$ rpki-client -vvf rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft File: cM1M0T4uN35eXDervHl-7ea2Yhs.mft (raw, json) Hash identifier: thXdCR9JC9ImZjsqH/gC/bUIHGiSNA7TDbM6LVgfXn4= Subject key identifier: AA:CB:FC:CB:1A:BB:5D:49:F2:0C:76:87:1B:8B:FC:D5:B4:2A:28:CE Authority key identifier: 70:CD:4C:D1:3E:2E:37:7E:5E:5C:37:AB:BC:79:7E:ED:E6:B6:62:1B Certificate issuer: /CN=A916F338/serialNumber=70CD4CD13E2E377E5E5C37ABBC797EEDE6B6621B Certificate serial: 027B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft Manifest number: 0276 Signing time: Thu 03 Apr 2025 01:40:33 +0000 Manifest this update: Thu 03 Apr 2025 01:40:32 +0000 Manifest next update: Thu 10 Apr 2025 01:40:32 +0000 Files and hashes: 1: cM1M0T4uN35eXDervHl-7ea2Yhs.crl (hash: J7Nt/wn8PVqIvzQPqkQmlCaQCFM6uv3BFrF2jEIT1j8=) 2: BA5354A4044211EDBB686665C4F9AE02.roa (hash: 5D+EMadPUYOYtPY3WxKsOuXfJZW+RJaKdKnGQtm9R6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.crl rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:40:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 635 (0x27b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F338 Validity Not Before: Apr 3 01:40:32 2025 GMT Not After : Apr 10 01:40:32 2025 GMT Subject: CN=67ede711-dc60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:36:0a:3f:d9:1e:ee:dd:40:24:2b:9f:97:e1: a7:16:d1:e7:81:ab:5e:f5:35:c1:5b:95:a3:6c:ad: e4:41:3e:e3:25:b6:1e:a2:12:00:8e:79:b8:94:9c: e6:8f:d8:e4:b6:33:04:3d:cc:18:8c:5f:86:58:dc: 4c:f6:88:98:11:00:34:c3:74:c2:87:dd:0c:3b:40: 9d:3c:78:ec:25:70:e4:d1:aa:18:28:c9:a2:60:9e: 63:b2:c4:b1:f6:c6:36:4b:74:c0:a4:48:bc:03:12: b5:1f:f4:00:73:8a:5b:af:53:07:7d:98:84:9a:94: db:e3:fd:45:41:a0:08:9f:f1:ae:e1:84:9c:78:72: 81:41:45:b1:b9:0d:67:0d:da:ab:6a:f1:97:9f:63: d7:f1:2f:34:b2:84:61:29:29:b9:e0:7d:55:2a:c2: 64:c9:81:d9:dd:cc:1a:15:bb:ce:39:d5:a9:e7:15: 28:07:5a:63:09:5f:8e:9b:d0:41:02:bb:ff:39:fa: 43:cc:d6:36:ca:9f:ca:05:08:65:50:6f:40:30:c9: 01:a9:bc:56:cb:3c:60:65:a9:d5:72:55:8c:b7:26: 3f:58:6c:d1:58:4a:07:d8:d5:db:2d:fc:8a:63:15: 5d:d4:9d:6d:13:86:8b:69:98:3b:06:f5:eb:3d:53: 8d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CB:FC:CB:1A:BB:5D:49:F2:0C:76:87:1B:8B:FC:D5:B4:2A:28:CE X509v3 Authority Key Identifier: keyid:70:CD:4C:D1:3E:2E:37:7E:5E:5C:37:AB:BC:79:7E:ED:E6:B6:62:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:55:5d:4f:85:b3:41:b0:49:35:45:11:02:bf:1b:c3:c5:be: 