$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft File: 84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft (raw, json) Hash identifier: LyvUPFjuc0arlw1V2wrcSoFpf4VYoEn5j1E5HIiWN+0= Subject key identifier: E0:97:14:A2:84:73:AF:CC:77:93:C9:6B:FC:77:A8:E4:85:51:72:33 Authority key identifier: F3:85:89:F8:46:4A:A5:A9:16:99:F8:08:64:9E:C5:36:83:1B:00:4A Certificate issuer: /CN=A914DC55/serialNumber=F38589F8464AA5A91699F808649EC536831B004A Certificate serial: 0500 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft Manifest number: 04F0 Signing time: Sat 10 May 2025 23:21:13 +0000 Manifest this update: Sat 10 May 2025 23:21:13 +0000 Manifest next update: Sat 17 May 2025 23:21:13 +0000 Files and hashes: 1: 84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl (hash: uMTN5TA2MF6rzh6lVqN9oVHeEnRIAcYLlBTbNIJUXg8=) 2: 4F1B63805A0A11ECAEA43C36C4F9AE02.roa (hash: u5W11dVoRw3toGEIJUHd861OTITZBp585qmJEJVveAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1280 (0x500) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DC55, serialNumber=F38589F8464AA5A91699F808649EC536831B004A Validity Not Before: May 10 23:21:13 2025 GMT Not After : May 17 23:21:13 2025 GMT Subject: CN=681fdf69-d826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3f:10:34:89:00:2d:61:1a:f9:48:d9:fe:a3: 68:a7:83:cc:67:fa:a6:6c:fe:77:d0:c2:79:d6:7f: 70:3c:bb:fa:8a:5a:61:4f:e6:78:5b:ea:dc:a4:3a: a1:a9:5b:14:65:29:81:e3:f1:c3:88:d4:46:4c:d5: e8:1a:f3:95:3f:99:b3:b1:b9:50:85:65:4d:ac:14: c4:c4:21:70:b8:f8:40:8b:09:58:88:19:6a:74:e0: 40:9b:9f:80:06:1d:16:21:a0:4e:36:f2:cc:50:c1: 5b:97:65:25:85:4c:06:c5:b0:57:65:04:47:89:b3: a8:de:6f:ce:f1:61:bc:09:f5:7c:e5:1a:45:2d:b9: 52:b6:7f:d3:ef:09:36:80:0e:e3:a7:d5:52:6f:10: 08:e8:73:0e:e3:ab:be:25:19:d1:15:71:dc:b0:63: b9:98:23:e9:0c:74:b3:cf:e5:ed:5d:fc:55:96:be: ee:70:80:be:33:d4:59:8a:e5:c3:ed:ea:32:0d:c9: d2:71:e5:f0:e8:c6:74:97:6b:5a:fb:aa:25:99:d0: 18:4b:6a:4e:9d:30:78:63:ef:27:34:e2:7d:ba:94: 11:a9:cf:94:5f:a9:af:b6:69:06:a0:9d:6b:1d:c6: a7:d4:58:8f:d7:a3:79:d3:5f:0e:19:9b:5f:da:1c: da:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:97:14:A2:84:73:AF:CC:77:93:C9:6B:FC:77:A8:E4:85:51:72:33 X509v3 Authority Key Identifier: keyid:F3:85:89:F8:46:4A:A5:A9:16:99:F8:08:64:9E:C5:36:83:1B:00:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:c0:9d:1b:59:7c:26:7d:76:e6:b0:58:e5:7e:6c:80:33:82: bf:75:bd:e9:9d:fc:44:e8:55:1d:48:2e:7e:20:4a:f9:12:c2: 65:ff:0e:8f:6d:25:59:46:65:e0:93:03:f5:6d:5e:00:f2:dc: 80:23:30:05:5f:6b:1a:28:89:3d:99:de:1e:74:28:4e:05:3b: 78:d2:cf:85:6a:0d:de:01:75:bf:c3:02:f7:35:d6:3f:c7:1d: 5f:88:fd:1c:d5:7f:76:ec:c6:c5:e3:29:f2:a3:ae:60:34:15: 59:f0:51:6a:0d:da:51:fa:fa:24:41:2b:be:7b:5c:79:86:05: a4:1e:2a:a0:11:de:8c:e9:0d:53:c2:d3:3d:b0:d7:fa:01:cb: a3:6a:e3:63:54:5d:85:e8:f8:b1:a7:03:cf:c9:db:9e:2f:7b: 53:49:2d:35:d4:f4:aa:08:a9:88:19:49:c7:0c:34:fa:11:05: 70:90:1c:ea:30:f9:1c:37:d8:ce:ff:ed:c8:60:cf:4f:18:22: 49:ac:1d:1c:36:c8:dd:bb:be:5d:7e:6f:25:28:8f:f9:48:cd: de:7e:6e:26:cb:76:12:bd:56:c0:c0:2f:2f:75:60:6d:fc:c7: 0b:b8:0b:d9:c3:f6:0e:e7:d6:d5:1f:4c:e4:4e:ac:75:48:20: f6:01:44:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERDNTUxMTAvBgNVBAUTKEYzODU4OUY4NDY0QUE1QTkxNjk5RjgwODY0OUVDNTM2 ODMxQjAwNEEwHhcNMjUwNTEwMjMyMTEzWhcNMjUwNTE3MjMyMTEzWjAYMRYwFAYD VQQDEw02ODFmZGY2OS1kODI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1D8QNIkALWEa+UjZ/qNop4PMZ/qmbP530MJ51n9wPLv6ilphT+Z4W+rcpDqh qVsUZSmB4/HDiNRGTNXoGvOVP5mzsblQhWVNrBTExCFwuPhAiwlYiBlqdOBAm5+A Bh0WIaBONvLMUMFbl2UlhUwGxbBXZQRHibOo3m/O8WG8CfV85RpFLblStn/T7wk2 gA7jp9VSbxAI6HMO46u+JRnRFXHcsGO5mCPpDHSzz+XtXfxVlr7ucIC+M9RZiuXD 7eoyDcnSceXw6MZ0l2ta+6olmdAYS2pOnTB4Y+8nNOJ9upQRqc+UX6mvtmkGoJ1r Hcan1FiP16N5018OGZtf2hzaOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCXFKKE c6/Md5PJa/x3qOSFUXIzMB8GA1UdIwQYMBaAFPOFifhGSqWpFpn4CGSexTaDGwBK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1NS9DQ0JFMUJBNjE3 NjIxMUVDODFBMEQxMUVDNEY5QUUwMi84NFdKLUVaS3Bha1dtZmdJWko3Rk5vTWJB RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg0V0otRVpLcGFrV21mZ0laSjdGTm9NYkFFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REM1NS9DQ0JFMUJBNjE3NjIxMUVDODFBMEQxMUVDNEY5QUUwMi84NFdKLUVaS3Bh a1dtZmdJWko3Rk5vTWJBRW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCewJ0bWXwmfXbmsFjlfmyAM4K/db3pnfxE6FUdSC5+IEr5EsJl/w6P bSVZRmXgkwP1bV4A8tyAIzAFX2saKIk9md4edChOBTt40s+Fag3eAXW/wwL3NdY/ xx1fiP0c1X927MbF4ynyo65gNBVZ8FFqDdpR+vokQSu+e1x5hgWkHiqgEd6M6Q1T wtM9sNf6AcujauNjVF2F6PixpwPPydueL3tTSS011PSqCKmIGUnHDDT6EQVwkBzq MPkcN9jO/+3IYM9PGCJJrB0cNsjdu75dfm8lKI/5SM3efm4my3YSvVbAwC8vdWBt /McLuAvZw/YO59bVH0zkTqx1SCD2AUSM -----END CERTIFICATE-----Generated at Sun May 11 02:00:22 2025 by rpki-client