$ rpki-client -vvf rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft File: V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft (raw, json) Hash identifier: 0athWhJzcA0VwBklrEajMfnAK1v07qu0lux5dAhYnew= Subject key identifier: 8F:DF:AC:1B:6E:70:43:EF:E8:B9:20:2B:4D:12:0B:A0:92:A0:1B:DB Authority key identifier: 57:84:0F:B4:41:D2:B3:4C:8E:E6:99:D2:64:71:2B:4A:5E:0F:ED:8D Certificate issuer: /CN=A918036A/serialNumber=57840FB441D2B34C8EE699D264712B4A5E0FED8D Certificate serial: 101F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4QPtEHSs0yO5pnSZHErSl4P7Y0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft Manifest number: 1003 Signing time: Fri 04 Apr 2025 17:34:36 +0000 Manifest this update: Fri 04 Apr 2025 17:34:35 +0000 Manifest next update: Fri 11 Apr 2025 17:34:35 +0000 Files and hashes: 1: V4QPtEHSs0yO5pnSZHErSl4P7Y0.crl (hash: we6RI4OwdpDBMXDauQj3FspxbkRLhWb+q3S0ywcLPN4=) 2: E2846570135E11EB9D58482CC4F9AE02.roa (hash: bXgEyT98R8thRPsYUWy4Fp7WrzYnlZBS5iobweOZ0lw=) 3: BFF3C17CD23A11EB8E7BA35DC4F9AE02.roa (hash: C95dcxmbgG9m0J5QHw9VXXRl9oV1Z68MXGZ2KXxsrFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.crl rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4QPtEHSs0yO5pnSZHErSl4P7Y0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:34:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4127 (0x101f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918036A Validity Not Before: Apr 4 17:34:35 2025 GMT Not After : Apr 11 17:34:35 2025 GMT Subject: CN=67f0182c-5a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b9:30:5f:dd:b0:9e:de:b2:a0:28:d5:4a:51: 16:53:c3:44:24:84:05:51:db:6d:e5:77:d6:45:17: 43:7a:3c:33:36:8a:94:3f:3f:ea:93:38:12:45:6c: c6:13:2b:d4:67:29:c3:3e:d7:e7:65:b7:86:7d:5d: 18:62:11:66:b1:a1:82:b8:15:ca:a3:a1:ab:03:d2: ca:54:d3:ec:2c:46:39:71:ad:de:06:7a:65:7d:d9: dd:b6:ab:c3:6b:09:8b:f9:d7:96:cc:e1:8a:ed:78: d9:a9:2f:02:29:04:70:5e:c7:ab:6c:fb:24:30:8e: c2:6c:9d:02:b0:2c:ec:12:d4:1d:fb:6c:33:a7:34: 58:93:27:40:09:4e:09:d8:34:d3:05:a8:0a:34:a9: 00:00:b7:3d:b5:fc:f6:4e:3d:a9:52:ae:ce:cf:86: d4:b9:d6:ef:0f:9c:07:c4:4c:ca:f9:2f:12:b0:5d: fc:4d:cb:b1:09:4c:61:0c:08:de:64:89:f1:c5:97: 94:45:68:a9:ff:49:c5:61:3c:63:8c:d1:db:a8:bb: 15:81:fd:8f:84:ce:89:07:4a:db:25:d7:55:56:d6: f5:54:be:18:4b:56:28:c4:19:29:b4:22:16:d3:12: da:a9:7f:05:94:38:30:e8:4f:9d:3a:0f:c8:2d:65: b3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DF:AC:1B:6E:70:43:EF:E8:B9:20:2B:4D:12:0B:A0:92:A0:1B:DB X509v3 Authority Key Identifier: