$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft File: -cNjgFn4ZOhK479Q2qwHnGhGPqc.mft (raw, json) Hash identifier: t0mWeERiwbceMaBMIgO5GjriJb/+Mv5Y+j2i45YESew= Subject key identifier: 88:79:BE:BC:1B:49:FB:53:68:15:81:3F:05:DC:8F:FD:4C:AD:E0:D8 Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 Certificate issuer: /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Certificate serial: 051B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft Manifest number: 050D Signing time: Thu 24 Apr 2025 23:28:16 +0000 Manifest this update: Thu 24 Apr 2025 23:28:16 +0000 Manifest next update: Thu 01 May 2025 23:28:16 +0000 Files and hashes: 1: -cNjgFn4ZOhK479Q2qwHnGhGPqc.crl (hash: zlaYShSTHHdVG8iCEdVdL+17tBBTkQ/y4xPHprGvyGc=) 2: E0A5F584DFAC11EE8C281B42C4F9AE02.roa (hash: uEs/Ek7RKHaXQAk1u0ZUP/YjMBmk6kEDrvy+C4XPa0M=) 3: 8A0874C0AA5211EEAFC18554C4F9AE02.roa (hash: NlN5fs6YliLYR5HdT/sNLzjDC0HoiB4qtgUQ0EkZvxE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1307 (0x51b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DB2F, serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Validity Not Before: Apr 24 23:28:16 2025 GMT Not After : May 1 23:28:16 2025 GMT Subject: CN=680ac910-ef2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5a:77:cf:af:37:2b:e4:86:63:78:5b:26:91: 48:a5:72:b1:75:a0:f1:18:a1:52:e2:fb:5b:11:60: 1f:0f:3f:f3:28:81:79:e5:45:e1:cc:39:80:2f:0a: 30:7a:16:3f:ed:43:e8:cf:70:3a:6e:57:06:bc:6b: 1d:5d:cd:13:bf:5c:b4:ca:01:31:0c:3f:31:91:8f: cd:1d:60:e4:26:7d:d2:c4:dc:1e:bf:b0:3c:bf:28: 7c:96:96:b3:08:c8:60:5e:6f:5b:24:25:a8:14:d5: 3c:91:b7:f1:88:52:fa:3e:10:dd:2e:92:1c:58:59: 71:d7:a2:08:e9:5b:1b:e3:3b:98:bb:27:31:55:ee: c1:84:5b:e7:4c:dc:23:88:6e:32:0f:e7:fc:f1:38: 83:27:bb:c4:18:be:bb:0b:63:20:c3:aa:49:35:19: a8:94:a5:a2:92:4d:f2:ce:71:d3:d9:06:8c:fa:14: 3e:5d:c2:78:0f:fa:0a:e9:96:7c:7b:9d:a2:f5:4f: 85:5c:19:12:4a:34:cb:9e:32:54:de:61:13:41:65: 84:86:24:7a:f9:04:ee:0c:df:e7:44:0e:6d:f7:9a: 25:42:39:35:e2:b1:17:09:ab:b5:3e:7c:a1:68:ba: 66:7e:a1:19:65:48:1c:83:79:53:da:49:d5:77:d5: 00:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:79:BE:BC:1B:49:FB:53:68:15:81:3F:05:DC:8F:FD:4C:AD:E0:D8 X509v3 Authority Key Identifier: keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:9c:57:70:8d:de:20:50:36:6a:c0:99:c1:22:87:8b:e2:b8: 42:cf:e8:75:cf:61:82:49:7b:e8:9d:c8:bb:45:3b:ce:c4:93: d3:a1:61:36:45:26:62:03:12:73:a9:12:a1:1d:80:62:7a:c3: 0b:f7:f0:01:e1:68:03:87:08:a7:34:34:3f:0d:5d:07:24:9b: e7:09:14:8c:16:e3:50:f4:77:d2:b4:d2:bb:28:65:13:48:92: df:c6:e9:24:1d:e1:2b:dc:a9:87:ab:aa:7a:71:38:6f:92:81: b8:52:77:b1:5b:51:fd:1b:7f:9e:7a:c0:85:09:93:94:7f:32: 3c:6e:62:09:1c:fd:84:21:9d:a2:d1:2b:c9:a5:a6:10:f6:5d: 52:d2:41:c5:e6:ce:34:4f:73:e7:4a:f2:62:d6:e6:d4:4d:73: 3e:72:88:aa:17:06:aa:7f:70:77:5b:bb:71:78:b2:82:5b:94: 00:f2:2c:38:f2:91:32:f4:02:5b:29:75:77:d5:6f:bb:0f:37: e8:03:c8:42:f1:7d:f9:01:d1:69:03:1b:1e:51:87:cd:f7:af: 74:0f:eb:13:b7:01:53:57:1d:14:2c:31:46:f0:c3:bc:6a:ef: 1a:00:d8:37:eb:71:e4:af:71:5d:ac:50:7d:45:14:7e:a5:1d: 22:f6:cf:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURCMkYxMTAvBgNVBAUTKEY5QzM2MzgwNTlGODY0RTg0QUUzQkY1MERBQUMwNzlD Njg0NjNFQTcwHhcNMjUwNDI0MjMyODE2WhcNMjUwNTAxMjMyODE2WjAYMRYwFAYD VQQDEw02ODBhYzkxMC1lZjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA41p3z683K+SGY3hbJpFIpXKxdaDxGKFS4vtbEWAfDz/zKIF55UXhzDmALwow ehY/7UPoz3A6blcGvGsdXc0Tv1y0ygExDD8xkY/NHWDkJn3SxNwev7A8vyh8lpaz CMhgXm9bJCWoFNU8kbfxiFL6PhDdLpIcWFlx16II6Vsb4zuYuycxVe7BhFvnTNwj iG4yD+f88TiDJ7vEGL67C2Mgw6pJNRmolKWikk3yznHT2QaM+hQ+XcJ4D/oK6ZZ8 e52i9U+FXBkSSjTLnjJU3mETQWWEhiR6+QTuDN/nRA5t95olQjk14rEXCau1Pnyh aLpmfqEZZUgcg3lT2knVd9UAwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIh5vrwb SftTaBWBPwXcj/1MreDYMB8GA1UdIwQYMBaAFPnDY4BZ+GToSuO/UNqsB5xoRj6n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REIyRi9FRjU5Q0VDNDBB REExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpPaEs0NzlRMnF3SG5HaEdQ cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jTmpnRm40Wk9oSzQ3OVEycXdIbkdoR1BxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REIyRi9FRjU5Q0VDNDBBREExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpP aEs0NzlRMnF3SG5HaEdQcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAInFdwjd4gUDZqwJnBIoeL4rhCz+h1z2GCSXvonci7RTvOxJPToWE2 RSZiAxJzqRKhHYBiesML9/AB4WgDhwinNDQ/DV0HJJvnCRSMFuNQ9HfStNK7KGUT SJLfxukkHeEr3KmHq6p6cThvkoG4UnexW1H9G3+eesCFCZOUfzI8bmIJHP2EIZ2i 0SvJpaYQ9l1S0kHF5s40T3PnSvJi1ubUTXM+coiqFwaqf3B3W7txeLKCW5QA8iw4 8pEy9AJbKXV31W+7DzfoA8hC8X35AdFpAxseUYfN9690D+sTtwFTVx0ULDFG8MO8 au8aANg363Hkr3FdrFB9RRR+pR0i9s+E -----END CERTIFICATE-----Generated at Sat Apr 26 12:18:56 2025 by rpki-client