$ rpki-client -vvf rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft File: fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft (raw, json) Hash identifier: YtrZPnfsGd/PxVlwFZSjKhXrIUmTSlEDcf0YGtGt/9E= Subject key identifier: EA:AA:B0:BC:6A:AD:02:48:E1:C8:0C:54:3F:06:8D:FD:1E:A1:F7:F1 Authority key identifier: 7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08 Certificate issuer: /CN=A913ED35/serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608 Certificate serial: 34E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft Manifest number: 34AA Signing time: Mon 12 May 2025 14:46:33 +0000 Manifest this update: Mon 12 May 2025 14:46:32 +0000 Manifest next update: Mon 19 May 2025 14:46:32 +0000 Files and hashes: 1: fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl (hash: gfXCw9KM4kw1FqSLqn3edtL7YQdFvllbzSAt8A4ghh4=) 2: B34FF580C40C11EB9C21CF7BC4F9AE02.roa (hash: JRmfeJomvQSzfrIXjYmMHFlugXE6bFe42lyJQeKQfX4=) 3: C5859C724D7611EFBA188667C4F9AE02.roa (hash: CejZncFNpgWH2BgJHmjLHA0HzP35tdBhuZ2TN28KyAw=) 4: E652AA52C40911EBA930053BC4F9AE02.roa (hash: ++KskV0PPNEiZEaTeUOZbL0iJBq0mAX/g0VHSQfJFGU=) 5: 0D47881A9EB311EC90138473C4F9AE02.roa (hash: /yUj95kJkPDjakWPdMSLk/tFuL1bJXsSQl7hw6ucO/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13545 (0x34e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913ED35, serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608 Validity Not Before: May 12 14:46:32 2025 GMT Not After : May 19 14:46:32 2025 GMT Subject: CN=682209c9-ea1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:aa:e0:d8:1f:b7:a7:f3:9b:3c:7b:a6:b5:89: 3a:99:d0:e6:5e:5c:f7:cd:03:33:7f:61:2a:93:78: 66:e8:03:fc:b3:b0:d1:fe:57:0e:7e:62:17:70:f6: ee:a3:ee:77:9e:8e:33:bd:44:32:a9:75:86:9e:72: 91:dc:df:2d:e2:fa:dd:7f:40:ad:e4:c8:13:4b:fa: b3:7c:3a:78:4f:13:15:bb:48:c3:68:71:ec:5a:89: e7:dd:ec:cd:95:cf:cf:82:a4:12:d1:01:c9:23:af: 8e:86:fa:a6:73:e3:5b:f7:64:0d:47:62:3d:bb:5f: 2c:4e:dc:bf:a8:0e:1a:df:85:80:43:9b:ba:2a:fc: 80:55:b5:a7:e7:e9:53:6f:2a:94:88:a6:62:e4:b0: 5d:23:f3:85:0f:12:e4:4d:14:cc:b0:75:08:ac:4f: 7d:31:83:b6:da:5a:0b:41:50:69:e7:14:fa:66:46: bb:c3:d2:be:23:06:0b:3e:2f:4a:e5:e1:75:07:86: 98:e8:74:ee:0c:9b:35:10:a7:19:72:36:74:4f:90: 4f:93:09:26:44:f2:6c:d8:ad:6d:54:d0:69:a1:53: 2a:3c:9b:1a:82:07:74:20:a9:5e:2c:fa:09:e8:09: c2:11:2c:53:22:de:73:63:a0:91:5f:fe:57:e3:6d: 2a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AA:B0:BC:6A:AD:02:48:E1:C8:0C:54:3F:06:8D:FD:1E:A1:F7:F1 