$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft File: t0SkTltlPmx6kM9gNOANz9iUfWA.mft (raw, json) Hash identifier: ZJlVnd0b2gYPk61+OtdNbRDPyItx4q6smMX+G5wxOiM= Subject key identifier: DC:39:DD:8A:EB:EC:E6:78:57:0B:3D:28:3E:6D:7F:21:DE:3A:61:13 Authority key identifier: B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60 Certificate issuer: /CN=A914EBE5/serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60 Certificate serial: 1845 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft Manifest number: 1834 Signing time: Fri 04 Apr 2025 16:36:03 +0000 Manifest this update: Fri 04 Apr 2025 16:36:03 +0000 Manifest next update: Fri 11 Apr 2025 16:36:03 +0000 Files and hashes: 1: t0SkTltlPmx6kM9gNOANz9iUfWA.crl (hash: mkn+vldlVMlujdjaD78JzPHTb2KePlhzJIbw3PlrjIM=) 2: 253B1382106C11F08D824C19C4F9AE02.roa (hash: k9TDuPE5aOqFzmvoIPDe+G9DbuyOrQuREAeCHC4kW88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6213 (0x1845) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EBE5 Validity Not Before: Apr 4 16:36:03 2025 GMT Not After : Apr 11 16:36:03 2025 GMT Subject: CN=67f00a73-6222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a4:2e:ea:1b:8e:de:37:90:24:be:8a:b4:53: d9:a1:67:65:7c:32:f4:5b:7c:d7:29:e3:3f:1f:4e: 3f:3b:2a:0c:4d:76:1a:70:8e:55:a7:a8:85:42:e4: 7c:66:f5:6a:34:83:a7:8d:4b:af:1b:3d:b0:4f:1c: 34:e0:a0:a7:46:3c:20:10:e3:d0:e1:27:57:7b:ff: d1:ca:fb:a1:d5:97:d9:24:93:ad:15:29:d2:35:bf: 4c:0e:9f:40:cb:74:2f:da:c7:f5:81:b1:90:a0:3b: 96:b6:a6:dc:2f:34:d2:18:a1:75:4c:8a:f4:d2:1b: 69:d2:b2:b1:32:84:a5:77:20:45:b8:81:48:59:e7: 7f:83:67:af:b4:f5:d5:fe:12:f1:af:67:7b:9d:ff: fe:1d:9a:2c:8d:c0:56:d7:af:77:a5:63:aa:40:33: 9a:d3:1f:59:f1:17:94:6f:c6:65:af:e5:d9:21:9e: 85:a2:b3:80:9d:48:d7:4a:e4:a4:85:cc:81:cb:1b: 31:5b:eb:07:6e:b6:c1:3e:74:b2:32:34:6e:03:2b: d1:7b:76:c1:5a:27:e5:a3:81:33:81:8e:b9:80:be: 6e:ba:e1:49:35:d2:db:b6:99:78:65:e3:d4:fc:9d: bb:ec:ea:6e:f2:36:5a:46:c9:e5:24:c8:45:1f:17: fe:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:39:DD:8A:EB:EC:E6:78:57:0B:3D:28:3E:6D:7F:21:DE:3A:61:13 X509v3 Authority Key Identifier: keyid:B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:15:63:4f:55:47:ee:e6:37:f5:ad:e8:f1:a9:55:e2:aa:37: dd:14:f3:d2:9a:f5:5c:3c:49:0e:cb:b6:cd:ef:b3:4b:3f:90: 4a:5b:61:d8:ef:08:6a:3c:27:75:0b:2c:af:13:85:40:86:4a: 86:ec:0b:14:f7:fa:c1:bd:bc:e9:69:8a:10:39:73:36:fd:59: 24:73:00:6d:cb:b1:5d:be:73:c8:d4:97:87:83:05:53:9a:77: 13:0d:be:d6:48:8c:37:40:20:b5:4b:71:a2:84:a8:00:f7:ce: ce:8a:fe:37:5c:7c:5a:b3:38:59:d2:14:07:e4:c0:af:1d:bc: c0:3a:38:f0:55:b8:15:82:39:be:f5:e4:4c:5d:77:1e:d0:de: 20:b5:a0:09:c5:62:1a:b8:88:76:c1:65:f9:69:c7:53:1a:75: 8d:90:41:19:7d:d9:a0:20:8e:f3:51:90:93:ac:85:3e:54:a9: 4d:c5:26:be:e1:f1:e8:ff:8b:f1:f1:c8:4c:f2:e7:67:19:f0: ce:d0:48:13:20:f1:d3:86:f8:7e:7c:0d:4e:0c:cc:c2:f2:8f: de:d1:35:16:59:1e:ce:e2:3d:b2:a2:71:00:d4:0d:de:c7:db: 78:51:49:7b:54:58:7b:e8:07:4b:c6:8f:67:62:84:84:f1:ff: 7f:52:58:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCRTUxMTAvBgNVBAUTKEI3NDRBNDRFNUI2NTNFNkM3QTkwQ0Y2MDM0RTAwRENG RDg5NDdENjAwHhcNMjUwNDA0MTYzNjAzWhcNMjUwNDExMTYzNjAzWjAYMRYwFAYD VQQDEw02N2YwMGE3My02MjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKQu6huO3jeQJL6KtFPZoWdlfDL0W3zXKeM/H04/OyoMTXYacI5Vp6iFQuR8 ZvVqNIOnjUuvGz2wTxw04KCnRjwgEOPQ4SdXe//Ryvuh1ZfZJJOtFSnSNb9MDp9A y3Qv2sf1gbGQoDuWtqbcLzTSGKF1TIr00htp0rKxMoSldyBFuIFIWed/g2evtPXV /hLxr2d7nf/+HZosjcBW1693pWOqQDOa0x9Z8ReUb8Zlr+XZIZ6ForOAnUjXSuSk hcyByxsxW+sHbrbBPnSyMjRuAyvRe3bBWiflo4EzgY65gL5uuuFJNdLbtpl4ZePU /J277Opu8jZaRsnlJMhFHxf+XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNw53Yrr 7OZ4Vws9KD5tfyHeOmETMB8GA1UdIwQYMBaAFLdEpE5bZT5sepDPYDTgDc/YlH1g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJFNS82NEM1MjcwOEE5 NUYxMUU3OUFENEU3MzRDNEY5QUUwMi90MFNrVGx0bFBteDZrTTlnTk9BTno5aVVm V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QwU2tUbHRsUG14NmtNOWdOT0FOejlpVWZXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUJFNS82NEM1MjcwOEE5NUYxMUU3OUFENEU3MzRDNEY5QUUwMi90MFNrVGx0bFBt eDZrTTlnTk9BTno5aVVmV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbFWNPVUfu5jf1rejxqVXiqjfdFPPSmvVcPEkOy7bN77NLP5BKW2HY 7whqPCd1CyyvE4VAhkqG7AsU9/rBvbzpaYoQOXM2/VkkcwBty7FdvnPI1JeHgwVT mncTDb7WSIw3QCC1S3GihKgA987Oiv43XHxaszhZ0hQH5MCvHbzAOjjwVbgVgjm+ 9eRMXXce0N4gtaAJxWIauIh2wWX5acdTGnWNkEEZfdmgII7zUZCTrIU+VKlNxSa+ 4fHo/4vx8chM8udnGfDO0EgTIPHThvh+fA1ODMzC8o/e0TUWWR7O4j2yonEA1A3e x9t4UUl7VFh76AdLxo9nYoSE8f9/UliG -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:21 2025 by rpki-client