$ rpki-client -vvf rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft File: V2eQJEzCknXBEjVv9iDyYg19YV4.mft (raw, json) Hash identifier: xrQZF7+LyNfvIsVvH9KfO2dBroqTeOl190Gqa3PtcEE= Subject key identifier: B7:FF:88:A0:9C:8A:8B:D3:0E:B5:93:E4:61:D7:F9:CB:CE:4B:9A:F5 Authority key identifier: 57:67:90:24:4C:C2:92:75:C1:12:35:6F:F6:20:F2:62:0D:7D:61:5E Certificate issuer: /CN=A916AC30/serialNumber=576790244CC29275C112356FF620F2620D7D615E Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V2eQJEzCknXBEjVv9iDyYg19YV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft Manifest number: 8D Signing time: Sun 11 May 2025 05:40:20 +0000 Manifest this update: Sun 11 May 2025 05:40:19 +0000 Manifest next update: Sun 18 May 2025 05:40:19 +0000 Files and hashes: 1: V2eQJEzCknXBEjVv9iDyYg19YV4.crl (hash: ZKok9dxy9d1y4bnmAGfL6tENNEMsqoIFMkgZOjeir8g=) 2: 33A6DBFAD31C11EFA728D52FC4F9AE02.roa (hash: RNxiMOnl0yzJ3WNrMLWUMVP2z3pdPhwhvK/h6ws7iaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.crl rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V2eQJEzCknXBEjVv9iDyYg19YV4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AC30, serialNumber=576790244CC29275C112356FF620F2620D7D615E Validity Not Before: May 11 05:40:19 2025 GMT Not After : May 18 05:40:19 2025 GMT Subject: CN=68203844-fbf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:9c:99:9e:84:5b:1a:c1:fd:f4:63:38:6e:c2: e1:3e:b5:8b:00:72:b0:cb:e5:b5:be:58:cf:17:7e: e9:04:11:2c:4b:92:11:37:57:17:47:0e:5a:a0:34: 7d:ee:9a:0f:e2:77:c7:46:68:7c:23:b2:84:b3:df: de:af:c7:8e:30:87:98:60:9a:c8:0f:06:1b:dc:e7: db:a3:da:54:5a:2a:21:0d:73:0e:39:1a:35:39:28: 4a:09:a3:c2:cc:e4:be:74:ec:b8:ca:41:6b:74:9d: 69:7c:b8:de:0c:f4:98:36:3e:af:32:8e:27:ce:57: 76:c0:53:13:d9:f3:20:49:04:16:fd:05:df:99:e4: 3c:69:73:44:f2:6b:61:ca:6f:01:af:cc:c6:8c:34: 46:eb:39:5d:e3:e4:ae:b6:bc:6d:2b:b3:56:b1:33: a1:be:46:67:3a:b5:d1:cb:e5:0f:0d:55:16:a8:b9: 31:ba:3f:78:73:aa:d3:30:97:a2:20:24:41:5d:00: 29:ed:9a:a1:ad:0c:cf:0f:67:e6:86:90:2c:f4:43: 30:1b:e4:e2:69:7e:3f:8d:ee:3d:84:76:1d:5e:f1: c9:f4:12:fe:dc:56:46:6b:84:16:c8:a2:aa:18:6a: 51:9c:f6:42:ae:d0:fe:43:cb:dd:0a:7c:af:03:53: 92:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FF:88:A0:9C:8A:8B:D3:0E:B5:93:E4:61:D7:F9:CB:CE:4B:9A:F5 X509v3 Authority Key Identifier: keyid:57:67:90:24:4C:C2:92:75:C1:12:35:6F:F6:20:F2:62:0D:7D:61:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V2eQJEzCknXBEjVv9iDyYg19YV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:b8:5b:44:cb:14:02:71:4c:15:60:96:e7:8f:9d:1a:9c:0f: 