$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft File: C41jj_04sfd-SOG7XfKZKc59eLU.mft (raw, json) Hash identifier: X/Ya5vUMGydQnJQg6AMiYbiAACHbpzDJtqz1Z3jI9fo= Subject key identifier: A8:25:14:EC:A1:92:72:87:FA:AA:8D:72:C5:28:6E:F6:9A:D7:DD:92 Authority key identifier: 0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 Certificate issuer: /CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft Manifest number: 0174 Signing time: Fri 25 Apr 2025 03:11:16 +0000 Manifest this update: Fri 25 Apr 2025 03:11:16 +0000 Manifest next update: Fri 02 May 2025 03:11:16 +0000 Files and hashes: 1: C41jj_04sfd-SOG7XfKZKc59eLU.crl (hash: kSid8gcMvaZJcwtnmVimKs+AEM+JRChVQ1gInS+FEEA=) 2: AA398864B96611EF8161BF51C4F9AE02.roa (hash: yQGHba0iCVzmQ+TLDipv2BWri6rwZPqD4eW8ATIlvo4=) 3: 8FD9EFB21C4B11EFA5B6383EC4F9AE02.roa (hash: Smb8FVURFKC3m7o10r8QWyGcKvfaOvh1xY2tx4Qk4ok=) 4: 899BFC6C533C11EF8B23DB12C4F9AE02.roa (hash: tmuz3PtTyclXWsH3tOxgjNzOWrm2oq8qXZwVq4xv3Xg=) 5: 99DA0A4C533C11EF92170913C4F9AE02.roa (hash: 6poyajPR3BIFUtAmbqebq4DXNDPl9+dp2rS2zBsWMPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEA7, serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Validity Not Before: Apr 25 03:11:16 2025 GMT Not After : May 2 03:11:16 2025 GMT Subject: CN=680afd54-38d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:37:e1:57:ba:0c:32:ae:c7:70:03:e7:ee:1c: 9a:d6:ad:49:91:a2:e5:31:b8:80:f6:57:60:20:98: 99:d5:8f:6c:b4:91:4f:cb:8a:5c:d2:c0:45:a2:d0: e6:b0:c4:5b:1e:2a:bb:c2:fb:97:4f:c8:6b:2e:89: d2:82:90:ff:f5:bb:e9:d7:6f:68:c3:f7:ac:ab:2a: a2:a3:3b:f2:be:e4:0a:46:f6:54:53:12:0c:ce:e3: 0d:2f:34:c9:70:4b:3e:e7:72:7d:75:f8:dc:d1:88: c2:b7:72:52:84:11:29:d3:c0:f7:1e:ba:69:c3:fb: bb:be:ab:49:f0:27:11:9c:2f:b2:89:00:6b:23:f8: 1a:32:fb:8c:94:4a:8e:e8:f6:94:5f:a9:3e:08:cb: a6:b6:77:1a:34:4b:73:d6:35:48:1c:7d:9f:4e:25: d0:1c:63:7c:2c:cb:4b:ef:8e:a8:1f:40:58:3c:cf: d1:87:cc:d7:cb:3c:58:b2:39:84:ba:b1:e2:40:39: 2e:e4:06:26:0a:70:5d:84:3c:be:6d:02:57:a1:fb: 53:64:cd:d0:51:7d:d2:5e:34:e8:f2:41:d5:f1:b8: ef:1c:ac:1d:1f:53:c3:40:a7:58:82:2a:75:b6:e7: 79:64:2d:d4:40:56:3c:b3:22:1b:f4:c9:a6:2f:17: e0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:25:14:EC:A1:92:72:87:FA:AA:8D:72:C5:28:6E:F6:9A:D7:DD:92 X509v3 Authority Key Identifier: keyid:0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:2a:56:ee:20:9c:af:68:d4:b8:40:c3:92:99:dc:03:43:fd: 