$ rpki-client -vvf rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft File: 1pesTITI0RmFX1oM3aY13R44Xuc.mft (raw, json) Hash identifier: 0ZZoAH4q9i+aB8UkAaS87E+KcAUoIccOZGCXOW4qmjk= Subject key identifier: 45:09:E8:4C:35:07:07:97:3E:DB:70:B1:48:14:41:FB:14:5F:5C:0D Authority key identifier: D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7 Certificate issuer: /CN=A918A9FC/serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7 Certificate serial: 3480 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft Manifest number: 3475 Signing time: Fri 04 Apr 2025 15:02:55 +0000 Manifest this update: Fri 04 Apr 2025 15:02:54 +0000 Manifest next update: Fri 11 Apr 2025 15:02:54 +0000 Files and hashes: 1: 1pesTITI0RmFX1oM3aY13R44Xuc.crl (hash: t935VMeQGvhmj5p/vgmmYcXS6wRz5/L9Zq/rHJy6F60=) 2: 7859AE6A0B5511EABCBC343DC4F9AE02.roa (hash: MhJb3XjLOL3S3f85AHCTiNFrJTZkovxDcMZN2VWhFE0=) 3: EADCDA1C8D9611EEBE392A3CC4F9AE02.roa (hash: QKTIJoLV0kcmiUQHRhTLsS+Q9UN68Klhf4IOq31e6nU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13440 (0x3480) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A9FC Validity Not Before: Apr 4 15:02:54 2025 GMT Not After : Apr 11 15:02:54 2025 GMT Subject: CN=67eff49e-ecd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4e:64:71:b4:fe:05:e0:6d:62:72:3e:b8:36: df:ed:01:5e:51:99:4a:51:8b:b0:cd:94:8e:4b:5e: 15:77:2c:75:48:58:1c:35:ff:a1:04:7e:ae:47:c8: 17:98:a8:fa:42:23:e7:53:ea:60:7b:09:b7:6e:b2: ca:dd:90:18:08:f5:66:10:19:4e:2c:31:5a:8b:20: f7:85:d6:bb:55:6f:76:72:10:7b:8d:07:8c:5d:9d: 4c:52:8f:15:a0:c5:56:7e:e0:36:57:67:e3:69:94: 7a:75:20:34:c1:63:8f:a0:e4:0c:41:0d:9f:4c:7e: 55:e3:19:5e:95:e8:75:cb:7b:1c:f4:94:fa:b1:d9: 71:b2:30:8c:53:47:4a:20:36:98:bc:b6:cc:fa:5a: 58:14:31:11:39:39:f5:64:9a:2b:cf:1a:9a:59:9a: 0b:60:6e:3a:e3:15:d2:f7:57:03:b4:04:70:3a:7f: 5e:42:32:12:2d:0a:6f:eb:20:4c:2d:66:ea:1b:09: 6c:e7:13:78:ec:ad:e4:22:5e:50:dd:26:65:fb:c2: d2:50:d7:f6:bc:ee:68:8c:07:74:7d:9b:f6:89:d6: 9a:ac:41:36:df:16:d0:2f:01:1b:b3:7a:0f:e3:80: 9d:5c:26:f5:cb:92:32:1e:70:de:30:6c:2f:f3:d9: 08:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:09:E8:4C:35:07:07:97:3E:DB:70:B1:48:14:41:FB:14:5F:5C:0D X509v3 Authority Key Identifier: keyid:D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:84:20:31:3c:bb:0f:1e:80:09:92:2b:08:fc:1e:9f:1c:1b: 