$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft File: e0Coz49PGgbDbiA08Yo4v5jKWxg.mft (raw, json) Hash identifier: NF5/OCuLvZBy88DeOT3f4HsZUI35cODwA4NID9UA054= Subject key identifier: 27:30:62:3F:BF:16:59:15:2E:5D:36:F7:6E:D3:4C:2A:39:6C:17:22 Authority key identifier: 7B:40:A8:CF:8F:4F:1A:06:C3:6E:20:34:F1:8A:38:BF:98:CA:5B:18 Certificate issuer: /CN=A9166123/serialNumber=7B40A8CF8F4F1A06C36E2034F18A38BF98CA5B18 Certificate serial: 016E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft Manifest number: 0167 Signing time: Thu 03 Apr 2025 03:15:51 +0000 Manifest this update: Thu 03 Apr 2025 03:15:51 +0000 Manifest next update: Thu 10 Apr 2025 03:15:51 +0000 Files and hashes: 1: e0Coz49PGgbDbiA08Yo4v5jKWxg.crl (hash: tC/bOAqSDNwT96tlgWQ3fabvMQHO78tlVeMd7Z7gHGE=) 2: A74C3132F49211ED8659177BC4F9AE02.roa (hash: 306udLdXsDXkERPewXDbNH98O47h8mfNTv4RCgj1cHQ=) 3: 2F9915D8718D11EE97E3E022C4F9AE02.roa (hash: coH1x8KY/cq3OGm3WBXbeivefI4OPLTpBCpIkFV1i7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.crl rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166123 Validity Not Before: Apr 3 03:15:51 2025 GMT Not After : Apr 10 03:15:51 2025 GMT Subject: CN=67edfd67-4575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:43:ba:4a:24:9e:a2:92:0a:0e:3f:a3:0d:4a: 89:3c:8b:25:fd:b7:60:42:27:9c:f3:30:a7:0f:e8: 36:4d:50:1c:53:48:b3:5c:fc:2c:49:c4:bd:2c:75: 06:95:ad:03:d2:0c:e8:fa:8e:24:9f:46:57:f4:ad: 16:bc:d2:46:50:05:95:e2:d1:5e:2f:30:d2:16:47: c6:f4:47:4a:1e:7d:35:29:89:06:2c:37:a1:55:0a: 8f:2c:bb:3b:60:f1:bc:52:c9:23:59:07:e0:6f:4c: 28:70:da:d8:0c:5b:a8:15:50:ae:14:d6:79:39:27: db:d3:99:04:22:39:80:06:c9:6f:3a:28:31:5e:b4: ae:78:ed:62:fe:71:10:33:29:2f:99:75:72:c2:b4: 74:fc:c8:ff:ca:0a:ca:e2:e3:95:84:5a:59:88:a1: 8f:8a:f7:9e:46:55:0c:6b:b8:b3:54:57:02:ca:ec: 8e:64:06:bb:84:54:2d:2d:3c:07:da:bc:f4:3e:07: d0:4d:87:76:3e:2b:04:27:53:35:4d:ce:b1:8c:36: 96:84:f8:a2:fa:9b:fe:fb:c2:33:f4:26:60:51:21: 43:3a:8b:c1:65:c1:8c:d3:f9:e2:48:ba:07:fd:76: 21:8b:50:30:9c:d8:ea:6d:ce:20:86:51:9f:a2:0f: 5e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:30:62:3F:BF:16:59:15:2E:5D:36:F7:6E:D3:4C:2A:39:6C:17:22 X509v3 Authority Key Identifier: keyid:7B:40:A8:CF:8F:4F:1A:06:C3:6E:20:34:F1:8A:38:BF:98:CA:5B:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:0c:c2:30:30:a4:59:62:7c:60:93:dd:dc:96:08:62:5e:d9: f5:8c:09:0b:c8:b7:08:40:8e:57:df:b9:f8:7c:20:29:72:5b: 83:64:1b:17:5b:8e:c1:77:2d:58:ab:53:8d:86:9d:86:72:77: eb:01:b7:04:37:55:1a:eb:95:83:af:39:63:21:0d:54:b4:cd: e1:38:94:cd:62:ff:8c:ba:41:ed:e3:7d:06:55:65:d4:49:9b: b3:2a:cc:75:37:7f:2b:1b:64:fb:5e:ab:a3:7a:1d:99:98:da: cb:5f:fc:e1:35:60:2f:34:1c:65:c8:1f:a7:8e:03:20:39:ce: ca:ac:f0:ed:e3:b8:1a:bb:e2:f6:c1:10:0f:5e:f6:98:f1:4f: bb:9e:f4:08:2d:bf:53:3e:af:dc:3d:0f:c9:fc:d9:7b:6c:f7: 40:ba:fa:a4:d8:b4:76:b0:4a:ca:99:4e:f2:f7:31:52:a5:6b: 05:a2:53:ab:be:5d:04:16:d4:91:dd:12:33:ab:87:9a:7d:ec: 67:dd:77:62:ed:f0:d0:19:1f:ed:4c:7e:5d:d5:6b:09:32:83: 53:1e:2c:38:f1:aa:33:44:ba:1f:9a:18:50:3b:47:54:78:0c: eb:cc:d0:89:93:01:43:6a:e1:5f:70:ff:72:30:3e:4e:bf:26: 57:8d:4a:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjYxMjMxMTAvBgNVBAUTKDdCNDBBOENGOEY0RjFBMDZDMzZFMjAzNEYxOEEzOEJG OThDQTVCMTgwHhcNMjUwNDAzMDMxNTUxWhcNMjUwNDEwMDMxNTUxWjAYMRYwFAYD VQQDEw02N2VkZmQ2Ny00NTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEO6SiSeopIKDj+jDUqJPIsl/bdgQiec8zCnD+g2TVAcU0izXPwsScS9LHUG la0D0gzo+o4kn0ZX9K0WvNJGUAWV4tFeLzDSFkfG9EdKHn01KYkGLDehVQqPLLs7 YPG8UskjWQfgb0wocNrYDFuoFVCuFNZ5OSfb05kEIjmABslvOigxXrSueO1i/nEQ MykvmXVywrR0/Mj/ygrK4uOVhFpZiKGPiveeRlUMa7izVFcCyuyOZAa7hFQtLTwH 2rz0PgfQTYd2PisEJ1M1Tc6xjDaWhPii+pv++8Iz9CZgUSFDOovBZcGM0/niSLoH /XYhi1AwnNjqbc4ghlGfog9e+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcwYj+/ FlkVLl02927TTCo5bBciMB8GA1UdIwQYMBaAFHtAqM+PTxoGw24gNPGKOL+YylsY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjEyMy8xQjAwRUFFOEY0 OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9lMENvejQ5UEdnYkRiaUEwOFlvNHY1aktX eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UwQ296NDlQR2diRGJpQTA4WW80djVqS1d4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjEyMy8xQjAwRUFFOEY0OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9lMENvejQ5UEdn YkRiaUEwOFlvNHY1aktXeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeDMIwMKRZYnxgk93clghiXtn1jAkLyLcIQI5X37n4fCApcluDZBsX W47Bdy1Yq1ONhp2GcnfrAbcEN1Ua65WDrzljIQ1UtM3hOJTNYv+MukHt430GVWXU SZuzKsx1N38rG2T7Xqujeh2ZmNrLX/zhNWAvNBxlyB+njgMgOc7KrPDt47gau+L2 wRAPXvaY8U+7nvQILb9TPq/cPQ/J/Nl7bPdAuvqk2LR2sErKmU7y9zFSpWsFolOr vl0EFtSR3RIzq4eafexn3Xdi7fDQGR/tTH5d1WsJMoNTHiw48aozRLofmhhQO0dU eAzrzNCJkwFDauFfcP9yMD5OvyZXjUpx -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:47 2025 by rpki-client