$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D25/8F9F0386F27D11EE87D96C28C4F9AE02/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.mft File: rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.mft (raw, json) Hash identifier: CBu105/yA04L4rN5OJxEcdvrdIFJdp4zEgORWoruWJM= Subject key identifier: 47:8B:FD:C6:B2:B2:10:EB:FB:97:7F:70:F7:69:FE:6D:36:56:AC:0D Authority key identifier: AD:6E:E7:BA:19:58:65:0F:AA:84:6C:83:D0:A8:A4:B3:65:DA:F5:5B Certificate issuer: /CN=A9111D25/serialNumber=AD6EE7BA1958650FAA846C83D0A8A4B365DAF55B Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111D25/8F9F0386F27D11EE87D96C28C4F9AE02/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.mft Manifest number: BF Signing time: Tue 15 Apr 2025 04:41:16 +0000 Manifest this update: Tue 15 Apr 2025 04:41:15 +0000 Manifest next update: Tue 22 Apr 2025 04:41:15 +0000 Files and hashes: 1: rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.crl (hash: OFs+/MfzcdqCGdr0+/zjr0rTwlnBfcCNqVJSdhZwzKE=) 2: F869F6E6F27D11EE83652C2FC4F9AE02.roa (hash: ew+XPEWx1FJtgNOojePOaLBaSb2GLaRwxpMAXTIzL38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111D25/8F9F0386F27D11EE87D96C28C4F9AE02/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.crl rsync://rpki.apnic.net/member_repository/A9111D25/8F9F0386F27D11EE87D96C28C4F9AE02/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 04:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111D25, serialNumber=AD6EE7BA1958650FAA846C83D0A8A4B365DAF55B Validity Not Before: Apr 15 04:41:15 2025 GMT Not After : Apr 22 04:41:15 2025 GMT Subject: CN=67fde36c-835a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:85:dd:f4:cf:10:0b:df:32:39:4b:c1:b0:4b: 48:0c:b9:bd:22:54:19:a2:91:90:4f:db:c3:d8:0f: 01:37:9f:40:19:ed:f6:29:ca:50:98:80:ba:67:95: da:5c:c6:f7:ef:0c:19:a0:26:1f:0e:3c:e1:6e:cc: 10:01:6d:34:fd:ac:58:ee:46:a6:31:6e:89:0a:2f: ec:77:29:d4:05:24:64:f9:2c:13:94:e6:15:eb:88: 7c:66:2f:27:94:6d:cf:98:a6:39:bd:77:a6:96:df: bd:d8:84:1f:d7:9d:9f:00:7c:fb:47:7f:4e:3f:4e: f8:e7:6b:52:8d:9f:d9:2c:90:e6:f0:20:e7:19:ea: 31:c6:c7:cd:92:6e:53:c1:2b:6f:de:3a:70:33:40: a1:3e:f1:57:6c:5a:12:4c:70:80:96:70:4b:7d:31: d8:45:5e:c6:da:00:9b:a6:0d:c7:50:54:83:71:5f: 19:97:c9:4e:49:76:b4:cd:88:91:b2:f7:2e:7d:06: 5c:65:e5:19:63:22:d5:0b:be:65:08:82:9f:dc:bb: de:27:0a:da:84:52:f1:61:66:bc:b5:db:5b:f9:44: 1a:f7:48:60:70:d6:f9:dc:bf:67:b7:ab:f2:e7:b4: fd:12:21:d8:1a:11:d8:af:6a:03:0f:76:b5:17:09: e5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8B:FD:C6:B2:B2:10:EB:FB:97:7F:70:F7:69:FE:6D:36:56:AC:0D X509v3 Authority Key Identifier: