$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft File: 64P0iA8jV15XUXhcbgqyvgskm8M.mft (raw, json) Hash identifier: IwWC+DxDI0dhVisW5/PSvJUlypeK5HDzmNB8eqUWpKg= Subject key identifier: 57:65:95:23:D9:80:3D:53:6C:8E:FD:0C:4E:52:B5:B5:65:C5:AA:8E Authority key identifier: EB:83:F4:88:0F:23:57:5E:57:51:78:5C:6E:0A:B2:BE:0B:24:9B:C3 Certificate issuer: /CN=A917C0F3/serialNumber=EB83F4880F23575E5751785C6E0AB2BE0B249BC3 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft Manifest number: 37 Signing time: Fri 25 Apr 2025 06:33:46 +0000 Manifest this update: Fri 25 Apr 2025 06:33:45 +0000 Manifest next update: Fri 02 May 2025 06:33:45 +0000 Files and hashes: 1: 64P0iA8jV15XUXhcbgqyvgskm8M.crl (hash: WMw7J9ZhVoW3AKbxaBPq/rjKz+grwwrOPhzSDdOMEM4=) 2: 028452F0D0BA11EFA8B5A526C4F9AE02.roa (hash: IREGMcYzyBbo6wcvGexVHMAjLf7W6LD1j2SfUrLribg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.crl rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C0F3, serialNumber=EB83F4880F23575E5751785C6E0AB2BE0B249BC3 Validity Not Before: Apr 25 06:33:45 2025 GMT Not After : May 2 06:33:45 2025 GMT Subject: CN=680b2cca-c4bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8a:aa:e7:86:70:34:61:73:b5:36:aa:d7:16: 0b:b0:62:39:29:e3:2b:15:88:94:0b:42:ba:fb:c0: 4b:f0:77:45:79:33:29:3e:49:c5:80:d4:83:3b:71: a1:6f:d6:d1:9d:1d:06:17:17:67:7d:66:11:43:c1: 8b:07:ad:f5:38:7a:61:1f:fe:42:9b:7f:fb:bd:db: 2b:50:bc:7a:13:37:ed:e1:33:dd:ec:03:c9:1f:3b: 96:60:53:38:ca:a3:a6:14:88:50:29:56:87:88:8d: ae:a3:db:23:98:71:4f:d9:b9:1d:3c:3e:8a:cb:1e: 95:0f:93:cd:6f:56:66:7d:7f:03:a4:3e:cd:c1:bc: 92:db:a3:01:2f:e9:f7:76:91:a1:e7:63:6a:f3:49: 82:96:41:44:4a:45:4b:88:a2:24:7e:f1:00:9d:f3: b9:b2:f9:4e:5e:19:97:01:32:36:df:01:ed:3f:3a: 31:f5:32:29:47:8f:d7:1c:83:ad:0f:b1:fd:2e:e2: 91:17:22:75:88:ab:eb:bb:6b:a7:ab:5e:d4:c0:d2: 8d:8c:9a:fa:a9:a2:c8:43:eb:9a:12:a5:c9:b0:87: 78:96:ed:91:73:57:3c:da:b3:87:57:c4:f4:ed:76: 0d:eb:d0:a9:bf:dd:a6:b3:7f:02:14:98:a0:0d:1a: c7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:65:95:23:D9:80:3D:53:6C:8E:FD:0C:4E:52:B5:B5:65:C5:AA:8E X509v3 Authority Key Identifier: keyid:EB:83:F4:88:0F:23:57:5E:57:51:78:5C:6E:0A:B2:BE:0B:24:9B:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:23:12:c1:f1:b2:56:50:d8:b5:01:6c:eb:8b:35:b0:35:ab: c0:2e:1d:a2:e3:76:95:01:e4:88:bc:49:33:79:3a:1e:b2:4b: 12:f3:f4:e2:66:74:b4:be:17:3d:70:1d:a0:1b:bc:16:e6:b9: 5a:4d:61:87:e8:4d:2b:65:53:e8:90:79:7b:cd:18:37:01:90: b9:0d:ac:19:59:d6:88:2e:b4:fa:ef:f5:cf:59:b9:94:17:08: 01:e8:c7:c1:26:2d:85:0e:59:86:89:31:2b:47:f1:93:bf:be: 45:ed:69:30:f8:56:55:11:85:7e:29:69:6e:b4:86:f7:4b:2a: a7:ca:6a:37:ba:e3:af:c5:e3:b4:92:d6:f9:69:ed:61:c4:3f: ee:03:d9:ae:82:37:93:48:92:1f:56:18:91:7c:88:0c:40:43: e1:3c:df:69:0e:33:fb:57:1f:ef:50:e8:43:02:24:c1:48:6f: bd:82:76:54:db:2a:15:61:66:b3:a6:c5:df:05:b8:e0:8a:ce: d9:75:cc:2c:2d:7a:d2:b9:02:41:b6:c8:a8:9f:48:1a:5c:27: 04:53:29:0e:c6:14:73:b0:65:08:ae:b2:c1:10:a9:74:e4:bf: 7c:11:08:fa:cc:10:a3:9c:c4:0d:30:12:a7:09:bd:c4:8a:cd: bd:63:07:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzBGMzExMC8GA1UEBRMoRUI4M0Y0ODgwRjIzNTc1RTU3NTE3ODVDNkUwQUIyQkUw QjI0OUJDMzAeFw0yNTA0MjUwNjMzNDVaFw0yNTA1MDIwNjMzNDVaMBgxFjAUBgNV BAMTDTY4MGIyY2NhLWM0YmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEiqrnhnA0YXO1NqrXFguwYjkp4ysViJQLQrr7wEvwd0V5Myk+ScWA1IM7caFv 1tGdHQYXF2d9ZhFDwYsHrfU4emEf/kKbf/u92ytQvHoTN+3hM93sA8kfO5ZgUzjK o6YUiFApVoeIja6j2yOYcU/ZuR08PorLHpUPk81vVmZ9fwOkPs3BvJLbowEv6fd2 kaHnY2rzSYKWQURKRUuIoiR+8QCd87my+U5eGZcBMjbfAe0/OjH1MilHj9ccg60P sf0u4pEXInWIq+u7a6erXtTA0o2MmvqposhD65oSpcmwh3iW7ZFzVzzas4dXxPTt dg3r0Km/3aazfwIUmKANGsdNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUV2WVI9mA PVNsjv0MTlK1tWXFqo4wHwYDVR0jBBgwFoAU64P0iA8jV15XUXhcbgqyvgskm8Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDMEYzLzU4RkU3NEFFRDBC OTExRUZBMDg0ODgyNUM0RjlBRTAyLzY0UDBpQThqVjE1WFVYaGNiZ3F5dmdza204 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNjRQMGlBOGpWMTVYVVhoY2JncXl2Z3NrbThNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD MEYzLzU4RkU3NEFFRDBCOTExRUZBMDg0ODgyNUM0RjlBRTAyLzY0UDBpQThqVjE1 WFVYaGNiZ3F5dmdza204TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJEjEsHxslZQ2LUBbOuLNbA1q8AuHaLjdpUB5Ii8STN5Oh6ySxLz9OJm dLS+Fz1wHaAbvBbmuVpNYYfoTStlU+iQeXvNGDcBkLkNrBlZ1ogutPrv9c9ZuZQX CAHox8EmLYUOWYaJMStH8ZO/vkXtaTD4VlURhX4paW60hvdLKqfKaje646/F47SS 1vlp7WHEP+4D2a6CN5NIkh9WGJF8iAxAQ+E832kOM/tXH+9Q6EMCJMFIb72CdlTb KhVhZrOmxd8FuOCKztl1zCwtetK5AkG2yKifSBpcJwRTKQ7GFHOwZQiussEQqXTk v3wRCPrMEKOcxA0wEqcJvcSKzb1jB4s= -----END CERTIFICATE-----Generated at Sat Apr 26 17:13:49 2025 by rpki-client