$ rpki-client -vvf rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft File: cHDFVlzC_kVsMWBAi25_toDAjBk.mft (raw, json) Hash identifier: jZZ8wQ6qNEwMBKp1R/Ly3XgrsLsr7yfC5gOKGUAJFZ0= Subject key identifier: 46:94:66:24:18:FD:2C:47:95:EF:64:7E:DB:29:81:9C:10:27:F9:44 Authority key identifier: 70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19 Certificate issuer: /CN=A915B77C/serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19 Certificate serial: 0A4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft Manifest number: 0A40 Signing time: Sat 10 May 2025 19:29:33 +0000 Manifest this update: Sat 10 May 2025 19:29:32 +0000 Manifest next update: Sat 17 May 2025 19:29:32 +0000 Files and hashes: 1: cHDFVlzC_kVsMWBAi25_toDAjBk.crl (hash: oMAXBhgcxWGz1i1uUfvs6XZX0sm4c24pKNpYDOUYVIY=) 2: 96ACE9CE8E8F11EE8915FE78C4F9AE02.roa (hash: n7QYB4PprN8wvve4EgxwwoZXCNSALgZd5+0ffViTkK8=) 3: 6EA165728E8F11EEA8A9EE68C4F9AE02.roa (hash: 1K81wmlQPoGdZP/JjsQxYakrjnCNuKpYHSBFoJQ/JT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2638 (0xa4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B77C, serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19 Validity Not Before: May 10 19:29:32 2025 GMT Not After : May 17 19:29:32 2025 GMT Subject: CN=681fa91d-9b26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b8:70:78:d0:64:0b:ba:db:7f:33:90:c8:aa: af:b7:89:72:01:aa:c6:e9:46:b6:2e:66:c1:d5:e2: af:43:de:5d:ac:c3:33:c9:90:5d:d4:03:3f:d4:2f: 8b:97:cd:df:b0:d3:23:87:a4:94:30:e7:ff:60:44: ba:ea:4e:b0:7b:b9:8f:c8:a5:28:b0:aa:b2:f0:d3: 12:6a:74:a1:23:3e:91:44:8b:18:93:8f:2d:9f:df: 53:9c:da:bc:e3:e8:13:89:51:8b:a2:48:4f:37:a6: e4:00:a6:15:7a:4c:f8:e3:84:09:78:e5:81:fb:f3: 3c:1b:5b:fe:d3:56:2b:b0:11:f0:ae:da:1d:42:e9: 8b:a7:73:cc:84:cf:5f:b7:54:a7:25:22:16:17:c6: 55:e9:8c:ca:6c:6a:a5:62:fc:33:26:e6:66:bd:19: 44:65:e7:ee:61:73:c8:74:41:44:d1:3b:62:82:52: 5f:b4:66:5e:45:29:69:5e:a2:43:fd:ae:bd:ad:9d: 65:8c:7f:e2:82:24:e3:2c:81:ee:3e:20:ae:a0:04: 7d:d1:fc:17:b7:20:84:f7:89:9f:cb:83:b9:1c:c2: 22:f7:03:f5:5c:bb:76:8a:04:16:f7:ed:bf:d5:a3: 38:10:ad:09:be:e6:e6:c7:a2:73:c5:61:25:a0:94: 62:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:94:66:24:18:FD:2C:47:95:EF:64:7E:DB:29:81:9C:10:27:F9:44 X509v3 Authority Key Identifier: keyid:70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:9d:30:95:d1:16:99:91:01:4f:af:9e:f4:2f:bc:b0:0d:2f: 