$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft File: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft (raw, json) Hash identifier: pnvddtj4rul8W/Qt82fkr/5/Jm1xlikGxarXLJ2Pbw4= Subject key identifier: 21:88:FF:90:A2:51:9F:B4:E5:9A:8B:7A:6C:EA:AD:C6:D1:AE:72:55 Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Certificate serial: 0D53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft Manifest number: 0D19 Signing time: Wed 14 May 2025 18:14:25 +0000 Manifest this update: Wed 14 May 2025 18:14:24 +0000 Manifest next update: Wed 21 May 2025 18:14:24 +0000 Files and hashes: 1: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl (hash: SQPUkmPNPK6lNHY/+mlzIvc+bXcipiTCnVg8qKhrHbE=) 2: 938E408897E011EB8870DB29C4F9AE02.roa (hash: AvnHda6N9uSW4caKdT/1qliaFxGzoCjsBnC7c0M2BTI=) 3: 5614ADF6C2D811EF873CE458C4F9AE02.roa (hash: RDs4E4PsjjGLZT+7OZQ+4M3HWmV0V93uL7g7uiZOHjA=) 4: 073C2C80C4C411EEA7C8041DC4F9AE02.roa (hash: +NoTiVoOFpuwdO/IMcCankOcyEeq0d7jzR0LbMB2Mow=) 5: 82F618E6187311F0A89EDE11C4F9AE02.roa (hash: F6pHZaK0p+hfG2R8U42UIH6mVTyAquKiquy2pjJGlpw=) 6: 5B4A8D6EC37C11EF91554967C4F9AE02.roa (hash: DyFZphDj+xYQOQuO59LnOvFtMeJz8Mp/8a6Sd7JeRP8=) 7: 27F7A40AE4FD11E990830B62C4F9AE02.roa (hash: 0CwL/9pIHvX1NQjOju2K8M/8kw+TsmpQ+hJ5ObtVylo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3411 (0xd53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DC44, serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Validity Not Before: May 14 18:14:24 2025 GMT Not After : May 21 18:14:24 2025 GMT Subject: CN=6824dd80-7780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:08:67:62:d9:84:ac:0b:d4:c6:33:35:2c:bf: de:a3:83:73:76:59:6a:46:6f:0f:49:98:2b:c2:85: 08:da:e4:9b:94:97:aa:de:e5:4d:5d:d5:8f:8f:1f: ce:a7:b1:7d:76:9c:79:27:b8:15:6e:51:67:1e:f7: c4:a6:db:df:ed:75:3f:24:02:51:56:00:13:fb:80: 63:50:9c:07:1c:b6:16:5b:4e:69:d3:f0:e2:41:d2: 0d:25:fc:42:08:c5:3c:b8:36:cb:c5:6b:d9:af:83: 8f:c3:e1:dc:b2:fa:fe:6c:61:33:22:c6:f7:b5:69: e1:50:65:af:c5:b4:fd:89:11:b9:c0:13:5c:70:2e: 05:4e:93:9a:fb:c9:95:11:a2:39:df:6b:5b:43:b5: 12:d2:d2:21:04:02:5e:b8:5c:7e:92:be:40:90:5a: e9:20:84:82:89:a9:73:3a:9b:5b:02:6a:06:42:93: c2:c1:80:fb:87:29:eb:7a:7a:40:c8:89:07:74:62: 9c:77:59:91:8a:cf:5f:b7:97:5f:76:15:03:53:52: d4:c4:21:39:36:03:4f:a9:15:a4:05:92:70:aa:61: 44:90:63:24:1b:e2:bb:b7:8a:85:b4:38:29:da:06: f9:db:6a:35:ec:1b:d8:ef:36:84:b0:e8:7f:22:eb: 9e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:88:FF:90:A2:51:9F:B4:E5:9A:8B:7A:6C:EA:AD:C6:D1:AE:72:55 