$ rpki-client -vvf rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft File: ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft (raw, json) Hash identifier: GnX+5/UXH2JynaqYN3oDwNWR5f4Oe6IxAEi2jCS3CqI= Subject key identifier: 51:CA:34:1B:C5:03:8A:23:E1:79:9C:EC:6E:CB:F2:F7:81:4A:03:EF Authority key identifier: 49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8 Certificate issuer: /CN=A916C7B6/serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8 Certificate serial: 0B4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft Manifest number: 0B48 Signing time: Fri 18 Apr 2025 19:12:27 +0000 Manifest this update: Fri 18 Apr 2025 19:12:27 +0000 Manifest next update: Fri 25 Apr 2025 19:12:27 +0000 Files and hashes: 1: ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl (hash: 5vMjuhd2mTC1Tf4PWl5vYW7XyZaF1MTwhxdCAdQQBBw=) 2: 1A8553B831F011EAA18AC76AC4F9AE02.roa (hash: 2QDvhbtMSuUMKkHjiP/BzPb8Yd8fGPxfNmWlpQE2e54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 19:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2895 (0xb4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C7B6, serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8 Validity Not Before: Apr 18 19:12:27 2025 GMT Not After : Apr 25 19:12:27 2025 GMT Subject: CN=6802a41b-1b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:81:c9:5c:37:62:7a:76:d8:3a:73:26:0c:c8: f0:29:be:fb:31:2b:69:35:bf:c7:4b:8f:36:2d:07: d7:6f:3a:e1:72:b6:d7:c6:18:57:9c:c2:77:5a:e1: fb:ba:ab:5c:3f:b6:cd:41:1e:7b:d9:63:a9:d5:71: 56:57:3e:21:ee:b6:aa:e4:8e:9f:ef:14:a2:c3:0a: 58:74:85:b4:0e:3c:e6:7b:74:45:5e:18:32:9d:1c: 6d:ea:e3:59:d5:33:73:7f:6b:81:49:b2:30:c1:a2: 58:74:57:fd:14:1f:77:5b:32:c0:9f:0a:a6:04:67: cf:21:9d:45:0f:52:d6:bf:47:d5:44:84:cc:c2:92: 87:22:11:b9:7c:19:a2:0f:b3:3b:8c:0b:fb:6b:ba: d3:00:85:df:fd:04:01:39:a4:fc:4c:fb:b1:d9:b0: 15:8c:15:ca:ba:63:b8:4e:c3:99:a5:2d:a0:55:14: 3f:eb:68:85:7c:c7:54:76:d6:a7:0d:5f:ce:75:2f: 16:b0:12:7e:23:90:d2:cd:83:3e:90:56:53:00:c2: 18:6d:1c:90:61:81:31:39:91:a4:f8:01:02:95:81: 4e:74:cf:ce:50:e0:1a:3d:9b:dc:70:5d:9f:92:21: df:c8:41:90:aa:10:1c:2d:51:de:94:62:18:8e:a4: 7d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:CA:34:1B:C5:03:8A:23:E1:79:9C:EC:6E:CB:F2:F7:81:4A:03:EF X509v3 Authority Key Identifier: keyid:49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:cc:2c:2e:fa:39:2d:72:d8:b1:b1:39:fb:2d:59:0a:29:44: ed:ed:ef:6a:d1:57:60:09:dd:1a:79:e8:ce:7e:28:a0:22:dc: 0a:98:b7:df:c4:62:72:57:63:59:65:be:ad:d1:86:c9:d2:2f: 82:eb:32:5c:dd:d8:c5:e2:e8:a4:60:ad:7a:79:13:aa:5a:03: 9d:cb:39:db:7b:db:50:22:5e:fa:b6:5f:8e:b2:fb:d4:f3:68: ad:6d:04:c8:65:1d:6f:ac:5b:1d:48:f9:54:81:73:01:20:f9: d9:26:e4:4b:d8:ca:df:85:7b:54:92:21:e9:8c:68:c1:a1:f9: ac:d2:fc:dd:fb:b4:1d:d4:b3:ef:92:d3:c8:67:cb:18:91:67: cb:ee:bf:96:fa:0f:6e:52:05:4f:ec:cf:7d:76:d5:f6:27:4b: fb:24:e6:73:19:71:33:aa:a7:06:72:b4:a4:0f:28:6c:b2:8f: f5:cf:58:64:79:68:c1:d7:da:4e:48:3c:5f:d5:ca:19:04:e4: e6:bd:73:ac:ba:65:6a:6d:e2:00:6b:a4:a3:f6:51:1d:45:c9: 61:3e:fb:16:7e:da:b5:34:74:92:f1:9d:4e:3a:2a:2d:6a:2c: 68:da:52:eb:d9:df:3f:21:de:c8:b3:64:68:4d:9c:a1:1f:74: 84:31:ca:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM3QjYxMTAvBgNVBAUTKDQ5M0QzRUFGRTA0MDU3Mjg0MUU5RkFCMjU2RDBDNjA0 NENCODU4QzgwHhcNMjUwNDE4MTkxMjI3WhcNMjUwNDI1MTkxMjI3WjAYMRYwFAYD VQQDEw02ODAyYTQxYi0xYjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8YHJXDdienbYOnMmDMjwKb77MStpNb/HS482LQfXbzrhcrbXxhhXnMJ3WuH7 uqtcP7bNQR572WOp1XFWVz4h7raq5I6f7xSiwwpYdIW0Djzme3RFXhgynRxt6uNZ 1TNzf2uBSbIwwaJYdFf9FB93WzLAnwqmBGfPIZ1FD1LWv0fVRITMwpKHIhG5fBmi D7M7jAv7a7rTAIXf/QQBOaT8TPux2bAVjBXKumO4TsOZpS2gVRQ/62iFfMdUdtan DV/OdS8WsBJ+I5DSzYM+kFZTAMIYbRyQYYExOZGk+AEClYFOdM/OUOAaPZvccF2f kiHfyEGQqhAcLVHelGIYjqR9gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHKNBvF A4oj4Xmc7G7L8veBSgPvMB8GA1UdIwQYMBaAFEk9Pq/gQFcoQen6slbQxgRMuFjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzdCNi80M0Y2QTU3ODMx RUUxMUVBQUIwMUU3NjdDNEY5QUUwMi9TVDAtci1CQVZ5aEI2ZnF5VnRER0JFeTRX TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NUMC1yLUJBVnloQjZmcXlWdERHQkV5NFdNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzdCNi80M0Y2QTU3ODMxRUUxMUVBQUIwMUU3NjdDNEY5QUUwMi9TVDAtci1CQVZ5 aEI2ZnF5VnRER0JFeTRXTWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7zCwu+jktctixsTn7LVkKKUTt7e9q0VdgCd0aeejOfiigItwKmLff xGJyV2NZZb6t0YbJ0i+C6zJc3djF4uikYK16eROqWgOdyznbe9tQIl76tl+OsvvU 82itbQTIZR1vrFsdSPlUgXMBIPnZJuRL2MrfhXtUkiHpjGjBofms0vzd+7Qd1LPv ktPIZ8sYkWfL7r+W+g9uUgVP7M99dtX2J0v7JOZzGXEzqqcGcrSkDyhsso/1z1hk eWjB19pOSDxf1coZBOTmvXOsumVqbeIAa6Sj9lEdRclhPvsWftq1NHSS8Z1OOiot aixo2lLr2d8/Id7Is2RoTZyhH3SEMcrI -----END CERTIFICATE-----Generated at Sat Apr 19 05:55:40 2025 by rpki-client