3b:41:80:06:80:cd:6d:8c:2b:57:c9:5e:d2:87:5f:84:fd:ab: 3d:be:fc:e0:4b:f2:8a:22:0a:0a:21:dc:ba:2b:d7:ab:4f:53: fa:f6:65:f9:cc:ca:3b:8e:68:c2:ec:36:d0:d7:9b:47:63:f8: 02:4e:34:d4:bd:e4:9d:d5:49:86:e2:b4:5d:9f:2a:5c:99:1f: 0f:e8:ff:fa:f6:f5:b9:9d:24:80:15:da:e8:8c:5b:67:37:55: 33:02:b8:79:35:06:e4:a6:7f:0a:bc:83:c6:a4:9a:87:61:8b: 12:7a:cd:3e:c0:87:68:49:bd:82:3c:9b:07:6b:4d:b1:1a:5e: bb:d7:39:fb:98:8f:87:b2:62:f4:7e:18:40:4b:c3:4c:c2:86: fc:cb:cb:09:5e:29:f1:94:bd:48:a6:b1:39:bd:cd:d3:f5:69: 51:2a:44:a4:e4:2f:94:9a:49:d9:31:87:5f:52:9c:bb:17:a7: dd:f6:46:e0:a9:08:52:3a:88:4b:05:db:9d:0c:62:c7:05:ff: a5:9c:11:6c:9d:b4:25:e7:f9:4e:09:e8:b3:bb:ff:be:fe:86: 14:86:1f:d2:6f:c2:80:0f:25:dd:d6:76:09:1d:6e:c4:b3:fa: 7d:32:12:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI3N0MxMTAvBgNVBAUTKDcwNzBDNTU2NUNDMkZFNDU2QzMxNjA0MDhCNkU3RkI2 ODBDMDhDMTkwHhcNMjUwNTEwMTkyOTMyWhcNMjUwNTE3MTkyOTMyWjAYMRYwFAYD VQQDEw02ODFmYTkxZC05YjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1LhweNBkC7rbfzOQyKqvt4lyAarG6Ua2LmbB1eKvQ95drMMzyZBd1AM/1C+L l83fsNMjh6SUMOf/YES66k6we7mPyKUosKqy8NMSanShIz6RRIsYk48tn99TnNq8 4+gTiVGLokhPN6bkAKYVekz444QJeOWB+/M8G1v+01YrsBHwrtodQumLp3PMhM9f t1SnJSIWF8ZV6YzKbGqlYvwzJuZmvRlEZefuYXPIdEFE0TtiglJftGZeRSlpXqJD /a69rZ1ljH/igiTjLIHuPiCuoAR90fwXtyCE94mfy4O5HMIi9wP1XLt2igQW9+2/ 1aM4EK0Jvubmx6JzxWEloJRiKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEaUZiQY /SxHle9kftspgZwQJ/lEMB8GA1UdIwQYMBaAFHBwxVZcwv5FbDFgQItuf7aAwIwZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjc3Qy8yODE0Rjc3QTY5 QjUxMUVBQkE2MDE3NTJDNEY5QUUwMi9jSERGVmx6Q19rVnNNV0JBaTI1X3RvREFq QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NIREZWbHpDX2tWc01XQkFpMjVfdG9EQWpCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Qjc3Qy8yODE0Rjc3QTY5QjUxMUVBQkE2MDE3NTJDNEY5QUUwMi9jSERGVmx6Q19r VnNNV0JBaTI1X3RvREFqQmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcnTCV0RaZkQFPr570L7ywDS87QYAGgM1tjCtXyV7Sh1+E/as9vvzg S/KKIgoKIdy6K9erT1P69mX5zMo7jmjC7DbQ15tHY/gCTjTUveSd1UmG4rRdnypc mR8P6P/69vW5nSSAFdrojFtnN1UzArh5NQbkpn8KvIPGpJqHYYsSes0+wIdoSb2C PJsHa02xGl671zn7mI+HsmL0fhhAS8NMwob8y8sJXinxlL1IprE5vc3T9WlRKkSk 5C+UmknZMYdfUpy7F6fd9kbgqQhSOohLBdudDGLHBf+lnBFsnbQl5/lOCeizu/++ /oYUhh/Sb8KADyXd1nYJHW7Es/p9MhK3 -----END CERTIFICATE-----Generated at Sun May 11 19:22:17 2025 by rpki-client