$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft File: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft (raw, json) Hash identifier: E/ummpoSs6+Bv919X2rJ7QCQkgMF7kkUsnjSNigYrlU= Subject key identifier: 8B:41:FD:32:0F:9E:AA:74:15:91:B0:B8:9C:BB:60:4C:6B:CD:F8:0E Authority key identifier: 94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 Certificate issuer: /CN=A916DC92/serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Certificate serial: 0C2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft Manifest number: 0C1F Signing time: Thu 24 Apr 2025 18:31:58 +0000 Manifest this update: Thu 24 Apr 2025 18:31:57 +0000 Manifest next update: Thu 01 May 2025 18:31:57 +0000 Files and hashes: 1: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl (hash: 0J2RBi+9ONHyVk61UUDqN3wswWcCM9mP9yNEB8DyV5Q=) 2: CE15A7B409D911EA80E56E21C4F9AE02.roa (hash: gBEi2R13VWPv9ID88Yp79OfFGvAVYE/s6Ssf5W2fwwk=) 3: CCE5BAAA09D911EA80E56E21C4F9AE02.roa (hash: LEAp/LEvn2wmVSYlgep7H8tvqMhftOe6qW5nlWlQ4tA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3119 (0xc2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DC92, serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Validity Not Before: Apr 24 18:31:57 2025 GMT Not After : May 1 18:31:57 2025 GMT Subject: CN=680a839d-d002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a7:f4:d3:ac:e9:03:71:75:4f:89:66:df:6a: cd:b1:dc:3a:15:9e:94:4c:d8:d2:c2:d4:46:06:52: 38:eb:31:a4:23:dc:cc:56:b8:01:00:63:33:82:26: bb:1e:77:ed:99:42:17:04:09:84:49:8d:3e:96:2e: 74:c7:0c:a5:df:3c:33:76:95:ce:ff:1f:4d:01:fe: 2b:90:f2:57:11:36:c7:73:86:19:b2:af:7d:ea:05: 28:ac:9e:bb:de:bf:32:ec:72:b5:af:fb:cd:76:27: f6:50:92:16:38:1e:f8:31:e4:15:e2:63:60:f9:72: dc:36:39:70:0a:90:f7:15:b0:f3:2a:9e:54:5c:d0: 2c:fe:c3:5f:ca:b6:fc:e5:95:b6:53:bf:62:13:cd: 1e:d6:06:58:8e:8a:05:28:38:b4:f4:d3:aa:ce:da: 9e:77:96:24:7c:35:5e:5c:d2:ed:13:65:7f:4c:7b: eb:d8:72:f3:b9:0b:b3:d7:cd:7b:b7:dc:b2:7c:79: 40:96:76:fa:9a:d6:67:90:61:9a:16:35:86:91:79: b3:4e:c9:a9:4d:2a:69:89:c0:dd:6a:3d:1f:fd:86: 67:8f:fd:6e:4c:2b:8f:01:2e:ed:e8:87:40:52:1a: e1:34:6e:87:09:5f:6d:d1:7c:9c:c7:91:94:07:22: 45:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:41:FD:32:0F:9E:AA:74:15:91:B0:B8:9C:BB:60:4C:6B:CD:F8:0E X509v3 Authority Key Identifier: keyid:94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:87:cc:18:27:6e:54:25:56:26:3d:2e:45:f8:ed:5e:c5:c2: 04:91:8c:12:ba:e0:ae:32:12:7e:f7:02:d6:23:b8:de:54:4e: 68:ca:5c:87:23:2c:29:5c:ba:e0:4e:90:e2:a3:0f:74:43:87: 59:54:82:ed:4f:79:98:85:c1:9e:51:7f:26:75:e9:05:1c:a4: 85:c6:95:1a:f9:db:90:64:de:20:8b:e3:5f:6e:4b:67:f0:4d: 86:77:3f:81:81:04:2b:d8:7d:9c:58:14:3c:75:ba:ad:0b:0d: 22:52:a8:5d:87:4a:4d:bc:b0:37:59:91:df:af:ec:3e:ee:c3: ab:e1:97:d0:bf:6f:ad:81:3c:fe:ef:2f:37:d5:54:d3:8b:a9: 3c:ca:32:d7:39:d0:a7:e5:d5:89:67:72:87:2a:86:19:ac:2a: 68:47:24:12:f3:2a:0a:e9:00:91:3b:63:56:ed:07:51:09:8d: 4d:7a:5f:ce:cb:dd:57:d2:73:ec:d9:82:d7:45:8d:9b:e4:14: a0:05:11:c1:66:9c:a0:07:26:b3:48:91:d5:34:6d:75:2b:81: 4f:76:ed:a9:17:41:bb:62:37:92:b3:db:4a:d7:29:d6:8f:ef: b6:f6:46:06:06:8d:02:f0:ab:91:d5:de:8d:8e:60:a4:3b:5e: 6b:15:c2:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRDOTIxMTAvBgNVBAUTKDk0NUQwOTdGMjI2M0QxNEMzNkI3QjY1QzJEQzBDMjVG OUVFNzcxOTIwHhcNMjUwNDI0MTgzMTU3WhcNMjUwNTAxMTgzMTU3WjAYMRYwFAYD VQQDEw02ODBhODM5ZC1kMDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4qf006zpA3F1T4lm32rNsdw6FZ6UTNjSwtRGBlI46zGkI9zMVrgBAGMzgia7 HnftmUIXBAmESY0+li50xwyl3zwzdpXO/x9NAf4rkPJXETbHc4YZsq996gUorJ67 3r8y7HK1r/vNdif2UJIWOB74MeQV4mNg+XLcNjlwCpD3FbDzKp5UXNAs/sNfyrb8 5ZW2U79iE80e1gZYjooFKDi09NOqztqed5YkfDVeXNLtE2V/THvr2HLzuQuz1817 t9yyfHlAlnb6mtZnkGGaFjWGkXmzTsmpTSppicDdaj0f/YZnj/1uTCuPAS7t6IdA UhrhNG6HCV9t0Xycx5GUByJFxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFItB/TIP nqp0FZGwuJy7YExrzfgOMB8GA1UdIwQYMBaAFJRdCX8iY9FMNre2XC3Awl+e53GS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM5Mi8wRjREN0I0NjA5 RDgxMUVBOUZFOERCMUVDNEY5QUUwMi9sRjBKZnlKajBVdzJ0N1pjTGNEQ1g1N25j WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGMEpmeUpqMFV3MnQ3WmNMY0RDWDU3bmNaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REM5Mi8wRjREN0I0NjA5RDgxMUVBOUZFOERCMUVDNEY5QUUwMi9sRjBKZnlKajBV dzJ0N1pjTGNEQ1g1N25jWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDh8wYJ25UJVYmPS5F+O1excIEkYwSuuCuMhJ+9wLWI7jeVE5oylyH IywpXLrgTpDiow90Q4dZVILtT3mYhcGeUX8mdekFHKSFxpUa+duQZN4gi+Nfbktn 8E2Gdz+BgQQr2H2cWBQ8dbqtCw0iUqhdh0pNvLA3WZHfr+w+7sOr4ZfQv2+tgTz+ 7y831VTTi6k8yjLXOdCn5dWJZ3KHKoYZrCpoRyQS8yoK6QCRO2NW7QdRCY1Nel/O y91X0nPs2YLXRY2b5BSgBRHBZpygByazSJHVNG11K4FPdu2pF0G7YjeSs9tK1ynW j++29kYGBo0C8KuR1d6NjmCkO15rFcKH -----END CERTIFICATE-----Generated at Sat Apr 26 14:08:24 2025 by rpki-client