$ rpki-client -vvf rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft File: -bj5HSkovqo1HMNFxHNpMv2GOfE.mft (raw, json) Hash identifier: D8XRTpLpsZGJNAumXUOlrKvoyBzsmRcZEU9WHduyZoo= Subject key identifier: 35:7D:E5:F7:61:1D:11:02:02:37:6D:D1:92:69:BC:A6:47:49:EF:8D Authority key identifier: F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 Certificate issuer: /CN=A917C2CC/serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Certificate serial: 0F03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft Manifest number: 0EFA Signing time: Thu 24 Apr 2025 17:38:13 +0000 Manifest this update: Thu 24 Apr 2025 17:38:12 +0000 Manifest next update: Thu 01 May 2025 17:38:12 +0000 Files and hashes: 1: -bj5HSkovqo1HMNFxHNpMv2GOfE.crl (hash: pclAYPL1gg9JRHLLEJjU1JVu+iKsPIHDoFY8EmYOpwg=) 2: 39275D0C232511EC925DF318C4F9AE02.roa (hash: IUxOhh5i3F8AXkiEHRy2ZFcsd2EB0EPXzUnc2RHCPV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3843 (0xf03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C2CC, serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Validity Not Before: Apr 24 17:38:12 2025 GMT Not After : May 1 17:38:12 2025 GMT Subject: CN=680a7705-0c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ed:1a:d9:a5:4f:e1:4d:82:bb:cd:b4:56:53: 98:cf:0f:0f:6f:d5:f8:70:b7:d9:42:0d:bb:94:19: ee:c7:d8:2a:a1:b8:4a:a4:58:85:53:34:94:ee:2f: a0:41:6f:4c:1a:8f:78:30:15:2d:b9:a5:eb:6c:a1: 01:31:21:2b:55:0e:af:1c:96:14:d6:33:66:c7:a2: 27:54:68:1b:69:55:63:6b:7a:9c:ad:f6:84:1c:1f: 4c:bb:b8:ec:48:13:cc:1e:2b:c2:ba:18:6a:7e:61: c5:94:dc:18:08:67:46:06:00:b4:f3:5e:66:c1:dd: cb:cc:13:85:07:24:39:46:3b:ba:45:19:a4:7e:e4: a3:bc:07:d7:f9:1d:05:e3:13:ee:81:2f:c4:2d:b0: 6c:80:e7:07:a6:14:05:3e:41:de:07:e3:44:1a:b6: 76:dc:df:f6:64:c9:ce:51:c0:dd:68:c2:ea:15:89: 27:f0:74:62:5f:c8:63:81:4f:98:fd:8c:82:f0:2a: 69:16:94:46:80:5a:ff:a1:a6:16:3b:d3:0d:fb:72: 07:b7:34:e0:4b:16:0e:93:bb:e2:90:ea:ee:59:3d: 04:14:87:2f:60:c1:36:b0:d0:30:26:95:e1:99:2f: 93:be:42:bd:89:f4:b0:88:30:21:81:17:fa:d3:88: 69:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:7D:E5:F7:61:1D:11:02:02:37:6D:D1:92:69:BC:A6:47:49:EF:8D X509v3 Authority Key Identifier: keyid:F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:7b:62:33:bc:d4:6b:ac:e8:e5:5c:fa:f3:f3:57:98:58:00: a8:5e:fd:b3:78:84:10:ef:a8:fa:b9:89:a9:6f:c3:44:6c:e5: e6:cd:12:08:60:cf:ed:f7:86:d1:72:d0:38:01:6f:47:4e:50: 6c:db:32:59:ac:6f:e9:6f:ae:a3:4a:30:48:e9:b5:03:3a:51: d7:57:29:10:e7:0e:ff:ac:ec:8a:7f:d2:a7:b1:2f:10:77:23: 92:f6:f7:97:17:7a:4c:1b:11:d1:a6:40:18:7a:df:22:39:ac: f5:96:7d:2e:0c:10:e6:06:49:c6:dc:21:56:64:57:13:b2:1b: 5a:16:1c:23:e1:67:14:9b:8e:79:e2:2a:06:c7:d9:76:44:26: fc:3b:2a:78:0c:62:b9:3e:19:0a:67:92:88:30:90:65:c6:41: f6:78:d0:22:c4:e8:d4:0b:18:73:7b:a5:72:53:d4:33:92:84: b2:77:c7:a1:26:3d:36:ba:e4:ee:ca:9a:41:12:02:23:3d:cd: d5:96:92:91:10:55:cb:65:84:27:32:b0:4c:d4:c4:bd:b4:c7: 18:fc:11:77:89:a5:b4:e1:31:55:df:2f:71:44:44:19:59:8b: 68:aa:19:ab:6e:0d:a3:a0:5e:ce:29:58:00:4d:60:2c:a0:a1: 1d:95:54:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyQ0MxMTAvBgNVBAUTKEY5QjhGOTFEMjkyOEJFQUEzNTFDQzM0NUM0NzM2OTMy RkQ4NjM5RjEwHhcNMjUwNDI0MTczODEyWhcNMjUwNTAxMTczODEyWjAYMRYwFAYD VQQDEw02ODBhNzcwNS0wYzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3e0a2aVP4U2Cu820VlOYzw8Pb9X4cLfZQg27lBnux9gqobhKpFiFUzSU7i+g QW9MGo94MBUtuaXrbKEBMSErVQ6vHJYU1jNmx6InVGgbaVVja3qcrfaEHB9Mu7js SBPMHivCuhhqfmHFlNwYCGdGBgC0815mwd3LzBOFByQ5Rju6RRmkfuSjvAfX+R0F 4xPugS/ELbBsgOcHphQFPkHeB+NEGrZ23N/2ZMnOUcDdaMLqFYkn8HRiX8hjgU+Y /YyC8CppFpRGgFr/oaYWO9MN+3IHtzTgSxYOk7vikOruWT0EFIcvYME2sNAwJpXh mS+TvkK9ifSwiDAhgRf604hpxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDV95fdh HRECAjdt0ZJpvKZHSe+NMB8GA1UdIwQYMBaAFPm4+R0pKL6qNRzDRcRzaTL9hjnx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzJDQy9DQzE5Mzg3Njc4 REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3ZxbzFITU5GeEhOcE12MkdP ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1iajVIU2tvdnFvMUhNTkZ4SE5wTXYyR09mRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzJDQy9DQzE5Mzg3Njc4REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3Zx bzFITU5GeEhOcE12MkdPZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAie2IzvNRrrOjlXPrz81eYWACoXv2zeIQQ76j6uYmpb8NEbOXmzRII YM/t94bRctA4AW9HTlBs2zJZrG/pb66jSjBI6bUDOlHXVykQ5w7/rOyKf9KnsS8Q dyOS9veXF3pMGxHRpkAYet8iOaz1ln0uDBDmBknG3CFWZFcTshtaFhwj4WcUm455 4ioGx9l2RCb8Oyp4DGK5PhkKZ5KIMJBlxkH2eNAixOjUCxhze6VyU9QzkoSyd8eh Jj02uuTuyppBEgIjPc3VlpKREFXLZYQnMrBM1MS9tMcY/BF3iaW04TFV3y9xREQZ WYtoqhmrbg2joF7OKVgATWAsoKEdlVTQ -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:48 2025 by rpki-client