$ rpki-client -vvf rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft File: 9Avota0WsYR_wNT0cI-dQUkxq6Y.mft (raw, json) Hash identifier: AM36zVIheOPY69LcAPZe9I0FpCih3laulW152MvJJbI= Subject key identifier: 22:E3:31:18:A2:E9:6D:20:83:7C:BC:E1:03:24:BA:5B:0B:0F:21:C8 Authority key identifier: F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6 Certificate issuer: /CN=A918BCEE/serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6 Certificate serial: 02A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft Manifest number: 027B Signing time: Sat 29 Mar 2025 02:06:02 +0000 Manifest this update: Sat 29 Mar 2025 02:06:01 +0000 Manifest next update: Sat 05 Apr 2025 02:06:01 +0000 Files and hashes: 1: 9Avota0WsYR_wNT0cI-dQUkxq6Y.crl (hash: 8G191XSZGmvn5bIC7ew6g8cJYuyDXO6VWDn6x07wzQs=) 2: 214E67EA1EF911EDAAC3AE62C4F9AE02.roa (hash: a4uhbXD/6QpvqZpvGb3TRBkEFO6veICTLlQsVLL56TI=) 3: 36660EAE679E11EFBAD37686C4F9AE02.roa (hash: AxabGlp0IamL1AOMbCgBi5Y/mrLVivTXD8uMAD10h7U=) 4: E6E564502DD811EF8471C475C4F9AE02.roa (hash: Tr9asl+9bdm0TeSvn9r/O8sCMPe6OQ4Bqr4X3WrBuL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 677 (0x2a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BCEE Validity Not Before: Mar 29 02:06:01 2025 GMT Not After : Apr 5 02:06:01 2025 GMT Subject: CN=67e75589-0384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a7:45:78:aa:8c:30:ba:64:8e:a3:b9:4a:db: 3a:1d:88:fc:e3:08:c8:cc:4a:6e:7d:3b:f8:fe:bb: 9c:53:dc:f8:0a:45:51:5e:16:86:42:d8:7f:e1:20: 13:ba:76:7b:7b:db:5a:45:fa:fb:4f:f5:15:4b:a2: 60:57:44:9a:bf:d2:4a:cf:5c:02:bb:dd:32:95:e9: b9:8f:e3:29:99:5c:b8:53:8c:28:20:2a:9f:be:36: 1c:e7:83:19:3a:69:f1:33:9e:79:88:31:34:2c:73: 56:ce:55:af:d7:10:72:97:f0:3d:1f:64:d1:06:6a: d1:2f:4f:10:0d:1f:a2:60:4f:a8:73:e0:dd:ce:2e: a5:6e:c8:95:49:17:4b:80:9f:9e:24:48:00:da:f4: c6:a6:e7:c2:0f:d1:e8:3c:5c:0b:d7:f7:cf:6c:f5: f9:9e:47:a6:55:62:22:6e:10:71:1a:ae:fd:6a:a7: ea:4f:ad:f5:ae:3a:28:3b:3e:cc:f0:dd:28:87:17: 0f:a0:00:70:eb:80:c0:52:ac:d0:8e:d3:f4:92:f7: d6:56:91:06:a6:01:28:bd:f1:ee:39:84:5e:0b:5c: 83:60:22:e7:26:b3:fc:eb:ae:f4:22:c4:68:40:29: 1d:1c:79:36:f8:00:7e:83:59:0d:0d:4e:96:f3:98: b4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E3:31:18:A2:E9:6D:20:83:7C:BC:E1:03:24:BA:5B:0B:0F:21:C8 X509v3 Authority Key Identifier: keyid:F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:1a:cf:16:f3:ed:44:2d:5e:4d:c9:d9:9b:79:8c:c0:ae:fa: