$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft File: _knCz373vPtEQkWD30SkczIILFk.mft (raw, json) Hash identifier: gq96b1vaPJOwNorG80FMl5tYgjOyK/wqGqu+DjPMSqM= Subject key identifier: 5B:A2:D6:71:37:69:D2:74:26:D4:2F:4A:CD:18:41:AA:49:67:F1:29 Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59 Certificate issuer: /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59 Certificate serial: 061E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft Manifest number: 060C Signing time: Thu 24 Apr 2025 22:39:48 +0000 Manifest this update: Thu 24 Apr 2025 22:39:48 +0000 Manifest next update: Thu 01 May 2025 22:39:48 +0000 Files and hashes: 1: _knCz373vPtEQkWD30SkczIILFk.crl (hash: PlKGHQq5c8gJUwrJOArrJ0DtVt6jETlYerVzKxpku/4=) 2: B1C90C7A20EC11EF964FFE2CC4F9AE02.roa (hash: u+IddtnEZ3PpaS5wkgvcnMQ5NxiRiCy+krC9UIm0AEs=) 3: B2602B2820EC11EF964FFE2CC4F9AE02.roa (hash: GTvoFugBA+uCvfRWo4LUswGkHyD24NgsZWWXmqE2VNc=) 4: 6A80A1DA930011EFAF2ACC48C4F9AE02.roa (hash: z3se8A09zx2Huzx3cHt2XniXO/IZyEE/vV6YRsvSpe0=) 5: 68219776A41311EBBF911855C4F9AE02.roa (hash: ItkS9hhBxUUr7QTrdN4qhsm8OMGF5bAvi1QRQ2K74xw=) 6: 3F82CC6E234E11EFAF9F0F60C4F9AE02.roa (hash: WKwWhbPawyOzgAjOsk/HfPjPqc+lQeKAyZrRcRmfwlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1566 (0x61e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B4A3, serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59 Validity Not Before: Apr 24 22:39:48 2025 GMT Not After : May 1 22:39:48 2025 GMT Subject: CN=680abdb4-29f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6a:45:72:a8:c6:2c:e5:64:c2:83:a8:60:a9: 12:34:d8:1d:c9:ee:a4:3d:c9:b8:f7:ed:7f:13:a8: 74:6c:d8:8a:8b:35:10:5f:f0:9e:1f:d2:a3:f4:04: 9b:77:d4:39:88:fd:91:d3:ea:ea:2f:53:38:64:9c: 1f:47:70:66:df:97:e4:39:dc:2a:5b:c3:95:a4:d0: 95:e8:e0:18:e2:fe:85:f3:88:79:a7:ae:81:0e:51: a6:6a:a0:4c:62:a3:2e:23:c4:a9:33:ef:9b:d7:2e: 38:55:c5:4d:d6:11:a7:cc:a5:5d:39:ec:17:26:72: 93:26:04:04:ce:a5:97:4f:f2:6a:e6:dc:b2:b1:0f: 80:0d:7f:45:34:99:57:a4:c6:55:4d:1b:ac:9b:2a: 48:8f:96:52:93:48:6f:5c:5b:32:d9:95:3f:fc:8c: 74:d5:b2:25:19:89:0f:25:23:e7:a3:6a:51:23:a1: c4:5f:81:4a:47:eb:ce:18:1d:71:9c:d5:c9:78:ea: 0e:36:72:8f:74:4c:42:37:cb:d8:6f:85:67:b1:1c: 40:1e:9c:40:44:a5:17:bb:64:f8:13:55:4f:11:2a: 5e:a4:56:ba:30:3d:b3:ec:f8:9a:29:eb:8c:60:6d: 19:69:48:11:38:81:00:5a:5d:ca:35:11:4c:b9:49: f5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A2:D6:71:37:69:D2:74:26:D4:2F:4A:CD:18:41:AA:49:67:F1:29 