$ rpki-client -vvf rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft File: lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft (raw, json) Hash identifier: Bpo3BdJZbH+lro87fwLFWRQ/0q/C7pPcGX2oGyP2cMY= Subject key identifier: FE:70:B7:83:F1:B3:A8:BF:F0:C3:A7:73:1B:6D:7D:F6:A6:BF:62:8D Authority key identifier: 94:2D:54:1D:FE:79:82:F6:E0:1E:6B:CC:97:6D:C0:CB:84:14:E8:38 Certificate issuer: /CN=A917D7F2/serialNumber=942D541DFE7982F6E01E6BCC976DC0CB8414E838 Certificate serial: 3481 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft Manifest number: 347C Signing time: Fri 18 Apr 2025 14:36:53 +0000 Manifest this update: Fri 18 Apr 2025 14:36:53 +0000 Manifest next update: Fri 25 Apr 2025 14:36:53 +0000 Files and hashes: 1: lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl (hash: P7h6hetX4xPShkAOGfl7hQlp/txRYEkxnG7X4+648ZQ=) 2: 35FC192C272C11ED9E64C718C4F9AE02.roa (hash: of9zh63P1E28Fw1JXMf3Mift2nJvEjjB8iXijpwTEOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 14:36:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13441 (0x3481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D7F2, serialNumber=942D541DFE7982F6E01E6BCC976DC0CB8414E838 Validity Not Before: Apr 18 14:36:53 2025 GMT Not After : Apr 25 14:36:53 2025 GMT Subject: CN=68026385-e3e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:49:3b:fc:42:ef:de:c3:c2:cb:56:e0:af:b5: f3:b3:90:01:2b:a4:1a:d3:1f:fc:b7:6e:28:7b:cb: b7:25:48:11:f0:9f:db:3a:e1:54:96:9f:fa:ef:c1: 4a:c0:42:6f:60:8e:d5:ae:a6:f1:5a:9f:90:22:6c: 6b:9c:b0:f6:ab:38:7b:37:6c:fb:c1:35:5c:62:83: a0:a4:70:cb:e8:79:a5:51:f0:24:fe:4e:c6:7e:fd: 8f:09:e1:fc:fb:41:6a:e8:6e:d4:4d:8d:1b:77:51: a7:52:1d:b0:2d:aa:71:af:57:3a:ba:49:56:14:4f: 8d:c5:06:b1:50:ba:bf:2e:3b:3a:fe:51:0a:51:f5: d5:cc:f6:55:e8:88:9a:1e:37:8a:6b:d1:d6:ad:8c: 8a:e5:08:1c:da:c1:15:b1:bb:b7:b7:34:8d:38:81: 2b:65:6f:8e:4f:38:f6:b7:62:70:37:72:ab:06:36: 05:38:c7:99:4e:53:f4:c5:e3:f1:a8:27:e9:61:68: 5c:f0:ac:7c:84:a2:a7:f8:df:d6:b6:83:2f:21:2e: 52:c6:07:c7:e3:60:91:2e:2f:89:22:43:dd:e9:8d: 31:66:68:51:95:5e:2c:2d:03:a2:89:6c:8b:de:03: 6d:bd:8c:20:75:61:0f:c2:65:23:31:5f:8d:86:19: 7a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:70:B7:83:F1:B3:A8:BF:F0:C3:A7:73:1B:6D:7D:F6:A6:BF:62:8D X509v3 Authority Key Identifier: keyid:94:2D:54:1D:FE:79:82:F6:E0:1E:6B:CC:97:6D:C0:CB:84:14:E8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:05:7b:f9:2a:1c:49:6f:26:55:a3:a9:19:82:5b:73:5d:67: 