$ rpki-client -vvf rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.mft File: 81jWhVW6te9ipNz9TzJANe5gJLY.mft (raw, json) Hash identifier: XEODtHpGTQbR6zbDZrtl6dxKa/Psc9t2sL2WuZsWQOk= Subject key identifier: 46:49:CD:D9:60:53:65:06:2A:AD:5C:42:4A:DB:BA:C9:7C:99:0D:B0 Authority key identifier: F3:58:D6:85:55:BA:B5:EF:62:A4:DC:FD:4F:32:40:35:EE:60:24:B6 Certificate issuer: /CN=A919F64F/serialNumber=F358D68555BAB5EF62A4DCFD4F324035EE6024B6 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81jWhVW6te9ipNz9TzJANe5gJLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.mft Manifest number: 19 Signing time: Fri 25 Apr 2025 07:00:17 +0000 Manifest this update: Fri 25 Apr 2025 07:00:16 +0000 Manifest next update: Fri 02 May 2025 07:00:16 +0000 Files and hashes: 1: 81jWhVW6te9ipNz9TzJANe5gJLY.crl (hash: RgrLglBLyejndnRkYe5RbTpaI8MzbUxYZE8dvStUG+s=) 2: 39E77242050B11F097AB4F3BC4F9AE02.roa (hash: PDiocTjJKaFu9YNf5gjKMiNkfOKqtTVuKhZKfr9ypcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.crl rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81jWhVW6te9ipNz9TzJANe5gJLY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F64F, serialNumber=F358D68555BAB5EF62A4DCFD4F324035EE6024B6 Validity Not Before: Apr 25 07:00:16 2025 GMT Not After : May 2 07:00:16 2025 GMT Subject: CN=680b3301-35e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c8:0f:4b:7e:64:d0:95:e4:d3:39:84:7e:73: 5d:f6:23:3c:32:a9:6f:a3:03:07:96:d3:9b:05:d3: 24:46:a1:7a:3d:2c:0b:7b:02:4b:82:07:85:e1:44: ba:29:98:44:f6:fe:da:35:eb:e5:b4:6e:1a:0c:10: fc:ec:10:f8:2c:84:35:20:b6:1e:cc:98:32:4f:42: 5a:f6:76:6b:16:c1:11:5e:ca:8e:19:28:51:36:e0: ad:f1:ad:4a:c2:4a:d8:d6:02:5b:a2:8e:92:fb:72: 8c:95:eb:22:75:75:24:f0:4a:20:a6:ea:83:66:4f: 70:25:45:ea:fa:a5:b1:4c:df:fc:6b:ff:10:25:dd: b0:8c:23:70:84:b1:23:43:50:68:ba:8b:0c:70:89: 82:fe:4d:64:de:82:30:58:4b:65:da:08:ed:90:36: 9d:4b:44:34:e9:33:03:c2:1a:07:32:b6:c3:54:f9: 88:fa:f5:d8:8a:92:1d:e6:4a:92:34:53:12:8a:f3: 45:c8:65:fc:64:42:94:30:3b:98:de:be:a8:5e:00: 20:27:91:bc:94:ba:c1:b3:89:17:79:37:4c:99:53: 0c:4a:b2:25:bb:24:43:07:7a:eb:da:61:6e:04:1b: 36:9e:f8:fe:40:47:56:94:7c:78:14:84:85:b6:34: 7a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:49:CD:D9:60:53:65:06:2A:AD:5C:42:4A:DB:BA:C9:7C:99:0D:B0 X509v3 Authority Key Identifier: keyid:F3:58:D6:85:55:BA:B5:EF:62:A4:DC:FD:4F:32:40:35:EE:60:24:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81jWhVW6te9ipNz9TzJANe5gJLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F64F/ABA613D0050A11F087B7653AC4F9AE02/81jWhVW6te9ipNz9TzJANe5gJLY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:af:66:e1:2c:c1:94:49:82:5f:3b:e8:04:2c:8b:f5:18:9a: af:1d:ce:f6:27:05:5f:a9:bb:3a:ae:02:a3:f2:08:31:a9:45: fb:2f:2b:06:1f:cc:56:ae:0e:d4:70:88:3b:fa:28:b0:a0:7e: 27:34:f1:15:0c:4b:83:a2:64:dc:da:34:97:8b:d7:c6:e1:6a: cb:af:7d:6a:ef:c2:e1:f0:17:1c:bf:61:d8:21:1e:75:20:f7: 8e:2e:bc:99:9f:26:d1:99:66:51:cb:9f:a8:19:fd:36:d9:27: 26:f3:2d:e1:8d:99:98:18:58:18:e4:0a:29:67:00:b9:22:0f: 9a:d4:2b:b6:b6:e1:9b:38:b4:77:7b:a1:ef:ef:f8:7d:a1:7e: c4:14:b7:c9:89:7d:ad:21:58:da:0e:9e:f1:69:6d:55:16:3e: d1:ff:f1:42:8d:36:ea:74:20:c3:0e:6f:71:58:44:c3:a0:de: c7:e6:b5:71:5b:53:a2:67:9b:5b:ad:e6:be:13:f6:19:ff:71: aa:3d:1d:cc:7d:0d:de:e7:dd:f2:03:1e:b3:ec:f8:f1:0a:ee: aa:04:22:2e:5d:b7:7b:62:d3:63:9c:cd:07:25:86:16:17:14: 85:97:48:a7:c6:41:be:5d:ef:1c:c0:2d:f9:b8:5d:b9:4b:05: 75:34:59:49 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RjY0RjExMC8GA1UEBRMoRjM1OEQ2ODU1NUJBQjVFRjYyQTREQ0ZENEYzMjQwMzVF RTYwMjRCNjAeFw0yNTA0MjUwNzAwMTZaFw0yNTA1MDIwNzAwMTZaMBgxFjAUBgNV BAMTDTY4MGIzMzAxLTM1ZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqyA9LfmTQleTTOYR+c132IzwyqW+jAweW05sF0yRGoXo9LAt7AkuCB4XhRLop mET2/to16+W0bhoMEPzsEPgshDUgth7MmDJPQlr2dmsWwRFeyo4ZKFE24K3xrUrC StjWAluijpL7coyV6yJ1dSTwSiCm6oNmT3AlRer6pbFM3/xr/xAl3bCMI3CEsSND UGi6iwxwiYL+TWTegjBYS2XaCO2QNp1LRDTpMwPCGgcytsNU+Yj69diKkh3mSpI0 UxKK80XIZfxkQpQwO5jevqheACAnkbyUusGziRd5N0yZUwxKsiW7JEMHeuvaYW4E Gzae+P5AR1aUfHgUhIW2NHoNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURknN2WBT ZQYqrVxCStu6yXyZDbAwHwYDVR0jBBgwFoAU81jWhVW6te9ipNz9TzJANe5gJLYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGNjRGL0FCQTYxM0QwMDUw QTExRjA4N0I3NjUzQUM0RjlBRTAyLzgxaldoVlc2dGU5aXBOejlUekpBTmU1Z0pM WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvODFqV2hWVzZ0ZTlpcE56OVR6SkFOZTVnSkxZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG NjRGL0FCQTYxM0QwMDUwQTExRjA4N0I3NjUzQUM0RjlBRTAyLzgxaldoVlc2dGU5 aXBOejlUekpBTmU1Z0pMWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA6vZuEswZRJgl876AQsi/UYmq8dzvYnBV+puzquAqPyCDGpRfsvKwYf zFauDtRwiDv6KLCgfic08RUMS4OiZNzaNJeL18bhasuvfWrvwuHwFxy/YdghHnUg 944uvJmfJtGZZlHLn6gZ/TbZJybzLeGNmZgYWBjkCilnALkiD5rUK7a24Zs4tHd7 oe/v+H2hfsQUt8mJfa0hWNoOnvFpbVUWPtH/8UKNNup0IMMOb3FYRMOg3sfmtXFb U6Jnm1ut5r4T9hn/cao9Hcx9Dd7n3fIDHrPs+PEK7qoEIi5dt3ti02OczQclhhYX FIWXSKfGQb5d7xzALfm4XblLBXU0WUk= -----END CERTIFICATE-----Generated at Sat Apr 26 14:08:14 2025 by rpki-client