f1:e9:6f:74:1a:ce:d8:e7:0a:97:ad:7c:6f:21:8e:69:48:02: ef:4e:cb:ce:31:70:c6:c9:84:a3:c1:b3:25:50:24:03:2f:69: 9d:0d:85:4f:26:2d:10:d0:cb:02:8f:9f:b0:88:02:06:72:0f: df:64:8b:a8:b7:20:6a:e2:47:b4:db:39:0c:d3:d4:e3:fa:21: c1:09:77:88:ba:22:da:e4:27:b3:26:3d:e7:e9:ff:1e:1f:e9: 06:7f:30:74:47:3b:63:4b:e1:2e:2e:7a:5f:d0:cd:71:57:15: 8f:23:c3:a6:f6:09:ae:72:2b:fd:34:e1:0a:99:d4:06:7c:11: ec:3f:f9:0a:f7:97:41:f1:20:29:08:63:ed:37:58:d2:17:fb: b2:55:ff:33:1c:18:4d:6b:22:16:15:20:09:16:14:e5:e9:0e: 04:54:73:5f:0f:c5:2e:ec:71:e3:07:60:87:92:3e:79:ec:bf: 35:17:18:6a:c2:59:35:33:f2:4c:2f:0a:7e:44:e1:93:44:bf: e2:91:5d:35:6d:23:4d:b7:7d:bc:1d:ae:b3:b9:d0:26:c9:d3: a1:d5:fc:38:f1:e8:ab:eb:2f:1b:90:e6:84:38:b7:c0:4c:ec: 52:aa:70:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJDRUUxMTAvBgNVBAUTKEY0MEJFOEI1QUQxNkIxODQ3RkMwRDRGNDcwOEY5RDQx NDkzMUFCQTYwHhcNMjUwMzI5MDIwNjAxWhcNMjUwNDA1MDIwNjAxWjAYMRYwFAYD VQQDEw02N2U3NTU4OS0wMzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0qdFeKqMMLpkjqO5Sts6HYj84wjIzEpufTv4/rucU9z4CkVRXhaGQth/4SAT unZ7e9taRfr7T/UVS6JgV0Sav9JKz1wCu90ylem5j+MpmVy4U4woICqfvjYc54MZ OmnxM555iDE0LHNWzlWv1xByl/A9H2TRBmrRL08QDR+iYE+oc+Ddzi6lbsiVSRdL gJ+eJEgA2vTGpufCD9HoPFwL1/fPbPX5nkemVWIibhBxGq79aqfqT631rjooOz7M 8N0ohxcPoABw64DAUqzQjtP0kvfWVpEGpgEovfHuOYReC1yDYCLnJrP86670IsRo QCkdHHk2+AB+g1kNDU6W85i06QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLjMRii 6W0gg3y84QMkulsLDyHIMB8GA1UdIwQYMBaAFPQL6LWtFrGEf8DU9HCPnUFJMaum MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkNFRS82OEMzNTYzMDEz RkYxMUVEQTNGMzM5NDFDNEY5QUUwMi85QXZvdGEwV3NZUl93TlQwY0ktZFFVa3hx NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlBdm90YTBXc1lSX3dOVDBjSS1kUVVreHE2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkNFRS82OEMzNTYzMDEzRkYxMUVEQTNGMzM5NDFDNEY5QUUwMi85QXZvdGEwV3NZ Ul93TlQwY0ktZFFVa3hxNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgGs8W8+1ELV5NydmbeYzArvrx6W90Gs7Y5wqXrXxvIY5pSALvTsvO MXDGyYSjwbMlUCQDL2mdDYVPJi0Q0MsCj5+wiAIGcg/fZIuotyBq4ke02zkM09Tj +iHBCXeIuiLa5CezJj3n6f8eH+kGfzB0RztjS+EuLnpf0M1xVxWPI8Om9gmuciv9 NOEKmdQGfBHsP/kK95dB8SApCGPtN1jSF/uyVf8zHBhNayIWFSAJFhTl6Q4EVHNf D8Uu7HHjB2CHkj557L81Fxhqwlk1M/JMLwp+ROGTRL/ikV01bSNNt328Ha6zudAm ydOh1fw48eir6y8bkOaEOLfATOxSqnCf -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:50 2025 by rpki-client