$ rpki-client -vvf rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft File: aRgc9FH4s_7GT8gpi1ItSIylyeY.mft (raw, json) Hash identifier: m/HSUn7B43q2zIp08MTwzj0MhgQ1YvF785KSYsPy0n8= Subject key identifier: 66:F0:2D:28:60:76:47:71:5C:47:2F:40:9C:B4:0F:3F:10:81:25:A6 Authority key identifier: 69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6 Certificate issuer: /CN=A916DE3D/serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft Manifest number: 41 Signing time: Sat 17 May 2025 07:01:46 +0000 Manifest this update: Sat 17 May 2025 07:01:46 +0000 Manifest next update: Sat 24 May 2025 07:01:46 +0000 Files and hashes: 1: aRgc9FH4s_7GT8gpi1ItSIylyeY.crl (hash: ABZhQANCHru1If78tILag1julEsMXW4QyC7NEPNPptw=) 2: 3AA17754FD8211EFB5BB677AC4F9AE02.roa (hash: imHJlERFiYSGRBFLnXEmas2EVRVLv/9+zOxRclw7D8g=) 3: B3266880FD8511EFA4783083C4F9AE02.roa (hash: W6yWEruXPIDPoCs6QL8pnWnNjj8hPqXcENkKFmbbFhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 07:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DE3D, serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6 Validity Not Before: May 17 07:01:46 2025 GMT Not After : May 24 07:01:46 2025 GMT Subject: CN=6828345a-62a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:69:15:6b:82:57:29:3b:e0:73:9c:56:64:1d: 96:b2:d9:d5:4f:c5:cf:bc:51:2a:05:d0:bf:1f:30: 2a:5a:4b:e7:6b:48:17:ef:b2:68:07:36:0d:b3:fe: c3:94:fc:4d:d8:57:d9:96:43:44:29:cd:fe:c4:20: 2e:28:32:5a:f1:37:07:24:2f:ae:72:6e:6d:37:45: d5:b1:0b:e6:e0:c2:5f:0b:74:18:e9:2a:00:c1:e0: 5f:ee:30:55:45:e9:a7:23:97:87:6c:cc:ee:ba:11: 39:d6:1f:23:c5:6a:95:dd:fe:e4:2d:e7:ab:25:47: 68:26:06:10:6a:41:f4:b3:95:e6:f2:91:47:86:bb: 71:85:59:b5:33:c0:44:d3:36:09:42:06:61:16:b7: a6:82:01:30:fa:6b:80:5e:a4:62:51:64:eb:b6:79: db:57:e8:67:50:65:c1:db:84:d6:ad:1d:cc:31:96: f4:d1:26:8a:ea:a0:3c:b5:96:e3:a9:75:2e:c2:d6: 01:66:92:57:3a:1c:ec:a0:cb:84:ab:90:e9:c1:15: fd:01:1c:65:37:b0:49:97:7e:54:20:01:d2:3c:08: 27:fa:44:17:80:8e:25:0e:49:8c:3a:6b:97:8b:b1: 5f:c7:6e:5c:5f:24:46:6f:ba:bb:e3:8d:06:18:70: 07:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F0:2D:28:60:76:47:71:5C:47:2F:40:9C:B4:0F:3F:10:81:25:A6 X509v3 Authority Key Identifier: keyid:69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:29:2f:28:a6:ea:05:6e:07:40:5b:9e:58:fd:26:a6:1a:72: c6:84:03:34:61:9d:55:1e:26:f4:8b:48:7d:42:1f:be:da:85: 29:70:fa:d5:d6:78:0c:7a:ff:7a:15:6e:64:0c:ac:5b:4a:41: 33:59:a7:ab:73:cb:04:30:a4:df:0e:55:d8:44:ea:47:c9:57: d8:36:52:29:5c:76:2c:e4:02:96:3d:91:7d:e9:f9:7d:d2:8f: fc:8e:de:de:20:0a:7f:32:17:b1:67:34:1c:be:fb:e9:65:c2: 4d:f6:d0:37:f4:b2:ef:40:c4:2c:3d:f7:33:9b:9a:cc:e5:01: 20:31:23:a1:8e:b6:13:9a:9a:78:69:c9:c6:62:91:eb:e3:10: 41:21:e5:78:40:e6:8d:50:bb:9b:fe:0b:51:e0:2f:0f:f4:08: 50:23:be:cb:d8:cc:88:21:68:9b:9a:5c:dd:04:c4:45:b8:c5: 1c:5c:60:6f:dc:bd:95:bd:59:1a:1b:f1:79:84:e6:e7:5e:b8: 30:1a:6e:c3:01:36:35:7a:5d:1a:df:25:31:a1:8d:a3:01:8c: 83:88:1a:a2:58:4d:93:a8:ac:df:8d:b2:f1:19:44:c9:c6:90: 56:b5:51:2e:9b:4a:7e:cf:a7:83:84:25:a8:d7:11:70:9c:86: f9:a8:9e:3b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 REUzRDExMC8GA1UEBRMoNjkxODFDRjQ1MUY4QjNGRUM2NEZDODI5OEI1MjJENDg4 Q0E1QzlFNjAeFw0yNTA1MTcwNzAxNDZaFw0yNTA1MjQwNzAxNDZaMBgxFjAUBgNV BAMTDTY4MjgzNDVhLTYyYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfaRVrglcpO+BznFZkHZay2dVPxc+8USoF0L8fMCpaS+drSBfvsmgHNg2z/sOU /E3YV9mWQ0Qpzf7EIC4oMlrxNwckL65ybm03RdWxC+bgwl8LdBjpKgDB4F/uMFVF 6acjl4dszO66ETnWHyPFapXd/uQt56slR2gmBhBqQfSzlebykUeGu3GFWbUzwETT NglCBmEWt6aCATD6a4BepGJRZOu2edtX6GdQZcHbhNatHcwxlvTRJorqoDy1luOp dS7C1gFmklc6HOygy4SrkOnBFf0BHGU3sEmXflQgAdI8CCf6RBeAjiUOSYw6a5eL sV/HblxfJEZvurvjjQYYcAf/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZvAtKGB2 R3FcRy9AnLQPPxCBJaYwHwYDVR0jBBgwFoAUaRgc9FH4s/7GT8gpi1ItSIylyeYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZERTNEL0ZEMUU0NTUwREU2 NTExRUY4MjQzRUUzMEM0RjlBRTAyL2FSZ2M5Rkg0c183R1Q4Z3BpMUl0U0l5bHll WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYVJnYzlGSDRzXzdHVDhncGkxSXRTSXlseWVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE RTNEL0ZEMUU0NTUwREU2NTExRUY4MjQzRUUzMEM0RjlBRTAyL2FSZ2M5Rkg0c183 R1Q4Z3BpMUl0U0l5bHllWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJUpLyim6gVuB0Bbnlj9JqYacsaEAzRhnVUeJvSLSH1CH77ahSlw+tXW eAx6/3oVbmQMrFtKQTNZp6tzywQwpN8OVdhE6kfJV9g2UilcdizkApY9kX3p+X3S j/yO3t4gCn8yF7FnNBy+++llwk320Df0su9AxCw99zObmszlASAxI6GOthOamnhp ycZikevjEEEh5XhA5o1Qu5v+C1HgLw/0CFAjvsvYzIghaJuaXN0ExEW4xRxcYG/c vZW9WRob8XmE5udeuDAabsMBNjV6XRrfJTGhjaMBjIOIGqJYTZOorN+NsvEZRMnG kFa1US6bSn7Pp4OEJajXEXCchvmonjs= -----END CERTIFICATE-----Generated at Sat May 17 19:17:02 2025 by rpki-client