$ rpki-client -vvf rpki.apnic.net/member_repository/A916D547/15B0199E093311EAA79E491AC4F9AE02/-V6w5_mnqDfmxExu_hvZAZWJfy0.mft File: -V6w5_mnqDfmxExu_hvZAZWJfy0.mft (raw, json) Hash identifier: UNlVGxxk7p1E7zHNLh9p50MH7D8kad0IR4sjK50qfA4= Subject key identifier: 4B:1B:59:AC:F9:26:CF:7D:70:63:DF:7B:BA:B2:3E:93:64:FA:66:66 Authority key identifier: F9:5E:B0:E7:F9:A7:A8:37:E6:C4:4C:6E:FE:1B:D9:01:95:89:7F:2D Certificate issuer: /CN=A916D547/serialNumber=F95EB0E7F9A7A837E6C44C6EFE1BD90195897F2D Certificate serial: 0C28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-V6w5_mnqDfmxExu_hvZAZWJfy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D547/15B0199E093311EAA79E491AC4F9AE02/-V6w5_mnqDfmxExu_hvZAZWJfy0.mft Manifest number: 0C1F Signing time: Thu 24 Apr 2025 18:30:54 +0000 Manifest this update: Thu 24 Apr 2025 18:30:53 +0000 Manifest next update: Thu 01 May 2025 18:30:53 +0000 Files and hashes: 1: -V6w5_mnqDfmxExu_hvZAZWJfy0.crl (hash: 9ciNnDe1VRE5jzuGZyh9BwtLJNQtuiT+IgKTYu3Z4Qw=) 2: A9E0680E094611EAADB2B84EC4F9AE02.roa (hash: 8//BDS13Y3iVQVjH+Axq/ZzqcxPoJLSnLMJC37FONIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D547/15B0199E093311EAA79E491AC4F9AE02/-V6w5_mnqDfmxExu_hvZAZWJfy0.crl rsync://rpki.apnic.net/member_repository/A916D547/15B0199E093311EAA79E491AC4F9AE02/-V6w5_mnqDfmxExu_hvZAZWJfy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-V6w5_mnqDfmxExu_hvZAZWJfy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:30:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3112 (0xc28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D547, serialNumber=F95EB0E7F9A7A837E6C44C6EFE1BD90195897F2D Validity Not Before: Apr 24 18:30:53 2025 GMT Not After : May 1 18:30:53 2025 GMT Subject: CN=680a835d-7298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ad:2f:40:29:36:5b:42:d0:36:63:10:70:2c: 01:ba:5e:2d:8a:6f:78:36:ed:b9:e5:06:d3:df:f4: 59:b8:1c:bb:1d:d7:af:2e:10:7e:c3:68:14:43:7e: 81:7f:5c:41:8a:70:7a:33:34:a2:8d:28:b9:32:6f: e0:28:e6:5f:e2:96:a6:ab:34:b2:2f:79:dd:db:36: 63:5e:a8:30:f5:42:33:b5:21:bb:6d:90:dc:f3:37: dc:9f:02:ce:17:58:2f:64:fd:ca:03:91:82:89:4f: 83:79:38:b1:30:22:be:36:89:6a:40:34:1e:4b:d9: 40:3e:1f:72:fd:bf:10:3e:9b:cc:3a:5b:a3:2e:1b: 4b:d3:ac:5a:47:53:38:02:fc:7a:68:fa:ee:e2:54: 69:16:9a:e7:cb:06:fb:27:29:4b:cd:b7:d2:e0:05: d0:7b:10:ec:cc:94:eb:4e:15:78:ad:36:e4:14:3c: 0b:c0:11:1a:68:05:a1:f7:09:0a:b2:43:76:a2:fa: d9:15:db:01:f6:9d:cf:45:26:71:f7:30:82:fb:f0: 9e:68:08:67:4d:b4:cf:61:4a:84:2e:89:e4:e4:96: 87:89:4b:1f:8d:26:b3:c5:1a:0b:43:c6:c6:c5:08: de:fe:1a:83:2e:a6:6e:1a:de:ab:b5:3c:47:eb:84: 3f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:1B:59:AC:F9:26:CF:7D:70:63:DF:7B:BA:B2:3E:93:64:FA:66:66 X509v3 Authority Key Identifier: keyid:F9:5E:B0:E7:F9:A7:A8:37:E6:C4:4C:6E:FE:1B:D9:01:95:89:7F:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D547/15B0199E093311EAA79E491AC4F9AE02/-V6w5_mnqDfmxExu_hvZAZWJfy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-V6w5_mnqDfmxExu_hvZAZWJfy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D547/15B0199E093311EAA79E491AC4F9AE02/-V6w5_mnqDfmxExu_hvZAZWJfy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:e1:ff:ff:d4:fd:88:d3:5f:67:0f:83:0d:d3:a6:64:03:1d: cb:77:6b:b5:ad:b2:60:47:1a:73:bd:12:c6:e9:db:ae:bd:54: 93:2c:9a:05:92:22:d6:b7:de:5e:40:f6:66:eb:3c:bf:3f:56: 7d:8a:4b:50:01:b2:7e:12:9b:b9:71:26:0b:b0:13:38:45:b7: 53:62:7e:53:7c:7e:8b:be:64:a3:96:31:7b:67:af:71:bb:3a: 28:fa:02:5a:d0:71:64:8d:74:8f:fe:65:dc:b7:42:ac:fc:57: ae:c2:5d:18:10:3a:fd:77:2c:1b:4c:f2:f4:83:c0:9f:2e:75: fe:45:49:9a:33:7d:86:85:a1:2f:5a:80:83:e2:c3:6a:18:8d: d9:ef:14:c7:e3:2a:72:6b:38:5a:04:69:47:47:8b:ad:8a:df: 31:21:2a:11:cd:7d:bd:ae:59:16:a8:6c:4f:62:f0:56:b7:2f: d1:de:19:0c:79:5e:63:9e:80:cf:21:4e:0d:04:eb:ad:04:d6: 2e:3b:d7:b2:ab:14:1c:83:39:3f:84:72:88:ed:97:a5:bb:71: 1b:2a:b2:4f:29:50:51:76:53:86:74:e0:0c:75:c6:84:64:5f: 24:75:2d:15:0f:93:dc:cd:88:12:49:5d:53:14:6e:24:79:98: d8:81:8d:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ1NDcxMTAvBgNVBAUTKEY5NUVCMEU3RjlBN0E4MzdFNkM0NEM2RUZFMUJEOTAx OTU4OTdGMkQwHhcNMjUwNDI0MTgzMDUzWhcNMjUwNTAxMTgzMDUzWjAYMRYwFAYD VQQDEw02ODBhODM1ZC03Mjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu60vQCk2W0LQNmMQcCwBul4tim94Nu255QbT3/RZuBy7HdevLhB+w2gUQ36B f1xBinB6MzSijSi5Mm/gKOZf4pamqzSyL3nd2zZjXqgw9UIztSG7bZDc8zfcnwLO F1gvZP3KA5GCiU+DeTixMCK+NolqQDQeS9lAPh9y/b8QPpvMOlujLhtL06xaR1M4 Avx6aPru4lRpFprnywb7JylLzbfS4AXQexDszJTrThV4rTbkFDwLwBEaaAWh9wkK skN2ovrZFdsB9p3PRSZx9zCC+/CeaAhnTbTPYUqELonk5JaHiUsfjSazxRoLQ8bG xQje/hqDLqZuGt6rtTxH64Q/gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsbWaz5 Js99cGPfe7qyPpNk+mZmMB8GA1UdIwQYMBaAFPlesOf5p6g35sRMbv4b2QGViX8t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDU0Ny8xNUIwMTk5RTA5 MzMxMUVBQTc5RTQ5MUFDNEY5QUUwMi8tVjZ3NV9tbnFEZm14RXh1X2h2WkFaV0pm eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1WNnc1X21ucURmbXhFeHVfaHZaQVpXSmZ5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDU0Ny8xNUIwMTk5RTA5MzMxMUVBQTc5RTQ5MUFDNEY5QUUwMi8tVjZ3NV9tbnFE Zm14RXh1X2h2WkFaV0pmeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv4f//1P2I019nD4MN06ZkAx3Ld2u1rbJgRxpzvRLG6duuvVSTLJoF kiLWt95eQPZm6zy/P1Z9iktQAbJ+Epu5cSYLsBM4RbdTYn5TfH6LvmSjljF7Z69x uzoo+gJa0HFkjXSP/mXct0Ks/Feuwl0YEDr9dywbTPL0g8CfLnX+RUmaM32GhaEv WoCD4sNqGI3Z7xTH4ypyazhaBGlHR4utit8xISoRzX29rlkWqGxPYvBWty/R3hkM eV5jnoDPIU4NBOutBNYuO9eyqxQcgzk/hHKI7Zelu3EbKrJPKVBRdlOGdOAMdcaE ZF8kdS0VD5PczYgSSV1TFG4keZjYgY3F -----END CERTIFICATE-----Generated at Sat Apr 26 16:59:56 2025 by rpki-client