59:9b:f9:c8:00:a3:ed:5f:12:2a:aa:f8:14:2d:81:3e:2f:af: 4a:ba:8e:14:8d:f4:34:f4:67:5e:b2:28:4c:c8:fd:b8:c6:d1: 9a:ad:1b:40:ea:61:dd:b6:7f:e0:4b:6d:d7:e0:53:34:b7:1e: 54:54:bb:47:25:cc:3e:7c:a4:3c:6f:5b:99:de:76:c3:64:60: 6a:74:ad:dc:eb:fa:45:09:9d:ad:39:72:9b:1e:b0:4e:f5:f6: f9:4b:d5:4d:39:23:ac:83:b7:a4:d4:1d:fe:e1:53:c9:77:5e: c5:d7:40:e3:e5:5c:fb:20:3b:84:d5:49:73:9a:01:1a:b0:db: d7:e0:49:4c:73:91:2a:95:d9:c6:20:99:ac:3c:7a:df:a7:2e: 75:56:e9:7c:8b:e6:86:06:4f:8c:bd:fc:9a:e9:ca:ee:85:77: c8:28:e9:69:da:62:00:68:81:a1:a7:93:3b:6f:bd:be:45:83: ec:3e:20:f4:64:0b:6f:ec:f2:22:76:2e:e2:b8:b9:ed:76:0f: 7e:10:46:76:96:ec:c6:e7:37:e1:26:d1:79:8b:f6:f7:e5:54: 40:95:39:8d:f9:bf:42:3a:31:ef:7e:9b:37:4e:81:3f:81:dd: 9d:be:23:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkYzMzgxMTAvBgNVBAUTKDcwQ0Q0Q0QxM0UyRTM3N0U1RTVDMzdBQkJDNzk3RUVE RTZCNjYyMUIwHhcNMjUwNDAzMDE0MDMyWhcNMjUwNDEwMDE0MDMyWjAYMRYwFAYD VQQDEw02N2VkZTcxMS1kYzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnjYKP9ke7t1AJCufl+GnFtHngate9TXBW5WjbK3kQT7jJbYeohIAjnm4lJzm j9jktjMEPcwYjF+GWNxM9oiYEQA0w3TCh90MO0CdPHjsJXDk0aoYKMmiYJ5jssSx 9sY2S3TApEi8AxK1H/QAc4pbr1MHfZiEmpTb4/1FQaAIn/Gu4YSceHKBQUWxuQ1n DdqravGXn2PX8S80soRhKSm54H1VKsJkyYHZ3cwaFbvOOdWp5xUoB1pjCV+Om9BB Arv/OfpDzNY2yp/KBQhlUG9AMMkBqbxWyzxgZanVclWMtyY/WGzRWEoH2NXbLfyK YxVd1J1tE4aLaZg7BvXrPVONywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrL/Msa u11J8gx2hxuL/NW0KijOMB8GA1UdIwQYMBaAFHDNTNE+Ljd+Xlw3q7x5fu3mtmIb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjMzOC9EMjExMTdEQzA0 M0YxMUVEOTM5QUUwNjJDNEY5QUUwMi9jTTFNMFQ0dU4zNWVYRGVydkhsLTdlYTJZ aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNMU0wVDR1TjM1ZVhEZXJ2SGwtN2VhMllocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjMzOC9EMjExMTdEQzA0M0YxMUVEOTM5QUUwNjJDNEY5QUUwMi9jTTFNMFQ0dU4z NWVYRGVydkhsLTdlYTJZaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANVV1PhbNBsEk1RRECvxvDxb5Zm/nIAKPtXxIqqvgULYE+L69Kuo4U jfQ09GdesihMyP24xtGarRtA6mHdtn/gS23X4FM0tx5UVLtHJcw+fKQ8b1uZ3nbD ZGBqdK3c6/pFCZ2tOXKbHrBO9fb5S9VNOSOsg7ek1B3+4VPJd17F10Dj5Vz7IDuE 1UlzmgEasNvX4ElMc5EqldnGIJmsPHrfpy51Vul8i+aGBk+Mvfya6cruhXfIKOlp 2mIAaIGhp5M7b72+RYPsPiD0ZAtv7PIidi7iuLntdg9+EEZ2luzG5zfhJtF5i/b3 5VRAlTmN+b9COjHvfps3ToE/gd2dviPz -----END CERTIFICATE-----Generated at Fri Apr 4 22:00:29 2025 by rpki-client