$ rpki-client -vvf rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft File: aRgc9FH4s_7GT8gpi1ItSIylyeY.mft (raw, json) Hash identifier: w1ZIpmWi4nHyKHXAgHdZypthzC8ErPPe5XRQphU3siA= Subject key identifier: B5:D5:81:1E:22:CC:D4:DE:2C:D2:2B:6C:A7:C2:3D:B9:FA:29:35:4E Authority key identifier: 69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6 Certificate issuer: /CN=A916DE3D/serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft Manifest number: 36 Signing time: Fri 25 Apr 2025 06:40:30 +0000 Manifest this update: Fri 25 Apr 2025 06:40:30 +0000 Manifest next update: Fri 02 May 2025 06:40:30 +0000 Files and hashes: 1: aRgc9FH4s_7GT8gpi1ItSIylyeY.crl (hash: v2pfEVmvjz7H9r94252noJvArc/rt83MXFSty11mY48=) 2: 3AA17754FD8211EFB5BB677AC4F9AE02.roa (hash: imHJlERFiYSGRBFLnXEmas2EVRVLv/9+zOxRclw7D8g=) 3: B3266880FD8511EFA4783083C4F9AE02.roa (hash: W6yWEruXPIDPoCs6QL8pnWnNjj8hPqXcENkKFmbbFhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DE3D, serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6 Validity Not Before: Apr 25 06:40:30 2025 GMT Not After : May 2 06:40:30 2025 GMT Subject: CN=680b2e5e-c598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f0:44:ae:be:97:57:c4:d8:7c:f2:9b:82:40: 0a:94:10:83:4d:70:fc:12:e4:2a:f5:36:34:a3:86: 75:db:46:97:e8:d9:7e:84:82:7e:15:1f:eb:79:fe: fb:a1:e6:05:cf:9d:db:21:f2:b6:a7:2f:2f:f0:b8: ae:36:9a:c7:11:72:11:02:7b:ba:c1:9e:2c:cc:f8: 7c:21:e6:6d:c7:a1:22:44:68:8a:10:f0:99:8b:d8: 28:6d:38:8f:3c:cf:d0:2f:56:6c:ae:cd:43:2c:a3: 97:1e:7f:d1:2a:14:b5:2f:1c:7a:73:ae:2d:8c:87: 2a:61:43:2f:2f:63:a5:df:1a:e3:ff:fa:99:29:23: 03:25:7e:b8:25:c2:93:a8:e7:ea:10:6f:00:b9:2e: 02:90:c4:c6:ec:e7:9c:1b:8a:40:b6:d8:c5:9d:8a: 4e:7a:65:70:7b:dd:ce:f4:bd:b0:61:f3:24:fe:75: c1:57:4c:0d:c0:f9:13:ae:8c:80:1f:ce:47:6d:cf: 1e:03:b6:8a:6b:c7:2a:c9:42:d0:ca:d5:4c:4b:bf: 0f:26:7b:bb:06:eb:9d:35:51:0e:a4:24:79:d3:f8: 56:38:0d:91:2c:45:e5:b3:90:3e:00:a4:c2:eb:a7: 8a:24:2a:b3:f2:2e:0a:75:f7:2d:05:83:e1:e6:24: 53:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D5:81:1E:22:CC:D4:DE:2C:D2:2B:6C:A7:C2:3D:B9:FA:29:35:4E X509v3 Authority Key Identifier: keyid:69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:a3:80:3d:1e:b9:ad:c8:c9:c9:92:d7:3b:75:a6:a8:93:08: ed:f0:df:8f:b7:88:0d:f2:ce:92:02:7c:4b:12:60:0d:58:7e: 