$ rpki-client -vvf rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft File: 4659B01pZ-L0n_njuNebv6KAmpI.mft (raw, json) Hash identifier: E+MItxuArd384n9oNEmbtBqIk2Pi+lEjSXL0c+z+WUM= Subject key identifier: F9:31:05:BE:81:C4:30:6C:17:4E:76:DF:9C:6D:F5:8F:73:FA:04:00 Authority key identifier: E3:AE:7D:07:4D:69:67:E2:F4:9F:F9:E3:B8:D7:9B:BF:A2:80:9A:92 Certificate issuer: /CN=A918A695/serialNumber=E3AE7D074D6967E2F49FF9E3B8D79BBFA2809A92 Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft Manifest number: 80 Signing time: Sat 03 May 2025 06:00:18 +0000 Manifest this update: Sat 03 May 2025 06:00:17 +0000 Manifest next update: Sat 10 May 2025 06:00:17 +0000 Files and hashes: 1: 4659B01pZ-L0n_njuNebv6KAmpI.crl (hash: RIonz/N7vqYBOIKw0VWqGrxwrmkmakGXRQgGHKHj16M=) 2: 0DE9C0F2691E11EF86B94667C4F9AE02.roa (hash: 13S0uPk78cTkONRaoiB2NygyvHW1IriAd1JcSvRHXys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.crl rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 06:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A695, serialNumber=E3AE7D074D6967E2F49FF9E3B8D79BBFA2809A92 Validity Not Before: May 3 06:00:17 2025 GMT Not After : May 10 06:00:17 2025 GMT Subject: CN=6815b0f2-58c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fb:69:94:92:17:68:eb:92:e1:76:f5:fc:2e: 55:87:a0:35:20:50:67:8e:1a:e3:c8:85:4f:ac:3d: 11:47:ca:87:fc:24:ac:d5:24:63:38:cb:ef:9e:7b: 1d:da:a6:9e:33:b7:cd:ec:4d:0c:13:75:5a:23:f8: 72:24:5c:fb:5a:45:b8:13:b2:fc:f9:29:98:32:86: 1a:b0:c1:96:ee:23:8b:84:1b:c7:f3:8b:8f:8e:53: 2a:09:c4:00:30:d0:a8:1e:af:50:78:eb:b3:18:f7: af:ba:d8:24:71:a0:b3:84:e0:65:e5:d7:ab:15:a9: ca:00:83:f2:fe:9b:3d:f6:e0:f2:69:73:10:91:b6: 56:31:df:4f:10:43:fd:a7:db:d8:d6:e6:e4:fe:a6: db:82:d5:c0:d9:14:43:17:76:e6:af:b4:db:42:ba: bf:22:db:8d:8f:c2:e3:ae:3f:6d:d9:58:02:58:ee: b9:79:e8:46:eb:78:af:ad:7c:17:b7:04:4c:57:3a: a0:43:31:13:08:1c:9c:25:24:89:ac:a9:fc:22:00: 5e:5b:77:9b:b7:6b:81:4b:07:a6:d9:44:ff:6a:8a: fc:ec:1b:94:ef:16:8d:e4:79:76:4b:6a:f6:c9:09: 58:ff:3f:57:bb:90:dc:fc:e4:c5:6e:5f:7d:14:42: 98:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:31:05:BE:81:C4:30:6C:17:4E:76:DF:9C:6D:F5:8F:73:FA:04:00 X509v3 Authority Key Identifier: keyid:E3:AE:7D:07:4D:69:67:E2:F4:9F:F9:E3:B8:D7:9B:BF:A2:80:9A:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:6c:52:5b:1f:3e:c4:16:e3:30:c6:b3:67:26:43:b0:84:44: