$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft File: CVjwl8rkKX3ycoLkGD468UJMj34.mft (raw, json) Hash identifier: As8BjtRAbtGZyAutUyMUGv2O6s1ie9dqNCOClikLZrY= Subject key identifier: 21:BF:88:34:E4:6A:0A:CE:82:A2:E9:2D:A8:C5:BB:76:27:C4:19:72 Authority key identifier: 09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E Certificate issuer: /CN=A916814B/serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Certificate serial: 1621 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft Manifest number: 1618 Signing time: Wed 14 May 2025 16:49:16 +0000 Manifest this update: Wed 14 May 2025 16:49:15 +0000 Manifest next update: Wed 21 May 2025 16:49:15 +0000 Files and hashes: 1: CVjwl8rkKX3ycoLkGD468UJMj34.crl (hash: dGq7C0rQMJ+vzYt5eJ9X0fj+q+Rapbxcra1MASVhYRI=) 2: B4450EF68E5311EBB81E6C70C4F9AE02.roa (hash: mykXr6ve/cwvr+LfcirysCKrHVhRt9J9fVkHn/0QFbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5665 (0x1621) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916814B, serialNumber=0958F097CAE4297DF27282E4183E3AF1424C8F7E Validity Not Before: May 14 16:49:15 2025 GMT Not After : May 21 16:49:15 2025 GMT Subject: CN=6824c98c-e030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:82:62:73:98:7e:e2:9d:25:ca:57:0e:8d:dc: 22:e5:fd:d4:5a:a8:69:93:10:eb:f4:1a:7d:21:3f: 84:63:76:c2:dc:0d:08:97:d7:83:d3:20:af:b3:c0: 69:cd:c3:02:e7:83:71:d8:87:3c:d3:2b:25:e0:a2: ec:18:2a:3d:26:d7:fd:82:7f:d4:25:71:12:4b:62: 04:37:50:35:44:b7:14:2a:9d:1a:5c:82:41:c0:2e: d8:85:76:8b:16:cb:eb:7d:45:95:cc:3b:75:63:fb: 15:62:e4:32:ee:c1:5c:0d:93:56:ec:51:b0:2b:1c: 4b:4b:1e:8e:0a:c0:11:a4:b5:4b:bc:03:ae:5f:48: 79:a2:cc:15:f8:5d:2d:34:98:59:24:1d:ac:53:2e: 7a:1a:0a:29:ea:fa:f3:57:da:09:65:d4:19:3b:0b: 28:66:0a:f3:1b:40:01:81:35:95:57:e8:c5:55:94: a5:85:ba:ce:80:e3:0e:11:de:13:01:5f:e6:5f:79: fa:47:fd:e0:e4:59:07:31:9b:a5:8a:67:e8:bc:f5: 7b:40:5f:30:0c:91:1a:ec:1a:e3:38:db:65:29:fe: 69:20:ff:e3:28:ef:a8:2f:cf:f1:b0:72:a2:73:a1: f7:ab:0b:66:e1:b8:9f:e8:df:3b:ba:32:69:e8:fe: bd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BF:88:34:E4:6A:0A:CE:82:A2:E9:2D:A8:C5:BB:76:27:C4:19:72 X509v3 Authority Key Identifier: keyid:09:58:F0:97:CA:E4:29:7D:F2:72:82:E4:18:3E:3A:F1:42:4C:8F:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/CVjwl8rkKX3ycoLkGD468UJMj34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/FB606F56162E11E8B8DE2669C4F9AE02/CVjwl8rkKX3ycoLkGD468UJMj34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:1a:54:4b:db:33:2d:ff:c6:47:2b:18:bc:e7:e4:f2:9e:e2: 