$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft File: 64P0iA8jV15XUXhcbgqyvgskm8M.mft (raw, json) Hash identifier: ae58posbJPgpRyEuLwZ95Lt7bT0hvimaU2tb3wP2xyY= Subject key identifier: BE:71:0F:E9:76:D4:AC:B0:A2:1A:21:A9:A5:57:B4:A4:7C:DD:69:16 Authority key identifier: EB:83:F4:88:0F:23:57:5E:57:51:78:5C:6E:0A:B2:BE:0B:24:9B:C3 Certificate issuer: /CN=A917C0F3/serialNumber=EB83F4880F23575E5751785C6E0AB2BE0B249BC3 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft Manifest number: 41 Signing time: Thu 15 May 2025 06:44:57 +0000 Manifest this update: Thu 15 May 2025 06:44:57 +0000 Manifest next update: Thu 22 May 2025 06:44:57 +0000 Files and hashes: 1: 64P0iA8jV15XUXhcbgqyvgskm8M.crl (hash: F5bnE0JLJeLdVBTj3qEw4SJufWhXg08SRe07aBEktqo=) 2: 028452F0D0BA11EFA8B5A526C4F9AE02.roa (hash: IREGMcYzyBbo6wcvGexVHMAjLf7W6LD1j2SfUrLribg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.crl rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:44:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C0F3, serialNumber=EB83F4880F23575E5751785C6E0AB2BE0B249BC3 Validity Not Before: May 15 06:44:57 2025 GMT Not After : May 22 06:44:57 2025 GMT Subject: CN=68258d69-8bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:79:0e:be:04:2e:00:5d:33:77:54:39:59:b2: 36:34:60:f6:f5:82:ec:0c:ee:56:af:61:9a:1a:7c: 00:29:5e:ae:d7:56:9f:5d:5b:2a:a0:e2:76:cb:e6: b4:44:46:59:57:3b:21:0a:59:fb:c2:62:6d:53:dd: 1a:18:da:ee:35:18:51:4e:b0:d0:3e:b6:4f:e8:e3: 98:a4:48:b6:98:54:42:ec:f7:ad:5a:88:0d:6b:9b: 0b:ee:5d:a7:22:cb:92:7d:12:b3:55:81:2e:d0:32: 41:e4:00:16:3b:07:64:83:88:46:3a:39:37:09:51: c0:e7:aa:2b:79:b5:4f:86:2c:6d:ae:cd:ef:d3:3f: 6e:11:33:75:ff:fb:13:7d:1b:aa:78:17:55:c5:ff: 29:1f:8b:a1:3e:58:14:b3:08:39:d0:d5:86:3c:96: 9e:72:f4:99:16:72:15:ed:3a:a8:46:e4:63:1a:93: 1a:37:84:f2:33:7a:ac:c5:95:4e:fa:0f:56:d9:19: 00:36:64:f0:39:a0:9c:e4:44:b6:b4:17:9d:3f:af: 82:95:1c:49:dd:2c:b1:11:48:82:0f:a5:4d:a2:52: 5d:a0:b3:54:bf:ec:7f:d6:f0:61:7b:f8:b8:c3:8b: 32:e2:cf:d5:1a:31:5b:f8:fa:89:4c:08:2e:4b:69: 35:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:71:0F:E9:76:D4:AC:B0:A2:1A:21:A9:A5:57:B4:A4:7C:DD:69:16 X509v3 Authority Key Identifier: keyid:EB:83:F4:88:0F:23:57:5E:57:51:78:5C:6E:0A:B2:BE:0B:24:9B:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ba:01:b5:33:7f:a7:f1:c0:e2:5c:96:0c:bf:45:45:29:f2: