$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft File: siw9CrzTkZSGo-YejXiJI5Ir9qU.mft (raw, json) Hash identifier: gKk/Q/G0F94vfftLGZxAYlvrMvFAu2dlUNGgkxJoJn4= Subject key identifier: B6:A8:94:DF:2A:23:B7:61:FF:E4:87:B3:AA:1A:17:32:10:97:FF:71 Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft Manifest number: 0106 Signing time: Fri 25 Apr 2025 04:30:40 +0000 Manifest this update: Fri 25 Apr 2025 04:30:40 +0000 Manifest next update: Fri 02 May 2025 04:30:40 +0000 Files and hashes: 1: siw9CrzTkZSGo-YejXiJI5Ir9qU.crl (hash: zcoL8XHfaUzvsK/TrUejlxMisjS25Y5t0Kl1Yql/DRU=) 2: A0BD00DEF5B311EFA334BB67C4F9AE02.roa (hash: VGbwSs+xYuuT82QPTEDjBRASIfWEGELF9LE6WDBK6Cw=) 3: B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa (hash: bw0f6KbJYjRey2+KDVpK9dBW3Yh7Jdgva8k4Bt7aCcM=) 4: 4C7C5ECCE1B211EE84F03918C4F9AE02.roa (hash: LTeECQk5/azIOJTf8rGaT2gWz1Gmd2inlmhftO85Egc=) 5: BB982DDC211611F08D31C34DC4F9AE02.roa (hash: FkwQRUxW28jIhJPhgvAtX7RxgLtIHLVcqsk+XhOm1NE=) 6: E26269722E3811EFA4AF2445C4F9AE02.roa (hash: stQvqSgEe9eoYY5+iLzps6D0J/Yk9AXd8PNpZXOA3CY=) 7: BB17221E211611F08D31C34DC4F9AE02.roa (hash: fycljHXNnk59uPrb51pHFnfOpO9Hxutgas1w6IAJ3gA=) 8: 555E0D90B71F11EFBBE56410C4F9AE02.roa (hash: Yun2AD2EJLYSRV9yxmCnTJUpxZFk9/O+PcxovQCtz2I=) 9: 6E1519E8E1B211EEB4706E18C4F9AE02.roa (hash: xaEZeRSS7SPLQpFTKRrqHdI+Z44FtJElJm/n+VPX6m4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Validity Not Before: Apr 25 04:30:40 2025 GMT Not After : May 2 04:30:40 2025 GMT Subject: CN=680b0ff0-6f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d2:35:c5:7e:ba:52:d7:3e:d2:0e:a7:80:cc: ff:c7:a6:e0:15:d1:d4:ab:d3:f8:eb:47:6a:98:40: c7:ce:3a:0e:9b:ba:52:15:d1:c1:c7:17:eb:d9:eb: 01:32:db:4d:d2:60:ab:69:e7:84:5c:79:e9:64:f5: 15:ef:a3:f5:08:25:a9:e0:9a:4c:e5:d4:63:ee:fd: 95:e5:b1:66:d4:5d:bc:14:06:b2:d3:1c:7d:25:ec: d1:15:de:80:65:c8:f3:b4:e0:fd:2c:1a:d8:04:6c: db:bc:1f:11:2c:37:13:5c:07:68:9d:b3:14:64:8d: 7b:e3:07:4c:bf:81:ad:0b:81:29:99:24:db:50:73: 0a:68:32:87:71:db:bb:e6:ff:5a:1a:c9:7c:ba:1c: c8:c0:c2:9c:42:eb:7d:4a:de:d5:1c:39:cf:38:03: e3:93:28:f8:2c:ed:ed:28:80:ec:cc:45:77:8b:0b: 90:fe:a9:dc:a4:25:be:29:03:82:ac:c1:88:7b:45: 87:6b:81:25:52:69:2e:57:bc:20:32:ee:af:2a:64: 73:65:e9:71:24:30:43:ed:b6:1f:ea:d4:49:8e:e1: b9:76:b3:8e:d4:61:df:be:55:fb:51:03:b7:ab:d1: 0b:b2:8c:73:30:28:b4:52:aa:bc:e2:db:95:79:bd: 7f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A8:94:DF:2A:23:B7:61:FF:E4:87:B3:AA:1A:17:32:10:97:FF:71 X509v3 