$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft File: No88k4tgFBJSGjqBkAmXj8_pHn4.mft (raw, json) Hash identifier: m0jpSbocA5xvwbC6sqB2KIHk1Zntj1GcpEaAtnWBPQQ= Subject key identifier: AD:6C:AE:1C:4B:4C:6D:ED:7A:EB:74:82:E2:C0:32:A2:F9:06:28:A5 Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E Certificate issuer: /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Certificate serial: 172A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft Manifest number: 1695 Signing time: Sat 10 May 2025 16:31:38 +0000 Manifest this update: Sat 10 May 2025 16:31:37 +0000 Manifest next update: Sat 17 May 2025 16:31:37 +0000 Files and hashes: 1: No88k4tgFBJSGjqBkAmXj8_pHn4.crl (hash: jeToDb0GNa3Vnv9jvVlxSka4tjOzmfBdsSh7fwTi82o=) 2: 986FA3843F8F11EBA86B1F11C4F9AE02.roa (hash: g4ujWaFHIUcsfNfe71CuG/s3pHzpyQSa/LcK8feuuHQ=) 3: 760F20A2439411EDA0D65E77C4F9AE02.roa (hash: dHZjnobEWvCkJLuRIvZrVbscT5l1hAVdVQPJ8ZrvrKU=) 4: B1D95AEA7F9B11EFBF8E2428C4F9AE02.roa (hash: 1sU8q07d3ge1AC4FjTNb7U4jhQcoNLmbAzR/wM19Q70=) 5: EC065A52C28D11EBBCABCA6CC4F9AE02.roa (hash: uPpnoQZGZKxbY1tDf1IppgOlALrQMUGFd/gQhZLvnlg=) 6: F053A1CAC28B11EBBF310469C4F9AE02.roa (hash: o4sVUAvBbfXlH+Fkt0MhUocTngit2NpPuryfYPu2kLw=) 7: 38A5FCB48FC911E8902DFE16C4F9AE02.roa (hash: NWWiuwLgl9RwlWRS8BInX5D7zCXvjEBWjuBg9LiZans=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5930 (0x172a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B18B, serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Validity Not Before: May 10 16:31:37 2025 GMT Not After : May 17 16:31:37 2025 GMT Subject: CN=681f7f6a-1d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b0:2f:5b:09:b6:da:0b:a8:5a:9f:c0:c6:58: e3:f7:3e:70:10:44:ae:5e:1b:b2:a9:b0:6e:0b:6a: da:32:75:bb:e7:11:58:0f:9b:14:cb:b7:ba:d2:3a: 39:cc:38:a3:11:07:ab:fc:db:24:2f:16:0d:44:fd: 7c:d0:08:5f:97:16:6e:a0:88:39:02:1a:64:0e:72: 1b:19:7b:10:ee:d5:42:09:83:dd:d6:71:64:00:56: ef:1f:44:37:0a:f1:15:57:57:87:39:c8:62:8f:b9: 09:8a:89:8e:46:b1:9a:8f:b6:04:1b:f5:9a:d1:5e: 4e:c3:0b:7b:b8:76:37:55:2b:7a:58:7f:6c:77:a5: 4c:0c:7c:b7:5f:08:df:1e:19:35:c3:b9:3a:f4:e6: 02:0b:c7:d4:c2:c2:74:22:2d:bd:63:18:bd:a9:f1: 38:53:b4:e9:3e:f1:a1:1e:8b:eb:79:f1:10:1a:08: 74:27:b5:cb:d9:f0:36:f0:48:c9:3b:18:04:f3:30: 2d:bf:2b:38:12:8f:c1:52:2f:51:04:af:bc:0a:f6: 09:5b:75:26:ab:1e:9a:81:d3:85:a8:f9:1e:92:d9: 61:50:c5:f4:31:6f:3e:b1:c3:9e:a3:84:fd:22:31: e5:a6:f7:34:13:56:14:d1:ba:6e:f9:d8:77:01:c3: 7c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:6C:AE:1C:4B:4C:6D:ED:7A:EB:74:82:E2:C0:32:A2:F9:06:28:A5 