$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft File: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft (raw, json) Hash identifier: mYr6jf+WMjVDL99wG7EC4Q+Lk0SA24ByJ6d6xfOZIm0= Subject key identifier: 0C:06:D1:87:FE:62:F5:6D:23:C3:36:8C:8D:55:6A:A2:31:AA:16:54 Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Certificate serial: 16E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft Manifest number: 1500 Signing time: Thu 24 Apr 2025 17:12:34 +0000 Manifest this update: Thu 24 Apr 2025 17:12:33 +0000 Manifest next update: Thu 01 May 2025 17:12:33 +0000 Files and hashes: 1: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl (hash: 9pOSn3L2MrcrucyWvM65Aybz8GiOtZ5B7KvT2d+Nz5U=) 2: 8D19F1388B3511EF99F24263C4F9AE02.roa (hash: wBFLFOE9+9EoELn+31uYK3O8RqJxSAYt3wddhgCwUNc=) 3: E3F7B966E5A811ECBE11DA6DC4F9AE02.roa (hash: Lx5JMDz+euSwXfN2bBhbtzFpbOuwQ+UGzdRfQfwqwmg=) 4: 164F6E2079BF11EAB3ADD60FC4F9AE02.roa (hash: jFWx3yosTM6Ngdos0+GDHNaOyAPdPCLeZtZ1sRgMYug=) 5: 32BF2AD8F36E11E883FFB865C4F9AE02.roa (hash: 3K7qEYTTRPaMHZTJiAeJCFj5NoW5czqKHLINeQfDKgQ=) 6: D26DDCB6F36C11E88E372D61C4F9AE02.roa (hash: p079JhzkV3DHxp4PDPvrbepGD7tngZQCKWLeyg6QpnQ=) 7: 876FDB56D90211EFB7CAB32BC4F9AE02.roa (hash: p/kEHMx8f7csUo5NBlHkAvj+aoMN4eX/IkrayOB/b3E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:12:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5862 (0x16e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BDA4, serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Validity Not Before: Apr 24 17:12:33 2025 GMT Not After : May 1 17:12:33 2025 GMT Subject: CN=680a7102-48cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:74:7d:89:3a:31:fe:aa:e3:24:42:81:86:e4: b7:86:92:4e:5a:49:7b:75:2f:6c:22:aa:46:e0:5e: 3d:fe:53:ba:0c:15:db:11:a8:b1:c7:d7:7b:22:8d: d2:e4:8a:15:45:de:0e:fe:5b:30:d3:b5:a4:6f:35: 99:5c:52:fe:99:79:81:49:37:93:20:b5:27:a8:93: 79:4d:42:36:8b:c6:a8:fb:4a:25:9f:aa:8c:08:3f: e9:e3:52:df:08:d8:61:a0:92:26:c2:5d:35:51:eb: 2b:fb:00:bf:0a:0f:46:3d:44:ef:79:2c:85:a1:e0: 6c:79:1f:1c:f6:f1:7a:32:18:47:a6:b4:af:e0:00: 6b:4b:66:b8:e2:f1:65:d7:0b:65:5f:b5:5b:23:6a: 24:e5:09:01:16:4e:1b:b4:b6:55:52:94:04:f8:9d: 53:06:40:d0:e4:b4:a0:d4:50:30:e2:3e:88:27:02: 68:b8:df:0c:5d:14:b7:d3:bd:8b:ec:23:3a:00:bd: cd:17:78:a2:c9:1b:ba:9b:98:92:17:ca:a1:db:ea: ba:9a:af:ee:5e:4e:df:5c:f7:94:80:01:85:0b:3a: c1:32:29:b9:e8:13:13:31:e9:c2:b4:27:fc:89:be: 6c:1e:18:f0:fd:96:8b:ee:94:ab:b1:e6:6d:ec:6b: e2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:06:D1:87:FE:62:F5:6D:23:C3:36:8C:8D:55:6A:A2:31:AA:16:54 X509v3 Authority Key Identifier: keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:8a:2c:bb:0b:67:eb:ca:a1:c9:66:be:bb:4d:c3:ca:4c:31: 8b:6d:5c:5d:b5:ac:ed:56:ed:33:6c:8d:b8:a0:3a:06:7d:0b: f1:da:5b:9e:8d:e6:6b:f5:77:03:76:51:52:a5:54:77:8a:17: 4e:54:ef:95:0d:e9:4a:6c:9f:97:1a:39:5a:b5:f8:51:a7:c1: 07:25:50:d2:2d:21:99:7c:e1:b9:b4:99:4c:d9:42:63:0f:8c: 25:1d:e4:de:02:af:12:18:b8:17:02:32:99:1b:cb:78:13:e1: 93:19:55:ca:f3:f4:cd:17:ff:ae:28:7b:9e:03:85:84:c0:6e: 20:d5:0a:ff:ca:62:ac:54:66:cd:f8:15:f8:67:8a:5f:3c:18: b9:eb:03:cb:74:03:78:81:b2:ae:de:6d:49:0d:7b:73:b2:53: bb:8c:30:b0:c5:1e:6d:06:10:5b:82:92:fc:55:13:bc:cf:51: 9b:82:74:95:de:41:ec:6a:a8:49:02:7a:93:43:36:5e:32:5c: 9d:67:8d:f8:3b:69:a8:b8:e2:56:db:e8:3c:4e:a4:3f:7c:4a: f7:a2:46:91:13:61:e7:1c:28:09:3e:e9:f9:45:2a:cc:ba:1c: 66:da:96:be:7e:d9:8a:f2:17:63:84:bf:cd:c7:20:b9:0c:71: a3:a2:cf:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4 NTQwNjY0NDQwHhcNMjUwNDI0MTcxMjMzWhcNMjUwNTAxMTcxMjMzWjAYMRYwFAYD VQQDEw02ODBhNzEwMi00OGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnR9iTox/qrjJEKBhuS3hpJOWkl7dS9sIqpG4F49/lO6DBXbEaixx9d7Io3S 5IoVRd4O/lsw07WkbzWZXFL+mXmBSTeTILUnqJN5TUI2i8ao+0oln6qMCD/p41Lf CNhhoJImwl01Uesr+wC/Cg9GPUTveSyFoeBseR8c9vF6MhhHprSv4ABrS2a44vFl 1wtlX7VbI2ok5QkBFk4btLZVUpQE+J1TBkDQ5LSg1FAw4j6IJwJouN8MXRS3072L 7CM6AL3NF3iiyRu6m5iSF8qh2+q6mq/uXk7fXPeUgAGFCzrBMim56BMTMenCtCf8 ib5sHhjw/ZaL7pSrseZt7GvilwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwG0Yf+ YvVtI8M2jI1VaqIxqhZUMB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkRBNC8xRUM3MDJCQ0YxQTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNO ejNaTjhMbWtEVDZGUUdaRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXiiy7C2fryqHJZr67TcPKTDGLbVxdtaztVu0zbI24oDoGfQvx2lue jeZr9XcDdlFSpVR3ihdOVO+VDelKbJ+XGjlatfhRp8EHJVDSLSGZfOG5tJlM2UJj D4wlHeTeAq8SGLgXAjKZG8t4E+GTGVXK8/TNF/+uKHueA4WEwG4g1Qr/ymKsVGbN +BX4Z4pfPBi56wPLdAN4gbKu3m1JDXtzslO7jDCwxR5tBhBbgpL8VRO8z1GbgnSV 3kHsaqhJAnqTQzZeMlydZ434O2mouOJW2+g8TqQ/fEr3okaRE2HnHCgJPun5RSrM uhxm2pa+ftmK8hdjhL/NxyC5DHGjos/1 -----END CERTIFICATE-----Generated at Sat Apr 26 14:12:50 2025 by rpki-client