$ rpki-client -vvf rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft File: P0e7neKxDwsgzWjFEgcuaZNlf7w.mft (raw, json) Hash identifier: kz8pq1jpWZtZrnM2BVjlPQDqnT1ZFg6UuGUbMHWjHlE= Subject key identifier: A4:C8:F4:19:FB:4C:C8:26:88:64:CA:5F:D8:C8:1F:77:8B:91:B3:5F Authority key identifier: 3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC Certificate issuer: /CN=A916BA2B/serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC Certificate serial: 0C99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft Manifest number: 0C87 Signing time: Mon 12 May 2025 18:07:03 +0000 Manifest this update: Mon 12 May 2025 18:07:03 +0000 Manifest next update: Mon 19 May 2025 18:07:03 +0000 Files and hashes: 1: P0e7neKxDwsgzWjFEgcuaZNlf7w.crl (hash: PSsTBwgh3n3DdVtZUeyZrJVnLkLy/LrO4BpCD1W0Vk8=) 2: 03D4EC14D82F11EBA454B918C4F9AE02.roa (hash: p5JyMcxJixg62lv7FaUL1kQInCYoLGWXuwUelGMNmyE=) 3: F1862B06642911EAA019224CC4F9AE02.roa (hash: ErM56dQSOmabkhk0xjyD2uWxD3CfkXhA/NcHUzIsCiI=) 4: F058F664642911EAA019224CC4F9AE02.roa (hash: pR8hpYrCoO89tivRWBJiZRzg2aFD3n8kIVZ7Qsgjqk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3225 (0xc99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BA2B, serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC Validity Not Before: May 12 18:07:03 2025 GMT Not After : May 19 18:07:03 2025 GMT Subject: CN=682238c7-2d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9a:4c:60:0c:4e:e9:02:1f:79:71:2e:9e:a8: b9:c6:e5:74:73:da:6f:5c:c6:96:27:02:85:45:98: d3:8c:c6:f0:62:91:48:9f:74:8d:52:a3:94:e5:29: 29:1c:e6:20:d9:a9:f4:b5:b3:3b:66:2f:df:54:40: 6b:52:3e:23:65:36:f6:9c:4e:c3:32:1b:1a:62:77: c1:db:ec:82:ee:3a:d0:e3:84:67:e9:7e:54:5f:36: ff:7c:79:0e:39:dd:db:68:7c:c8:ff:0c:e8:dd:61: 08:58:ba:0a:ea:10:29:10:46:86:4f:06:9d:80:b1: 63:dc:63:03:5d:13:5a:12:44:ae:7b:ef:c2:78:bc: c7:6c:21:21:e9:13:20:2f:cc:44:9a:17:b5:c6:23: 39:9d:0a:70:6a:cf:4a:f3:91:b4:48:a6:f5:61:e0: 9a:98:be:53:f5:9c:a6:07:af:aa:2e:74:2f:76:4e: 59:60:a5:96:b2:97:40:08:bc:7f:25:1b:4e:97:57: 00:23:1e:d4:36:79:ce:f9:ad:6f:71:55:89:62:dc: 27:e0:ed:7f:7d:3b:01:04:6d:79:7f:52:aa:b3:d3: 2f:d5:31:78:76:d4:30:7f:f5:0c:0e:04:97:6b:a0: c0:ab:88:fd:57:32:3b:79:12:7c:34:f3:06:a4:a8: 72:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C8:F4:19:FB:4C:C8:26:88:64:CA:5F:D8:C8:1F:77:8B:91:B3:5F X509v3 Authority Key Identifier: