$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft File: D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft (raw, json) Hash identifier: uNPZQNNbfP4aOSzwk5PXlxse3yDpmpyC0ZSYKvXLSO4= Subject key identifier: 6A:35:4B:B1:00:75:F7:1D:44:57:58:4F:BE:23:98:17:C0:8A:DA:C2 Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86 Certificate issuer: /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186 Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft Manifest number: 0146 Signing time: Thu 03 Apr 2025 03:51:42 +0000 Manifest this update: Thu 03 Apr 2025 03:51:42 +0000 Manifest next update: Thu 10 Apr 2025 03:51:42 +0000 Files and hashes: 1: D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl (hash: 37eHHGy4VKMynqW6Bpqnkv9MvqR/bayGvFR5BJEcMz4=) 2: E506BE2CF03811EFAD4C2257C4F9AE02.roa (hash: l3vFzxttEXhfOuZjeQF8CrGkxbV17axCXSipPqSoFKA=) 3: B67EFE26A2DB11EEABACB981C4F9AE02.roa (hash: ra0yVXf7WKyMc/TV/KsDqYCa6PLBvgSOfzPKvq7nVBw=) 4: A045C92CB46611EEAFEE8758C4F9AE02.roa (hash: VlIb3exIwpSPjFwHyuIwV8wlOpGvSIVB8uNPjyxZHoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:51:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A05D Validity Not Before: Apr 3 03:51:42 2025 GMT Not After : Apr 10 03:51:42 2025 GMT Subject: CN=67ee05ce-c544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3a:db:7a:89:5b:9d:58:a3:bb:e8:b6:c4:64: b2:1b:24:0a:8a:58:f6:9e:31:12:67:e2:76:b0:df: 6e:1a:e1:d9:36:2e:5b:c1:5a:7f:8a:56:0b:34:e9: 40:07:8e:70:fb:d6:f9:b4:ab:e0:46:1b:e3:6e:35: b1:8b:df:0b:c0:71:dc:3e:44:12:dd:76:d6:23:3a: 52:55:55:eb:6d:6b:d2:c5:82:b7:e2:aa:13:d8:41: b9:bb:2d:e7:68:d0:60:bd:08:31:79:73:4f:5f:b9: e5:07:59:09:a3:d8:ad:2b:70:30:ce:8f:e0:17:5d: 1c:96:28:02:99:42:23:db:cd:d0:96:b7:bd:a6:76: b5:0f:94:f5:b8:28:7b:1b:12:3e:c9:22:76:b4:ad: 08:c7:fa:0c:fa:e7:d2:4f:a5:5d:ed:de:27:f3:fb: 80:33:3f:3c:40:13:39:f5:ee:eb:98:30:33:a8:86: b8:0c:cb:6a:89:03:4a:cd:26:2b:03:d9:f4:29:a7: 3e:db:b1:e2:af:43:a7:1f:8a:9c:4e:c9:18:79:3d: 53:9c:af:25:38:80:07:aa:4c:9b:5c:45:47:3a:46: 08:a2:8b:dc:db:d4:51:3d:df:8a:c2:1d:ae:b2:9a: a4:47:11:f6:cd:42:f7:d6:ec:b9:49:2c:89:1c:44: 8d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:35:4B:B1:00:75:F7:1D:44:57:58:4F:BE:23:98:17:C0:8A:DA:C2 X509v3 Authority Key Identifier: keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:37:f7:63:92:c3:4a:bb:0f:ce:60:3c:0e:da:2b:f5:32:c9: e7:fd:74:fd:bb:bc:a2:4b:21:b0:57:ab:01:f4:ae:62:64:b2: 5e:04:6f:c6:b8:0a:7b:07:f9:c7:6a:38:5c:1e:7f:57:1d:b2: 17:37:b9:ad:c4:97:3b:8c:d8:cb:45:b2:62:1c:26:46:33:60: 04:85:64:72:8b:54:cd:54:d1:42:e8:76:be:9b:b2:77:1c:d8: 20:08:0e:74:f0:6e:dc:28:6f:3d:e7:83:dc:fd:d9:70:7b:b1: 2e:6e:85:76:88:ec:fb:55:3c:84:30:76:16:e6:d2:59:00:53: 8b:7b:52:81:cb:39:0c:26:e6:43:57:8f:ac:21:e2:dd:10:a5: 15:c8:a5:45:c0:2a:c7:5b:da:07:bb:6f:d5:96:43:90:dd:db: 94:cd:fb:38:b2:25:c4:ce:b6:29:a6:5a:8c:1b:d5:30:5d:75: b1:91:7c:59:a2:ca:21:f0:da:3e:b4:d2:96:ea:b9:0e:2e:d9: 58:19:c9:49:03:a9:e5:c9:f6:ac:18:18:f2:ad:4d:cb:c4:06: c8:41:47:e3:e1:36:46:18:7d:1c:5c:2b:52:7b:ad:2d:3b:f9: b2:b0:72:9e:ce:bd:02:19:0b:b5:5e:a3:66:0d:19:a5:2c:ad: a2:c7:6f:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEwNUQxMTAvBgNVBAUTKDBGNTQ1RTYyNzNEN0M5N0U5OTk1NDExRjc2RDVDNEYw MDZCQjUxODYwHhcNMjUwNDAzMDM1MTQyWhcNMjUwNDEwMDM1MTQyWjAYMRYwFAYD VQQDEw02N2VlMDVjZS1jNTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1TrbeolbnViju+i2xGSyGyQKilj2njESZ+J2sN9uGuHZNi5bwVp/ilYLNOlA B45w+9b5tKvgRhvjbjWxi98LwHHcPkQS3XbWIzpSVVXrbWvSxYK34qoT2EG5uy3n aNBgvQgxeXNPX7nlB1kJo9itK3Awzo/gF10cligCmUIj283Qlre9pna1D5T1uCh7 GxI+ySJ2tK0Ix/oM+ufST6Vd7d4n8/uAMz88QBM59e7rmDAzqIa4DMtqiQNKzSYr A9n0Kac+27Hir0OnH4qcTskYeT1TnK8lOIAHqkybXEVHOkYIoovc29RRPd+Kwh2u spqkRxH2zUL31uy5SSyJHESN3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGo1S7EA dfcdRFdYT74jmBfAitrCMB8GA1UdIwQYMBaAFA9UXmJz18l+mZVBH3bVxPAGu1GG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTA1RC9DMUVGQjA4MDRF MjUxMUVFQUFBRTZENDlDNEY5QUUwMi9EMVJlWW5QWHlYNlpsVUVmZHRYRThBYTdV WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QxUmVZblBYeVg2WmxVRWZkdFhFOEFhN1VZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTA1RC9DMUVGQjA4MDRFMjUxMUVFQUFBRTZENDlDNEY5QUUwMi9EMVJlWW5QWHlY NlpsVUVmZHRYRThBYTdVWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAN/djksNKuw/OYDwO2iv1Msnn/XT9u7yiSyGwV6sB9K5iZLJeBG/G uAp7B/nHajhcHn9XHbIXN7mtxJc7jNjLRbJiHCZGM2AEhWRyi1TNVNFC6Ha+m7J3 HNggCA508G7cKG8954Pc/dlwe7EuboV2iOz7VTyEMHYW5tJZAFOLe1KByzkMJuZD V4+sIeLdEKUVyKVFwCrHW9oHu2/VlkOQ3duUzfs4siXEzrYpplqMG9UwXXWxkXxZ osoh8No+tNKW6rkOLtlYGclJA6nlyfasGBjyrU3LxAbIQUfj4TZGGH0cXCtSe60t O/mysHKezr0CGQu1XqNmDRmlLK2ix2/O -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:56 2025 by rpki-client