$ rpki-client -vvf rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft File: cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft (raw, json) Hash identifier: sx0/i/s12+9q9ME7C9sc52Umq1tAWsBKkSzsVn0s+2A= Subject key identifier: DF:D0:F1:5E:D0:BF:80:CB:D7:E8:78:61:A5:34:74:D6:BB:50:C0:36 Authority key identifier: 70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87 Certificate issuer: /CN=A919D49F/serialNumber=707D48605A0D85772F90DC4B1172BEF30294A087 Certificate serial: 1055 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft Manifest number: 104E Signing time: Thu 24 Apr 2025 17:22:59 +0000 Manifest this update: Thu 24 Apr 2025 17:22:59 +0000 Manifest next update: Thu 01 May 2025 17:22:59 +0000 Files and hashes: 1: cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl (hash: BRRdg2YmTB5dxf32wTuDfiV0pCviXpAm0NnGEa6J1rE=) 2: 74087358355111E99EC82E0AC4F9AE02.roa (hash: tyb0mMEVFvr0b00WBN86r+sNpOhKC86WXh33owud0/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:22:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4181 (0x1055) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D49F, serialNumber=707D48605A0D85772F90DC4B1172BEF30294A087 Validity Not Before: Apr 24 17:22:59 2025 GMT Not After : May 1 17:22:59 2025 GMT Subject: CN=680a7373-be8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:de:fb:bb:8a:6c:c4:e8:09:16:f5:f8:62:f1: 42:c0:e3:51:fd:55:7b:18:bd:0d:ab:6c:5c:3d:08: 5c:f4:a0:20:16:8d:e1:5c:9b:10:df:a7:4f:5d:4d: e7:95:09:44:70:bf:a9:7a:58:0f:73:16:f7:4c:a3: 21:91:3c:a3:0f:36:63:0e:a3:2d:b3:b6:0e:dc:f8: e5:c6:d5:10:3c:06:eb:4b:8b:e6:85:9f:02:f0:23: 27:e7:43:68:7d:2a:8f:2e:c0:7d:be:a2:c1:8a:55: d9:9c:78:ee:a6:df:6d:32:f0:ce:03:24:4d:83:b1: e2:50:c5:77:54:28:ce:97:62:30:40:8e:cd:26:3b: 1c:9f:e6:55:dc:9c:44:c2:14:87:12:05:fb:39:fe: 14:d2:0c:8c:db:cc:14:f7:e2:36:b8:b3:e0:f6:04: ff:83:03:87:42:27:80:7c:87:e8:fe:d1:0c:13:5c: 99:66:54:1b:ba:6b:8a:20:5c:32:63:74:77:2e:6a: c7:b7:0d:b6:70:d9:bf:dc:4d:e7:de:4a:c8:3d:6c: 5c:83:c4:16:91:d6:13:71:74:02:1c:83:0a:62:00: 5a:59:41:ba:29:67:af:11:cf:6e:17:58:a9:22:d5: d0:df:e2:ba:d4:b9:1b:1b:bc:d2:71:53:77:51:39: c2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D0:F1:5E:D0:BF:80:CB:D7:E8:78:61:A5:34:74:D6:BB:50:C0:36 X509v3 Authority Key Identifier: keyid:70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:98:4e:d0:22:ba:b3:eb:d6:28:2e:5c:99:fa:95:e5:11:62: 