$ rpki-client -vvf rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft File: s-lBocVdFIOrV5HZSYdQ492t7cw.mft (raw, json) Hash identifier: PcT84WJF5JgURl8Askf89DiQGMQr0EO4PuY7tB+ikCc= Subject key identifier: 9A:29:C6:7A:B8:39:3B:D0:D4:AD:B8:01:65:C2:84:6F:34:FF:37:66 Authority key identifier: B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC Certificate issuer: /CN=A913B018/serialNumber=B3E941A1C55D1483AB5791D9498750E3DDADEDCC Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft Manifest number: DB Signing time: Wed 09 Apr 2025 04:26:18 +0000 Manifest this update: Wed 09 Apr 2025 04:26:18 +0000 Manifest next update: Wed 16 Apr 2025 04:26:18 +0000 Files and hashes: 1: s-lBocVdFIOrV5HZSYdQ492t7cw.crl (hash: DDWSFn/cfAyn12ZrbD5SQWN5Jx0YPeelyqjfqWsA7jI=) 2: 8B097276C5F911EE8D0FDF82C4F9AE02.roa (hash: rdPAEAIE6ELTFaI7KJd4MZCFob5xV/RE3eKxMhnDVS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.crl rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 03:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B018 Validity Not Before: Apr 9 04:26:18 2025 GMT Not After : Apr 16 04:26:18 2025 GMT Subject: CN=67f5f6ea-f844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:66:76:76:26:e1:3f:71:70:46:c2:56:94:d0: bd:d6:ef:22:f5:1c:81:de:c2:4e:7a:40:bb:77:77: 00:f9:c9:ab:2f:43:81:40:7c:7c:e7:66:e6:3b:45: e4:3d:3d:4f:1d:5b:8e:41:ad:e7:dc:7b:a3:d3:88: 05:1e:ad:2c:6a:07:55:16:76:d6:4c:85:1d:f9:bc: ce:ac:18:3a:fa:b0:3a:df:c3:92:82:95:97:62:3e: a2:b0:6c:d0:7c:9d:ae:c1:8c:e7:6d:85:fb:f4:de: f0:13:e3:9b:36:9c:ae:81:e0:61:4b:4f:70:d7:5c: 80:ea:bd:cd:e0:d3:5a:cb:45:72:14:f4:a3:9d:44: b1:4e:85:f7:5a:4c:b2:88:67:29:7d:71:c9:b9:88: 0a:e8:48:14:cf:f2:0f:9a:9b:b9:a4:82:c2:0d:b2: 38:0c:c6:74:e8:ce:3c:51:a7:e0:6b:19:64:6b:6f: e8:f8:13:c1:a3:4c:91:3a:9a:07:04:05:57:d3:7d: bb:8d:59:25:66:4c:96:5e:80:70:d8:07:1a:83:90: 51:bd:c6:24:19:6a:9c:9a:95:fa:8b:c7:18:35:00: 98:83:9e:8d:4b:21:fd:d2:eb:4c:23:d4:9e:65:91: 25:9c:0c:a2:c7:85:70:b5:a6:1c:c7:12:08:a7:fb: 6a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:29:C6:7A:B8:39:3B:D0:D4:AD:B8:01:65:C2:84:6F:34:FF:37:66 X509v3 Authority Key Identifier: keyid:B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:1e:06:e4:ff:f7:46:f4:e9:aa:4c:85:16:ba:c4:40:23:e1: 72:6c:45:e4:83:de:e4:65:97:9a:a9:91:0f:8b:82:5b:7f:8d: 8d:02:c5:5b:bb:d1:04:be:43:9c:df:c6:9a:3b:11:9b:ab:e0: 4e:31:c2:02:06:6a:9b:26:eb:6f:b2:98:ab:d1:a4:7c:62:54: 0f:d7:9e:2b:b7:35:79:02:1e:60:2f:64:5d:02:05:2a:2b:cf: 14:ed:da:36:6a:72:ec:37:6b:5c:82:6a:22:36:9d:cd:c3:a1: cf:4b:fb:e8:6f:68:91:89:9a:6d:80:14:c1:39:01:23:54:74: 68:b0:52:dd:66:86:29:94:3a:49:e0:9a:ca:18:b1:b1:3d:09: d3:a5:46:65:d5:db:72:57:5e:84:17:7d:3e:41:ae:a7:6d:64: 95:79:c5:c5:c5:ff:b9:66:dd:c4:ab:f4:24:54:81:71:1c:c8: 18:c7:b1:ca:79:dc:4f:49:18:d2:a4:16:32:54:f4:d2:6a:ec: 9e:a9:7e:a4:6d:23:23:4b:83:73:71:ba:1f:ab:fb:26:53:4a: 1b:e0:a3:92:45:92:38:f2:3a:1b:23:cd:48:69:4f:ac:fe:6d: 2b:2f:25:94:71:e9:bc:53:5f:83:0b:04:9f:a6:dc:7b:01:9f: 79:8d:d1:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IwMTgxMTAvBgNVBAUTKEIzRTk0MUExQzU1RDE0ODNBQjU3OTFEOTQ5ODc1MEUz RERBREVEQ0MwHhcNMjUwNDA5MDQyNjE4WhcNMjUwNDE2MDQyNjE4WjAYMRYwFAYD VQQDEw02N2Y1ZjZlYS1mODQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3WZ2dibhP3FwRsJWlNC91u8i9RyB3sJOekC7d3cA+cmrL0OBQHx852bmO0Xk PT1PHVuOQa3n3Huj04gFHq0sagdVFnbWTIUd+bzOrBg6+rA638OSgpWXYj6isGzQ fJ2uwYznbYX79N7wE+ObNpyugeBhS09w11yA6r3N4NNay0VyFPSjnUSxToX3Wkyy iGcpfXHJuYgK6EgUz/IPmpu5pILCDbI4DMZ06M48Uafgaxlka2/o+BPBo0yROpoH BAVX0327jVklZkyWXoBw2Acag5BRvcYkGWqcmpX6i8cYNQCYg56NSyH90utMI9Se ZZElnAyix4VwtaYcxxIIp/tqAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJopxnq4 OTvQ1K24AWXChG80/zdmMB8GA1UdIwQYMBaAFLPpQaHFXRSDq1eR2UmHUOPdre3M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjAxOC8zMDc5RDgxMkM1 RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi9zLWxCb2NWZEZJT3JWNUhaU1lkUTQ5MnQ3 Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3MtbEJvY1ZkRklPclY1SFpTWWRRNDkydDdjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjAxOC8zMDc5RDgxMkM1RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi9zLWxCb2NWZEZJ T3JWNUhaU1lkUTQ5MnQ3Y3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvHgbk//dG9OmqTIUWusRAI+FybEXkg97kZZeaqZEPi4Jbf42NAsVb u9EEvkOc38aaOxGbq+BOMcICBmqbJutvspir0aR8YlQP154rtzV5Ah5gL2RdAgUq K88U7do2anLsN2tcgmoiNp3Nw6HPS/vob2iRiZptgBTBOQEjVHRosFLdZoYplDpJ 4JrKGLGxPQnTpUZl1dtyV16EF30+Qa6nbWSVecXFxf+5Zt3Eq/QkVIFxHMgYx7HK edxPSRjSpBYyVPTSauyeqX6kbSMjS4Nzcbofq/smU0ob4KOSRZI48jobI81IaU+s /m0rLyWUcem8U1+DCwSfptx7AZ95jdHA -----END CERTIFICATE-----Generated at Wed Apr 9 11:08:04 2025 by rpki-client