$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft File: MfN4PHoe14P8H9p0H2p1KdWl5qA.mft (raw, json) Hash identifier: KvTi1R2NpSd6dilLM6F0X9NeYWkEjaF89KX83sqmfQY= Subject key identifier: 79:73:4B:87:3A:65:83:98:C2:EC:3F:DA:A6:E0:0B:1E:04:C5:3C:1B Authority key identifier: 31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0 Certificate issuer: /CN=A9199B24/serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0 Certificate serial: 0476 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft Manifest number: 0470 Signing time: Thu 24 Apr 2025 23:52:47 +0000 Manifest this update: Thu 24 Apr 2025 23:52:47 +0000 Manifest next update: Thu 01 May 2025 23:52:47 +0000 Files and hashes: 1: MfN4PHoe14P8H9p0H2p1KdWl5qA.crl (hash: V/ENo6JMVgUoDkr1Gw2pKkZ9zFYNeL/u9kmWKXBfKxI=) 2: CF272560413111ECB71E086AC4F9AE02.roa (hash: DFm7D2HD21ulEvvyR2LKRVZi0MMQ+cGXUer0vQ5hcd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1142 (0x476) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B24, serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0 Validity Not Before: Apr 24 23:52:47 2025 GMT Not After : May 1 23:52:47 2025 GMT Subject: CN=680acecf-5355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f3:f1:7d:98:35:ae:8b:e2:b9:c0:cf:80:89: f3:68:dc:fe:3b:85:7b:db:53:60:73:74:53:43:4a: fd:41:77:a2:d5:a6:22:9f:11:e7:1b:59:86:c3:53: c3:52:9a:21:8e:04:2c:12:e1:e1:37:a6:44:09:f7: 36:8b:c9:c2:24:50:65:83:b8:19:a8:b9:c1:2e:0c: 69:81:ed:b5:91:0b:6f:18:de:8b:3b:63:7c:23:f4: d4:74:b9:7e:79:a3:14:6f:fd:b7:ce:d8:f1:87:83: b5:ff:f6:cd:df:9d:31:ef:b4:b8:92:c1:36:b5:d1: df:f2:1a:39:d4:8a:a0:b7:67:55:32:cf:59:9a:fe: 11:49:17:4b:87:9e:bc:db:cc:05:4b:20:b1:ba:11: ca:e8:4b:19:68:b5:bb:65:c0:e6:99:9f:82:79:42: 1b:8c:88:c5:23:7c:02:43:8a:fc:a5:70:24:90:d6: c7:87:5d:79:38:88:cb:75:34:c1:ae:b2:7c:af:4f: 93:53:b9:f7:ac:e7:cf:b3:12:6a:75:6b:8e:d1:08: 0f:30:d5:0a:d0:ec:79:d0:b3:de:ad:2f:d7:41:42: b4:26:f9:76:ea:1b:b1:74:83:1a:3a:da:5f:a0:d8: 2b:7a:99:52:2c:52:e8:33:35:f9:9a:d3:03:cb:6f: 22:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:73:4B:87:3A:65:83:98:C2:EC:3F:DA:A6:E0:0B:1E:04:C5:3C:1B X509v3 Authority Key Identifier: keyid:31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:cf:62:10:ac:8a:36:bb:e5:f5:64:84:c2:6e:8d:bf:f9:c5: d3:ff:50:76:fa:7e:5b:e3:3f:f6:0a:76:38:93:d4:a3:ee:0a: 42:5f:05:d1:4a:2c:15:9e:d1:15:91:76:91:81:5c:cb:c3:8a: ad:3d:be:32:57:fc:8e:e6:06:66:dc:cb:91:34:61:ce:d3:29: e5:27:37:9b:12:0b:83:35:44:eb:7a:06:03:78:0e:ca:0b:15: 39:e2:b9:85:51:d0:8c:d2:71:29:09:d5:45:cb:52:44:9e:02: 38:f2:97:43:62:8c:d8:5c:4c:c5:49:21:a9:3d:f9:5c:d5:bc: 45:f9:f1:de:f2:02:ed:35:fe:e5:ee:84:84:8f:0c:c7:53:57: 4b:c2:f7:4a:27:56:e0:c4:c7:16:0e:ba:79:ba:d7:de:0c:ac: 32:10:33:2a:94:1d:5c:8d:c3:1c:3f:8a:c3:d7:6c:f9:4c:a6: bb:53:69:be:31:30:36:a9:5d:b9:c6:c5:96:cb:1b:53:f2:68: a4:4a:85:1f:30:27:39:7b:c1:97:f5:65:3d:1b:a2:ae:5a:19: 61:54:2c:a7:e7:94:fc:9a:d9:08:5c:41:c4:d7:08:16:5d:72: 99:87:86:05:cc:9b:fa:76:9b:40:2b:d9:b9:cd:df:49:d1:b7: f8:a4:30:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCMjQxMTAvBgNVBAUTKDMxRjM3ODNDN0ExRUQ3ODNGQzFGREE3NDFGNkE3NTI5 RDVBNUU2QTAwHhcNMjUwNDI0MjM1MjQ3WhcNMjUwNTAxMjM1MjQ3WjAYMRYwFAYD VQQDEw02ODBhY2VjZi01MzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PPxfZg1roviucDPgInzaNz+O4V721Ngc3RTQ0r9QXei1aYinxHnG1mGw1PD UpohjgQsEuHhN6ZECfc2i8nCJFBlg7gZqLnBLgxpge21kQtvGN6LO2N8I/TUdLl+ eaMUb/23ztjxh4O1//bN350x77S4ksE2tdHf8ho51Iqgt2dVMs9Zmv4RSRdLh568 28wFSyCxuhHK6EsZaLW7ZcDmmZ+CeUIbjIjFI3wCQ4r8pXAkkNbHh115OIjLdTTB rrJ8r0+TU7n3rOfPsxJqdWuO0QgPMNUK0Ox50LPerS/XQUK0Jvl26huxdIMaOtpf oNgreplSLFLoMzX5mtMDy28iVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlzS4c6 ZYOYwuw/2qbgCx4ExTwbMB8GA1UdIwQYMBaAFDHzeDx6HteD/B/adB9qdSnVpeag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUIyNC81RkZDOUVGNjQx MjUxMUVDQjdERjQ3N0VDNEY5QUUwMi9NZk40UEhvZTE0UDhIOXAwSDJwMUtkV2w1 cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01mTjRQSG9lMTRQOEg5cDBIMnAxS2RXbDVxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUIyNC81RkZDOUVGNjQxMjUxMUVDQjdERjQ3N0VDNEY5QUUwMi9NZk40UEhvZTE0 UDhIOXAwSDJwMUtkV2w1cUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuz2IQrIo2u+X1ZITCbo2/+cXT/1B2+n5b4z/2CnY4k9Sj7gpCXwXR SiwVntEVkXaRgVzLw4qtPb4yV/yO5gZm3MuRNGHO0ynlJzebEguDNUTregYDeA7K CxU54rmFUdCM0nEpCdVFy1JEngI48pdDYozYXEzFSSGpPflc1bxF+fHe8gLtNf7l 7oSEjwzHU1dLwvdKJ1bgxMcWDrp5utfeDKwyEDMqlB1cjcMcP4rD12z5TKa7U2m+ MTA2qV25xsWWyxtT8mikSoUfMCc5e8GX9WU9G6KuWhlhVCyn55T8mtkIXEHE1wgW XXKZh4YFzJv6dptAK9m5zd9J0bf4pDC2 -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:11 2025 by rpki-client