$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft File: fHxDqtDIa183jl18MzKgXeRhJ1A.mft (raw, json) Hash identifier: OnbwBksqQ8ZowmPNZH+tvBXGz00Ift4LZK+Y8M0ni7A= Subject key identifier: DF:15:85:C5:17:80:CB:EC:86:C2:55:8B:F5:20:56:46:F0:F7:75:3C Authority key identifier: 7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50 Certificate issuer: /CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750 Certificate serial: 07DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft Manifest number: 07C0 Signing time: Mon 12 May 2025 20:58:33 +0000 Manifest this update: Mon 12 May 2025 20:58:32 +0000 Manifest next update: Mon 19 May 2025 20:58:32 +0000 Files and hashes: 1: fHxDqtDIa183jl18MzKgXeRhJ1A.crl (hash: 2B7VQIkgPuAUTr1VZd8MR4AQCiCvAJVhOgLtfOwRVug=) 2: E7EBC9003EE411ED905A3415C4F9AE02.roa (hash: 7145KDk6Ud3gJk6wkOrSSRd7V4t35M2bwdrO78shBPE=) 3: E897EA5A3EE411ED905A3415C4F9AE02.roa (hash: wSUtbGUG6qJCjwBZF3AGH+0iZn8vKCgbBj1wQ7GjPys=) 4: 5035F194413211EDAAFCC96EC4F9AE02.roa (hash: qx6Ck2bt18JzwMSwE91OIh9TX6eoj+EFVUwzhl+omAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:58:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2014 (0x7de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CA50, serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750 Validity Not Before: May 12 20:58:32 2025 GMT Not After : May 19 20:58:32 2025 GMT Subject: CN=682260f9-51bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c5:52:95:d4:8b:47:95:9c:ca:64:93:fb:87: 8f:a7:9d:f0:46:01:78:17:7b:94:e4:f8:13:4f:ab: e1:1c:bd:96:18:ab:97:e2:a5:cb:7f:8e:62:b9:26: 0c:ce:09:6d:eb:18:ae:25:02:43:5f:99:bf:0b:d9: a2:8a:7e:82:51:85:a4:3a:dd:92:21:1c:36:ab:c6: 95:4a:5e:d4:ef:78:04:43:83:07:06:f6:ef:f2:01: 0f:ba:13:4e:ee:23:1d:f0:e7:09:cb:d6:f3:19:45: 3f:2f:08:f7:8b:e7:c9:9e:2a:ae:42:bf:f8:56:ac: b3:24:50:d5:8e:73:e9:99:3b:c6:23:fd:c9:39:0a: a0:a4:b8:5c:2d:50:b2:2e:a9:be:91:af:c2:2f:80: a2:0d:a4:df:69:9c:f8:6e:d6:08:e5:31:df:50:fa: ee:60:f0:94:67:e6:c6:02:2c:a2:63:6f:9b:83:12: 6a:04:e1:28:aa:d9:80:82:35:7c:cb:42:14:5d:20: 6a:81:b7:d1:1e:2e:a4:49:30:4c:fd:4b:a5:b6:b0: 72:81:e9:32:60:40:71:2d:8d:c1:41:fe:a6:5d:f0: bb:ff:53:10:ab:69:8f:0f:e0:d3:c4:7a:26:0c:e5: 5f:71:55:6d:27:08:c1:0e:4a:66:98:b7:b0:4a:1c: 40:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:15:85:C5:17:80:CB:EC:86:C2:55:8B:F5:20:56:46:F0:F7:75:3C X509v3 Authority Key Identifier: keyid:7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:6f:11:6b:e3:33:e3:f1:b6:82:e9:cc:c0:84:10:b0:a0:7c: 50:6d:d7:2f:2f:42:cc:b9:28:04:e3:1f:a4:05:c5:1f:f0:e4: 46:d4:0c:52:f8:c2:6e:2e:fa:17:dd:7c:3e:46:3b:0f:3a:f7: 58:e4:20:60:c6:e8:2b:f9:57:0a:c3:07:66:e0:6d:6d:f9:e9: 3d:5b:e6:bf:3a:92:1d:36:72:b9:c7:ab:94:98:0d:ba:ee:b1: 63:2c:bd:05:21:21:66:5a:17:d0:d3:22:78:ad:c2:f6:3e:f3: 8e:bf:a0:d6:ba:07:dc:6d:b3:07:ce:96:ce:d4:2b:e8:e2:3f: ac:dd:af:4a:6a:7e:f9:ce:ab:68:7d:5b:2e:71:42:1a:74:45: f8:bd:94:d5:bc:25:3a:13:c0:ca:fa:1e:bc:30:ae:7e:4a:90: 92:bf:93:fc:3f:e2:9f:0a:2d:35:cb:12:45:12:cf:8c:bd:7c: 8f:82:50:a6:13:bc:2c:2a:0b:70:ed:28:81:fe:91:9e:f2:8e: 4a:1a:d0:78:4b:77:d6:8d:71:e1:ea:58:22:25:77:36:92:f8: fe:81:44:04:97:98:d7:41:31:bd:93:af:46:ee:4c:ed:52:6a: 24:8e:97:ef:5d:49:be:6f:59:3a:22:08:42:65:67:24:7c:6c: c8:18:f8:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNBNTAxMTAvBgNVBAUTKDdDN0M0M0FBRDBDODZCNUYzNzhFNUQ3QzMzMzJBMDVE RTQ2MTI3NTAwHhcNMjUwNTEyMjA1ODMyWhcNMjUwNTE5MjA1ODMyWjAYMRYwFAYD VQQDEw02ODIyNjBmOS01MWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8VSldSLR5WcymST+4ePp53wRgF4F3uU5PgTT6vhHL2WGKuX4qXLf45iuSYM zglt6xiuJQJDX5m/C9miin6CUYWkOt2SIRw2q8aVSl7U73gEQ4MHBvbv8gEPuhNO 7iMd8OcJy9bzGUU/Lwj3i+fJniquQr/4VqyzJFDVjnPpmTvGI/3JOQqgpLhcLVCy Lqm+ka/CL4CiDaTfaZz4btYI5THfUPruYPCUZ+bGAiyiY2+bgxJqBOEoqtmAgjV8 y0IUXSBqgbfRHi6kSTBM/UultrBygekyYEBxLY3BQf6mXfC7/1MQq2mPD+DTxHom DOVfcVVtJwjBDkpmmLewShxAmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8VhcUX gMvshsJVi/UgVkbw93U8MB8GA1UdIwQYMBaAFHx8Q6rQyGtfN45dfDMyoF3kYSdQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0E1MC8zODFDMTcxNkZC QTUxMUVBQkJBRUIzNjNDNEY5QUUwMi9mSHhEcXRESWExODNqbDE4TXpLZ1hlUmhK MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZIeERxdERJYTE4M2psMThNektnWGVSaEoxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0E1MC8zODFDMTcxNkZCQTUxMUVBQkJBRUIzNjNDNEY5QUUwMi9mSHhEcXRESWEx ODNqbDE4TXpLZ1hlUmhKMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCebxFr4zPj8baC6czAhBCwoHxQbdcvL0LMuSgE4x+kBcUf8ORG1AxS +MJuLvoX3Xw+RjsPOvdY5CBgxugr+VcKwwdm4G1t+ek9W+a/OpIdNnK5x6uUmA26 7rFjLL0FISFmWhfQ0yJ4rcL2PvOOv6DWugfcbbMHzpbO1Cvo4j+s3a9Kan75zqto fVsucUIadEX4vZTVvCU6E8DK+h68MK5+SpCSv5P8P+KfCi01yxJFEs+MvXyPglCm E7wsKgtw7SiB/pGe8o5KGtB4S3fWjXHh6lgiJXc2kvj+gUQEl5jXQTG9k69G7kzt UmokjpfvXUm+b1k6IghCZWckfGzIGPjN -----END CERTIFICATE-----Generated at Wed May 14 13:05:54 2025 by rpki-client