$ rpki-client -vvf rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft File: Rfpu6-HepSLAREPPJSnpd5qY2I8.mft (raw, json) Hash identifier: SoAq94ItteZAN7kLIjWDOvaybU2XH23rNw3LJjLcF5E= Subject key identifier: 93:C5:57:BC:49:67:95:0E:48:5F:DE:79:4D:22:DD:D1:3F:23:6B:FB Authority key identifier: 45:FA:6E:EB:E1:DE:A5:22:C0:44:43:CF:25:29:E9:77:9A:98:D8:8F Certificate issuer: /CN=A916E343/serialNumber=45FA6EEBE1DEA522C04443CF2529E9779A98D88F Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rfpu6-HepSLAREPPJSnpd5qY2I8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft Manifest number: 0135 Signing time: Fri 25 Apr 2025 03:34:30 +0000 Manifest this update: Fri 25 Apr 2025 03:34:30 +0000 Manifest next update: Fri 02 May 2025 03:34:30 +0000 Files and hashes: 1: Rfpu6-HepSLAREPPJSnpd5qY2I8.crl (hash: JjrZDCGUSXTU7ZpSfyi3Lljq00PROIAdQzOW9e2d3DA=) 2: 798F13884BC511EE95462F4FC4F9AE02.roa (hash: AVNsCvyoIWNnSL3EVkTgsABpIGwTqMix3+lKD39yw+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.crl rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rfpu6-HepSLAREPPJSnpd5qY2I8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E343, serialNumber=45FA6EEBE1DEA522C04443CF2529E9779A98D88F Validity Not Before: Apr 25 03:34:30 2025 GMT Not After : May 2 03:34:30 2025 GMT Subject: CN=680b02c6-0f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4b:7c:07:03:d3:03:cd:b8:1d:6c:2d:c3:3b: 56:38:da:40:ee:b0:1b:18:48:f4:9c:8b:19:55:14: 6a:35:4f:6d:32:5b:62:0b:a2:a6:7e:c7:a5:92:d8: 3f:4a:57:94:8f:9a:13:5c:26:5f:4f:bd:d2:f8:57: 23:5f:3f:24:d3:a1:81:a5:fb:d3:68:51:3f:db:ae: 40:af:2b:80:1d:8d:3a:d8:22:fb:13:f4:f0:b5:1e: ff:ca:a3:b3:6c:73:f5:d2:3b:7d:c3:f0:5a:e6:c0: 47:a2:ae:a4:a3:8d:b6:53:19:cf:37:b0:ac:68:48: 0f:53:ce:a2:00:f8:1b:4a:b0:67:54:c2:50:74:ab: ad:ca:94:10:3a:de:d4:88:97:8c:96:ea:6a:eb:97: 7f:73:4c:5e:d0:18:17:d0:47:e4:a9:f0:5d:8d:56: f2:f9:e5:1c:24:2a:45:8a:88:6e:f5:92:13:65:4c: 92:ac:cb:ee:1e:9b:af:9e:18:f4:8e:6e:f5:fa:9d: 6d:7f:02:07:80:5a:f2:fe:02:95:b3:41:ab:fe:32: a9:5b:a0:c2:b5:36:67:67:fe:e0:7b:39:43:20:21: 19:96:9d:e5:d6:9b:08:73:ea:76:2b:f7:de:f4:ec: 13:f9:b5:9c:b4:59:12:a4:d4:fc:93:1d:4c:1a:5c: a8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C5:57:BC:49:67:95:0E:48:5F:DE:79:4D:22:DD:D1:3F:23:6B:FB X509v3 Authority Key Identifier: keyid:45:FA:6E:EB:E1:DE:A5:22:C0:44:43:CF:25:29:E9:77:9A:98:D8:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rfpu6-HepSLAREPPJSnpd5qY2I8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b8:6f:c9:aa:13:f2:a7:48:4e:26:ee:16:1c:64:0d:4d:41: