$ rpki-client -vvf rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft File: ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft (raw, json) Hash identifier: EVytGxgi13dfK93pq61onZ/nHY1ODdyjkAEPehK68Fg= Subject key identifier: B1:16:29:41:E8:CC:FB:DE:41:D5:95:54:22:F0:E4:CE:A6:82:83:68 Authority key identifier: 00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B Certificate issuer: /CN=A913C0C6/serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B Certificate serial: 04E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft Manifest number: 04D1 Signing time: Sat 29 Mar 2025 00:09:50 +0000 Manifest this update: Sat 29 Mar 2025 00:09:49 +0000 Manifest next update: Sat 05 Apr 2025 00:09:49 +0000 Files and hashes: 1: ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl (hash: +MSFA0GdhsVmVe25WG1IRw9duMGKSa9aKQFdUox7ZMQ=) 2: 47660D4A488F11EFB89B763FC4F9AE02.roa (hash: o1OTNYPIFsb3EvbpcOOr9EZlDozQP5u7U/7IxhfxWGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:09:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1256 (0x4e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C0C6 Validity Not Before: Mar 29 00:09:49 2025 GMT Not After : Apr 5 00:09:49 2025 GMT Subject: CN=67e73a4d-42e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1b:e9:58:e3:30:d3:d1:b3:9d:b3:c3:7f:4d: 09:62:b1:a5:c6:4b:10:16:d8:88:a5:3d:ea:b4:85: cb:e8:89:d7:3b:fc:cd:de:23:ba:08:28:10:75:b3: 53:4a:42:6b:67:e8:e5:2c:db:19:a4:43:5e:df:7a: ce:53:4c:4b:9a:92:bc:9e:14:02:8e:a9:f1:d5:06: 22:b2:46:cc:3a:5b:24:4c:43:7e:b9:6d:98:92:1d: f4:a7:b3:92:ea:35:db:10:36:ff:f0:dd:a1:e9:20: c2:39:20:52:b1:7c:c8:29:b2:f3:54:ba:d1:28:00: 63:d1:e0:0e:70:a9:ad:37:e6:53:c1:bb:2c:7d:1b: 74:f7:aa:d2:47:44:33:27:47:ac:2b:98:47:7d:99: 61:80:36:74:d9:05:4a:b4:52:34:5f:73:f0:f3:f2: ae:81:6c:c4:e7:ea:0f:15:17:fb:66:cc:1a:c6:85: 28:be:c7:e0:38:a3:0e:8d:b5:fd:de:b6:35:fa:8a: d0:18:13:bb:1d:2a:70:49:06:87:eb:8a:42:bd:d5: 9c:8e:10:a9:43:ee:17:65:69:06:08:34:73:66:de: 15:a1:77:bf:82:4e:7c:49:5b:d9:a7:5f:0a:cc:e9: 15:8b:91:20:81:6a:f8:5d:42:44:e6:5b:a6:7e:ad: 37:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:16:29:41:E8:CC:FB:DE:41:D5:95:54:22:F0:E4:CE:A6:82:83:68 X509v3 Authority Key Identifier: keyid:00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:60:f0:98:0b:57:96:38:fe:0c:3a:00:6b:a1:24:11:70:ab: 1e:12:6a:70:0e:4b:54:f4:24:4c:27:c7:57:9b:6a:fb:ab:42: 05:f8:24:e8:0c:78:d0:5f:06:24:3b:11:8a:4e:c9:37:bf:7d: 29:6c:a8:b7:21:b2:87:81:cb:21:9f:ff:b8:d1:c2:7f:e0:cc: 4a:35:14:88:bd:2b:0d:cb:85:b9:ac:94:59:7e:c0:fe:23:cc: df:b4:5f:3e:a4:0a:20:95:1f:da:8f:39:42:e7:c6:3f:07:2f: e9:63:54:94:ee:83:c9:fc:b8:cb:0b:b7:fc:79:50:41:cc:b9: c0:77:d6:3e:14:bd:16:3c:0c:11:8f:c1:ef:f6:93:ae:72:2b: 5a:fe:2a:4e:6b:59:d4:f9:eb:5c:f7:d9:83:8c:87:92:7b:12: 18:aa:8b:87:08:72:a1:63:62:05:9b:02:50:a4:04:13:91:c5: 8e:0c:a2:bd:c6:62:98:02:ae:7c:51:48:8d:2b:f3:df:f7:1a: fa:4c:6b:54:03:23:1c:7c:e6:57:e2:d2:0a:f1:40:23:7f:fe: e5:ba:5b:41:10:e7:cd:6b:e0:c8:8e:c2:69:06:a5:39:96:fb: 4e:85:2b:41:93:b2:33:78:3d:0f:9c:90:b7:21:5c:f9:8b:d0: 69:42:df:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MwQzYxMTAvBgNVBAUTKDAwMzM0QjhGMjE4RkE1MjUzMzk4ODZDOEZCQzk0MDkz Qzg4RUQ1N0IwHhcNMjUwMzI5MDAwOTQ5WhcNMjUwNDA1MDAwOTQ5WjAYMRYwFAYD VQQDEw02N2U3M2E0ZC00MmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRvpWOMw09GznbPDf00JYrGlxksQFtiIpT3qtIXL6InXO/zN3iO6CCgQdbNT SkJrZ+jlLNsZpENe33rOU0xLmpK8nhQCjqnx1QYiskbMOlskTEN+uW2Ykh30p7OS 6jXbEDb/8N2h6SDCOSBSsXzIKbLzVLrRKABj0eAOcKmtN+ZTwbssfRt096rSR0Qz J0esK5hHfZlhgDZ02QVKtFI0X3Pw8/KugWzE5+oPFRf7ZswaxoUovsfgOKMOjbX9 3rY1+orQGBO7HSpwSQaH64pCvdWcjhCpQ+4XZWkGCDRzZt4VoXe/gk58SVvZp18K zOkVi5EggWr4XUJE5lumfq03twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEWKUHo zPveQdWVVCLw5M6mgoNoMB8GA1UdIwQYMBaAFAAzS48hj6UlM5iGyPvJQJPIjtV7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzBDNi8xODNGODRBRTIz NEIxMUVDQjhBMkRFN0VDNEY5QUUwMi9BRE5ManlHUHBTVXptSWJJLThsQWs4aU8x WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FETkxqeUdQcFNVem1JYkktOGxBazhpTzFYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzBDNi8xODNGODRBRTIzNEIxMUVDQjhBMkRFN0VDNEY5QUUwMi9BRE5ManlHUHBT VXptSWJJLThsQWs4aU8xWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbYPCYC1eWOP4MOgBroSQRcKseEmpwDktU9CRMJ8dXm2r7q0IF+CTo DHjQXwYkOxGKTsk3v30pbKi3IbKHgcshn/+40cJ/4MxKNRSIvSsNy4W5rJRZfsD+ I8zftF8+pAoglR/ajzlC58Y/By/pY1SU7oPJ/LjLC7f8eVBBzLnAd9Y+FL0WPAwR j8Hv9pOucita/ipOa1nU+etc99mDjIeSexIYqouHCHKhY2IFmwJQpAQTkcWODKK9 xmKYAq58UUiNK/Pf9xr6TGtUAyMcfOZX4tIK8UAjf/7lultBEOfNa+DIjsJpBqU5 lvtOhStBk7IzeD0PnJC3IVz5i9BpQt8A -----END CERTIFICATE-----Generated at Fri Apr 4 21:53:48 2025 by rpki-client