d5:bd:f5:d1:d2:5b:59:fc:b0:d0:ef:1f:80:e1:dd:d3:5e:a3: 85:d1:71:47:90:fe:aa:03:f8:eb:a4:64:95:87:7d:43:f3:5a: 8d:4c:d6:de:6a:9a:93:c0:5e:fa:c5:b6:09:d2:17:27:80:39: fd:d3:14:08:cf:73:c8:d6:84:cf:80:c5:ce:c3:52:63:51:a7: 61:ec:4d:21:ed:9e:1c:74:2f:d2:bc:e0:ea:21:bb:fd:41:9d: 2b:d6:94:15:be:ae:ad:15:c1:fa:e0:95:c7:66:6e:f9:76:98: d9:98:00:42:71:dd:a2:ab:87:87:55:aa:94:12:4e:c0:ff:76: 63:3e:39:01:e5:f1:e6:13:d5:e4:a3:2e:31:16:b9:8d:dc:50: 33:ed:53:ee:ab:cf:2b:2f:d9:33:47:8b:bb:3f:e5:a1:11:ae: bb:3c:4e:7a:da:a1:81:12:36:9d:ed:d6:44:56:8f:b3:1b:08: 37:84:21:06:0a:22:83:82:4a:e6:81:dc:61:b7:bc:62:60:b3: 36:22:c3:7e:6a:8c:c9:82:5a:57:0a:ee:1c:25:cd:f4:ab:7f: 0f:8b:a6:74:47:80:1d:7a:c1:03:0d:53:a9:cb:9b:d1:3a:5e: b5:5d:d4:88 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzBGMzExMC8GA1UEBRMoRUI4M0Y0ODgwRjIzNTc1RTU3NTE3ODVDNkUwQUIyQkUw QjI0OUJDMzAeFw0yNTA1MTUwNjQ0NTdaFw0yNTA1MjIwNjQ0NTdaMBgxFjAUBgNV BAMTDTY4MjU4ZDY5LThiZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/eQ6+BC4AXTN3VDlZsjY0YPb1guwM7lavYZoafAApXq7XVp9dWyqg4nbL5rRE RllXOyEKWfvCYm1T3RoY2u41GFFOsNA+tk/o45ikSLaYVELs961aiA1rmwvuXaci y5J9ErNVgS7QMkHkABY7B2SDiEY6OTcJUcDnqit5tU+GLG2uze/TP24RM3X/+xN9 G6p4F1XF/ykfi6E+WBSzCDnQ1YY8lp5y9JkWchXtOqhG5GMakxo3hPIzeqzFlU76 D1bZGQA2ZPA5oJzkRLa0F50/r4KVHEndLLERSIIPpU2iUl2gs1S/7H/W8GF7+LjD izLiz9UaMVv4+olMCC5LaTWXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvnEP6XbU rLCiGiGppVe0pHzdaRYwHwYDVR0jBBgwFoAU64P0iA8jV15XUXhcbgqyvgskm8Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDMEYzLzU4RkU3NEFFRDBC OTExRUZBMDg0ODgyNUM0RjlBRTAyLzY0UDBpQThqVjE1WFVYaGNiZ3F5dmdza204 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNjRQMGlBOGpWMTVYVVhoY2JncXl2Z3NrbThNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD MEYzLzU4RkU3NEFFRDBCOTExRUZBMDg0ODgyNUM0RjlBRTAyLzY0UDBpQThqVjE1 WFVYaGNiZ3F5dmdza204TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIy6AbUzf6fxwOJclgy/RUUp8tW99dHSW1n8sNDvH4Dh3dNeo4XRcUeQ /qoD+OukZJWHfUPzWo1M1t5qmpPAXvrFtgnSFyeAOf3TFAjPc8jWhM+Axc7DUmNR p2HsTSHtnhx0L9K84Oohu/1BnSvWlBW+rq0Vwfrglcdmbvl2mNmYAEJx3aKrh4dV qpQSTsD/dmM+OQHl8eYT1eSjLjEWuY3cUDPtU+6rzysv2TNHi7s/5aERrrs8Tnra oYESNp3t1kRWj7MbCDeEIQYKIoOCSuaB3GG3vGJgszYiw35qjMmCWlcK7hwlzfSr fw+LpnRHgB16wQMNU6nLm9E6XrVd1Ig= -----END CERTIFICATE-----Generated at Fri May 16 16:51:21 2025 by rpki-client