$ rpki-client -vvf rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft File: bWlDJ6eLD158LQx0Y3dIHe3doAI.mft (raw, json) Hash identifier: OWaQ6G4rdQ3o6SjP/JuCh2UouVfeXfUftgKmvHFEUss= Subject key identifier: 1E:AB:40:7C:D7:F0:FF:D3:44:20:EA:6F:B2:12:0E:C2:A4:AA:17:94 Authority key identifier: 6D:69:43:27:A7:8B:0F:5E:7C:2D:0C:74:63:77:48:1D:ED:DD:A0:02 Certificate issuer: /CN=A9186392/serialNumber=6D694327A78B0F5E7C2D0C746377481DEDDDA002 Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft Manifest number: 0180 Signing time: Sat 19 Apr 2025 02:59:09 +0000 Manifest this update: Sat 19 Apr 2025 02:59:07 +0000 Manifest next update: Sat 26 Apr 2025 02:59:07 +0000 Files and hashes: 1: bWlDJ6eLD158LQx0Y3dIHe3doAI.crl (hash: SdytYEhikUrtP3LnnUEvjzJ3z9tHdz1aff/grjeN+LI=) 2: 3CF4087AD90611ED890F5D5FC4F9AE02.roa (hash: yeL7eGMEJM19msdRI3sJCkkpbPwYnrnjdX3IFK28TkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.crl rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 02:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186392, serialNumber=6D694327A78B0F5E7C2D0C746377481DEDDDA002 Validity Not Before: Apr 19 02:59:07 2025 GMT Not After : Apr 26 02:59:07 2025 GMT Subject: CN=6803117c-ae46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:05:a3:bb:f3:60:37:0f:e8:2b:de:53:81:07: 52:6a:c0:55:4c:e9:b1:7f:41:97:22:0f:34:5f:00: 61:ef:25:98:4a:bc:a2:e6:d3:59:a1:b9:c6:27:31: 0e:69:b5:ca:63:63:76:5c:97:5c:e8:3c:ac:d5:6b: 56:86:d0:33:d8:f1:50:c2:61:3d:d9:a1:02:ca:a2: d7:e6:9e:5b:c3:af:0f:27:6b:8b:12:62:48:63:4b: ed:25:92:c3:ef:83:68:75:3e:21:62:7b:52:4f:9e: 8d:5e:46:7b:a0:ef:7a:ad:7b:08:d3:a0:6f:4a:18: 31:ce:70:a0:31:ca:54:f2:ab:85:14:37:6a:eb:4c: 3e:0b:40:3e:48:46:35:f6:a4:c1:6c:1e:ec:20:39: 4d:72:1d:4d:0c:23:47:12:5f:36:3a:6d:23:a1:a2: e7:80:ee:32:75:70:05:98:da:9a:a3:01:99:e6:b7: 8e:87:6f:fc:94:dd:3f:fb:ca:77:76:fd:ac:f2:2f: db:6e:54:7d:8a:5b:4e:e9:3d:bf:90:59:73:04:ea: 44:0f:03:ba:0f:01:84:8e:cf:4a:d5:2a:d6:1f:68: d8:4b:01:a4:d4:0d:48:cd:5b:45:8c:51:13:3d:4b: 96:9c:90:4d:e6:0d:7b:e1:7e:3b:13:29:95:80:dc: 0e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:AB:40:7C:D7:F0:FF:D3:44:20:EA:6F:B2:12:0E:C2:A4:AA:17:94 X509v3 Authority Key Identifier: keyid:6D:69:43:27:A7:8B:0F:5E:7C:2D:0C:74:63:77:48:1D:ED:DD:A0:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:7a:59:d9:72:a9:8f:09:14:37:68:90:12:70:21:0e:8c:25: f4:ec:ad:e6:c4:a0:d2:a3:48:48:8d:9c:d0:cf:9d:1a:20:1f: 75:df:fc:fc:69:44:8c:24:98:9c:37:ba:b9:f0:97:d8:d6:e4: 87:ed:54:5e:f1:14:15:3a:ea:b0:d2:d6:b6:e0:82:d5:f2:83: 7f:07:59:fa:3a:20:1b:01:d7:c4:36:34:75:07:61:da:bf:b3: 91:e0:6c:ce:ec:6d:a9:d1:37:e3:50:5d:ca:8e:af:b9:9c:af: 77:14:1e:d7:4a:be:d1:3c:43:b5:5a:d4:6e:86:e2:8a:39:a6: e5:ce:b0:4e:0f:d3:43:b3:e3:6d:44:2b:e8:c7:b6:7e:ca:ec: da:3f:ce:d7:6c:28:18:ed:3e:c3:41:11:0b:fd:20:7c:9d:28: ed:3e:20:9e:e6:99:bf:37:dd:51:9b:32:b9:8f:ba:3b:ba:35: 84:c9:78:cf:65:86:42:a7:49:56:7a:0d:e2:52:ec:3f:8d:cf: a3:61:e6:9f:50:58:a8:1a:52:17:24:05:7f:dd:75:4b:ce:61: 3a:6c:8f:68:f3:54:24:d2:df:b6:12:fb:c3:fb:8c:cb:7b:9b: 48:0b:63:46:95:0b:af:9d:de:b8:d1:83:ba:a1:c7:83:b4:d5: 7c:6c:0f:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYzOTIxMTAvBgNVBAUTKDZENjk0MzI3QTc4QjBGNUU3QzJEMEM3NDYzNzc0ODFE RUREREEwMDIwHhcNMjUwNDE5MDI1OTA3WhcNMjUwNDI2MDI1OTA3WjAYMRYwFAYD VQQDEw02ODAzMTE3Yy1hZTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4wWju/NgNw/oK95TgQdSasBVTOmxf0GXIg80XwBh7yWYSryi5tNZobnGJzEO abXKY2N2XJdc6Dys1WtWhtAz2PFQwmE92aECyqLX5p5bw68PJ2uLEmJIY0vtJZLD 74NodT4hYntST56NXkZ7oO96rXsI06BvShgxznCgMcpU8quFFDdq60w+C0A+SEY1 9qTBbB7sIDlNch1NDCNHEl82Om0joaLngO4ydXAFmNqaowGZ5reOh2/8lN0/+8p3 dv2s8i/bblR9iltO6T2/kFlzBOpEDwO6DwGEjs9K1SrWH2jYSwGk1A1IzVtFjFET PUuWnJBN5g174X47EymVgNwOFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6rQHzX 8P/TRCDqb7ISDsKkqheUMB8GA1UdIwQYMBaAFG1pQyeniw9efC0MdGN3SB3t3aAC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjM5Mi8xOUZENENDMkQ5 MDIxMUVEODc4NDQ5NTlDNEY5QUUwMi9iV2xESjZlTEQxNThMUXgwWTNkSUhlM2Rv QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JXbERKNmVMRDE1OExReDBZM2RJSGUzZG9BSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjM5Mi8xOUZENENDMkQ5MDIxMUVEODc4NDQ5NTlDNEY5QUUwMi9iV2xESjZlTEQx NThMUXgwWTNkSUhlM2RvQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0elnZcqmPCRQ3aJAScCEOjCX07K3mxKDSo0hIjZzQz50aIB913/z8 aUSMJJicN7q58JfY1uSH7VRe8RQVOuqw0ta24ILV8oN/B1n6OiAbAdfENjR1B2Ha v7OR4GzO7G2p0TfjUF3Kjq+5nK93FB7XSr7RPEO1WtRuhuKKOablzrBOD9NDs+Nt RCvox7Z+yuzaP87XbCgY7T7DQREL/SB8nSjtPiCe5pm/N91RmzK5j7o7ujWEyXjP ZYZCp0lWeg3iUuw/jc+jYeafUFioGlIXJAV/3XVLzmE6bI9o81Qk0t+2EvvD+4zL e5tIC2NGlQuvnd640YO6oceDtNV8bA9w -----END CERTIFICATE-----Generated at Sat Apr 19 10:22:28 2025 by rpki-client