$ rpki-client -vvf rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft File: cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft (raw, json) Hash identifier: P8tzET6cMUR4bvpkkj8/ao7yokXUZ3lOLSPC7ou9Nak= Subject key identifier: 4A:33:33:5B:E6:26:FA:3F:D3:39:07:2F:A5:EC:4F:34:D1:AD:9D:8C Authority key identifier: 70:D1:6D:77:37:98:9B:15:C6:C8:DF:1D:CA:2A:98:0E:0B:BF:BA:0F Certificate issuer: /CN=A9186980/serialNumber=70D16D7737989B15C6C8DF1DCA2A980E0BBFBA0F Certificate serial: 0742 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft Manifest number: 073F Signing time: Fri 28 Mar 2025 21:57:08 +0000 Manifest this update: Fri 28 Mar 2025 21:57:08 +0000 Manifest next update: Fri 04 Apr 2025 21:57:08 +0000 Files and hashes: 1: cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl (hash: sgOg6o38er5GFm1vDOVKyVrTuKiEFh8pV1pTuf6Z4j0=) 2: FFA6AD56DF7211EDB0D24244C4F9AE02.roa (hash: q05bnDBuCJsrUlvlSely8w0jnLrUU3dVN/rTyJ4umLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 21:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1858 (0x742) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186980 Validity Not Before: Mar 28 21:57:08 2025 GMT Not After : Apr 4 21:57:08 2025 GMT Subject: CN=67e71b34-4aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:df:c1:f7:7a:ad:b1:0e:af:28:fc:19:c0:fd: 1e:fc:68:83:0f:92:3e:d8:c5:7e:63:32:fd:10:37: 20:b8:29:cd:6a:db:f7:38:85:cd:ae:f7:18:56:98: 33:58:31:a0:42:64:eb:ac:65:e1:a0:2d:ac:e6:67: 3d:d7:d5:99:ce:25:ab:c8:5b:d4:65:de:a7:34:f2: 58:73:2a:80:ea:00:96:90:94:b8:85:f4:6a:94:bb: 6f:c8:de:7a:94:7f:76:6b:40:a8:aa:f0:38:d8:89: 11:46:45:ce:a3:d3:e2:39:40:b5:29:b8:62:82:6c: d4:e9:18:7a:e4:c4:46:31:6a:92:71:10:1e:71:95: 01:fc:99:fa:f0:84:09:d8:9f:22:5f:19:66:09:8a: 53:d8:1a:a4:d4:97:ec:74:38:f3:fb:4e:73:85:b4: 70:3b:19:3f:91:98:48:02:93:2e:91:e7:c4:8c:07: d8:e5:54:8a:2e:0c:fb:73:e5:cc:07:bc:00:72:41: df:47:25:90:9d:f7:71:81:c9:8b:9b:02:f4:df:a6: 11:ac:e3:88:c4:29:e5:31:6f:92:d0:af:d6:96:09: 89:ef:69:03:ae:b8:a2:e0:53:e5:ae:fe:e5:55:0f: 3c:7a:6d:73:df:df:7f:f3:d9:5d:0d:79:79:8a:17: ca:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:33:33:5B:E6:26:FA:3F:D3:39:07:2F:A5:EC:4F:34:D1:AD:9D:8C X509v3 Authority Key Identifier: keyid:70:D1:6D:77:37:98:9B:15:C6:C8:DF:1D:CA:2A:98:0E:0B:BF:BA:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:f4:77:bc:75:9f:8f:16:4d:13:a3:af:10:8f:70:6f:c5:41: 