$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB10/E4FED3A8B37511E8B25D8F6BC4F9AE02/feQwJk1qtGH2pP_KLkB16KZ0Fck.mft File: feQwJk1qtGH2pP_KLkB16KZ0Fck.mft (raw, json) Hash identifier: c2HaGFUbhTDwa8RvfZ2em4qNK6QJzko2z6LI8AMkbm0= Subject key identifier: 81:BA:82:8D:67:FD:73:BF:EC:AF:BE:C4:67:AD:A2:FE:DD:9F:08:3C Authority key identifier: 7D:E4:30:26:4D:6A:B4:61:F6:A4:FF:CA:2E:40:75:E8:A6:74:15:C9 Certificate issuer: /CN=A915DB10/serialNumber=7DE430264D6AB461F6A4FFCA2E4075E8A67415C9 Certificate serial: 12F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/feQwJk1qtGH2pP_KLkB16KZ0Fck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DB10/E4FED3A8B37511E8B25D8F6BC4F9AE02/feQwJk1qtGH2pP_KLkB16KZ0Fck.mft Manifest number: 12E8 Signing time: Fri 04 Apr 2025 17:08:50 +0000 Manifest this update: Fri 04 Apr 2025 17:08:49 +0000 Manifest next update: Fri 11 Apr 2025 17:08:49 +0000 Files and hashes: 1: feQwJk1qtGH2pP_KLkB16KZ0Fck.crl (hash: IM/6MtRebSmPunW2j1M+POcqcNHzo31ALXw6U9bQUf0=) 2: F5EE9E5E96A011EF85606B0DC4F9AE02.roa (hash: /8jhrCUeyEJ+dkS/dj7KrGLt48nPFSHhTYuVcePeKe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DB10/E4FED3A8B37511E8B25D8F6BC4F9AE02/feQwJk1qtGH2pP_KLkB16KZ0Fck.crl rsync://rpki.apnic.net/member_repository/A915DB10/E4FED3A8B37511E8B25D8F6BC4F9AE02/feQwJk1qtGH2pP_KLkB16KZ0Fck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/feQwJk1qtGH2pP_KLkB16KZ0Fck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:08:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4854 (0x12f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DB10 Validity Not Before: Apr 4 17:08:49 2025 GMT Not After : Apr 11 17:08:49 2025 GMT Subject: CN=67f01221-85ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:59:7c:fe:6c:bb:cb:e5:e3:2a:14:d6:d2:c0: 54:3d:9a:5a:e7:ed:18:d8:e9:5c:e3:b1:38:25:f3: 87:2a:d7:1f:40:81:81:2b:3e:b9:d9:c9:2a:8a:5d: 37:ff:05:fd:d5:98:64:1c:ec:43:f4:c0:4d:bc:0e: e3:e8:ab:0a:cf:8d:1f:f8:40:1f:f6:ba:1b:7b:f8: 10:99:96:3e:ef:06:a4:c8:ad:d5:f5:14:7a:1a:04: 51:60:d2:26:28:82:69:ee:ef:9b:40:6b:57:28:cd: ed:bd:7a:86:3b:19:a4:84:10:c7:24:d6:26:1e:86: 4e:62:35:01:a2:63:0b:41:01:2a:ae:03:4b:e2:3d: f0:55:1b:de:44:1c:93:22:2a:c4:5e:3e:61:22:27: f9:9d:b2:ec:40:7b:82:7f:7a:b8:26:55:51:cf:88: ec:fe:50:f9:4a:f2:f5:6b:e1:3f:a2:32:11:cf:d4: 38:12:f2:22:47:41:ef:88:15:5e:52:40:1e:9b:60: 0b:dc:51:35:e0:58:f1:83:6e:fb:76:cc:c0:fe:94: 7d:61:d2:e7:4f:81:16:91:02:15:ee:c8:67:0a:d3: 60:d7:9a:bd:58:b0:75:cf:d1:72:23:68:8f:a6:27: 94:d8:7b:b1:f9:2d:ec:dc:aa:fa:ca:e6:da:98:27: 47:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:BA:82:8D:67:FD:73:BF:EC:AF:BE:C4:67:AD:A2:FE:DD:9F:08:3C X509v3 Authority Key Identifier: