$ rpki-client -vvf rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft File: 0X13ywyJuZTN2suidScKHnTcqic.mft (raw, json) Hash identifier: ozq4VgZJzZNGK5z2hv7+KbP41QcRNWAC4GWcwl3tjaQ= Subject key identifier: 1A:41:5A:49:07:70:DA:82:A4:01:FB:DC:B0:7A:EC:82:16:F5:B8:8D Authority key identifier: D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27 Certificate issuer: /CN=A915D99A/serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27 Certificate serial: 34D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft Manifest number: 34A4 Signing time: Wed 14 May 2025 14:24:55 +0000 Manifest this update: Wed 14 May 2025 14:24:54 +0000 Manifest next update: Wed 21 May 2025 14:24:54 +0000 Files and hashes: 1: 0X13ywyJuZTN2suidScKHnTcqic.crl (hash: Q5ffynECAFasJscgcuHD4hm0vfE7fKbJ4ExNFHtdREs=) 2: 11D961427C0311EBB2F8C86CC4F9AE02.roa (hash: 3Bh09Zn6mFO5Oea9UBod6MtwVZcXpjm+mtSvhM63HUc=) 3: 75AB676E747811EDA48E0D52C4F9AE02.roa (hash: MBOQQXrS4Z//4O5DV7gxUdMmCgnG/RaWUrumSPw5Cnk=) 4: 76B90530747811EDA48E0D52C4F9AE02.roa (hash: +z4up47sitnxc0BGzrLhea39B00Ir9hVkkzOMtz9tBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 14:24:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13525 (0x34d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D99A, serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27 Validity Not Before: May 14 14:24:54 2025 GMT Not After : May 21 14:24:54 2025 GMT Subject: CN=6824a7b6-4655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1e:48:e4:48:42:dd:2f:3c:6a:51:fa:3a:a4: 84:95:da:20:6b:cf:2b:1d:53:cd:bf:00:6a:b3:ae: 04:84:ea:e0:05:c2:30:ff:ff:46:62:ef:82:29:8f: fd:0b:b9:b1:f8:b5:c8:dc:e7:87:c4:e4:c2:0f:7d: 39:95:c8:2d:d5:3b:1e:a7:43:5d:53:ec:80:e3:44: f9:e0:cc:c4:40:30:44:80:96:90:1a:57:73:cd:2e: 96:2f:d2:26:0d:62:d6:e9:7b:d7:0f:5b:e0:5a:96: 9e:0a:08:21:18:54:07:38:bb:61:47:ae:d8:58:ee: 27:39:69:d9:0e:b9:d6:d2:6e:46:c5:2c:73:e8:29: 64:14:ea:52:f6:7a:88:e9:81:5a:8f:8c:ec:f6:d2: 0f:42:d6:ab:b6:19:59:20:89:5b:f3:48:c0:eb:0d: dc:a5:7d:8c:b6:4f:b5:3d:8d:ae:aa:59:65:35:1d: f4:a2:02:87:4a:1e:81:6d:28:ca:4b:1d:7c:5f:4f: 4b:dd:f4:4f:25:5e:74:e8:54:fd:42:66:9a:b3:7f: 73:38:1f:ef:42:15:ff:72:fc:02:ed:92:72:d9:10: 04:78:05:69:77:c5:ce:a0:15:86:ff:f9:06:16:34: df:56:94:be:c2:58:b9:1a:5e:fa:f3:a9:ad:4f:97: fa:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:41:5A:49:07:70:DA:82:A4:01:FB:DC:B0:7A:EC:82:16:F5:B8:8D X509v3 Authority Key Identifier: keyid:D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:f0:70:21:98:dd:9f:57:83:5f:b7:94:39:40:80:7c:47:7f: 04:61:99:5c:63:c0:ef:5f:61:17:61:90:74:b0:5f:3a:84:aa: c9:31:8d:dd:83:d3:64:be:55:30:74:29:98:40:b6:fb:a1:23: f2:94:8b:e5:5c:ba:06:69:aa:8d:b7:a0:99:4f:36:9c:e9:7b: bd:32:07:04:c2:3a:7b:63:79:ef:07:a0:29:5c:c7:ef:90:d9: 81:e9:7d:6a:49:5d:33:42:9b:d0:8f:a3:21:6a:41:7f:af:01: a3:fa:f5:c4:80:2f:9a:d1:55:45:75:2b:78:93:a7:fa:96:79: 91:31:54:54:48:01:21:43:ac:08:d1:d2:5f:aa:a1:db:61:e7: 97:b7:11:84:51:9c:74:a9:c0:3c:29:0f:4c:2a:fa:67:33:b2: c4:e5:d1:6b:33:0e:58:78:b0:90:69:4b:78:a6:16:ff:42:ed: b6:d6:30:38:6c:b1:bc:d6:1b:45:e4:c8:2d:fd:ba:70:68:a3: 3d:57:30:ce:af:c1:d2:80:e0:4a:eb:10:89:98:db:0a:70:ed: 31:e1:9c:ec:5e:20:e2:7e:c3:6b:e6:74:6d:4f:39:99:e1:49: 4c:46:71:2c:65:56:72:3f:7e:d1:09:c5:f4:d6:4d:68:69:30: 54:9a:c5:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ5OUExMTAvBgNVBAUTKEQxN0Q3N0NCMEM4OUI5OTRDRERBQ0JBMjc1MjcwQTFF NzREQ0FBMjcwHhcNMjUwNTE0MTQyNDU0WhcNMjUwNTIxMTQyNDU0WjAYMRYwFAYD VQQDEw02ODI0YTdiNi00NjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvB5I5EhC3S88alH6OqSEldoga88rHVPNvwBqs64EhOrgBcIw//9GYu+CKY/9 C7mx+LXI3OeHxOTCD305lcgt1Tsep0NdU+yA40T54MzEQDBEgJaQGldzzS6WL9Im DWLW6XvXD1vgWpaeCgghGFQHOLthR67YWO4nOWnZDrnW0m5GxSxz6ClkFOpS9nqI 6YFaj4zs9tIPQtarthlZIIlb80jA6w3cpX2Mtk+1PY2uqlllNR30ogKHSh6BbSjK Sx18X09L3fRPJV506FT9Qmaas39zOB/vQhX/cvwC7ZJy2RAEeAVpd8XOoBWG//kG FjTfVpS+wli5Gl7686mtT5f6gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpBWkkH cNqCpAH73LB67IIW9biNMB8GA1UdIwQYMBaAFNF9d8sMibmUzdrLonUnCh503Kon MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDk5QS8xNzg4MjJEQTFE ODUxMUUyQTgyQTdDREIwOEIwMkNEMi8wWDEzeXd5SnVaVE4yc3VpZFNjS0huVGNx aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBYMTN5d3lKdVpUTjJzdWlkU2NLSG5UY3FpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDk5QS8xNzg4MjJEQTFEODUxMUUyQTgyQTdDREIwOEIwMkNEMi8wWDEzeXd5SnVa VE4yc3VpZFNjS0huVGNxaWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo8HAhmN2fV4Nft5Q5QIB8R38EYZlcY8DvX2EXYZB0sF86hKrJMY3d g9NkvlUwdCmYQLb7oSPylIvlXLoGaaqNt6CZTzac6Xu9MgcEwjp7Y3nvB6ApXMfv kNmB6X1qSV0zQpvQj6MhakF/rwGj+vXEgC+a0VVFdSt4k6f6lnmRMVRUSAEhQ6wI 0dJfqqHbYeeXtxGEUZx0qcA8KQ9MKvpnM7LE5dFrMw5YeLCQaUt4phb/Qu221jA4 bLG81htF5Mgt/bpwaKM9VzDOr8HSgOBK6xCJmNsKcO0x4ZzsXiDifsNr5nRtTzmZ 4UlMRnEsZVZyP37RCcX01k1oaTBUmsUr -----END CERTIFICATE-----Generated at Wed May 14 18:23:14 2025 by rpki-client