80:a6:48:bc:78:50:17:d4:7e:54:a0:ec:98:1a:1c:f6:57:96: c4:f5:1d:17:55:da:e4:be:d9:4d:5e:27:96:52:d0:f5:1c:87: 9b:f0:00:d2:22:28:18:0c:b1:be:98:ff:f2:f1:ff:fe:76:03: e8:c0:63:59:c9:6d:e3:86:97:8a:02:b2:22:ee:a0:f7:bc:24: 2e:e0:2b:fb:99:b1:19:cc:d1:c3:fd:44:d4:f0:4c:50:3f:06: e7:71:03:b3:fa:d0:13:d3:f4:84:69:f8:10:94:66:1d:43:90: cf:0f:f7:ef:6c:84:69:b3:f5:e7:92:22:d5:99:7b:56:06:8b: 51:62:9f:b0:6c:c3:ec:06:24:9f:78:31:bb:07:66:a3:74:32: f3:1a:7c:32:13:e5:88:b8:e0:a0:14:b9:a4:d7:97:a1:b2:77: e0:59:52:f4:02:b0:ae:49:63:b5:07:b1:12:a8:ce:47:a4:22: a7:aa:2d:41:2b:09:f0:c4:60:78:30:a8:80:14:ff:16:73:39: e3:6c:9a:d7:25:33:b2:2a:14:1d:ee:ec:9d:d7:fc:69:60:c0: e9:30:d2:a8:d9:6e:7e:ed:07:c1:ad:d6:72:b1:12:f8:36:8c: 99:61:13:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY5ODAxMTAvBgNVBAUTKDcwRDE2RDc3Mzc5ODlCMTVDNkM4REYxRENBMkE5ODBF MEJCRkJBMEYwHhcNMjUwMzI4MjE1NzA4WhcNMjUwNDA0MjE1NzA4WjAYMRYwFAYD VQQDEw02N2U3MWIzNC00YWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxN/B93qtsQ6vKPwZwP0e/GiDD5I+2MV+YzL9EDcguCnNatv3OIXNrvcYVpgz WDGgQmTrrGXhoC2s5mc919WZziWryFvUZd6nNPJYcyqA6gCWkJS4hfRqlLtvyN56 lH92a0CoqvA42IkRRkXOo9PiOUC1KbhigmzU6Rh65MRGMWqScRAecZUB/Jn68IQJ 2J8iXxlmCYpT2Bqk1JfsdDjz+05zhbRwOxk/kZhIApMukefEjAfY5VSKLgz7c+XM B7wAckHfRyWQnfdxgcmLmwL036YRrOOIxCnlMW+S0K/WlgmJ72kDrrii4FPlrv7l VQ88em1z399/89ldDXl5ihfKYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEozM1vm Jvo/0zkHL6XsTzTRrZ2MMB8GA1UdIwQYMBaAFHDRbXc3mJsVxsjfHcoqmA4Lv7oP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njk4MC9DQjAwNkQ2MjFD RDgxMUVCOTZDNzk0NUFDNEY5QUUwMi9jTkZ0ZHplWW14WEd5TjhkeWlxWURndV91 ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NORnRkemVZbXhYR3lOOGR5aXFZRGd1X3VnOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Njk4MC9DQjAwNkQ2MjFDRDgxMUVCOTZDNzk0NUFDNEY5QUUwMi9jTkZ0ZHplWW14 WEd5TjhkeWlxWURndV91ZzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw9He8dZ+PFk0To68Qj3BvxUGApki8eFAX1H5UoOyYGhz2V5bE9R0X VdrkvtlNXieWUtD1HIeb8ADSIigYDLG+mP/y8f/+dgPowGNZyW3jhpeKArIi7qD3 vCQu4Cv7mbEZzNHD/UTU8ExQPwbncQOz+tAT0/SEafgQlGYdQ5DPD/fvbIRps/Xn kiLVmXtWBotRYp+wbMPsBiSfeDG7B2ajdDLzGnwyE+WIuOCgFLmk15ehsnfgWVL0 ArCuSWO1B7ESqM5HpCKnqi1BKwnwxGB4MKiAFP8WcznjbJrXJTOyKhQd7uyd1/xp YMDpMNKo2W5+7QfBrdZysRL4NoyZYRPO -----END CERTIFICATE-----Generated at Fri Apr 4 18:17:19 2025 by rpki-client