$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft File: u6lOqRCj8jLfn98s1OOiejSZa3A.mft (raw, json) Hash identifier: KhCTFUJKd7G0E5pT1rkfZOpAQ8hU4wXj+NmMpaPQMIg= Subject key identifier: A3:85:6D:5E:ED:1B:04:EA:9E:FE:92:96:42:37:96:2C:49:C6:FC:68 Authority key identifier: BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70 Certificate issuer: /CN=A917BEB0/serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70 Certificate serial: 041A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft Manifest number: 0416 Signing time: Thu 03 Apr 2025 00:26:23 +0000 Manifest this update: Thu 03 Apr 2025 00:26:23 +0000 Manifest next update: Thu 10 Apr 2025 00:26:23 +0000 Files and hashes: 1: u6lOqRCj8jLfn98s1OOiejSZa3A.crl (hash: AhSmNQSp4E5hxYhVmelrOa17yr844dkDn5u/2IaTnvU=) 2: 4AEAB70C615D11ECAC75D44DC4F9AE02.roa (hash: WnBbCr/LbqKLlPeho3+8ztfmsdCgc5oHEWwkG3+ywSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1050 (0x41a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEB0 Validity Not Before: Apr 3 00:26:23 2025 GMT Not After : Apr 10 00:26:23 2025 GMT Subject: CN=67edd5af-060f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ed:8b:cc:ab:99:98:b6:c1:62:f1:c0:0c:5f: 75:6f:14:71:57:87:39:ea:e4:87:f4:86:f7:cf:fd: 47:90:9d:cf:1c:f9:75:d9:88:f4:d7:6e:ca:ca:20: 1c:fc:c1:46:92:c4:6a:da:39:ba:1e:fb:72:71:56: 3b:f9:3a:3d:20:d6:5b:ef:57:b0:1d:00:e0:f0:c7: f9:33:cc:98:de:82:6b:f2:56:bf:ae:45:1d:f8:a4: 71:c9:3c:00:90:c7:c4:b2:ca:af:c0:d4:f6:9a:86: fb:0d:ca:8e:6c:7d:0a:6a:ad:12:91:7a:44:10:48: 20:55:5e:71:bb:de:a4:b9:06:2f:21:ae:40:64:3b: 18:1b:6e:52:26:bc:31:71:a2:71:b6:be:b2:20:09: 54:ed:49:c8:30:33:a3:60:57:82:d1:b8:89:08:20: 75:4a:bf:b4:6d:c1:5b:a7:6f:ec:40:45:63:e1:74: 4f:82:a0:91:50:83:79:ee:a3:23:46:4d:3b:a7:4a: 99:35:14:8b:15:82:4b:d3:73:c6:3a:4a:8c:12:b4: 85:31:1c:d3:ec:87:54:b7:a7:fa:85:09:b2:ee:7f: a2:be:d7:33:dc:84:ff:6f:cd:61:4b:5d:f8:cf:3e: 55:d5:29:f2:bb:63:b0:94:7c:52:6d:de:58:c3:72: ec:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:85:6D:5E:ED:1B:04:EA:9E:FE:92:96:42:37:96:2C:49:C6:FC:68 X509v3 Authority Key Identifier: keyid:BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:d6:15:9f:c7:5a:87:57:94:40:cb:83:f5:d6:67:ec:3c:25: 52:17:bb:14:d1:39:53:9b:ee:33:32:cb:aa:67:bf:2d:2a:2b: 19:a6:68:ec:de:be:85:6c:23:4f:86:ce:ab:51:48:fa:ec:37: d1:8e:20:d7:e3:3c:71:a6:4d:7c:72:8b:8e:c9:9e:c2:fa:00: 7c:a7:2d:b8:fd:0f:ae:1e:87:af:b5:f9:a4:20:d5:7d:5f:c4: 41:59:64:39:95:a0:8a:c0:ea:d7:0b:60:a3:4f:16:88:da:c6: f7:e5:d1:c7:43:04:ac:b7:3e:ce:01:03:c1:cb:e0:80:02:02: 42:74:cd:a8:35:73:f3:14:9b:16:ea:d4:42:63:1f:8e:ea:e4: 51:91:9a:02:9f:75:25:f1:04:df:fe:6d:e3:24:04:ae:67:bc: dc:ff:19:65:43:93:69:59:18:e8:fe:a3:ca:7d:ef:8b:df:7b: 5a:f8:76:96:5a:ef:cf:96:ba:e5:21:b6:68:08:ba:47:a1:ff: 42:a6:9b:ad:48:94:6b:0f:85:1b:53:aa:86:6a:2e:72:a3:f7: 6e:bc:28:0b:9c:09:cb:f0:7f:3f:e8:8f:5a:d8:7f:31:c9:4f: d3:38:ab:4c:ef:8b:8c:25:03:42:6e:5e:81:3e:64:81:69:24: 26:07:34:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQjAxMTAvBgNVBAUTKEJCQTk0RUE5MTBBM0YyMzJERjlGREYyQ0Q0RTNBMjdB MzQ5OTZCNzAwHhcNMjUwNDAzMDAyNjIzWhcNMjUwNDEwMDAyNjIzWjAYMRYwFAYD VQQDEw02N2VkZDVhZi0wNjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+2LzKuZmLbBYvHADF91bxRxV4c56uSH9Ib3z/1HkJ3PHPl12Yj0127KyiAc /MFGksRq2jm6HvtycVY7+To9INZb71ewHQDg8Mf5M8yY3oJr8la/rkUd+KRxyTwA kMfEssqvwNT2mob7DcqObH0Kaq0SkXpEEEggVV5xu96kuQYvIa5AZDsYG25SJrwx caJxtr6yIAlU7UnIMDOjYFeC0biJCCB1Sr+0bcFbp2/sQEVj4XRPgqCRUIN57qMj Rk07p0qZNRSLFYJL03PGOkqMErSFMRzT7IdUt6f6hQmy7n+ivtcz3IT/b81hS134 zz5V1Snyu2OwlHxSbd5Yw3LsgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOFbV7t GwTqnv6SlkI3lixJxvxoMB8GA1UdIwQYMBaAFLupTqkQo/Iy35/fLNTjono0mWtw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVCMC8xODExM0Q0NDYx NUIxMUVDQkQ5OUQxNENDNEY5QUUwMi91NmxPcVJDajhqTGZuOThzMU9PaWVqU1ph M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U2bE9xUkNqOGpMZm45OHMxT09pZWpTWmEzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVCMC8xODExM0Q0NDYxNUIxMUVDQkQ5OUQxNENDNEY5QUUwMi91NmxPcVJDajhq TGZuOThzMU9PaWVqU1phM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi1hWfx1qHV5RAy4P11mfsPCVSF7sU0TlTm+4zMsuqZ78tKisZpmjs 3r6FbCNPhs6rUUj67DfRjiDX4zxxpk18couOyZ7C+gB8py24/Q+uHoevtfmkINV9 X8RBWWQ5laCKwOrXC2CjTxaI2sb35dHHQwSstz7OAQPBy+CAAgJCdM2oNXPzFJsW 6tRCYx+O6uRRkZoCn3Ul8QTf/m3jJASuZ7zc/xllQ5NpWRjo/qPKfe+L33ta+HaW Wu/PlrrlIbZoCLpHof9CpputSJRrD4UbU6qGai5yo/duvCgLnAnL8H8/6I9a2H8x yU/TOKtM74uMJQNCbl6BPmSBaSQmBzTN -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:34 2025 by rpki-client