keyid:7D:E4:30:26:4D:6A:B4:61:F6:A4:FF:CA:2E:40:75:E8:A6:74:15:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DB10/E4FED3A8B37511E8B25D8F6BC4F9AE02/feQwJk1qtGH2pP_KLkB16KZ0Fck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/feQwJk1qtGH2pP_KLkB16KZ0Fck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB10/E4FED3A8B37511E8B25D8F6BC4F9AE02/feQwJk1qtGH2pP_KLkB16KZ0Fck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:b9:33:8e:71:90:b5:dc:a6:98:5d:21:57:9c:48:04:be:88: 39:d6:c8:28:66:db:98:ba:24:49:51:8c:ce:28:ad:ef:31:05: 41:a3:f4:8b:88:51:cb:a4:37:fc:18:37:12:1d:b3:60:c4:c4: 61:70:69:17:b6:f2:a8:9c:93:fd:12:f7:4d:6b:58:9f:94:13: 39:1d:eb:a7:cf:a6:22:17:ce:6f:44:9a:57:c9:d2:95:0a:66: 40:e2:ee:0e:2f:52:7c:c6:9a:33:d2:cb:0e:57:a0:03:8f:25: a7:05:38:ef:bc:20:f6:7b:08:71:a8:3a:1c:26:16:cd:7d:d0: 1d:cb:c2:b9:a6:79:61:09:3b:59:0b:4c:e8:2b:a8:15:ec:bc: 6a:ee:9a:47:80:56:cc:78:c6:99:0a:e3:b9:e4:96:bd:ab:eb: 3a:cc:26:00:57:0d:e2:f6:cb:90:f4:2b:41:08:08:40:90:7b: c4:c1:11:f3:bb:db:c5:ae:72:c4:2f:45:df:0d:e5:29:95:d1: 33:9b:b4:27:c2:c9:08:03:a6:a2:ed:1a:b9:9c:e4:ba:b2:82: b3:b1:a8:91:a3:3c:bc:55:18:cc:83:a4:73:64:31:57:34:e1: 80:20:f6:84:78:60:17:25:e4:f5:da:2d:06:7c:fe:b3:0c:66: dc:eb:8e:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURCMTAxMTAvBgNVBAUTKDdERTQzMDI2NEQ2QUI0NjFGNkE0RkZDQTJFNDA3NUU4 QTY3NDE1QzkwHhcNMjUwNDA0MTcwODQ5WhcNMjUwNDExMTcwODQ5WjAYMRYwFAYD VQQDEw02N2YwMTIyMS04NWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtll8/my7y+XjKhTW0sBUPZpa5+0Y2Olc47E4JfOHKtcfQIGBKz652ckqil03 /wX91ZhkHOxD9MBNvA7j6KsKz40f+EAf9robe/gQmZY+7wakyK3V9RR6GgRRYNIm KIJp7u+bQGtXKM3tvXqGOxmkhBDHJNYmHoZOYjUBomMLQQEqrgNL4j3wVRveRByT IirEXj5hIif5nbLsQHuCf3q4JlVRz4js/lD5SvL1a+E/ojIRz9Q4EvIiR0HviBVe UkAem2AL3FE14Fjxg277dszA/pR9YdLnT4EWkQIV7shnCtNg15q9WLB1z9FyI2iP pieU2Hux+S3s3Kr6yubamCdHxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIG6go1n /XO/7K++xGetov7dnwg8MB8GA1UdIwQYMBaAFH3kMCZNarRh9qT/yi5AdeimdBXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REIxMC9FNEZFRDNBOEIz NzUxMUU4QjI1RDhGNkJDNEY5QUUwMi9mZVF3SmsxcXRHSDJwUF9LTGtCMTZLWjBG Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZlUXdKazFxdEdIMnBQX0tMa0IxNktaMEZjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REIxMC9FNEZFRDNBOEIzNzUxMUU4QjI1RDhGNkJDNEY5QUUwMi9mZVF3SmsxcXRH SDJwUF9LTGtCMTZLWjBGY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUuTOOcZC13KaYXSFXnEgEvog51sgoZtuYuiRJUYzOKK3vMQVBo/SL iFHLpDf8GDcSHbNgxMRhcGkXtvKonJP9EvdNa1iflBM5Heunz6YiF85vRJpXydKV CmZA4u4OL1J8xpoz0ssOV6ADjyWnBTjvvCD2ewhxqDocJhbNfdAdy8K5pnlhCTtZ C0zoK6gV7Lxq7ppHgFbMeMaZCuO55Ja9q+s6zCYAVw3i9suQ9CtBCAhAkHvEwRHz u9vFrnLEL0XfDeUpldEzm7QnwskIA6ai7Rq5nOS6soKzsaiRozy8VRjMg6RzZDFX NOGAIPaEeGAXJeT12i0GfP6zDGbc644d -----END CERTIFICATE-----Generated at Fri Apr 4 21:53:59 2025 by rpki-client