$ rpki-client -vvf rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft File: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft (raw, json) Hash identifier: Xt3aHOm4jdmIWXu28Pmheavs3bsacbVa0awMj84vuPg= Subject key identifier: F6:4D:13:4F:79:0C:F4:8E:FE:AA:7D:0A:CD:3D:AD:D8:93:DD:95:0A Authority key identifier: DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5 Certificate issuer: /CN=A919A016/serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5 Certificate serial: 0B15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft Manifest number: 0B09 Signing time: Mon 12 May 2025 19:08:26 +0000 Manifest this update: Mon 12 May 2025 19:08:25 +0000 Manifest next update: Mon 19 May 2025 19:08:25 +0000 Files and hashes: 1: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl (hash: afGn4Z1mvrZk7GnZeOiCJwmsLPYCGJ5PhNRDVQfuPj0=) 2: 26010A0605EF11F09181F913C4F9AE02.roa (hash: um1rPyDGy/aHUSBxco8n3OW5NdOsLGQIMyWpHja+2mw=) 3: CDEA6D9E05EE11F0A62FE512C4F9AE02.roa (hash: dB2B9yGj3kDbaxuuhfKLvRAbw8CrYhM4WFr6OVGCZsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2837 (0xb15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A016, serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5 Validity Not Before: May 12 19:08:25 2025 GMT Not After : May 19 19:08:25 2025 GMT Subject: CN=68224729-d429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7d:12:54:40:c6:be:63:ea:7d:b9:ba:b3:3c: ef:4c:8e:0d:77:d0:4a:65:bb:a7:49:1f:a7:ba:0f: 47:7d:a5:ee:a3:a8:1e:34:c9:02:1c:25:61:c8:17: 88:fe:2e:af:b8:6c:df:e0:39:15:37:79:0d:6e:32: 5a:33:62:af:b5:aa:7b:2e:20:a5:8d:27:61:bb:7d: 43:ce:9a:2a:a5:6c:87:c1:e7:73:85:8c:ae:93:bf: 4f:f1:93:77:7d:b5:29:69:f9:bd:3a:b7:eb:4f:85: c1:59:e2:25:a7:48:7c:4c:eb:49:37:d2:05:6f:21: f4:8b:59:3b:26:7a:78:54:bd:59:c4:be:d6:35:80: 81:fe:04:2b:d1:9f:e8:a8:e0:e3:89:21:9a:9b:b1: 8e:4d:52:d3:79:a0:e8:c1:b2:cb:34:ca:b7:0a:60: ec:79:63:94:42:01:20:c0:77:0a:a6:d1:d0:d1:25: 2a:79:27:1a:a0:4c:ac:aa:6e:9d:c6:40:10:03:0a: 98:36:5e:e8:cf:1f:bd:be:5b:ca:e4:ce:f4:6d:cb: c7:9a:4c:4f:30:f5:b5:e5:7d:9c:6b:67:b2:f5:9d: 0b:de:c0:00:6c:4c:e7:bb:0b:d7:3c:63:2c:9d:e0: 4f:81:f2:08:bb:bd:c7:46:b3:45:66:ec:eb:39:a2: da:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4D:13:4F:79:0C:F4:8E:FE:AA:7D:0A:CD:3D:AD:D8:93:DD:95:0A X509v3 Authority Key Identifier: keyid:DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:f4:58:53:b2:c3:14:ad:30:4a:2b:55:77:44:a8:9b:16:ac: fb:6d:14:37:a9:2a:41:5c:b5:77:ef:f6:a8:c9:45:96:34:28: f0:5c:f7:2c:26:87:60:ca:df:a4:6f:7e:50:93:45:6c:3b:c2: 62:27:09:d5:85:d2:4c:c7:70:71:8f:db:63:1d:37:eb:65:bd: ac:fd:89:9e:fe:71:d0:90:c8:02:eb:e6:c8:b2:e9:b6:dd:5d: 2e:4a:bc:cc:99:9d:5f:51:92:89:09:d6:7a:e4:8f:fb:81:b3: 15:44:ef:bd:6b:d2:30:16:58:92:2c:c0:f6:e2:e3:8f:a3:e8: 38:63:20:21:70:39:a7:b4:22:83:b1:25:aa:45:64:ea:58:49: b2:bd:7c:11:7e:0b:29:7e:d5:8d:dc:b0:01:57:52:2e:a7:61: e5:c1:02:bd:c6:60:59:5c:20:29:20:21:10:8f:cc:2c:b4:a2: 79:da:7a:cf:11:03:0c:b5:35:27:e5:e8:d3:1d:3c:9b:cf:45: 96:04:e7:48:f6:8b:d5:ec:e6:e9:b4:3e:14:d6:dc:82:4d:66: 7c:73:62:00:54:c6:54:19:18:37:8e:15:eb:58:aa:67:f1:76: eb:c8:a8:b8:af:61:b3:d0:6a:ba:d6:56:7c:53:37:68:75:8e: 43:e8:00:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUEwMTYxMTAvBgNVBAUTKERGMkY4QTc1RjNFOTI3NUUwRDRGMTBGQzZBMzE5OTk3 OTExQkU1QjUwHhcNMjUwNTEyMTkwODI1WhcNMjUwNTE5MTkwODI1WjAYMRYwFAYD VQQDEw02ODIyNDcyOS1kNDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyn0SVEDGvmPqfbm6szzvTI4Nd9BKZbunSR+nug9HfaXuo6geNMkCHCVhyBeI /i6vuGzf4DkVN3kNbjJaM2Kvtap7LiCljSdhu31DzpoqpWyHwedzhYyuk79P8ZN3 fbUpafm9OrfrT4XBWeIlp0h8TOtJN9IFbyH0i1k7Jnp4VL1ZxL7WNYCB/gQr0Z/o qODjiSGam7GOTVLTeaDowbLLNMq3CmDseWOUQgEgwHcKptHQ0SUqeScaoEysqm6d xkAQAwqYNl7ozx+9vlvK5M70bcvHmkxPMPW15X2ca2ey9Z0L3sAAbEznuwvXPGMs neBPgfIIu73HRrNFZuzrOaLaOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZNE095 DPSO/qp9Cs09rdiT3ZUKMB8GA1UdIwQYMBaAFN8vinXz6SdeDU8Q/GoxmZeRG+W1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTAxNi9DMDY3NzIyNjQx NzExMUVBQUFEMjZBNkNDNEY5QUUwMi8zeS1LZGZQcEoxNE5UeEQ4YWpHWmw1RWI1 YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN5LUtkZlBwSjE0TlR4RDhhakdabDVFYjViVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTAxNi9DMDY3NzIyNjQxNzExMUVBQUFEMjZBNkNDNEY5QUUwMi8zeS1LZGZQcEox NE5UeEQ4YWpHWmw1RWI1YlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI9FhTssMUrTBKK1V3RKibFqz7bRQ3qSpBXLV37/aoyUWWNCjwXPcs Jodgyt+kb35Qk0VsO8JiJwnVhdJMx3Bxj9tjHTfrZb2s/Yme/nHQkMgC6+bIsum2 3V0uSrzMmZ1fUZKJCdZ65I/7gbMVRO+9a9IwFliSLMD24uOPo+g4YyAhcDmntCKD sSWqRWTqWEmyvXwRfgspftWN3LABV1Iup2HlwQK9xmBZXCApICEQj8wstKJ52nrP EQMMtTUn5ejTHTybz0WWBOdI9ovV7ObptD4U1tyCTWZ8c2IAVMZUGRg3jhXrWKpn 8XbryKi4r2Gz0Gq61lZ8UzdodY5D6ACv -----END CERTIFICATE-----Generated at Tue May 13 04:39:13 2025 by rpki-client