4f:fe:90:97:cd:b7:5a:98:1d:e3:d0:d0:4f:82:c8:25:0a:e4: 10:26:25:80:1c:fc:1a:53:43:7e:45:43:37:5c:3c:a1:56:a7: 5e:e3:c2:08:7e:47:70:6b:8a:3f:72:2c:8f:ff:74:6c:87:1d: 33:ec:b3:f8:c0:fa:4e:e1:80:ac:f7:eb:b0:55:c0:5c:c7:73: ca:5d:86:65:71:92:d8:d8:db:e4:c1:9f:f7:37:fd:8b:27:39: bc:ae:a4:f2:44:24:c6:45:ea:01:2b:78:16:8b:fd:75:b8:e1: 96:33:4a:27:e3:56:47:e8:92:60:a0:09:7f:6a:25:0a:2c:b2: ff:33:b1:b7:52:62:1f:7b:1e:c9:6b:85:94:c4:4a:84:c3:f3: 70:76:ff:9c:c8:63:58:b1:d8:2a:6b:5c:25:8f:0c:fb:73:00: 8c:79:5e:fa:09:1f:90:61:19:1f:8a:f6:15:5a:0e:19:8b:ef: 93:d0:d3:e6:32:9a:46:8f:13:97:b7:6f:d4:57:da:37:b3:2e: b5:5e:8e:9f:96:3e:d0:85:35:fa:0f:70:6f:9c:a3:5b:b4:e5: 12:bf:b4:6f:8f:1e:84:8d:c9:6d:0c:7d:dc:6d:73:7a:ae:e1: 1c:e6:7b:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ0OUYxMTAvBgNVBAUTKDcwN0Q0ODYwNUEwRDg1NzcyRjkwREM0QjExNzJCRUYz MDI5NEEwODcwHhcNMjUwNDI0MTcyMjU5WhcNMjUwNTAxMTcyMjU5WjAYMRYwFAYD VQQDEw02ODBhNzM3My1iZThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2d77u4psxOgJFvX4YvFCwONR/VV7GL0Nq2xcPQhc9KAgFo3hXJsQ36dPXU3n lQlEcL+pelgPcxb3TKMhkTyjDzZjDqMts7YO3PjlxtUQPAbrS4vmhZ8C8CMn50No fSqPLsB9vqLBilXZnHjupt9tMvDOAyRNg7HiUMV3VCjOl2IwQI7NJjscn+ZV3JxE whSHEgX7Of4U0gyM28wU9+I2uLPg9gT/gwOHQieAfIfo/tEME1yZZlQbumuKIFwy Y3R3LmrHtw22cNm/3E3n3krIPWxcg8QWkdYTcXQCHIMKYgBaWUG6KWevEc9uF1ip ItXQ3+K61LkbG7zScVN3UTnC8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/Q8V7Q v4DL1+h4YaU0dNa7UMA2MB8GA1UdIwQYMBaAFHB9SGBaDYV3L5DcSxFyvvMClKCH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDQ5Ri8wQkFDODU1NjM1 NTExMUU5OThBNTBBMEFDNEY5QUUwMi9jSDFJWUZvTmhYY3ZrTnhMRVhLLTh3S1Vv SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NIMUlZRm9OaFhjdmtOeExFWEstOHdLVW9JYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDQ5Ri8wQkFDODU1NjM1NTExMUU5OThBNTBBMEFDNEY5QUUwMi9jSDFJWUZvTmhY Y3ZrTnhMRVhLLTh3S1VvSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdmE7QIrqz69YoLlyZ+pXlEWJP/pCXzbdamB3j0NBPgsglCuQQJiWA HPwaU0N+RUM3XDyhVqde48IIfkdwa4o/ciyP/3Rshx0z7LP4wPpO4YCs9+uwVcBc x3PKXYZlcZLY2NvkwZ/3N/2LJzm8rqTyRCTGReoBK3gWi/11uOGWM0on41ZH6JJg oAl/aiUKLLL/M7G3UmIfex7Ja4WUxEqEw/Nwdv+cyGNYsdgqa1wljwz7cwCMeV76 CR+QYRkfivYVWg4Zi++T0NPmMppGjxOXt2/UV9o3sy61Xo6flj7QhTX6D3BvnKNb tOUSv7Rvjx6EjcltDH3cbXN6ruEc5nut -----END CERTIFICATE-----Generated at Sat Apr 26 04:33:29 2025 by rpki-client