$ rpki-client -vvf rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft File: 0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft (raw, json) Hash identifier: dPIGeU08I9dLTGUNCKmWA8bVWc1Ewuj5KqLdjZpr1cw= Subject key identifier: 37:BC:0F:5C:CB:8C:0B:F5:83:D8:3C:D1:8A:D2:88:B0:A4:89:62:63 Authority key identifier: D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89 Certificate issuer: /CN=A917039B/serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89 Certificate serial: 032A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft Manifest number: 0324 Signing time: Fri 25 Apr 2025 00:52:54 +0000 Manifest this update: Fri 25 Apr 2025 00:52:54 +0000 Manifest next update: Fri 02 May 2025 00:52:54 +0000 Files and hashes: 1: 0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl (hash: E137+ue1FI/bhk/C/bbPL8rD1CJzGrUndVb/RwosRic=) 2: A26E4F16C13411ECA5838429C4F9AE02.roa (hash: JGWjIhX5RIjoHrKhwJbgn3Pu8vTcZZqlk7E2DqruuO8=) 3: A1CB8D62C13411ECA5838429C4F9AE02.roa (hash: wILHqpy9Ti/8MJSzUe1aVFwRV4mS5BPVF4SBXg86ZeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:52:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 810 (0x32a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917039B, serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89 Validity Not Before: Apr 25 00:52:54 2025 GMT Not After : May 2 00:52:54 2025 GMT Subject: CN=680adce6-242c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c2:b7:79:7a:e6:23:6b:a7:4d:8c:06:e8:95: 8b:f5:fb:ef:b0:a1:7e:97:38:c8:ed:68:29:dd:8f: 7a:30:81:3a:88:e0:ef:89:aa:af:90:5c:03:7d:85: f1:60:e2:99:d4:9b:b8:5f:61:f6:d9:16:d6:db:ca: 3f:f1:9b:65:9d:50:9e:17:db:95:32:aa:c4:5a:2f: 12:2e:f8:85:4d:c9:7b:a9:d3:64:0b:ef:33:53:7d: 39:6c:10:48:9f:df:82:c1:e1:80:ba:a3:39:24:05: bf:57:94:78:86:85:b1:28:40:fc:b2:12:9f:ba:46: b5:38:33:f0:03:96:98:db:16:28:81:dd:ec:92:c8: 78:06:25:e5:5f:2d:c1:82:db:5f:1f:21:30:2d:b1: 8b:40:3b:12:69:b4:4b:74:01:4b:88:4b:9c:81:fc: 93:13:95:39:c6:04:a4:0a:88:97:35:6a:9a:6d:59: a9:fa:d8:3d:e8:9f:c3:36:32:87:1d:e8:ff:65:a3: 57:10:0d:ed:a0:00:75:30:01:20:7c:5a:7c:9b:64: 35:1a:8b:80:bf:62:96:0e:03:33:6c:5b:b5:fe:bc: 0d:f6:6a:e1:21:1e:7a:16:f4:58:52:8f:6b:46:c7: 32:42:f2:15:87:c5:a6:f6:fb:85:7b:e3:58:e3:19: b3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BC:0F:5C:CB:8C:0B:F5:83:D8:3C:D1:8A:D2:88:B0:A4:89:62:63 X509v3 Authority Key Identifier: keyid:D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:2b:6d:11:9a:83:fd:32:8b:ed:0e:2f:32:95:57:d9:eb:8d: 91:3f:c4:96:00:70:ba:8b:4d:bb:6a:3a:20:41:60:26:e0:86: 0c:c9:e0:95:5c:c1:b7:6c:db:87:a0:19:4e:0b:12:85:7f:73: 4a:bc:78:ed:80:7f:09:b5:45:c5:eb:d3:e9:46:0a:30:85:2e: 2f:31:49:8a:8a:89:af:5b:a8:3a:19:8c:41:fb:4e:00:78:e2: b4:70:a8:76:11:35:b9:c2:8e:dd:56:9a:c6:54:64:32:67:3c: e7:2d:53:ac:85:30:50:ac:92:fd:64:87:58:32:0f:9b:c6:b6: 8a:df:45:86:df:ed:75:75:3d:99:a2:09:db:00:e5:8c:f3:fb: 85:ba:8e:42:2b:b8:fe:97:2e:7f:c8:f8:39:13:6b:08:7d:4e: 0c:e6:17:75:08:df:e2:21:21:4c:b2:09:d2:47:dd:2d:7b:0f: d7:e2:31:76:bc:0f:b1:f0:9e:92:f5:1c:d5:78:0e:ed:be:38: 65:1d:aa:cf:c2:85:a4:ec:48:3f:4c:3c:be:ab:88:42:5d:f1: 61:f3:35:89:83:44:f1:eb:6a:0d:61:c6:40:f3:ff:91:c1:58: 69:46:aa:aa:40:ea:d0:50:ae:dc:fd:3c:ad:96:e5:22:1a:e5: c0:66:56:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzOUIxMTAvBgNVBAUTKEQyMTAyMkMwMEYwREJCRTU4QTk5QTFFNjczRDNBRTFD NURGRENCODkwHhcNMjUwNDI1MDA1MjU0WhcNMjUwNTAyMDA1MjU0WjAYMRYwFAYD VQQDEw02ODBhZGNlNi0yNDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcK3eXrmI2unTYwG6JWL9fvvsKF+lzjI7Wgp3Y96MIE6iODviaqvkFwDfYXx YOKZ1Ju4X2H22RbW28o/8ZtlnVCeF9uVMqrEWi8SLviFTcl7qdNkC+8zU305bBBI n9+CweGAuqM5JAW/V5R4hoWxKED8shKfuka1ODPwA5aY2xYogd3sksh4BiXlXy3B gttfHyEwLbGLQDsSabRLdAFLiEucgfyTE5U5xgSkCoiXNWqabVmp+tg96J/DNjKH Hej/ZaNXEA3toAB1MAEgfFp8m2Q1GouAv2KWDgMzbFu1/rwN9mrhIR56FvRYUo9r RscyQvIVh8Wm9vuFe+NY4xmz2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDe8D1zL jAv1g9g80YrSiLCkiWJjMB8GA1UdIwQYMBaAFNIQIsAPDbvlipmh5nPTrhxd/cuJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDM5Qi85OUY1NDQ3OEMx MzExMUVDOTZCNUUwMjVDNEY5QUUwMi8waEFpd0E4TnUtV0ttYUhtYzlPdUhGMzl5 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBoQWl3QThOdS1XS21hSG1jOU91SEYzOXk0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDM5Qi85OUY1NDQ3OEMxMzExMUVDOTZCNUUwMjVDNEY5QUUwMi8waEFpd0E4TnUt V0ttYUhtYzlPdUhGMzl5NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOK20RmoP9MovtDi8ylVfZ642RP8SWAHC6i027ajogQWAm4IYMyeCV XMG3bNuHoBlOCxKFf3NKvHjtgH8JtUXF69PpRgowhS4vMUmKiomvW6g6GYxB+04A eOK0cKh2ETW5wo7dVprGVGQyZzznLVOshTBQrJL9ZIdYMg+bxraK30WG3+11dT2Z ognbAOWM8/uFuo5CK7j+ly5/yPg5E2sIfU4M5hd1CN/iISFMsgnSR90tew/X4jF2 vA+x8J6S9RzVeA7tvjhlHarPwoWk7Eg/TDy+q4hCXfFh8zWJg0Tx62oNYcZA8/+R wVhpRqqqQOrQUK7c/TytluUiGuXAZlYM -----END CERTIFICATE-----Generated at Sat Apr 26 14:05:19 2025 by rpki-client