69:b8:81:7a:fe:34:86:f4:c5:21:17:48:31:5f:10:35:40:d8: 40:4b:3c:3f:f1:29:f6:f8:44:cb:7b:83:49:83:56:d0:bf:15: c5:34:4a:c3:45:70:66:5f:51:da:29:b2:18:96:1d:9a:61:fd: 36:58:a4:f3:49:94:f8:7c:2b:70:72:fb:79:b0:23:3f:0e:60: 37:1a:16:6a:fb:ae:e3:de:c0:b9:91:30:42:d7:4d:14:4e:01: bd:ce:65:fb:c4:ff:d1:02:a5:9a:31:00:3a:a9:65:d7:09:13: fb:b4:60:47:bc:0a:38:61:bd:aa:3f:9e:a0:58:53:39:c6:6f: 97:f5:9c:48:c5:39:6e:5c:45:20:ed:fb:8b:a4:02:aa:56:d9: 71:7c:72:ef:da:b1:ef:cb:48:b4:07:e8:93:7c:45:d1:3d:b4: c1:a2:8e:1f:5e:99:ee:82:b5:9d:fc:35:71:b2:18:19:10:05: bd:74:f3:ba:17:7e:a4:73:f7:b2:52:c5:07:64:a6:a6:db:e5: 19:d7:f0:13:5b:06:59:35:bc:10:10:b9:24:b7:3a:86:6b:6e: d7:19:4c:3a:e9:98:57:81:14:d0:9b:c3:5b:6e:4f:a6:84:7d: 1e:d7:19:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE5RkMxMTAvBgNVBAUTKEQ2OTdBQzRDODRDOEQxMTk4NTVGNUEwQ0REQTYzNURE MUUzODVFRTcwHhcNMjUwNDA0MTUwMjU0WhcNMjUwNDExMTUwMjU0WjAYMRYwFAYD VQQDEw02N2VmZjQ5ZS1lY2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA005kcbT+BeBtYnI+uDbf7QFeUZlKUYuwzZSOS14Vdyx1SFgcNf+hBH6uR8gX mKj6QiPnU+pgewm3brLK3ZAYCPVmEBlOLDFaiyD3hda7VW92chB7jQeMXZ1MUo8V oMVWfuA2V2fjaZR6dSA0wWOPoOQMQQ2fTH5V4xleleh1y3sc9JT6sdlxsjCMU0dK IDaYvLbM+lpYFDEROTn1ZJorzxqaWZoLYG464xXS91cDtARwOn9eQjISLQpv6yBM LWbqGwls5xN47K3kIl5Q3SZl+8LSUNf2vO5ojAd0fZv2idaarEE23xbQLwEbs3oP 44CdXCb1y5IyHnDeMGwv89kI/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEUJ6Ew1 BweXPttwsUgUQfsUX1wNMB8GA1UdIwQYMBaAFNaXrEyEyNEZhV9aDN2mNd0eOF7n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTlGQy8zMTkzMzdBQTFE OUUxMUUyODZFOUQxOEQwOEIwMkNEMi8xcGVzVElUSTBSbUZYMW9NM2FZMTNSNDRY dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFwZXNUSVRJMFJtRlgxb00zYVkxM1I0NFh1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTlGQy8zMTkzMzdBQTFEOUUxMUUyODZFOUQxOEQwOEIwMkNEMi8xcGVzVElUSTBS bUZYMW9NM2FZMTNSNDRYdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/hCAxPLsPHoAJkisI/B6fHBtpuIF6/jSG9MUhF0gxXxA1QNhASzw/ 8Sn2+ETLe4NJg1bQvxXFNErDRXBmX1HaKbIYlh2aYf02WKTzSZT4fCtwcvt5sCM/ DmA3GhZq+67j3sC5kTBC100UTgG9zmX7xP/RAqWaMQA6qWXXCRP7tGBHvAo4Yb2q P56gWFM5xm+X9ZxIxTluXEUg7fuLpAKqVtlxfHLv2rHvy0i0B+iTfEXRPbTBoo4f XpnugrWd/DVxshgZEAW9dPO6F36kc/eyUsUHZKam2+UZ1/ATWwZZNbwQELkktzqG a27XGUw66ZhXgRTQm8Nbbk+mhH0e1xmD -----END CERTIFICATE-----Generated at Sat Apr 5 22:17:02 2025 by rpki-client