b2:8f:e0:cc:ca:9e:5b:e4:74:ac:40:7e:75:1d:67:bb:13:dc: cc:dd:28:74:4f:ff:7f:e7:9a:bc:ab:74:d8:13:5a:d7:1b:17: 6d:49:36:32:c1:97:f4:91:eb:36:07:74:c8:48:e2:1a:a5:ae: b3:ca:50:f9:0b:23:87:6e:63:47:e6:45:e5:41:c8:37:31:d8: 9f:a7:b2:e9:d6:1d:2d:76:d1:3a:d5:ef:95:8a:e3:94:28:87: 75:96:00:28:cd:2e:c5:31:a5:68:94:9b:e9:26:ce:10:bf:27: 79:8c:b3:dc:e6:1d:1c:e2:53:6f:8b:e0:2c:89:4b:ae:b0:34: 4d:e7:1c:d1:ac:7a:32:56:a7:cd:e3:ca:39:44:6e:d7:58:47: 53:17:38:a4:d1:1c:bf:20:7c:2b:cb:df:ca:7c:18:57:8b:94: d0:06:15:59:ca:c2:b1:4e:ff:c6:44:e2:6e:aa:39:21:e7:f0: 9c:82:4e:38:ea:c6:f4:1d:45:bc:70:72:b4:ae:47:6f:17:11: 16:93:04:95:a1:a9:33:f6:a3:1f:08:e0:b0:55:66:0e:62:d4: 76:a5:af:0e:45:74:d1:01:e8:b8:75:7a:89:08:a9:dc:8c:90: da:a4:37:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE2OTUxMTAvBgNVBAUTKEUzQUU3RDA3NEQ2OTY3RTJGNDlGRjlFM0I4RDc5QkJG QTI4MDlBOTIwHhcNMjUwNTAzMDYwMDE3WhcNMjUwNTEwMDYwMDE3WjAYMRYwFAYD VQQDEw02ODE1YjBmMi01OGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvtplJIXaOuS4Xb1/C5Vh6A1IFBnjhrjyIVPrD0RR8qH/CSs1SRjOMvvnnsd 2qaeM7fN7E0ME3VaI/hyJFz7WkW4E7L8+SmYMoYasMGW7iOLhBvH84uPjlMqCcQA MNCoHq9QeOuzGPevutgkcaCzhOBl5derFanKAIPy/ps99uDyaXMQkbZWMd9PEEP9 p9vY1ubk/qbbgtXA2RRDF3bmr7TbQrq/ItuNj8Ljrj9t2VgCWO65eehG63ivrXwX twRMVzqgQzETCBycJSSJrKn8IgBeW3ebt2uBSwem2UT/aor87BuU7xaN5Hl2S2r2 yQlY/z9Xu5Dc/OTFbl99FEKYzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkxBb6B xDBsF05235xt9Y9z+gQAMB8GA1UdIwQYMBaAFOOufQdNaWfi9J/547jXm7+igJqS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTY5NS84REVGRTgwRTY5 MUQxMUVGQjhGRDFFNjRDNEY5QUUwMi80NjU5QjAxcFotTDBuX25qdU5lYnY2S0Ft cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzQ2NTlCMDFwWi1MMG5fbmp1TmVidjZLQW1wSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTY5NS84REVGRTgwRTY5MUQxMUVGQjhGRDFFNjRDNEY5QUUwMi80NjU5QjAxcFot TDBuX25qdU5lYnY2S0FtcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCybFJbHz7EFuMwxrNnJkOwhESyj+DMyp5b5HSsQH51HWe7E9zM3Sh0 T/9/55q8q3TYE1rXGxdtSTYywZf0kes2B3TISOIapa6zylD5CyOHbmNH5kXlQcg3 Mdifp7Lp1h0tdtE61e+ViuOUKId1lgAozS7FMaVolJvpJs4Qvyd5jLPc5h0c4lNv i+AsiUuusDRN5xzRrHoyVqfN48o5RG7XWEdTFzik0Ry/IHwry9/KfBhXi5TQBhVZ ysKxTv/GROJuqjkh5/Ccgk446sb0HUW8cHK0rkdvFxEWkwSVoakz9qMfCOCwVWYO YtR2pa8ORXTRAei4dXqJCKncjJDapDcu -----END CERTIFICATE-----Generated at Sun May 4 23:43:05 2025 by rpki-client