98:31:7b:90:6b:3a:c9:14:b8:13:8f:d2:5a:2f:0c:23:fa:81: a1:de:29:be:dd:ae:d1:b3:cc:d5:f0:6b:16:21:ee:69:f9:85: 1b:c2:09:08:5e:d9:8c:27:50:c1:b5:85:cf:7c:92:5c:5a:c2: 2f:f5:d9:92:4e:ae:4f:21:ae:1b:62:4a:6a:29:dc:5f:ea:39: de:cf:a2:cf:f5:9a:f6:29:e2:09:43:10:c9:dc:5e:f5:0c:b3: eb:86:20:cd:77:0e:78:91:31:c9:50:22:a0:e1:a3:1d:d6:c2: f2:34:6f:a5:9d:fa:3e:fd:58:e0:4c:3d:1a:d1:7d:47:51:be: bf:ea:68:45:d0:b7:04:a8:7d:77:1e:a7:9d:47:f8:5c:8b:f9: f7:eb:0b:bb:c0:a8:cb:00:26:83:a6:5b:dc:15:fa:3d:3e:22: a9:a5:ca:a7:d0:4b:58:eb:a4:0c:6e:9a:08:a6:31:26:08:26: 5a:91:76:82:8c:e1:a9:3b:63:34:74:1b:ff:33:49:eb:10:51: 4c:50:da:7d:01:d0:f7:8c:a0:65:15:74:b3:f1:14:8b:40:ef: 2a:20:b3:b7:2d:2d:3d:c7:dd:90:08:a6:ee:22:98:85:ee:d9: 07:e6:6e:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQTcxMTAvBgNVBAUTKDBCOEQ2MzhGRkQzOEIxRjc3RTQ4RTFCQjVERjI5OTI5 Q0U3RDc4QjUwHhcNMjUwNDI1MDMxMTE2WhcNMjUwNTAyMDMxMTE2WjAYMRYwFAYD VQQDEw02ODBhZmQ1NC0zOGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7TfhV7oMMq7HcAPn7hya1q1JkaLlMbiA9ldgIJiZ1Y9stJFPy4pc0sBFotDm sMRbHiq7wvuXT8hrLonSgpD/9bvp129ow/esqyqiozvyvuQKRvZUUxIMzuMNLzTJ cEs+53J9dfjc0YjCt3JShBEp08D3Hrppw/u7vqtJ8CcRnC+yiQBrI/gaMvuMlEqO 6PaUX6k+CMumtncaNEtz1jVIHH2fTiXQHGN8LMtL746oH0BYPM/Rh8zXyzxYsjmE urHiQDku5AYmCnBdhDy+bQJXoftTZM3QUX3SXjTo8kHV8bjvHKwdH1PDQKdYgip1 tud5ZC3UQFY8syIb9MmmLxfgmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKglFOyh knKH+qqNcsUobvaa192SMB8GA1UdIwQYMBaAFAuNY4/9OLH3fkjhu13ymSnOfXi1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVBNy8wNDRGNjQ0ODEx NjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNmZC1TT0c3WGZLWktjNTll TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M0MWpqXzA0c2ZkLVNPRzdYZktaS2M1OWVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVBNy8wNDRGNjQ0ODExNjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNm ZC1TT0c3WGZLWktjNTllTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkKlbuIJyvaNS4QMOSmdwDQ/2YMXuQazrJFLgTj9JaLwwj+oGh3im+ 3a7Rs8zV8GsWIe5p+YUbwgkIXtmMJ1DBtYXPfJJcWsIv9dmSTq5PIa4bYkpqKdxf 6jnez6LP9Zr2KeIJQxDJ3F71DLPrhiDNdw54kTHJUCKg4aMd1sLyNG+lnfo+/Vjg TD0a0X1HUb6/6mhF0LcEqH13HqedR/hci/n36wu7wKjLACaDplvcFfo9PiKppcqn 0EtY66QMbpoIpjEmCCZakXaCjOGpO2M0dBv/M0nrEFFMUNp9AdD3jKBlFXSz8RSL QO8qILO3LS09x92QCKbuIpiF7tkH5m43 -----END CERTIFICATE-----Generated at Sat Apr 26 14:53:53 2025 by rpki-client