keyid:AD:6E:E7:BA:19:58:65:0F:AA:84:6C:83:D0:A8:A4:B3:65:DA:F5:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111D25/8F9F0386F27D11EE87D96C28C4F9AE02/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D25/8F9F0386F27D11EE87D96C28C4F9AE02/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:02:b6:04:da:33:a3:7c:c8:8b:77:7c:a8:ff:e6:83:00:20: 08:ce:37:41:31:f2:a1:df:1e:25:a5:ae:c9:a4:b6:34:5c:fc: b8:4c:4e:2d:be:41:76:73:8a:6b:bf:fd:f5:a7:fa:4f:c4:32: 05:b6:42:c6:ec:8d:42:6e:85:f8:3f:1c:08:d3:e1:bf:e0:f5: d2:00:a0:20:5a:02:20:21:91:70:e6:33:be:ac:ef:09:01:31: 31:ef:17:50:5d:30:fc:a5:da:31:ce:db:cf:50:9f:23:50:86: b8:07:bb:b1:be:d8:70:8e:f3:70:8f:4d:e7:d2:14:38:78:23: f5:31:9b:ac:f5:ed:ad:de:5a:e9:4b:a7:49:56:28:9d:0a:e0: 1e:04:cd:60:0c:b4:cb:f8:95:1f:7f:c3:68:fe:f6:ed:38:ad: 5b:ea:3c:11:ff:7e:1b:87:ac:8c:c7:ae:3f:63:56:c9:7a:85: 23:7d:b2:3d:35:c1:17:44:c1:27:96:d8:b7:10:1f:4b:51:92: be:da:31:07:4d:0f:53:25:12:7a:84:d2:8a:7b:3f:af:ee:c8: 8c:83:0a:6d:33:6d:c2:cb:9c:c2:56:1e:8f:8c:54:00:40:df: 4d:be:ff:51:7e:e0:7f:83:04:f3:1d:64:d3:22:a1:52:38:aa: 53:b9:72:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFEMjUxMTAvBgNVBAUTKEFENkVFN0JBMTk1ODY1MEZBQTg0NkM4M0QwQThBNEIz NjVEQUY1NUIwHhcNMjUwNDE1MDQ0MTE1WhcNMjUwNDIyMDQ0MTE1WjAYMRYwFAYD VQQDEw02N2ZkZTM2Yy04MzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIXd9M8QC98yOUvBsEtIDLm9IlQZopGQT9vD2A8BN59AGe32KcpQmIC6Z5Xa XMb37wwZoCYfDjzhbswQAW00/axY7kamMW6JCi/sdynUBSRk+SwTlOYV64h8Zi8n lG3PmKY5vXemlt+92IQf152fAHz7R39OP07452tSjZ/ZLJDm8CDnGeoxxsfNkm5T wStv3jpwM0ChPvFXbFoSTHCAlnBLfTHYRV7G2gCbpg3HUFSDcV8Zl8lOSXa0zYiR svcufQZcZeUZYyLVC75lCIKf3LveJwrahFLxYWa8tdtb+UQa90hgcNb53L9nt6vy 57T9EiHYGhHYr2oDD3a1FwnliQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEeL/cay shDr+5d/cPdp/m02VqwNMB8GA1UdIwQYMBaAFK1u57oZWGUPqoRsg9CopLNl2vVb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUQyNS84RjlGMDM4NkYy N0QxMUVFODdEOTZDMjhDNEY5QUUwMi9yVzdudWhsWVpRLXFoR3lEMEtpa3MyWGE5 VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JXN251aGxZWlEtcWhHeUQwS2lrczJYYTlWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUQyNS84RjlGMDM4NkYyN0QxMUVFODdEOTZDMjhDNEY5QUUwMi9yVzdudWhsWVpR LXFoR3lEMEtpa3MyWGE5VnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMArYE2jOjfMiLd3yo/+aDACAIzjdBMfKh3x4lpa7JpLY0XPy4TE4t vkF2c4prv/31p/pPxDIFtkLG7I1CboX4PxwI0+G/4PXSAKAgWgIgIZFw5jO+rO8J ATEx7xdQXTD8pdoxztvPUJ8jUIa4B7uxvthwjvNwj03n0hQ4eCP1MZus9e2t3lrp S6dJViidCuAeBM1gDLTL+JUff8No/vbtOK1b6jwR/34bh6yMx64/Y1bJeoUjfbI9 NcEXRMEnlti3EB9LUZK+2jEHTQ9TJRJ6hNKKez+v7siMgwptM23Cy5zCVh6PjFQA QN9Nvv9RfuB/gwTzHWTTIqFSOKpTuXKg -----END CERTIFICATE-----Generated at Wed Apr 16 17:07:03 2025 by rpki-client