7f:75:f3:c6:5d:68:40:a3:cd:62:9d:d9:7b:63:d6:d6:df:69: 70:cc:d1:fb:ac:15:01:46:e2:00:66:ea:0d:59:e1:23:86:fc: dd:cb:25:44:55:b8:e9:e3:eb:8c:be:b8:b1:11:a2:9b:4c:fb: 6b:99:26:ec:29:17:a3:6c:0f:70:54:13:9c:e3:ce:d5:68:30: db:27:d5:99:25:56:00:ea:a8:b3:14:1b:63:37:a4:db:fb:bb: ab:28:53:79:df:9f:a0:2e:c9:3a:1a:fe:f9:a1:1c:22:78:9a: 68:81:39:e0:3a:7b:51:31:da:1e:42:e1:85:b6:d4:ec:93:83: b7:28:18:f0:27:79:64:80:11:54:0d:bc:60:22:a4:e8:9d:aa: bc:27:a6:9a:5b:4f:fa:f4:93:81:30:88:45:a1:6c:d2:c2:6b: 4d:0f:ef:84:a6:ad:0c:3a:f8:4f:5d:ac:61:e1:72:51:7a:f6: 42:61:f1:ed:a5:2d:a6:eb:39:8d:7d:b1:3e:84:83:23:4a:b7: b5:99:44:6c:c1:6a:32:02:92:b9:d8:9b:63:9c:9c:de:45:ea: 32:43:cd:70:33:a3:09:e1:58:40:9c:28:98:c2:ff:bd:ef:b2: 6a:af:e5:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxNEIxMTAvBgNVBAUTKDA5NThGMDk3Q0FFNDI5N0RGMjcyODJFNDE4M0UzQUYx NDI0QzhGN0UwHhcNMjUwNTE0MTY0OTE1WhcNMjUwNTIxMTY0OTE1WjAYMRYwFAYD VQQDEw02ODI0Yzk4Yy1lMDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm4Jic5h+4p0lylcOjdwi5f3UWqhpkxDr9Bp9IT+EY3bC3A0Il9eD0yCvs8Bp zcMC54Nx2Ic80ysl4KLsGCo9Jtf9gn/UJXESS2IEN1A1RLcUKp0aXIJBwC7YhXaL FsvrfUWVzDt1Y/sVYuQy7sFcDZNW7FGwKxxLSx6OCsARpLVLvAOuX0h5oswV+F0t NJhZJB2sUy56Ggop6vrzV9oJZdQZOwsoZgrzG0ABgTWVV+jFVZSlhbrOgOMOEd4T AV/mX3n6R/3g5FkHMZulimfovPV7QF8wDJEa7BrjONtlKf5pIP/jKO+oL8/xsHKi c6H3qwtm4bif6N87ujJp6P69GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCG/iDTk agrOgqLpLajFu3YnxBlyMB8GA1UdIwQYMBaAFAlY8JfK5Cl98nKC5Bg+OvFCTI9+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODE0Qi9GQjYwNkY1NjE2 MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tYM3ljb0xrR0Q0NjhVSk1q MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0NWandsOHJrS1gzeWNvTGtHRDQ2OFVKTWozNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODE0Qi9GQjYwNkY1NjE2MkUxMUU4QjhERTI2NjlDNEY5QUUwMi9DVmp3bDhya0tY M3ljb0xrR0Q0NjhVSk1qMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNGlRL2zMt/8ZHKxi85+TynuJ/dfPGXWhAo81indl7Y9bW32lwzNH7 rBUBRuIAZuoNWeEjhvzdyyVEVbjp4+uMvrixEaKbTPtrmSbsKRejbA9wVBOc487V aDDbJ9WZJVYA6qizFBtjN6Tb+7urKFN535+gLsk6Gv75oRwieJpogTngOntRMdoe QuGFttTsk4O3KBjwJ3lkgBFUDbxgIqTonaq8J6aaW0/69JOBMIhFoWzSwmtND++E pq0MOvhPXaxh4XJRevZCYfHtpS2m6zmNfbE+hIMjSre1mURswWoyApK52JtjnJze ReoyQ81wM6MJ4VhAnCiYwv+977Jqr+VU -----END CERTIFICATE-----Generated at Thu May 15 12:31:36 2025 by rpki-client