0c:7a:7b:af:23:4d:96:a1:d6:cc:e4:3b:67:75:71:1b:ed:51: 7e:70:90:8b:e4:ad:b3:02:e2:b8:48:71:77:8a:d0:b7:27:6e: 4c:ab:4a:db:4d:fb:f5:27:2f:54:20:31:28:32:78:f2:ae:c9: cd:7e:00:ed:45:9d:15:ec:49:04:4b:73:ff:92:09:8e:e4:28: 47:b6:6f:a5:50:16:01:8d:02:f7:c3:7f:c6:95:53:fe:03:f6: 1c:6f:d9:7b:d5:01:94:02:25:65:01:c0:cd:a6:34:1b:6d:87: 77:ec:a8:44:84:c8:27:be:56:9d:65:b4:cb:33:3d:1e:a4:24: 7d:57:76:66:d1:69:68:79:b6:61:da:c0:bf:b1:05:22:0f:8f: 38:bb:42:22:bb:ee:b1:a7:41:81:5b:6e:ca:d3:e5:d8:a8:c0: b1:0b:be:a6:85:42:fb:91:77:74:92:18:a6:0a:48:91:68:b7: e9:6d:3b:ce:01:38:d2:6c:32:94:6b:a9:a1:4d:16:30:ac:fe: 3d:be:41:1f:cc:0e:0d:e9:0e:27:fa:32:70:6a:bc:95:a4:f0: 0b:2d:a5:83:ee:7d:8e:63:30:01:f6:8d:6f:96:f6:48:60:7e: 3c:ca:0d:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q3RjIxMTAvBgNVBAUTKDk0MkQ1NDFERkU3OTgyRjZFMDFFNkJDQzk3NkRDMENC ODQxNEU4MzgwHhcNMjUwNDE4MTQzNjUzWhcNMjUwNDI1MTQzNjUzWjAYMRYwFAYD VQQDEw02ODAyNjM4NS1lM2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8kk7/ELv3sPCy1bgr7Xzs5ABK6Qa0x/8t24oe8u3JUgR8J/bOuFUlp/678FK wEJvYI7VrqbxWp+QImxrnLD2qzh7N2z7wTVcYoOgpHDL6HmlUfAk/k7Gfv2PCeH8 +0Fq6G7UTY0bd1GnUh2wLapxr1c6uklWFE+NxQaxULq/Ljs6/lEKUfXVzPZV6Iia HjeKa9HWrYyK5Qgc2sEVsbu3tzSNOIErZW+OTzj2t2JwN3KrBjYFOMeZTlP0xePx qCfpYWhc8Kx8hKKn+N/WtoMvIS5SxgfH42CRLi+JIkPd6Y0xZmhRlV4sLQOiiWyL 3gNtvYwgdWEPwmUjMV+Nhhl6+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP5wt4Px s6i/8MOncxttffamv2KNMB8GA1UdIwQYMBaAFJQtVB3+eYL24B5rzJdtwMuEFOg4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDdGMi9GMDI4OTAzQzFE OEMxMUUyQjE5RDVGRUEwOEIwMkNEMi9sQzFVSGY1NWd2YmdIbXZNbDIzQXk0UVU2 RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDMVVIZjU1Z3ZiZ0htdk1sMjNBeTRRVTZEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDdGMi9GMDI4OTAzQzFEOEMxMUUyQjE5RDVGRUEwOEIwMkNEMi9sQzFVSGY1NWd2 YmdIbXZNbDIzQXk0UVU2RGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQBXv5KhxJbyZVo6kZgltzXWcMenuvI02WodbM5DtndXEb7VF+cJCL 5K2zAuK4SHF3itC3J25Mq0rbTfv1Jy9UIDEoMnjyrsnNfgDtRZ0V7EkES3P/kgmO 5ChHtm+lUBYBjQL3w3/GlVP+A/Ycb9l71QGUAiVlAcDNpjQbbYd37KhEhMgnvlad ZbTLMz0epCR9V3Zm0WloebZh2sC/sQUiD484u0Iiu+6xp0GBW27K0+XYqMCxC76m hUL7kXd0khimCkiRaLfpbTvOATjSbDKUa6mhTRYwrP49vkEfzA4N6Q4n+jJwaryV pPALLaWD7n2OYzAB9o1vlvZIYH48yg3p -----END CERTIFICATE-----Generated at Sat Apr 19 00:58:45 2025 by rpki-client