAhkdomg bVnSCEeUtdFeK1vQHmXoO9vsDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPOdbqPw seXYb8kWwfZLkOwTey9oMB8GA1UdIwQYMBaAFNAHLt62fhdSq3UiY6T9lFDdOjPs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjMzRS8yRjY2QjU3QUI4 M0UxMUU3QTAxRDY2NTBDNEY5QUUwMi8wQWN1M3JaLUYxS3JkU0pqcFAyVVVOMDZN LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBBY3UzclotRjFLcmRTSmpwUDJVVU4wNk0tdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjMzRS8yRjY2QjU3QUI4M0UxMUU3QTAxRDY2NTBDNEY5QUUwMi8wQWN1M3JaLUYx S3JkU0pqcFAyVVVOMDZNLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXuen518BCJ1TZPC2GsU7zhKBM19Ar3XrSSlCNzLthIsI2+s+vehBL o8PJ7SDTTGK9R0lQuVBpx3qMqVhBEtCKs9fkokDur/rxvg3eVbGI0gae+OfxXZMy lavduYlX7GyuMiSNYwbTAyR9oTZL2j0Tzb4ObmbbFNWdtwk25TiREd+d+GF/6BnO kZ65oELcYnsLyBq2DFQ0C+meHoPhSzwNClxzrFYJ7lPUTR1QsyY82vztCg9GeFJz xZG+ZzlurtbvohPT7Nyr61LxPCxrcCoSKfFiVAtUIaoRkH0I+/UT1gKjYR1HSVzD ed8Pq3oKDt+R0gIYW65OSIRAVWfsmhJU -----END CERTIFICATE-----Generated at Sat Apr 26 12:28:39 2025 by rpki-client