keyid:57:84:0F:B4:41:D2:B3:4C:8E:E6:99:D2:64:71:2B:4A:5E:0F:ED:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4QPtEHSs0yO5pnSZHErSl4P7Y0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:7e:a5:10:6a:e1:1e:3f:31:1a:f0:4a:ee:2c:92:5c:bb:82: 2a:f9:bb:af:7e:90:e4:28:4a:ca:9e:1f:51:59:bf:f0:a2:b6: 0c:60:ef:8e:3c:1e:8c:0a:22:8b:63:2a:f8:34:79:1b:d2:7e: c4:0a:fe:0a:af:49:59:6b:99:c6:a0:57:e7:16:db:5e:60:ed: b3:58:a8:69:de:b1:46:5b:e8:4d:1a:74:65:fe:08:73:8d:7b: df:fa:3a:88:a8:22:d3:a1:d0:d0:37:1d:bb:4a:55:62:dc:57: 1d:5e:56:cc:60:85:31:da:67:30:77:08:bb:62:cc:7b:de:ac: 19:d5:8e:19:50:34:e5:12:06:99:6e:3e:69:3f:0e:19:c6:ac: 1c:2a:d2:f5:45:3a:b3:f9:dd:17:c5:e0:fd:63:f4:58:c6:58: 07:8b:5f:5a:a9:c3:db:da:a8:08:e1:11:1c:9c:5d:8b:7d:77: cf:ed:0c:cb:75:0c:e5:98:88:4b:64:09:a7:bf:44:9b:7b:cf: 8b:66:ed:e7:bf:61:b0:ca:4d:25:4e:8f:09:c3:5c:ea:d4:bb: 4b:0d:1e:36:e0:b8:ff:d4:ee:17:d8:78:a4:d0:ab:ba:d8:85: 83:9f:d3:9c:08:81:aa:ab:a0:f1:c9:5b:66:7e:40:c8:1f:d3: d0:f1:ac:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzNkExMTAvBgNVBAUTKDU3ODQwRkI0NDFEMkIzNEM4RUU2OTlEMjY0NzEyQjRB NUUwRkVEOEQwHhcNMjUwNDA0MTczNDM1WhcNMjUwNDExMTczNDM1WjAYMRYwFAYD VQQDEw02N2YwMTgyYy01YTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLkwX92wnt6yoCjVSlEWU8NEJIQFUdtt5XfWRRdDejwzNoqUPz/qkzgSRWzG EyvUZynDPtfnZbeGfV0YYhFmsaGCuBXKo6GrA9LKVNPsLEY5ca3eBnplfdndtqvD awmL+deWzOGK7XjZqS8CKQRwXserbPskMI7CbJ0CsCzsEtQd+2wzpzRYkydACU4J 2DTTBagKNKkAALc9tfz2Tj2pUq7Oz4bUudbvD5wHxEzK+S8SsF38TcuxCUxhDAje ZInxxZeURWip/0nFYTxjjNHbqLsVgf2PhM6JB0rbJddVVtb1VL4YS1YoxBkptCIW 0xLaqX8FlDgw6E+dOg/ILWWzEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/frBtu cEPv6LkgK00SC6CSoBvbMB8GA1UdIwQYMBaAFFeED7RB0rNMjuaZ0mRxK0peD+2N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDM2QS80MzNBRjc4QzQ2 QzcxMUU5QURFOUQ0MjRDNEY5QUUwMi9WNFFQdEVIU3MweU81cG5TWkhFclNsNFA3 WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y0UVB0RUhTczB5TzVwblNaSEVyU2w0UDdZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDM2QS80MzNBRjc4QzQ2QzcxMUU5QURFOUQ0MjRDNEY5QUUwMi9WNFFQdEVIU3Mw eU81cG5TWkhFclNsNFA3WTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATfqUQauEePzEa8EruLJJcu4Iq+buvfpDkKErKnh9RWb/worYMYO+O PB6MCiKLYyr4NHkb0n7ECv4Kr0lZa5nGoFfnFtteYO2zWKhp3rFGW+hNGnRl/ghz jXvf+jqIqCLTodDQNx27SlVi3FcdXlbMYIUx2mcwdwi7Ysx73qwZ1Y4ZUDTlEgaZ bj5pPw4ZxqwcKtL1RTqz+d0XxeD9Y/RYxlgHi19aqcPb2qgI4REcnF2LfXfP7QzL dQzlmIhLZAmnv0Sbe8+LZu3nv2Gwyk0lTo8Jw1zq1LtLDR424Lj/1O4X2Hik0Ku6 2IWDn9OcCIGqq6DxyVtmfkDIH9PQ8axN -----END CERTIFICATE-----Generated at Sat Apr 5 05:32:15 2025 by rpki-client