Authority Key Identifier: keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a8:ed:4a:90:b2:50:1b:d4:a3:68:98:5c:ec:15:5d:10:b0: 3b:9e:1f:88:f2:1e:43:03:7b:f1:ab:7b:ef:83:43:8b:df:e5: 0d:12:9a:0f:8c:f6:61:da:5e:98:16:25:ae:8e:1b:7e:87:86: 5f:c1:6e:e3:d0:ae:a6:f7:73:0e:7c:bc:35:7a:aa:70:70:fb: e3:45:73:5e:65:c6:b9:42:5e:0d:8e:98:cb:f5:60:ec:99:61: 13:96:5b:81:a3:55:8e:4f:26:f0:79:d5:ab:bd:d0:f4:be:27: 3f:a1:a5:5e:af:91:56:ca:6a:4c:4f:1e:ac:dd:94:0d:29:05: 28:98:01:ad:97:73:99:13:4f:46:57:bd:5e:fe:9a:b0:ef:e0: 77:84:ee:2e:72:6c:48:1a:9b:16:a9:19:38:d0:7a:0f:c0:8e: fa:65:2e:c5:fb:af:a6:3a:5b:2a:4d:46:ac:cf:d1:95:3d:2f: d8:ad:f6:43:f3:05:c3:5b:9e:4c:27:58:8c:09:c2:19:18:9a: eb:12:08:21:92:b8:3d:07:39:2c:bc:9b:79:3b:38:d0:86:2d: 2c:45:1f:77:87:b5:f9:de:80:75:e9:b0:f3:b8:5a:02:88:74: f4:84:6f:bc:a6:94:46:a6:e5:cd:45:ea:92:b0:22:bf:38:81: fd:32:c8:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2NkYxMTAvBgNVBAUTKEIyMkMzRDBBQkNEMzkxOTQ4NkEzRTYxRThENzg4OTIz OTIyQkY2QTUwHhcNMjUwNDI1MDQzMDQwWhcNMjUwNTAyMDQzMDQwWjAYMRYwFAYD VQQDEw02ODBiMGZmMC02ZjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9I1xX66Utc+0g6ngMz/x6bgFdHUq9P460dqmEDHzjoOm7pSFdHBxxfr2esB MttN0mCraeeEXHnpZPUV76P1CCWp4JpM5dRj7v2V5bFm1F28FAay0xx9JezRFd6A ZcjztOD9LBrYBGzbvB8RLDcTXAdonbMUZI174wdMv4GtC4EpmSTbUHMKaDKHcdu7 5v9aGsl8uhzIwMKcQut9St7VHDnPOAPjkyj4LO3tKIDszEV3iwuQ/qncpCW+KQOC rMGIe0WHa4ElUmkuV7wgMu6vKmRzZelxJDBD7bYf6tRJjuG5drOO1GHfvlX7UQO3 q9ELsoxzMCi0Uqq84tuVeb1/eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLaolN8q I7dh/+SHs6oaFzIQl/9xMB8GA1UdIwQYMBaAFLIsPQq805GUhqPmHo14iSOSK/al MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY2Ri84RkNDOUQyOEM2 RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGtaU0dvLVllalhpSkk1SXI5 cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NpdzlDcnpUa1pTR28tWWVqWGlKSTVJcjlxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTY2Ri84RkNDOUQyOEM2RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGta U0dvLVllalhpSkk1SXI5cVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOqO1KkLJQG9SjaJhc7BVdELA7nh+I8h5DA3vxq3vvg0OL3+UNEpoP jPZh2l6YFiWujht+h4ZfwW7j0K6m93MOfLw1eqpwcPvjRXNeZca5Ql4NjpjL9WDs mWETlluBo1WOTybwedWrvdD0vic/oaVer5FWympMTx6s3ZQNKQUomAGtl3OZE09G V71e/pqw7+B3hO4ucmxIGpsWqRk40HoPwI76ZS7F+6+mOlsqTUasz9GVPS/YrfZD 8wXDW55MJ1iMCcIZGJrrEgghkrg9BzksvJt5OzjQhi0sRR93h7X53oB16bDzuFoC iHT0hG+8ppRGpuXNReqSsCK/OIH9Msh6 -----END CERTIFICATE-----Generated at Sat Apr 26 03:42:15 2025 by rpki-client