6d:df:3c:4a:8d:6d:e1:20:fd:42:94:0d:b7:20:9c:64:8c:7a: 3a:e1:9d:de:dc:84:c2:65:87:8f:c8:af:1e:e8:08:c7:f6:73: 60:90:8c:5b:2f:c4:2c:bf:6a:d9:ab:40:ff:08:b4:89:20:c5: 56:ba:8a:85:ee:64:65:f0:e7:11:4f:44:70:bb:cc:d2:c1:a2: a4:83:3d:44:51:08:71:4d:53:5e:86:93:9d:88:a1:42:80:a4: c4:f2:2a:d4:ed:95:af:d7:c8:8b:da:c6:aa:8d:12:fa:95:0c: e5:e6:f6:05:d1:4a:00:17:67:98:ec:8b:da:ef:73:a3:61:74: 66:89:b7:cf:67:a1:92:6d:56:e6:bf:e6:6f:02:76:41:b5:c1: 77:41:fe:e8:97:5e:a5:e1:18:9b:1e:f2:62:f3:79:13:d9:78: 10:f7:57:29:cc:27:bd:19:f6:06:66:f8:99:87:7c:be:41:96: d5:11:6e:97:ef:da:d0:e5:ca:12:0b:75:44:74:69:3e:af:da: 19:a0:d3:16:f2:2b:43:8f:e6:fc:e4:32:ea:9f:77:be:42:ce: 02:b7:77:dd:e9:0d:16:37:49:2b:f8:e5:21:b1:12:d3:2b:cb: 4f:99:01:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFDMzAxMTAvBgNVBAUTKDU3Njc5MDI0NENDMjkyNzVDMTEyMzU2RkY2MjBGMjYy MEQ3RDYxNUUwHhcNMjUwNTExMDU0MDE5WhcNMjUwNTE4MDU0MDE5WjAYMRYwFAYD VQQDEw02ODIwMzg0NC1mYmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA95yZnoRbGsH99GM4bsLhPrWLAHKwy+W1vljPF37pBBEsS5IRN1cXRw5aoDR9 7poP4nfHRmh8I7KEs9/er8eOMIeYYJrIDwYb3Ofbo9pUWiohDXMOORo1OShKCaPC zOS+dOy4ykFrdJ1pfLjeDPSYNj6vMo4nzld2wFMT2fMgSQQW/QXfmeQ8aXNE8mth ym8Br8zGjDRG6zld4+SutrxtK7NWsTOhvkZnOrXRy+UPDVUWqLkxuj94c6rTMJei ICRBXQAp7ZqhrQzPD2fmhpAs9EMwG+TiaX4/je49hHYdXvHJ9BL+3FZGa4QWyKKq GGpRnPZCrtD+Q8vdCnyvA1OSrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLf/iKCc iovTDrWT5GHX+cvOS5r1MB8GA1UdIwQYMBaAFFdnkCRMwpJ1wRI1b/Yg8mINfWFe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUMzMC82QkM0Q0RGRThD NjIxMUVGOTk0NjQwODVDNEY5QUUwMi9WMmVRSkV6Q2tuWEJFalZ2OWlEeVlnMTlZ VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1YyZVFKRXpDa25YQkVqVnY5aUR5WWcxOVlWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUMzMC82QkM0Q0RGRThDNjIxMUVGOTk0NjQwODVDNEY5QUUwMi9WMmVRSkV6Q2tu WEJFalZ2OWlEeVlnMTlZVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+uFtEyxQCcUwVYJbnj50anA9t3zxKjW3hIP1ClA23IJxkjHo64Z3e 3ITCZYePyK8e6AjH9nNgkIxbL8Qsv2rZq0D/CLSJIMVWuoqF7mRl8OcRT0Rwu8zS waKkgz1EUQhxTVNehpOdiKFCgKTE8irU7ZWv18iL2saqjRL6lQzl5vYF0UoAF2eY 7Iva73OjYXRmibfPZ6GSbVbmv+ZvAnZBtcF3Qf7ol16l4RibHvJi83kT2XgQ91cp zCe9GfYGZviZh3y+QZbVEW6X79rQ5coSC3VEdGk+r9oZoNMW8itDj+b85DLqn3e+ Qs4Ct3fd6Q0WN0kr+OUhsRLTK8tPmQH3 -----END CERTIFICATE-----Generated at Sun May 11 15:48:50 2025 by rpki-client