$ rpki-client -vvf rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft File: Ql8CIk3cYp0viP9mPH9K32zWRT4.mft (raw, json) Hash identifier: zp8OeolK+a+05kqvONt5xeuj0H9cSgl17GZ5jZej0A4= Subject key identifier: 09:86:52:8E:76:FB:56:F4:A1:29:FE:67:C6:62:E5:F4:A5:FF:75:10 Authority key identifier: 42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E Certificate issuer: /CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Certificate serial: 0255 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft Manifest number: 0252 Signing time: Sat 29 Mar 2025 02:03:46 +0000 Manifest this update: Sat 29 Mar 2025 02:03:45 +0000 Manifest next update: Sat 05 Apr 2025 02:03:45 +0000 Files and hashes: 1: Ql8CIk3cYp0viP9mPH9K32zWRT4.crl (hash: cq3hmDgYLdqB0RIaRtEYZPHfiwdxXMAdJGtXDrvSqQU=) 2: 55C580C2108411EDB5AE6333C4F9AE02.roa (hash: MerLsBV6jv2qjNEO4O4NBuQAWQkGnVBjk/HecMpMbfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 597 (0x255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915430A Validity Not Before: Mar 29 02:03:45 2025 GMT Not After : Apr 5 02:03:45 2025 GMT Subject: CN=67e75502-b133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:23:15:70:56:71:b8:2d:e7:91:af:af:2b:d7: 3c:aa:1b:24:69:d1:64:d4:03:38:0e:b4:18:2c:5e: 5e:c9:b6:79:9f:59:63:85:35:51:77:f3:6b:20:99: d0:ec:d6:2f:ad:bb:5c:d1:08:39:2c:e7:57:ab:f1: 4c:df:10:0f:45:ee:06:57:7f:a0:d0:4f:ac:c6:cd: b8:bf:14:83:a0:37:ea:4b:70:2d:6b:9b:d0:4c:41: e8:2c:7f:11:69:92:9e:6b:37:33:2d:99:43:f4:9e: a6:31:09:3c:a1:8e:11:f0:ae:f4:46:5d:cc:c8:eb: eb:ca:6b:5f:d3:81:90:13:ab:bd:ff:a5:d4:9e:b4: 3d:d6:4c:66:bc:ea:f5:df:b7:7e:8b:c4:2b:d7:9b: 1b:b5:24:e8:63:c7:4d:7b:03:bb:79:5a:65:89:2f: 22:49:2d:ee:48:ae:40:bf:44:52:6e:cf:52:60:6b: d6:9b:7d:a7:72:0d:b7:a2:2f:de:c5:9b:bc:0c:4c: 15:6b:7b:83:f7:5c:26:ae:6b:fd:8a:60:2a:b6:c5: a9:37:a0:ce:9c:07:0f:a8:04:d8:74:30:a6:56:7d: 33:59:97:01:55:41:ec:b2:9b:9e:ef:cb:62:9b:45: 31:18:de:96:0c:a1:ad:a3:46:2a:e3:1c:68:f7:df: 5d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:86:52:8E:76:FB:56:F4:A1:29:FE:67:C6:62:E5:F4:A5:FF:75:10 X509v3 Authority Key Identifier: keyid:42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:f9:94:d2:36:39:34:fd:29:37:9c:2b:07:67:dc:75:83:d5: 3a:5a:a4:e7:fb:a1:24:b9:29:e8:0f:17:10:f9:f6:fd:f6:40: bd:22:2c:9d:c4:50:41:cc:2b:d9:20:e8:86:97:45:db:cd:0f: 86:fc:3e:bb:f5:87:dd:2f:ea:10:5e:07:65:01:93:e2:d2:0c: 4b:61:44:fe:ca:a9:a9:f6:7f:46:1a:f5:f5:47:0b:17:f7:f8: ff:3f:64:de:af:7a:3e:ea:f7:09:19:8b:a0:18:ae:16:6e:8f: c9:08:5c:71:37:6b:94:0f:f3:f7:2e:43:96:76:54:86:fa:96: 03:d2:d4:0a:63:46:3a:4f:dd:d7:7b:59:57:80:7d:c6:68:54: 27:cd:b8:25:df:d5:9a:39:bf:fc:cc:17:c5:cb:36:20:15:d8: 2b:d8:a4:92:7b:86:8c:5e:b9:46:62:92:23:8d:e7:91:5a:e8: bc:6a:64:e2:ad:69:20:65:93:23:49:22:09:73:bc:b4:91:8a: 7d:8b:39:95:d7:f9:b7:f4:d0:ad:53:d4:1c:fd:68:88:dd:42: ed:e2:c2:1e:eb:8f:1d:f2:84:1c:d7:6e:54:2e:eb:7c:23:4a: ec:9a:90:69:c7:94:4e:f7:9a:da:35:ca:42:c0:f9:93:6a:51: 8c:50:8e:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzMEExMTAvBgNVBAUTKDQyNUYwMjIyNEREQzYyOUQyRjg4RkY2NjNDN0Y0QURG NkNENjQ1M0UwHhcNMjUwMzI5MDIwMzQ1WhcNMjUwNDA1MDIwMzQ1WjAYMRYwFAYD VQQDEw02N2U3NTUwMi1iMTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSMVcFZxuC3nka+vK9c8qhskadFk1AM4DrQYLF5eybZ5n1ljhTVRd/NrIJnQ 7NYvrbtc0Qg5LOdXq/FM3xAPRe4GV3+g0E+sxs24vxSDoDfqS3Ata5vQTEHoLH8R aZKeazczLZlD9J6mMQk8oY4R8K70Rl3MyOvrymtf04GQE6u9/6XUnrQ91kxmvOr1 37d+i8Qr15sbtSToY8dNewO7eVpliS8iSS3uSK5Av0RSbs9SYGvWm32ncg23oi/e xZu8DEwVa3uD91wmrmv9imAqtsWpN6DOnAcPqATYdDCmVn0zWZcBVUHsspue78ti m0UxGN6WDKGto0Yq4xxo999duQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmGUo52 +1b0oSn+Z8Zi5fSl/3UQMB8GA1UdIwQYMBaAFEJfAiJN3GKdL4j/Zjx/St9s1kU+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMwQS83RUJGN0NDMjBG RjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lwMHZpUDltUEg5SzMyeldS VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FsOENJazNjWXAwdmlQOW1QSDlLMzJ6V1JUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDMwQS83RUJGN0NDMjBGRjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lw MHZpUDltUEg5SzMyeldSVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB+ZTSNjk0/Sk3nCsHZ9x1g9U6WqTn+6EkuSnoDxcQ+fb99kC9Iiyd xFBBzCvZIOiGl0XbzQ+G/D679YfdL+oQXgdlAZPi0gxLYUT+yqmp9n9GGvX1RwsX 9/j/P2Ter3o+6vcJGYugGK4Wbo/JCFxxN2uUD/P3LkOWdlSG+pYD0tQKY0Y6T93X e1lXgH3GaFQnzbgl39WaOb/8zBfFyzYgFdgr2KSSe4aMXrlGYpIjjeeRWui8amTi rWkgZZMjSSIJc7y0kYp9izmV1/m39NCtU9Qc/WiI3ULt4sIe648d8oQc125ULut8 I0rsmpBpx5RO95raNcpCwPmTalGMUI4t -----END CERTIFICATE-----Generated at Fri Apr 4 22:06:45 2025 by rpki-client