7d:fc:86:5d:18:61:a3:70:38:0c:67:0c:b5:dc:4e:a7:46:77: 7f:72:2f:ed:65:77:d0:f5:50:b3:58:f5:54:38:7d:c4:a0:30: 25:58:ae:95:36:98:76:b2:1b:7a:a8:34:cf:09:8b:89:56:cd: 7a:e9:4e:35:cd:49:d6:ac:ac:3e:09:51:90:eb:af:8e:fe:e0: e2:94:3a:b9:5e:21:60:c0:bf:bb:15:4c:29:21:d8:29:92:04: 5b:9e:a0:87:5b:ef:55:2e:2b:36:6e:58:28:b9:b3:ff:63:fb: 28:75:c0:2c:fe:c1:07:21:dd:66:22:91:1e:86:a8:5b:cf:fb: 71:75:5d:5e:3c:8f:84:ff:d4:94:55:11:5b:65:2c:8d:07:42: 1f:5c:39:9d:96:0c:60:95:98:95:45:9c:85:de:cc:a6:fa:fb: b4:35:b3:81:a1:20:42:2b:0b:a6:be:4e:10:d9:8d:99:f3:0c: 24:3b:13:1f:cc:d2:64:a1:4d:69:37:1f:7d:ac:b5:02:ee:51: 4f:d4:a4:af:f9:76:58:25:f7:38:4f:d7:3f:16:15:81:be:8e: a0:45:66:95 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 REUzRDExMC8GA1UEBRMoNjkxODFDRjQ1MUY4QjNGRUM2NEZDODI5OEI1MjJENDg4 Q0E1QzlFNjAeFw0yNTA0MjUwNjQwMzBaFw0yNTA1MDIwNjQwMzBaMBgxFjAUBgNV BAMTDTY4MGIyZTVlLWM1OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC78ESuvpdXxNh88puCQAqUEINNcPwS5Cr1NjSjhnXbRpfo2X6Egn4VH+t5/vuh 5gXPndsh8ranLy/wuK42mscRchECe7rBnizM+Hwh5m3HoSJEaIoQ8JmL2ChtOI88 z9AvVmyuzUMso5cef9EqFLUvHHpzri2MhyphQy8vY6XfGuP/+pkpIwMlfrglwpOo 5+oQbwC5LgKQxMbs55wbikC22MWdik56ZXB73c70vbBh8yT+dcFXTA3A+ROujIAf zkdtzx4DtoprxyrJQtDK1UxLvw8me7sG6501UQ6kJHnT+FY4DZEsReWzkD4ApMLr p4okKrPyLgp19y0Fg+HmJFPRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtdWBHiLM 1N4s0itsp8I9ufopNU4wHwYDVR0jBBgwFoAUaRgc9FH4s/7GT8gpi1ItSIylyeYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZERTNEL0ZEMUU0NTUwREU2 NTExRUY4MjQzRUUzMEM0RjlBRTAyL2FSZ2M5Rkg0c183R1Q4Z3BpMUl0U0l5bHll WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYVJnYzlGSDRzXzdHVDhncGkxSXRTSXlseWVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE RTNEL0ZEMUU0NTUwREU2NTExRUY4MjQzRUUzMEM0RjlBRTAyL2FSZ2M5Rkg0c183 R1Q4Z3BpMUl0U0l5bHllWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABCjgD0eua3IycmS1zt1pqiTCO3w34+3iA3yzpICfEsSYA1Yfn38hl0Y YaNwOAxnDLXcTqdGd39yL+1ld9D1ULNY9VQ4fcSgMCVYrpU2mHayG3qoNM8Ji4lW zXrpTjXNSdasrD4JUZDrr47+4OKUOrleIWDAv7sVTCkh2CmSBFueoIdb71UuKzZu WCi5s/9j+yh1wCz+wQch3WYikR6GqFvP+3F1XV48j4T/1JRVEVtlLI0HQh9cOZ2W DGCVmJVFnIXezKb6+7Q1s4GhIEIrC6a+ThDZjZnzDCQ7Ex/M0mShTWk3H32stQLu UU/UpK/5dlgl9zhP1z8WFYG+jqBFZpU= -----END CERTIFICATE-----Generated at Sat Apr 26 17:26:01 2025 by rpki-client