X509v3 Authority Key Identifier: keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:35:5a:2e:95:10:19:11:ef:97:47:fc:f8:c9:8f:c6:36:8b: 5c:a6:d3:51:82:29:a4:8c:2b:56:08:3f:b0:d1:ab:a5:82:db: f6:c4:fc:f4:39:e3:9e:8f:b4:2e:fd:a4:d5:54:10:e1:89:bc: de:6b:d8:ad:6c:d2:15:5f:df:30:65:3c:f5:96:17:7d:9f:fe: 61:af:a8:52:18:47:52:6a:ef:f2:81:2f:a4:6d:b1:19:4f:54: 89:b3:fb:3f:a3:ff:c3:cd:d4:e1:b7:2c:f8:cf:46:52:66:a8: c9:26:59:c8:8a:ac:35:02:1e:fd:95:22:dc:67:d1:2d:96:4f: 7b:53:14:48:86:7a:b3:82:28:e9:47:51:4d:05:31:a3:60:ba: f3:30:0a:be:72:50:7a:a8:5c:de:6c:aa:c3:0e:2d:50:b2:bc: 42:63:df:03:95:69:c0:52:b5:01:42:04:4d:9d:6d:76:b0:b7: 98:f8:66:98:f8:93:93:b0:6e:08:cd:bb:10:24:55:79:aa:be: a3:e3:0a:1e:21:ca:32:6f:05:3e:f5:ca:03:d3:c3:19:4e:15: 0b:bc:5b:b3:0b:0f:d1:07:18:49:10:c3:59:d1:5d:03:dc:c8: 15:f1:4c:7a:22:fa:71:78:0f:34:7c:41:d4:15:38:8d:e1:4c: f5:fb:b5:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRDNDQxMTAvBgNVBAUTKEE2NDIxRkUxM0Q4QzkzQTdCRERGRjhCNTM3MTlCNTgw ODc0OEQwREYwHhcNMjUwNTE0MTgxNDI0WhcNMjUwNTIxMTgxNDI0WjAYMRYwFAYD VQQDEw02ODI0ZGQ4MC03NzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQhnYtmErAvUxjM1LL/eo4NzdllqRm8PSZgrwoUI2uSblJeq3uVNXdWPjx/O p7F9dpx5J7gVblFnHvfEptvf7XU/JAJRVgAT+4BjUJwHHLYWW05p0/DiQdINJfxC CMU8uDbLxWvZr4OPw+Hcsvr+bGEzIsb3tWnhUGWvxbT9iRG5wBNccC4FTpOa+8mV EaI532tbQ7US0tIhBAJeuFx+kr5AkFrpIISCialzOptbAmoGQpPCwYD7hynrenpA yIkHdGKcd1mRis9ft5dfdhUDU1LUxCE5NgNPqRWkBZJwqmFEkGMkG+K7t4qFtDgp 2gb522o17BvY7zaEsOh/IuuetQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGI/5Ci UZ+05ZqLemzqrcbRrnJVMB8GA1UdIwQYMBaAFKZCH+E9jJOnvd/4tTcZtYCHSNDf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREM0NC8yOUI2QkVEQUU0 RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2ZTkzX2kxTnhtMWdJZEkw TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BrSWY0VDJNazZlOTNfaTFOeG0xZ0lkSTBOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REM0NC8yOUI2QkVEQUU0RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2 ZTkzX2kxTnhtMWdJZEkwTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCINVoulRAZEe+XR/z4yY/GNotcptNRgimkjCtWCD+w0aulgtv2xPz0 OeOej7Qu/aTVVBDhibzea9itbNIVX98wZTz1lhd9n/5hr6hSGEdSau/ygS+kbbEZ T1SJs/s/o//DzdThtyz4z0ZSZqjJJlnIiqw1Ah79lSLcZ9Etlk97UxRIhnqzgijp R1FNBTGjYLrzMAq+clB6qFzebKrDDi1QsrxCY98DlWnAUrUBQgRNnW12sLeY+GaY +JOTsG4IzbsQJFV5qr6j4woeIcoybwU+9coD08MZThULvFuzCw/RBxhJEMNZ0V0D 3MgV8Ux6IvpxeA80fEHUFTiN4Uz1+7US -----END CERTIFICATE-----Generated at Thu May 15 12:36:04 2025 by rpki-client