$ rpki-client -vvf rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft File: 0fxphnCiQetFTVXFZ6paY1rwoGM.mft (raw, json) Hash identifier: KO8yRgAXsK1dvVNaeXLL0J4tz3B2XQdrJgfFEM4qQQE= Subject key identifier: DD:9B:BC:1E:94:C6:53:98:7C:0D:0F:12:ED:69:4E:90:52:6E:6C:5F Authority key identifier: D1:FC:69:86:70:A2:41:EB:45:4D:55:C5:67:AA:5A:63:5A:F0:A0:63 Certificate issuer: /CN=A918681B/serialNumber=D1FC698670A241EB454D55C567AA5A635AF0A063 Certificate serial: 04F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fxphnCiQetFTVXFZ6paY1rwoGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft Manifest number: 04EB Signing time: Mon 12 May 2025 23:33:52 +0000 Manifest this update: Mon 12 May 2025 23:33:52 +0000 Manifest next update: Mon 19 May 2025 23:33:52 +0000 Files and hashes: 1: 0fxphnCiQetFTVXFZ6paY1rwoGM.crl (hash: 4d9y5ZdCyVbNkR2lZUXuiIFMqw++/rT7f2U3wYL9Kxg=) 2: 5D4D3E261A3E11ECB42D0B80C4F9AE02.roa (hash: Am0tyv0SW/vQBy5lGTGy4TYfxwQ9Lc6UrqhzC51ywy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.crl rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fxphnCiQetFTVXFZ6paY1rwoGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1271 (0x4f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918681B, serialNumber=D1FC698670A241EB454D55C567AA5A635AF0A063 Validity Not Before: May 12 23:33:52 2025 GMT Not After : May 19 23:33:52 2025 GMT Subject: CN=68228560-0481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a4:d9:3d:0f:43:9e:e2:52:e2:24:7d:7e:b3: 82:2f:4b:e0:f7:e3:9f:ab:9f:88:04:f0:af:ee:7b: c7:32:57:99:32:b0:22:85:02:e5:49:f1:7d:03:f7: 8c:38:f2:4d:a0:5a:d2:3d:d3:d5:9e:63:a7:ae:30: 6c:60:76:ce:0c:54:9f:b8:06:bc:70:5b:24:da:ff: 36:21:04:f6:d8:a1:78:fb:f7:e4:15:d9:49:1d:b7: 50:25:dc:c5:14:01:ed:ae:3c:bb:3a:3a:a0:54:c5: ec:1a:51:1e:59:7f:02:3e:76:65:05:19:2b:18:ec: 09:0d:62:d9:03:97:22:d3:bb:f5:0a:37:04:0f:49: af:2f:51:98:8e:7a:2d:93:2a:f6:e7:69:2d:15:d7: 58:09:f2:8a:51:0c:b0:17:9a:d9:50:90:57:9a:0e: 8e:ad:1f:06:24:f0:b9:05:ee:04:23:e4:2f:69:db: 8d:2c:49:67:95:97:0b:71:9b:e7:65:53:df:8c:91: df:77:76:8e:3c:9a:13:ba:70:a5:99:5e:3b:87:59: d5:63:ed:66:7b:0a:7d:6a:0d:99:e5:4e:dc:06:71: e5:f5:2d:3e:93:7f:c7:02:1b:17:32:b6:59:a6:8f: 03:3d:48:a2:af:70:b9:0d:fc:ba:15:80:31:a4:ee: 41:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9B:BC:1E:94:C6:53:98:7C:0D:0F:12:ED:69:4E:90:52:6E:6C:5F X509v3 Authority Key Identifier: keyid:D1:FC:69:86:70:A2:41:EB:45:4D:55:C5:67:AA:5A:63:5A:F0:A0:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fxphnCiQetFTVXFZ6paY1rwoGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:0a:a3:ef:06:8b:ad:56:8f:22:0b:be:40:f7:cc:47:76:53: 28:4b:b8:01:27:d9:6a:6c:16:89:a8:32:f5:b9:68:f4:a9:1d: f4:f5:29:d9:fa:ee:9e:53:f0:29:b1:ee:5b:ed:70:b5:5c:fc: 15:bc:10:f8:b6:59:81:ee:d0:fc:9b:fd:25:d8:f2:4f:38:ff: 01:25:d6:7d:ed:c3:46:d7:4a:8f:af:94:ed:85:da:c3:0f:93: 17:0c:a5:ff:b1:c1:71:8a:34:cf:b5:81:e8:39:e9:59:04:6d: 7f:3b:7c:b9:c8:93:06:e6:7b:ec:6a:65:01:bb:2e:d6:e5:e1: de:5e:b9:30:24:ed:aa:27:4a:bb:e6:7e:99:e6:9c:4e:23:99: 2c:6e:91:e7:52:0a:08:af:d9:9d:ba:90:05:38:bd:a2:cc:f6: 1e:63:6d:4e:c7:f9:02:f5:37:30:f5:67:f4:8d:4f:2c:9b:00: 1d:df:89:76:9e:33:99:7c:c2:a3:5e:75:e5:8b:e2:89:ca:c9: e3:48:d8:96:c3:29:0e:9c:0e:f7:7b:a4:d1:0a:41:f9:19:c4: 1a:b3:46:39:38:9b:32:9c:a4:46:93:e0:2a:9e:5b:6a:bd:d5: 92:cc:ae:8e:02:16:7b:f0:f8:48:7f:ef:36:55:a8:78:b4:ac: 64:e0:aa:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4MUIxMTAvBgNVBAUTKEQxRkM2OTg2NzBBMjQxRUI0NTRENTVDNTY3QUE1QTYz NUFGMEEwNjMwHhcNMjUwNTEyMjMzMzUyWhcNMjUwNTE5MjMzMzUyWjAYMRYwFAYD VQQDEw02ODIyODU2MC0wNDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4aTZPQ9DnuJS4iR9frOCL0vg9+Ofq5+IBPCv7nvHMleZMrAihQLlSfF9A/eM OPJNoFrSPdPVnmOnrjBsYHbODFSfuAa8cFsk2v82IQT22KF4+/fkFdlJHbdQJdzF FAHtrjy7OjqgVMXsGlEeWX8CPnZlBRkrGOwJDWLZA5ci07v1CjcED0mvL1GYjnot kyr252ktFddYCfKKUQywF5rZUJBXmg6OrR8GJPC5Be4EI+QvaduNLElnlZcLcZvn ZVPfjJHfd3aOPJoTunClmV47h1nVY+1mewp9ag2Z5U7cBnHl9S0+k3/HAhsXMrZZ po8DPUiir3C5Dfy6FYAxpO5BswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2bvB6U xlOYfA0PEu1pTpBSbmxfMB8GA1UdIwQYMBaAFNH8aYZwokHrRU1VxWeqWmNa8KBj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjgxQi9DNDNGQkQwNjFB M0ExMUVDOEZCRjQxN0JDNEY5QUUwMi8wZnhwaG5DaVFldEZUVlhGWjZwYVkxcndv R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBmeHBobkNpUWV0RlRWWEZaNnBhWTFyd29HTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjgxQi9DNDNGQkQwNjFBM0ExMUVDOEZCRjQxN0JDNEY5QUUwMi8wZnhwaG5DaVFl dEZUVlhGWjZwYVkxcndvR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzCqPvBoutVo8iC75A98xHdlMoS7gBJ9lqbBaJqDL1uWj0qR309SnZ +u6eU/Apse5b7XC1XPwVvBD4tlmB7tD8m/0l2PJPOP8BJdZ97cNG10qPr5TthdrD D5MXDKX/scFxijTPtYHoOelZBG1/O3y5yJMG5nvsamUBuy7W5eHeXrkwJO2qJ0q7 5n6Z5pxOI5ksbpHnUgoIr9mdupAFOL2izPYeY21Ox/kC9Tcw9Wf0jU8smwAd34l2 njOZfMKjXnXli+KJysnjSNiWwykOnA73e6TRCkH5GcQas0Y5OJsynKRGk+Aqnltq vdWSzK6OAhZ78PhIf+82Vah4tKxk4KoN -----END CERTIFICATE-----Generated at Wed May 14 01:48:36 2025 by rpki-client