$ rpki-client -vvf rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft File: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft (raw, json) Hash identifier: j0WtJ3SNwtzdKPiVxdT0fl16+DWdq+6k5bFTXqO6Ukk= Subject key identifier: 9A:0C:00:6D:C0:92:D2:56:86:E5:E0:AA:D2:F3:B6:53:53:4C:F7:A6 Authority key identifier: 98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7 Certificate issuer: /CN=A912654A/serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7 Certificate serial: 0376 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft Manifest number: 0373 Signing time: Thu 03 Apr 2025 00:54:45 +0000 Manifest this update: Thu 03 Apr 2025 00:54:44 +0000 Manifest next update: Thu 10 Apr 2025 00:54:44 +0000 Files and hashes: 1: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl (hash: HyL22lKKiRDG/05UAT1Tm6v28tCla33T/jSAIgf3TzI=) 2: D83A3404EF0311EDA8B8C81EC4F9AE02.roa (hash: RNcRlm2wXA2LTmrbU4YLnCSJL/XH7jtpKjrey/Lilq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:54:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 886 (0x376) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912654A Validity Not Before: Apr 3 00:54:44 2025 GMT Not After : Apr 10 00:54:44 2025 GMT Subject: CN=67eddc55-359e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d3:ef:3d:69:e7:4a:70:48:ec:08:81:18:7f: 20:1b:0f:09:dd:b6:60:ac:af:2d:24:b5:87:46:ac: 11:77:70:a1:08:43:c1:a2:d7:59:f7:a4:3f:0f:87: 29:ef:3d:d6:a3:80:00:16:41:67:82:08:50:9d:20: 05:aa:15:bb:f6:91:d7:33:f9:fc:91:0c:16:34:d4: 6d:6b:48:bf:9d:d1:43:19:42:d5:61:21:f1:4b:f4: 66:2b:d9:c2:a8:55:1e:5d:ea:94:13:1c:a0:a6:ad: 27:77:9f:8a:56:aa:64:73:8c:d9:6f:04:9b:23:74: 01:4c:d3:53:4e:79:d4:7d:78:bf:ea:75:72:a3:a1: a1:15:ad:33:78:a5:bb:01:0f:bb:e9:4b:b5:85:54: 99:38:b0:b5:56:65:e5:5f:03:30:d5:84:83:82:0a: 37:8f:21:58:34:bf:68:f7:ba:fb:20:c9:9b:54:ec: 88:42:b2:e5:d9:7d:53:b5:2b:db:a1:e0:58:43:5c: 35:78:de:f4:3d:a3:f6:b3:eb:a1:8f:37:75:21:d1: 53:75:53:b6:74:ba:80:bb:77:6b:37:18:64:e6:34: 75:6b:da:23:88:19:1a:12:19:01:7b:50:85:39:95: c4:a5:d9:35:35:c0:d4:b7:72:87:a1:55:93:73:90: c2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:0C:00:6D:C0:92:D2:56:86:E5:E0:AA:D2:F3:B6:53:53:4C:F7:A6 X509v3 Authority Key Identifier: keyid:98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:a8:16:ef:c8:fb:bb:cb:61:6a:00:ec:20:b5:ef:e4:2a:5e: d1:a8:2d:84:a3:db:de:a7:2f:4b:eb:48:22:e0:d8:59:49:2c: 26:33:61:49:ff:73:20:0c:e2:a3:b7:07:cb:b2:8f:fa:a8:d1: 3f:e9:80:2c:85:84:65:09:7c:d1:27:44:bb:b8:fd:86:ae:9a: 6d:0c:54:d3:17:a8:2e:aa:c2:e6:cc:0e:43:c9:98:a6:5c:26: 49:3c:b5:25:77:ff:c2:1d:e8:8a:6c:0d:a6:88:91:c9:8d:0b: 50:b4:b5:d1:84:09:94:d9:36:f4:e7:bc:9c:8e:4f:44:97:5f: ef:ff:97:d7:ad:e6:a9:92:4c:e2:7e:78:d3:65:52:3b:dc:ff: af:40:a8:5b:f0:5c:50:34:c7:c4:21:27:02:0b:56:f5:82:25: ee:ab:3d:37:b3:af:b6:56:82:69:5c:e0:72:3f:96:00:ec:13: 01:10:c5:d1:1c:68:92:cb:88:a1:06:22:2d:0e:5a:c0:3b:fb: c8:94:21:44:08:90:21:5d:09:ec:df:32:10:0b:e0:11:f0:47: be:c6:c1:a7:e6:fb:dd:89:9f:4e:bf:d9:a9:97:19:aa:d6:6a: 41:aa:b4:e1:70:fc:f4:1c:67:b5:bd:89:89:25:bc:58:da:40: d7:58:c2:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY1NEExMTAvBgNVBAUTKDk4MTQ1MTc3Q0FDMkY1QkVFNUQyNzY3NDVDRUQ5ODk4 NDA1M0VEQTcwHhcNMjUwNDAzMDA1NDQ0WhcNMjUwNDEwMDA1NDQ0WjAYMRYwFAYD VQQDEw02N2VkZGM1NS0zNTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNPvPWnnSnBI7AiBGH8gGw8J3bZgrK8tJLWHRqwRd3ChCEPBotdZ96Q/D4cp 7z3Wo4AAFkFngghQnSAFqhW79pHXM/n8kQwWNNRta0i/ndFDGULVYSHxS/RmK9nC qFUeXeqUExygpq0nd5+KVqpkc4zZbwSbI3QBTNNTTnnUfXi/6nVyo6GhFa0zeKW7 AQ+76Uu1hVSZOLC1VmXlXwMw1YSDggo3jyFYNL9o97r7IMmbVOyIQrLl2X1TtSvb oeBYQ1w1eN70PaP2s+uhjzd1IdFTdVO2dLqAu3drNxhk5jR1a9ojiBkaEhkBe1CF OZXEpdk1NcDUt3KHoVWTc5DCCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJoMAG3A ktJWhuXgqtLztlNTTPemMB8GA1UdIwQYMBaAFJgUUXfKwvW+5dJ2dFztmJhAU+2n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjU0QS9GRkI0NDM3ODlG MEMxMUVDOUExQUY3MEVDNEY5QUUwMi9tQlJSZDhyQzliN2wwblowWE8yWW1FQlQ3 YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21CUlJkOHJDOWI3bDBuWjBYTzJZbUVCVDdhYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjU0QS9GRkI0NDM3ODlGMEMxMUVDOUExQUY3MEVDNEY5QUUwMi9tQlJSZDhyQzli N2wwblowWE8yWW1FQlQ3YWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFqBbvyPu7y2FqAOwgte/kKl7RqC2Eo9vepy9L60gi4NhZSSwmM2FJ /3MgDOKjtwfLso/6qNE/6YAshYRlCXzRJ0S7uP2GrpptDFTTF6guqsLmzA5DyZim XCZJPLUld//CHeiKbA2miJHJjQtQtLXRhAmU2Tb057ycjk9El1/v/5fXreapkkzi fnjTZVI73P+vQKhb8FxQNMfEIScCC1b1giXuqz03s6+2VoJpXOByP5YA7BMBEMXR HGiSy4ihBiItDlrAO/vIlCFECJAhXQns3zIQC+AR8Ee+xsGn5vvdiZ9Ov9mplxmq 1mpBqrThcPz0HGe1vYmJJbxY2kDXWML0 -----END CERTIFICATE-----Generated at Fri Apr 4 22:01:52 2025 by rpki-client