X509v3 Authority Key Identifier: keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:13:af:32:2c:5e:54:f4:e6:27:b6:6c:b9:af:81:40:ce:da: f3:9a:18:d6:a8:24:e9:45:6b:9a:8b:2f:53:a8:d3:19:a1:51: 13:b6:e8:61:8e:4c:1b:b8:08:3a:94:63:ce:fc:e6:bc:66:58: db:91:c1:26:58:04:ec:a9:89:b3:44:4c:81:e9:21:4d:db:2c: 2c:b6:5f:c2:d3:74:5c:20:6a:5b:2e:cc:9d:5c:d2:5b:1a:bd: 41:9c:08:62:5b:82:18:5a:b6:13:9d:24:79:c0:59:9a:72:3d: 15:78:87:77:7b:6e:25:e6:ff:82:26:2a:af:20:b1:9d:38:cc: b2:f6:26:36:8c:c1:10:84:8a:b9:db:58:68:ec:7d:f2:60:56: 9d:0e:1e:71:4c:b7:8c:96:d4:8b:2e:a6:60:15:d4:73:a4:14: 60:b3:a1:bf:35:6f:ee:b4:ee:29:37:73:96:76:63:60:0c:7a: 06:15:65:d6:b8:22:c0:8e:81:ba:ba:b3:16:68:ca:b0:8d:17: 19:ea:bb:ac:4e:25:d6:a7:77:fb:9c:74:95:3f:69:90:c1:76: 82:11:a0:10:fe:3b:6b:80:64:19:46:06:ae:e9:a2:cf:b8:5d: 09:5e:53:f4:ca:fc:85:c5:8f:7c:1d:0a:50:06:cc:77:d1:aa: d0:56:c6:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI0QTMxMTAvBgNVBAUTKEZFNDlDMkNGN0VGN0JDRkI0NDQyNDU4M0RGNDRBNDcz MzIwODJDNTkwHhcNMjUwNDI0MjIzOTQ4WhcNMjUwNTAxMjIzOTQ4WjAYMRYwFAYD VQQDEw02ODBhYmRiNC0yOWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2pFcqjGLOVkwoOoYKkSNNgdye6kPcm49+1/E6h0bNiKizUQX/CeH9Kj9ASb d9Q5iP2R0+rqL1M4ZJwfR3Bm35fkOdwqW8OVpNCV6OAY4v6F84h5p66BDlGmaqBM YqMuI8SpM++b1y44VcVN1hGnzKVdOewXJnKTJgQEzqWXT/Jq5tyysQ+ADX9FNJlX pMZVTRusmypIj5ZSk0hvXFsy2ZU//Ix01bIlGYkPJSPno2pRI6HEX4FKR+vOGB1x nNXJeOoONnKPdExCN8vYb4VnsRxAHpxARKUXu2T4E1VPESpepFa6MD2z7PiaKeuM YG0ZaUgROIEAWl3KNRFMuUn1GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFui1nE3 adJ0JtQvSs0YQapJZ/EpMB8GA1UdIwQYMBaAFP5Jws9+97z7REJFg99EpHMyCCxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjRBMy82RDYyQzhDNEEw NDIxMUVCODFCRkZEMUZDNEY5QUUwMi9fa25DejM3M3ZQdEVRa1dEMzBTa2N6SUlM RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rbkN6MzczdlB0RVFrV0QzMFNrY3pJSUxGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjRBMy82RDYyQzhDNEEwNDIxMUVCODFCRkZEMUZDNEY5QUUwMi9fa25DejM3M3ZQ dEVRa1dEMzBTa2N6SUlMRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrE68yLF5U9OYntmy5r4FAztrzmhjWqCTpRWuaiy9TqNMZoVETtuhh jkwbuAg6lGPO/Oa8ZljbkcEmWATsqYmzREyB6SFN2ywstl/C03RcIGpbLsydXNJb Gr1BnAhiW4IYWrYTnSR5wFmacj0VeId3e24l5v+CJiqvILGdOMyy9iY2jMEQhIq5 21ho7H3yYFadDh5xTLeMltSLLqZgFdRzpBRgs6G/NW/utO4pN3OWdmNgDHoGFWXW uCLAjoG6urMWaMqwjRcZ6rusTiXWp3f7nHSVP2mQwXaCEaAQ/jtrgGQZRgau6aLP uF0JXlP0yvyFxY98HQpQBsx30arQVsbA -----END CERTIFICATE-----Generated at Sat Apr 26 13:41:03 2025 by rpki-client