$ rpki-client -vvf rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.mft File: r1E53KFl4oTVSmzvYft6CRaJGw8.mft (raw, json) Hash identifier: hECG/QTZhupdt/R/zZcvqBBGYK3/kXIAtYst6AZAn9E= Subject key identifier: 2A:C0:A8:E7:84:2B:CB:11:E4:37:6A:44:CF:84:B0:D5:A7:8F:3B:45 Authority key identifier: AF:51:39:DC:A1:65:E2:84:D5:4A:6C:EF:61:FB:7A:09:16:89:1B:0F Certificate issuer: /CN=A918379F/serialNumber=AF5139DCA165E284D54A6CEF61FB7A0916891B0F Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1E53KFl4oTVSmzvYft6CRaJGw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.mft Manifest number: 01D8 Signing time: Thu 03 Apr 2025 02:08:30 +0000 Manifest this update: Thu 03 Apr 2025 02:08:29 +0000 Manifest next update: Thu 10 Apr 2025 02:08:29 +0000 Files and hashes: 1: r1E53KFl4oTVSmzvYft6CRaJGw8.crl (hash: t6Ts68rn4OK1eqVpqDeGNJK5hhq4mEpoBqIZINWJ+Z8=) 2: 0B237586453311ED9A3F7844C4F9AE02.roa (hash: mEyvOlDX3kJHouKS9DLhCAJ43welizBv5m5kUTWRzII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.crl rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1E53KFl4oTVSmzvYft6CRaJGw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918379F Validity Not Before: Apr 3 02:08:29 2025 GMT Not After : Apr 10 02:08:29 2025 GMT Subject: CN=67eded9d-1cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ae:9a:f2:9e:f1:54:be:40:48:bc:c6:d6:25: a4:2d:c4:89:74:0b:b3:e8:36:26:fd:c9:3a:10:89: 6d:11:24:3f:ea:72:99:de:4f:62:24:33:fe:70:81: 56:0b:15:ea:15:a1:a5:e0:8e:9b:6d:50:47:cb:c3: 07:27:f5:07:0d:97:45:6b:59:71:62:24:60:ff:fb: 41:e9:8d:f5:33:fc:91:b1:af:30:0a:e5:b3:cd:69: 3c:78:82:94:8a:cf:cf:dc:53:5a:d0:19:b1:b6:d3: fe:6f:50:a0:6a:35:02:25:fa:81:f4:9a:b3:0d:92: 47:44:b4:66:83:fc:ee:57:c7:10:bf:eb:92:b5:63: 4a:ba:66:4b:33:6b:35:88:79:4d:e5:46:02:ef:da: a5:f0:15:80:5b:a2:8d:12:76:ce:3b:08:45:9f:53: ab:42:ea:e5:ae:e7:31:cf:ec:20:1a:a3:d0:7f:c4: 2b:bd:10:50:3e:13:3d:4e:0d:42:1f:e7:c1:66:b4: 65:ff:d7:ba:f5:69:5e:f3:d8:42:99:8e:f2:4a:4d: 3b:e6:bb:82:a2:41:bc:20:33:21:91:2b:b5:ca:27: 05:4c:80:17:88:be:1e:74:1d:e7:9c:ee:67:c8:ca: 1e:89:12:67:13:97:89:44:10:a4:69:d3:7c:39:60: 3a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C0:A8:E7:84:2B:CB:11:E4:37:6A:44:CF:84:B0:D5:A7:8F:3B:45 X509v3 Authority Key Identifier: keyid:AF:51:39:DC:A1:65:E2:84:D5:4A:6C:EF:61:FB:7A:09:16:89:1B:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1E53KFl4oTVSmzvYft6CRaJGw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:17:af:03:0f:08:15:ab:e5:e7:79:89:16:1a:32:48:36:cc: d2:5c:ba:5b:0f:de:a0:e7:0c:e4:39:3b:47:f8:15:8c:96:f6: 90:52:a1:ef:18:df:e2:31:f0:2d:68:85:fc:92:93:15:27:a7: 2a:20:18:cf:08:70:9f:68:bf:bd:7a:fa:8e:d2:cb:7a:33:54: 3d:27:7c:19:e8:59:b4:ec:24:26:7e:8b:ee:90:bd:3c:dd:ce: 0c:bf:21:d6:f1:0e:af:34:dd:04:27:e3:3d:5c:3a:61:eb:b1: 88:a0:ae:4e:6b:79:49:ff:9f:90:91:da:2a:22:40:c9:82:e9: a0:c7:45:a0:e7:1d:cb:1f:4c:81:68:bc:25:c3:45:a9:60:a5: ba:e3:81:9d:47:1b:6c:90:89:1c:ec:29:c7:cd:ca:77:48:e9: 78:41:7a:6d:db:5b:fa:da:90:53:a0:36:59:7f:3f:39:df:f8: ea:4d:40:d5:ab:c0:ac:11:d6:c2:34:42:e6:67:e7:98:c3:56: 5c:d7:a8:9e:42:4b:80:0f:2f:85:62:80:dd:a3:3a:4e:b3:d3: 42:5a:dd:31:5a:d8:05:8a:fb:ce:28:8e:41:c8:90:11:d9:bc: be:14:d3:04:5d:11:3f:b4:a3:c0:96:7c:a2:95:04:6f:cf:99: ab:00:ce:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM3OUYxMTAvBgNVBAUTKEFGNTEzOURDQTE2NUUyODRENTRBNkNFRjYxRkI3QTA5 MTY4OTFCMEYwHhcNMjUwNDAzMDIwODI5WhcNMjUwNDEwMDIwODI5WjAYMRYwFAYD VQQDEw02N2VkZWQ5ZC0xY2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx66a8p7xVL5ASLzG1iWkLcSJdAuz6DYm/ck6EIltESQ/6nKZ3k9iJDP+cIFW CxXqFaGl4I6bbVBHy8MHJ/UHDZdFa1lxYiRg//tB6Y31M/yRsa8wCuWzzWk8eIKU is/P3FNa0BmxttP+b1CgajUCJfqB9JqzDZJHRLRmg/zuV8cQv+uStWNKumZLM2s1 iHlN5UYC79ql8BWAW6KNEnbOOwhFn1OrQurlrucxz+wgGqPQf8QrvRBQPhM9Tg1C H+fBZrRl/9e69Wle89hCmY7ySk075ruCokG8IDMhkSu1yicFTIAXiL4edB3nnO5n yMoeiRJnE5eJRBCkadN8OWA67wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrAqOeE K8sR5DdqRM+EsNWnjztFMB8GA1UdIwQYMBaAFK9ROdyhZeKE1Ups72H7egkWiRsP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzc5Ri83NUNFMjcyODQy MTMxMUVEQkUwMTQzMjFDNEY5QUUwMi9yMUU1M0tGbDRvVFZTbXp2WWZ0NkNSYUpH dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IxRTUzS0ZsNG9UVlNtenZZZnQ2Q1JhSkd3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzc5Ri83NUNFMjcyODQyMTMxMUVEQkUwMTQzMjFDNEY5QUUwMi9yMUU1M0tGbDRv VFZTbXp2WWZ0NkNSYUpHdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBF68DDwgVq+XneYkWGjJINszSXLpbD96g5wzkOTtH+BWMlvaQUqHv GN/iMfAtaIX8kpMVJ6cqIBjPCHCfaL+9evqO0st6M1Q9J3wZ6Fm07CQmfovukL08 3c4MvyHW8Q6vNN0EJ+M9XDph67GIoK5Oa3lJ/5+QkdoqIkDJgumgx0Wg5x3LH0yB aLwlw0WpYKW644GdRxtskIkc7CnHzcp3SOl4QXpt21v62pBToDZZfz853/jqTUDV q8CsEdbCNELmZ+eYw1Zc16ieQkuADy+FYoDdozpOs9NCWt0xWtgFivvOKI5ByJAR 2by+FNMEXRE/tKPAlnyilQRvz5mrAM5n -----END CERTIFICATE-----Generated at Fri Apr 4 18:29:55 2025 by rpki-client