fb:d5:96:8b:e8:e4:a6:af:e9:a2:1d:08:95:d4:84:88:30:74: b7:c9:aa:90:42:5d:01:83:e6:7a:e3:f7:3e:fd:4c:1e:43:6f: 57:c1:94:53:3b:d2:ea:c9:5f:fd:20:6e:f2:b0:9c:87:fb:23: 08:8f:d8:df:fb:e4:b1:61:db:39:28:e4:72:82:b1:c7:5f:82: 87:9e:d8:99:64:7d:a0:16:11:8a:99:61:1c:83:0a:9d:3e:83: 05:9a:b7:e2:25:0a:32:95:e2:8f:15:2d:83:0b:f2:e1:c0:0d: 97:5b:28:99:1f:43:dc:6b:9d:2c:f3:31:77:88:8f:e0:9e:25: b5:1d:e6:5c:94:73:28:77:b1:01:72:4f:37:ce:51:86:e7:df: 57:99:89:fa:29:cb:cc:12:ea:f0:d1:cc:5a:14:94:b8:aa:64: 99:97:94:9c:37:35:38:1f:1c:90:3a:cb:08:0e:12:a4:d5:37: 96:1d:64:d3:6a:ef:8d:03:55:f0:90:ec:43:f9:7c:bd:70:34: 6e:a4:a3:40:db:f0:c8:db:c3:18:d3:da:ec:8b:e5:05:14:af: 85:60:03:40:fc:2e:67:6d:54:6b:e4:2b:96:38:92:aa:3c:0b: ac:3d:3c:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUzNDMxMTAvBgNVBAUTKDQ1RkE2RUVCRTFERUE1MjJDMDQ0NDNDRjI1MjlFOTc3 OUE5OEQ4OEYwHhcNMjUwNDI1MDMzNDMwWhcNMjUwNTAyMDMzNDMwWjAYMRYwFAYD VQQDEw02ODBiMDJjNi0wZjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkt8BwPTA824HWwtwztWONpA7rAbGEj0nIsZVRRqNU9tMltiC6Kmfselktg/ SleUj5oTXCZfT73S+FcjXz8k06GBpfvTaFE/265AryuAHY062CL7E/TwtR7/yqOz bHP10jt9w/Ba5sBHoq6ko422UxnPN7CsaEgPU86iAPgbSrBnVMJQdKutypQQOt7U iJeMlupq65d/c0xe0BgX0EfkqfBdjVby+eUcJCpFiohu9ZITZUySrMvuHpuvnhj0 jm71+p1tfwIHgFry/gKVs0Gr/jKpW6DCtTZnZ/7gezlDICEZlp3l1psIc+p2K/fe 9OwT+bWctFkSpNT8kx1MGlyoNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPFV7xJ Z5UOSF/eeU0i3dE/I2v7MB8GA1UdIwQYMBaAFEX6buvh3qUiwERDzyUp6XeamNiP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTM0My8wRDEwRjdCMjRC QzUxMUVFQjY2RTZENEVDNEY5QUUwMi9SZnB1Ni1IZXBTTEFSRVBQSlNucGQ1cVky STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JmcHU2LUhlcFNMQVJFUFBKU25wZDVxWTJJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTM0My8wRDEwRjdCMjRCQzUxMUVFQjY2RTZENEVDNEY5QUUwMi9SZnB1Ni1IZXBT TEFSRVBQSlNucGQ1cVkySTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8uG/JqhPyp0hOJu4WHGQNTUH71ZaL6OSmr+miHQiV1ISIMHS3yaqQ Ql0Bg+Z64/c+/UweQ29XwZRTO9LqyV/9IG7ysJyH+yMIj9jf++SxYds5KORygrHH X4KHntiZZH2gFhGKmWEcgwqdPoMFmrfiJQoyleKPFS2DC/LhwA2XWyiZH0Pca50s 8zF3iI/gniW1HeZclHMod7EBck83zlGG599XmYn6KcvMEurw0cxaFJS4qmSZl5Sc NzU4HxyQOssIDhKk1TeWHWTTau+NA1XwkOxD+Xy9cDRupKNA2/DI28MY09rsi+UF FK+FYANA/C5nbVRr5CuWOJKqPAusPTxW -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:07 2025 by rpki-client