$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft File: 18ttHdz5NKH1nk_-SYLwtMUsNfU.mft (raw, json) Hash identifier: XgdU/7Daf0TTG2n13eYSM0PdLZZvRSwaaiFlFTLlqu0= Subject key identifier: 73:B7:09:BB:55:40:41:0C:8B:EC:B7:3B:B3:22:CB:44:8B:86:91:5E Authority key identifier: D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5 Certificate issuer: /CN=A914DA2D/serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5 Certificate serial: 0318 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft Manifest number: 030A Signing time: Fri 04 Apr 2025 16:27:07 +0000 Manifest this update: Fri 04 Apr 2025 16:27:06 +0000 Manifest next update: Fri 11 Apr 2025 16:27:06 +0000 Files and hashes: 1: 18ttHdz5NKH1nk_-SYLwtMUsNfU.crl (hash: IvHDsawYqepvrdK1lpBaxUCOPA1nle8wV5+EpJXNv5M=) 2: B3997DB4F3A311EC8804FE09C4F9AE02.roa (hash: a42gSvTBLjoG87MaWUeUPIbEWoVD8JcwRDmWOtwQhiw=) 3: 9EE56DE2B1A611EFAFF48385C4F9AE02.roa (hash: eRFLslRaYy7Z/9vONGljKXTFuKVL6bHKALfN/nB50xQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 792 (0x318) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA2D Validity Not Before: Apr 4 16:27:06 2025 GMT Not After : Apr 11 16:27:06 2025 GMT Subject: CN=67f0085b-7b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:db:65:2d:b1:d7:89:18:d7:71:ab:ba:dc:46: d3:4c:59:06:0d:69:1d:15:8e:1d:d0:43:6a:f6:86: 7a:4b:f4:16:f8:58:da:86:ca:27:26:55:b2:c6:60: f3:a9:98:51:c0:6f:f5:ba:61:eb:10:a3:57:d4:e6: de:8f:d0:bb:4b:9a:13:58:38:35:c6:6f:b6:cc:7e: 97:70:fc:c3:cd:dd:91:4e:4b:0c:eb:d8:44:cd:ea: 3f:d0:37:9e:d9:6c:4b:b3:3c:56:89:ad:17:07:56: 62:b8:57:ec:a3:24:5b:09:cc:4a:ab:ce:9b:eb:5d: 6b:e3:c3:6c:15:b0:db:7c:44:ab:67:26:c8:0f:75: cd:02:ba:3e:56:6b:42:15:f3:33:53:d9:8b:4b:a7: e2:a4:59:6c:56:08:6c:1b:cf:37:ca:e5:2b:d7:a7: d9:f4:c9:07:71:9d:db:03:4a:fd:57:0d:bf:7c:3d: 3a:2a:b3:25:4c:8b:fc:7e:05:81:54:c3:df:56:e7: cb:e4:2d:db:9d:be:a6:4b:ae:0c:a7:1d:a4:76:de: f3:af:8c:af:31:87:50:0c:cf:16:ee:3e:d8:18:06: cf:25:a7:f9:de:22:8d:a2:08:c9:7a:ba:d0:fe:f0: 6e:99:20:eb:0d:ca:7c:80:0b:75:87:9e:d2:c9:ef: 8e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B7:09:BB:55:40:41:0C:8B:EC:B7:3B:B3:22:CB:44:8B:86:91:5E X509v3 Authority Key Identifier: keyid:D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a2:be:6b:e9:24:4e:61:4d:5d:13:78:2e:3f:fc:ca:84:fa: c3:2f:5c:83:a6:26:59:f1:a2:ef:3f:ee:b6:87:95:c9:50:45: 51:a4:ed:0b:78:2c:06:76:f6:be:9b:d2:ff:4b:7b:2a:81:ff: c5:18:33:c7:63:a0:56:9c:72:ba:a1:26:7f:83:2f:4b:92:33: 48:4b:74:b7:d6:d7:7e:5e:78:f7:ce:ea:c9:c8:5d:54:7b:15: 7e:a1:05:56:0a:a6:54:08:47:d2:fe:49:d7:f8:9b:89:a3:1c: 74:4a:37:a4:0c:a9:46:2a:8d:38:5a:75:de:8a:bb:85:60:ba: 7a:e7:97:1e:2b:9f:27:59:eb:3c:c8:ae:9c:72:f6:80:8f:7c: f3:2b:b6:c8:01:a2:8d:4b:4e:75:49:6f:df:9a:ad:35:fe:89: a1:8e:07:0f:2f:39:4d:60:65:0c:1e:cc:55:a3:08:a7:a7:0b: 40:b7:5c:78:56:71:b8:e3:70:a2:f5:b2:cd:e0:fa:25:79:f3: 14:b7:30:81:9b:e3:9d:76:38:10:68:11:88:5c:cd:b1:95:85: af:aa:ee:ce:3d:c1:b0:f3:66:0c:28:64:f3:7f:b6:04:ec:f7: e0:9c:ed:83:c9:b9:82:66:8c:25:d4:ef:21:97:26:80:e7:43: cf:b0:a0:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERBMkQxMTAvBgNVBAUTKEQ3Q0I2RDFERENGOTM0QTFGNTlFNEZGRTQ5ODJGMEI0 QzUyQzM1RjUwHhcNMjUwNDA0MTYyNzA2WhcNMjUwNDExMTYyNzA2WjAYMRYwFAYD VQQDEw02N2YwMDg1Yi03YjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdtlLbHXiRjXcau63EbTTFkGDWkdFY4d0ENq9oZ6S/QW+FjahsonJlWyxmDz qZhRwG/1umHrEKNX1Obej9C7S5oTWDg1xm+2zH6XcPzDzd2RTksM69hEzeo/0Dee 2WxLszxWia0XB1ZiuFfsoyRbCcxKq86b611r48NsFbDbfESrZybID3XNAro+VmtC FfMzU9mLS6fipFlsVghsG883yuUr16fZ9MkHcZ3bA0r9Vw2/fD06KrMlTIv8fgWB VMPfVufL5C3bnb6mS64Mpx2kdt7zr4yvMYdQDM8W7j7YGAbPJaf53iKNogjJerrQ /vBumSDrDcp8gAt1h57Sye+OIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHO3CbtV QEEMi+y3O7Miy0SLhpFeMB8GA1UdIwQYMBaAFNfLbR3c+TSh9Z5P/kmC8LTFLDX1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEyRC83MkI1RjI5MkQy N0QxMUVDQTczRUYxNTRDNEY5QUUwMi8xOHR0SGR6NU5LSDFua18tU1lMd3RNVXNO ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzE4dHRIZHo1TktIMW5rXy1TWUx3dE1Vc05mVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REEyRC83MkI1RjI5MkQyN0QxMUVDQTczRUYxNTRDNEY5QUUwMi8xOHR0SGR6NU5L SDFua18tU1lMd3RNVXNOZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMor5r6SROYU1dE3guP/zKhPrDL1yDpiZZ8aLvP+62h5XJUEVRpO0L eCwGdva+m9L/S3sqgf/FGDPHY6BWnHK6oSZ/gy9LkjNIS3S31td+Xnj3zurJyF1U exV+oQVWCqZUCEfS/knX+JuJoxx0SjekDKlGKo04WnXeiruFYLp655ceK58nWes8 yK6ccvaAj3zzK7bIAaKNS051SW/fmq01/omhjgcPLzlNYGUMHsxVowinpwtAt1x4 VnG443Ci9bLN4PolefMUtzCBm+OddjgQaBGIXM2xlYWvqu7OPcGw82YMKGTzf7YE 7PfgnO2DybmCZowl1O8hlyaA50PPsKBh -----END CERTIFICATE-----Generated at Sun Apr 6 17:33:11 2025 by rpki-client