$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft File: RDE2OBW8XQu3pCth2SMLTa4ixTw.mft (raw, json) Hash identifier: EFn0jislphVcKwp6efyEdhyF1Eoi0xVKfJO4c7ytHQk= Subject key identifier: 41:2E:9F:89:40:1F:91:D0:9E:8A:16:22:94:EC:E3:C2:D0:A5:7F:55 Authority key identifier: 44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C Certificate issuer: /CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft Manifest number: DF Signing time: Thu 17 Apr 2025 04:23:55 +0000 Manifest this update: Thu 17 Apr 2025 04:23:54 +0000 Manifest next update: Thu 24 Apr 2025 04:23:54 +0000 Files and hashes: 1: RDE2OBW8XQu3pCth2SMLTa4ixTw.crl (hash: qdiPp98kXNKDb+Z9Y5EbqlWCe1ZDpejCU5319DAGKNg=) 2: ADCDA1F83A0F11EFAB312630C4F9AE02.roa (hash: TuAyfKbGRFhHV9G3hUTl+QdiLnDpQyy2p+JhztZaeOo=) 3: FDDFE12EC78C11EE911F1A30C4F9AE02.roa (hash: /tGBO2MLCus8PNWAAV5edOtrlC7E+7n4ZDxG8UW5xvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 04:23:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149ADB, serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C Validity Not Before: Apr 17 04:23:54 2025 GMT Not After : Apr 24 04:23:54 2025 GMT Subject: CN=6800825a-d2ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c2:95:38:30:a5:4e:b3:a2:63:46:65:fe:16: 4b:57:33:17:55:17:2f:48:89:69:2b:b2:e1:03:bf: 1e:2b:1d:c9:9e:2b:9c:47:7a:33:62:e2:fd:c0:d2: f2:fe:d5:33:f7:8f:98:0b:d2:2a:ce:1c:ba:51:d8: 59:ce:71:85:74:a9:17:e1:a5:49:02:7a:9f:df:b3: 79:80:f0:46:2e:e0:94:f7:ed:4c:aa:e8:ff:0d:53: 8f:0f:27:7a:44:80:07:b2:03:19:4e:c0:b9:11:e3: d1:b5:86:af:df:e6:47:89:56:4e:de:34:ce:a9:fd: c6:61:83:4a:f8:cf:68:ab:aa:73:33:3c:b3:91:be: 01:c5:d5:93:72:0a:76:8b:80:df:79:5a:65:2b:6c: 6f:c3:63:63:13:e9:ad:5b:eb:bc:72:3f:3d:3c:24: 06:f2:ea:21:bd:f6:b1:a6:27:51:58:5d:24:02:b2: c5:67:31:cb:56:c0:22:f6:ce:7d:e8:80:70:db:b8: 5c:37:85:dd:c9:61:ad:77:60:c0:b8:17:13:ca:23: 45:8b:30:3d:3d:a6:b5:7b:3a:e3:aa:ee:32:24:7b: 54:6d:b3:8d:72:fb:ec:7d:8b:43:3f:4b:96:c1:45: 4d:7a:a0:17:29:10:e0:a2:2c:e5:47:8a:c0:95:ed: b5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2E:9F:89:40:1F:91:D0:9E:8A:16:22:94:EC:E3:C2:D0:A5:7F:55 X509v3 Authority Key Identifier: keyid:44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:95:ca:7c:d8:f4:e7:a3:71:29:29:9e:df:61:2b:87:b4:7a: f6:b5:e7:00:2a:a2:57:cb:41:72:14:c1:f5:68:b5:6b:47:7a: 34:dc:c3:02:a5:20:32:6c:f9:9d:35:b9:06:09:0a:2a:e7:b6: 09:cf:2e:e8:18:8d:d6:48:17:ee:e9:95:40:59:2b:d3:38:fc: 0d:aa:b5:6f:99:e8:fd:9a:2f:b7:df:94:80:21:63:08:35:1e: 4f:35:54:88:de:ae:ad:47:3c:de:d2:4e:42:8c:93:c8:d2:60: 58:bf:25:b3:0e:70:22:77:c1:9f:34:40:e6:43:fe:f3:fb:21: c3:18:89:06:e3:73:a2:c7:bb:1b:e6:39:6b:59:70:b6:c4:b6: 03:84:e0:05:aa:ea:60:e7:fa:78:cf:b7:bb:32:07:2b:80:ba: 42:dd:7b:fe:57:4d:be:2e:b7:b3:58:11:9b:10:1a:cc:bb:2e: 0d:fb:00:13:03:69:23:77:61:0b:68:56:ff:7f:3b:e3:39:c6: 49:e1:06:05:0f:b9:c2:3b:ac:a4:39:d1:0e:3d:89:64:b8:3b: bd:02:5f:14:17:74:36:ae:8f:21:dd:4e:04:ff:b8:99:6a:5b: 5f:24:72:a2:92:2d:c1:6d:b8:08:bc:8f:9b:0b:45:f5:0b:62: 07:e9:8c:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBREIxMTAvBgNVBAUTKDQ0MzEzNjM4MTVCQzVEMEJCN0E0MkI2MUQ5MjMwQjRE QUUyMkM1M0MwHhcNMjUwNDE3MDQyMzU0WhcNMjUwNDI0MDQyMzU0WjAYMRYwFAYD VQQDEw02ODAwODI1YS1kMmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8sKVODClTrOiY0Zl/hZLVzMXVRcvSIlpK7LhA78eKx3JniucR3ozYuL9wNLy /tUz94+YC9Iqzhy6UdhZznGFdKkX4aVJAnqf37N5gPBGLuCU9+1Mquj/DVOPDyd6 RIAHsgMZTsC5EePRtYav3+ZHiVZO3jTOqf3GYYNK+M9oq6pzMzyzkb4BxdWTcgp2 i4DfeVplK2xvw2NjE+mtW+u8cj89PCQG8uohvfaxpidRWF0kArLFZzHLVsAi9s59 6IBw27hcN4XdyWGtd2DAuBcTyiNFizA9Paa1ezrjqu4yJHtUbbONcvvsfYtDP0uW wUVNeqAXKRDgoizlR4rAle21ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEun4lA H5HQnooWIpTs48LQpX9VMB8GA1UdIwQYMBaAFEQxNjgVvF0Lt6QrYdkjC02uIsU8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUFEQi84MUYzODg4NkM3 OEMxMUVFOTdFNDM4MkZDNEY5QUUwMi9SREUyT0JXOFhRdTNwQ3RoMlNNTFRhNGl4 VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JERTJPQlc4WFF1M3BDdGgyU01MVGE0aXhUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUFEQi84MUYzODg4NkM3OEMxMUVFOTdFNDM4MkZDNEY5QUUwMi9SREUyT0JXOFhR dTNwQ3RoMlNNTFRhNGl4VHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKlcp82PTno3EpKZ7fYSuHtHr2tecAKqJXy0FyFMH1aLVrR3o03MMC pSAybPmdNbkGCQoq57YJzy7oGI3WSBfu6ZVAWSvTOPwNqrVvmej9mi+335SAIWMI NR5PNVSI3q6tRzze0k5CjJPI0mBYvyWzDnAid8GfNEDmQ/7z+yHDGIkG43Oix7sb 5jlrWXC2xLYDhOAFqupg5/p4z7e7MgcrgLpC3Xv+V02+LrezWBGbEBrMuy4N+wAT A2kjd2ELaFb/fzvjOcZJ4QYFD7nCO6ykOdEOPYlkuDu9Al8UF3Q2ro8h3U4E/7iZ altfJHKiki3BbbgIvI+bC0X1C2IH6Yxv -----END CERTIFICATE-----Generated at Thu Apr 17 18:52:47 2025 by rpki-client