$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft File: AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft (raw, json) Hash identifier: vuIMD5XfPgM+aGA4uY3ARlFCEu3GgwSIcYD7wtnza4c= Subject key identifier: CA:71:83:36:97:98:3C:E7:EA:1E:B8:76:43:67:34:C3:D6:81:85:DF Authority key identifier: 01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E Certificate issuer: /CN=A917AB5E/serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E Certificate serial: 3470 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft Manifest number: 3470 Signing time: Fri 18 Apr 2025 15:17:30 +0000 Manifest this update: Fri 18 Apr 2025 15:17:29 +0000 Manifest next update: Fri 25 Apr 2025 15:17:29 +0000 Files and hashes: 1: AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl (hash: 1wS6qmmOS+Faws6KHMQhY3xDZB3YJo0wSIEq56Z8EGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 15:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13424 (0x3470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AB5E, serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E Validity Not Before: Apr 18 15:17:29 2025 GMT Not After : Apr 25 15:17:29 2025 GMT Subject: CN=68026d09-76e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e5:61:de:83:ef:67:98:60:4a:91:68:6d:49: ac:3d:f4:9d:26:50:59:08:f0:99:64:6f:cf:e4:f5: e4:5a:6e:fe:96:ed:e8:a6:21:dd:fc:1d:b1:0f:ec: b8:19:96:c2:b3:4b:fd:6a:16:1f:ca:ee:e7:6e:b5: 63:45:a2:9a:88:6a:45:c7:c0:9c:dc:c8:cc:7c:69: 87:0e:ed:5a:51:be:33:40:dd:6d:b0:cd:ce:96:21: bc:68:a9:f8:69:4b:e0:61:9d:38:88:52:0a:a1:88: a2:7d:92:ff:c6:86:01:c6:e3:ea:e8:e0:4c:23:ea: 90:56:dd:10:83:a8:c8:2c:6f:f8:00:b6:bc:95:49: d0:eb:62:cd:30:1b:f7:51:be:7c:19:20:e2:5d:36: 22:1f:61:9c:40:a7:f3:64:66:83:66:a3:ef:49:b8: 94:2f:e5:c7:19:5d:0a:8c:26:46:1a:07:ed:87:94: fa:37:b4:a4:c0:5e:c4:ec:e7:d7:f9:3e:ad:95:df: a0:a8:05:db:e3:50:5c:05:7e:b2:d3:c3:04:84:ce: dc:9f:fa:5c:bd:ea:2d:69:b7:ad:af:59:9e:32:72: dd:40:d0:37:f8:69:d1:7e:d9:6f:11:dc:71:4c:6d: ee:03:b2:53:1e:ad:ca:5e:b0:9d:13:8e:5f:75:8e: 18:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:71:83:36:97:98:3C:E7:EA:1E:B8:76:43:67:34:C3:D6:81:85:DF X509v3 Authority Key Identifier: keyid:01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:ba:21:25:9a:fd:05:e0:1d:f4:ef:e4:29:23:9c:b9:53:a2: e7:99:4b:65:47:29:ca:98:d1:53:1f:ed:0b:d9:13:3e:68:6d: 57:6d:e1:9d:be:dc:a8:1e:9c:49:3e:23:8d:f6:69:ad:38:60: 8b:be:05:f7:f4:bf:28:b2:5e:7c:10:85:9c:49:81:87:b9:e6: cb:b2:03:40:84:6a:b8:a2:f8:8b:a3:6a:ba:12:2d:2a:91:d6: e2:b6:33:a1:4e:fe:5d:b1:a0:47:ea:f7:9c:90:7b:31:70:32: ac:1c:b6:09:e3:27:55:07:0d:fa:b8:a1:4b:4f:ef:6b:ba:6e: 6b:a9:f9:13:e0:93:3f:a4:35:62:55:2b:4b:a6:87:ae:9a:d5: 7a:64:4d:1e:ca:69:93:73:0b:8d:ce:1b:59:a3:ce:2b:eb:e9: ba:34:fb:94:01:cf:04:32:28:45:b4:85:62:81:c8:99:ff:87: 22:07:ed:a6:42:e2:29:de:a2:6e:e9:48:45:8f:04:9f:19:f3: d2:ed:9e:54:cd:bb:73:eb:88:28:e7:a9:38:49:58:df:ea:f5: 91:05:e9:6d:b3:ad:98:b7:d0:3c:12:d9:2f:b8:e0:c7:16:f1: 0d:4f:da:5c:be:ff:02:09:b3:f5:ed:10:64:0d:58:2c:1b:76: 2f:d4:75:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FCNUUxMTAvBgNVBAUTKDAxMUQ2MUIyMzNBREYzMENEMjQ3NTYyMTI0QkI3MThC QzYzQUQ2NEUwHhcNMjUwNDE4MTUxNzI5WhcNMjUwNDI1MTUxNzI5WjAYMRYwFAYD VQQDEw02ODAyNmQwOS03NmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOVh3oPvZ5hgSpFobUmsPfSdJlBZCPCZZG/P5PXkWm7+lu3opiHd/B2xD+y4 GZbCs0v9ahYfyu7nbrVjRaKaiGpFx8Cc3MjMfGmHDu1aUb4zQN1tsM3OliG8aKn4 aUvgYZ04iFIKoYiifZL/xoYBxuPq6OBMI+qQVt0Qg6jILG/4ALa8lUnQ62LNMBv3 Ub58GSDiXTYiH2GcQKfzZGaDZqPvSbiUL+XHGV0KjCZGGgfth5T6N7SkwF7E7OfX +T6tld+gqAXb41BcBX6y08MEhM7cn/pcveotabetr1meMnLdQNA3+GnRftlvEdxx TG3uA7JTHq3KXrCdE45fdY4Y7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMpxgzaX mDzn6h64dkNnNMPWgYXfMB8GA1UdIwQYMBaAFAEdYbIzrfMM0kdWISS7cYvGOtZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUI1RS9GNTY1QUREMjFE QTUxMUUyODNEM0VGOUMwOEIwMkNEMi9BUjFoc2pPdDh3elNSMVloSkx0eGk4WTYx azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FSMWhzak90OHd6U1IxWWhKTHR4aThZNjFrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUI1RS9GNTY1QUREMjFEQTUxMUUyODNEM0VGOUMwOEIwMkNEMi9BUjFoc2pPdDh3 elNSMVloSkx0eGk4WTYxazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFuiElmv0F4B307+QpI5y5U6LnmUtlRynKmNFTH+0L2RM+aG1XbeGd vtyoHpxJPiON9mmtOGCLvgX39L8osl58EIWcSYGHuebLsgNAhGq4oviLo2q6Ei0q kdbitjOhTv5dsaBH6veckHsxcDKsHLYJ4ydVBw36uKFLT+9rum5rqfkT4JM/pDVi VStLpoeumtV6ZE0eymmTcwuNzhtZo84r6+m6NPuUAc8EMihFtIVigciZ/4ciB+2m QuIp3qJu6UhFjwSfGfPS7Z5Uzbtz64go56k4SVjf6vWRBelts62Yt9A8EtkvuODH FvENT9pcvv8CCbP17RBkDVgsG3Yv1HX1 -----END CERTIFICATE-----Generated at Fri Apr 18 20:17:29 2025 by rpki-client