keyid:3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:7b:21:6c:5d:4c:53:a8:9d:a3:5d:6d:3c:26:42:fd:d6:3c: 8f:d2:13:72:54:9c:3d:bc:04:10:9d:1e:a2:f7:7a:91:cb:1b: a0:f5:d5:0d:c7:b8:58:2d:e7:c9:d2:e8:3d:31:d4:3c:52:42: ea:ed:6c:ff:6d:4b:1d:c9:9e:e9:ac:e5:48:eb:72:7d:19:5d: b1:00:b8:f5:09:95:5b:62:88:b5:5b:3a:a1:e8:6f:87:cc:5a: 99:02:08:73:c6:a4:99:33:0e:97:cc:80:84:ea:d2:9e:fb:eb: 62:6d:15:24:e3:65:e4:52:fb:4e:76:66:16:c7:d5:69:75:be: b3:0d:fa:5c:63:4d:86:92:60:aa:c3:03:44:81:52:66:50:40: db:55:e0:44:7a:e7:4c:cb:2a:a9:48:4e:db:1d:91:74:5b:8c: 5e:f4:5e:30:ea:ee:4f:e8:0a:c6:4e:45:42:49:4d:d2:c0:ca: dd:d4:7a:91:a4:4c:05:29:69:b4:06:8a:9f:c7:d8:56:34:1c: 84:49:f8:01:89:f2:3a:ba:ec:e4:cd:1b:b1:74:f3:7a:e2:31: 11:6d:23:fa:32:0a:d8:43:cb:7e:ca:9d:1b:b1:87:6e:9e:6f: 9e:10:1c:1f:e9:37:bd:5e:6b:7b:fe:f4:07:be:18:0a:56:4e: 21:05:07:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJBMkIxMTAvBgNVBAUTKDNGNDdCQjlERTJCMTBGMEIyMENENjhDNTEyMDcyRTY5 OTM2NTdGQkMwHhcNMjUwNTEyMTgwNzAzWhcNMjUwNTE5MTgwNzAzWjAYMRYwFAYD VQQDEw02ODIyMzhjNy0yZDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZpMYAxO6QIfeXEunqi5xuV0c9pvXMaWJwKFRZjTjMbwYpFIn3SNUqOU5Skp HOYg2an0tbM7Zi/fVEBrUj4jZTb2nE7DMhsaYnfB2+yC7jrQ44Rn6X5UXzb/fHkO Od3baHzI/wzo3WEIWLoK6hApEEaGTwadgLFj3GMDXRNaEkSue+/CeLzHbCEh6RMg L8xEmhe1xiM5nQpwas9K85G0SKb1YeCamL5T9ZymB6+qLnQvdk5ZYKWWspdACLx/ JRtOl1cAIx7UNnnO+a1vcVWJYtwn4O1/fTsBBG15f1Kqs9Mv1TF4dtQwf/UMDgSX a6DAq4j9VzI7eRJ8NPMGpKhykQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTI9Bn7 TMgmiGTKX9jIH3eLkbNfMB8GA1UdIwQYMBaAFD9Hu53isQ8LIM1oxRIHLmmTZX+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkEyQi9DODA4MjQ4OEY2 ODcxMUU5ODBFNTk5NTdDNEY5QUUwMi9QMGU3bmVLeER3c2d6V2pGRWdjdWFaTmxm N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AwZTduZUt4RHdzZ3pXakZFZ2N1YVpObGY3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkEyQi9DODA4MjQ4OEY2ODcxMUU5ODBFNTk5NTdDNEY5QUUwMi9QMGU3bmVLeER3 c2d6V2pGRWdjdWFaTmxmN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqeyFsXUxTqJ2jXW08JkL91jyP0hNyVJw9vAQQnR6i93qRyxug9dUN x7hYLefJ0ug9MdQ8UkLq7Wz/bUsdyZ7prOVI63J9GV2xALj1CZVbYoi1Wzqh6G+H zFqZAghzxqSZMw6XzICE6tKe++tibRUk42XkUvtOdmYWx9Vpdb6zDfpcY02GkmCq wwNEgVJmUEDbVeBEeudMyyqpSE7bHZF0W4xe9F4w6u5P6ArGTkVCSU3SwMrd1HqR pEwFKWm0Boqfx9hWNByESfgBifI6uuzkzRuxdPN64jERbSP6MgrYQ8t+yp0bsYdu nm+eEBwf6Te9Xmt7/vQHvhgKVk4hBQcQ -----END CERTIFICATE-----Generated at Wed May 14 03:43:28 2025 by rpki-client