X509v3 Authority Key Identifier: keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:98:13:92:58:3b:cc:d0:c2:15:1c:46:ac:8c:10:0d:ae:1f: 35:80:7e:d2:da:bf:f3:0e:55:fd:19:ed:b7:da:01:30:80:c7: 08:7b:51:19:0d:70:3e:dd:97:a8:38:bc:14:db:88:99:e9:1d: 70:e3:5d:3f:22:cd:02:1c:52:f8:fe:e4:d7:db:4f:2c:be:72: c1:25:45:f7:02:3b:8d:b2:36:0f:71:f1:9b:2e:b7:e1:91:cc: 0b:a0:ca:5f:a1:47:a0:56:ae:01:16:2d:1e:a8:cb:a7:cd:18: a5:bb:c8:90:da:17:62:a3:26:19:e8:da:27:24:ee:b4:a8:0c: b2:ba:a8:cd:04:53:8b:ec:c4:f4:45:16:16:d0:c7:11:c8:1a: c1:c1:1c:e2:be:8e:8b:00:ce:37:7e:dc:29:49:fe:e6:30:84: f5:23:74:8b:9b:80:0d:0b:0e:0c:5b:79:00:24:8d:21:fe:a3: fd:af:91:4c:fc:28:58:cd:f6:f8:33:be:f8:43:37:cb:cb:82: 7d:7d:9c:46:44:dd:2b:59:c0:d8:50:dc:e4:e4:97:f0:77:8c: ad:7f:c9:7f:4b:fa:15:ba:a0:d1:48:51:c8:85:05:01:cf:e9: 77:6a:70:12:01:e7:ac:2c:ff:db:e8:ca:d1:60:8e:b4:cd:48: e8:e0:51:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFyowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxOEIxMTAvBgNVBAUTKDM2OEYzQzkzOEI2MDE0MTI1MjFBM0E4MTkwMDk5NzhG Q0ZFOTFFN0UwHhcNMjUwNTEwMTYzMTM3WhcNMjUwNTE3MTYzMTM3WjAYMRYwFAYD VQQDEw02ODFmN2Y2YS0xZDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLAvWwm22guoWp/Axljj9z5wEESuXhuyqbBuC2raMnW75xFYD5sUy7e60jo5 zDijEQer/NskLxYNRP180AhflxZuoIg5AhpkDnIbGXsQ7tVCCYPd1nFkAFbvH0Q3 CvEVV1eHOchij7kJiomORrGaj7YEG/Wa0V5Owwt7uHY3VSt6WH9sd6VMDHy3Xwjf Hhk1w7k69OYCC8fUwsJ0Ii29Yxi9qfE4U7TpPvGhHovrefEQGgh0J7XL2fA28EjJ OxgE8zAtvys4Eo/BUi9RBK+8CvYJW3Umqx6agdOFqPkektlhUMX0MW8+scOeo4T9 IjHlpvc0E1YU0bpu+dh3AcN8owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1srhxL TG3teut0guLAMqL5BiilMB8GA1UdIwQYMBaAFDaPPJOLYBQSUho6gZAJl4/P6R5+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE4Qi9GOThCNUYwQzIx RjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZCSlNHanFCa0FtWGo4X3BI bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05vODhrNHRnRkJKU0dqcUJrQW1YajhfcEhuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjE4Qi9GOThCNUYwQzIxRjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZC SlNHanFCa0FtWGo4X3BIbjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAmBOSWDvM0MIVHEasjBANrh81gH7S2r/zDlX9Ge232gEwgMcIe1EZ DXA+3ZeoOLwU24iZ6R1w410/Is0CHFL4/uTX208svnLBJUX3AjuNsjYPcfGbLrfh kcwLoMpfoUegVq4BFi0eqMunzRilu8iQ2hdioyYZ6NonJO60qAyyuqjNBFOL7MT0 RRYW0McRyBrBwRzivo6LAM43ftwpSf7mMIT1I3SLm4ANCw4MW3kAJI0h/qP9r5FM /ChYzfb4M774QzfLy4J9fZxGRN0rWcDYUNzk5Jfwd4ytf8l/S/oVuqDRSFHIhQUB z+l3anASAeesLP/b6MrRYI60zUjo4FHv -----END CERTIFICATE-----Generated at Sun May 11 13:43:57 2025 by rpki-client