X509v3 Authority Key Identifier: keyid:7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:70:c0:ff:74:c7:93:13:04:40:1e:61:9b:eb:21:8a:b6:95: 65:87:b6:50:a2:4a:1a:75:34:9d:9f:c4:f5:8a:32:de:03:fe: b9:37:48:c1:29:62:ae:78:ad:a7:eb:43:f3:3d:0a:7a:9b:5c: 33:10:85:43:3b:2c:6e:ce:d2:6c:54:49:df:a6:3e:9c:70:ba: 8c:d8:50:8f:89:70:9f:21:4c:20:b7:09:b3:96:24:3f:93:96: fc:f2:f5:5b:31:f5:c5:67:ff:ed:7a:44:3f:70:2e:cf:f1:ea: 2f:78:5b:5d:fd:61:cf:b0:42:f3:e2:84:15:ce:ff:48:16:d8: b1:68:4d:4a:13:d4:51:0a:3b:e1:27:f7:fc:aa:f1:92:25:26: 53:0e:73:4e:65:b7:b6:e4:9f:ad:30:92:c4:a6:f1:4f:1a:0b: 7e:3c:10:fc:4d:35:a7:24:0d:b1:d3:bf:a4:b9:84:de:4b:f5: 47:0b:fc:49:8e:b2:0d:a8:13:89:08:d1:6b:74:d3:7d:15:e8: fb:a6:9a:64:25:a5:68:ee:90:6f:f6:fb:b3:09:da:4c:29:53: 61:cd:f2:38:63:c2:f0:eb:9e:2b:74:71:9b:f3:46:09:0a:b1: 68:71:3d:f0:f9:32:91:97:56:f2:e5:0f:aa:cc:24:bc:7b:b8: e7:92:f7:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VEMzUxMTAvBgNVBAUTKDdFRTk0NUU5RTVFNTFDNEI0MUQ5OUM0MzMyOTUyRjlD OTU4NzY2MDgwHhcNMjUwNTEyMTQ0NjMyWhcNMjUwNTE5MTQ0NjMyWjAYMRYwFAYD VQQDEw02ODIyMDljOS1lYTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAparg2B+3p/ObPHumtYk6mdDmXlz3zQMzf2Eqk3hm6AP8s7DR/lcOfmIXcPbu o+53no4zvUQyqXWGnnKR3N8t4vrdf0Ct5MgTS/qzfDp4TxMVu0jDaHHsWonn3ezN lc/PgqQS0QHJI6+Ohvqmc+Nb92QNR2I9u18sTty/qA4a34WAQ5u6KvyAVbWn5+lT byqUiKZi5LBdI/OFDxLkTRTMsHUIrE99MYO22loLQVBp5xT6Zka7w9K+IwYLPi9K 5eF1B4aY6HTuDJs1EKcZcjZ0T5BPkwkmRPJs2K1tVNBpoVMqPJsaggd0IKleLPoJ 6AnCESxTIt5zY6CRX/5X420q+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqqsLxq rQJI4cgMVD8Gjf0eoffxMB8GA1UdIwQYMBaAFH7pRenl5RxLQdmcQzKVL5yVh2YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUQzNS9CNjNCQTdFRTFE OTQxMUUyOUQxQTJFRjkwOEIwMkNEMi9mdWxGNmVYbEhFdEIyWnhETXBVdm5KV0ha Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1bEY2ZVhsSEV0QjJaeERNcFV2bkpXSFpnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUQzNS9CNjNCQTdFRTFEOTQxMUUyOUQxQTJFRjkwOEIwMkNEMi9mdWxGNmVYbEhF dEIyWnhETXBVdm5KV0haZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALcMD/dMeTEwRAHmGb6yGKtpVlh7ZQokoadTSdn8T1ijLeA/65N0jB KWKueK2n60PzPQp6m1wzEIVDOyxuztJsVEnfpj6ccLqM2FCPiXCfIUwgtwmzliQ/ k5b88vVbMfXFZ//tekQ/cC7P8eoveFtd/WHPsELz4oQVzv9IFtixaE1KE9RRCjvh J/f8qvGSJSZTDnNOZbe25J+tMJLEpvFPGgt+PBD8TTWnJA2x07+kuYTeS/VHC/xJ jrINqBOJCNFrdNN9Fej7pppkJaVo7pBv9vuzCdpMKVNhzfI4Y8Lw654rdHGb80YJ CrFocT3w+TKRl1by5Q+qzCS8e7jnkvce -----END CERTIFICATE-----Generated at Mon May 12 19:59:38 2025 by rpki-client