$ rpki-client -vvf rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft File: IHRtqWxsk0jpS7t03MtZAcbst7M.mft (raw, json) Hash identifier: 2emGL/NzI1Eh/QwwG3QqDzuuT8rGRNQjnDbdTPDwOd8= Subject key identifier: 7A:D7:6B:02:99:53:CC:79:D2:53:ED:F4:6E:79:21:65:29:AA:2A:AD Authority key identifier: 20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3 Certificate issuer: /CN=A918BD1A/serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3 Certificate serial: 038F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft Manifest number: 0388 Signing time: Sat 29 Mar 2025 01:05:48 +0000 Manifest this update: Sat 29 Mar 2025 01:05:47 +0000 Manifest next update: Sat 05 Apr 2025 01:05:47 +0000 Files and hashes: 1: IHRtqWxsk0jpS7t03MtZAcbst7M.crl (hash: VzOAqK1qO27t7WpKicXgKYCA//YLGhZukmB1mWtjYk8=) 2: FC11F400240611EFA8F45A54C4F9AE02.roa (hash: o33RNCZroDwsAJGcMgsni5M3q2cYV8AkaewWNhrky5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 01:05:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 911 (0x38f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BD1A Validity Not Before: Mar 29 01:05:47 2025 GMT Not After : Apr 5 01:05:47 2025 GMT Subject: CN=67e7476c-b018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9e:8e:ea:cd:fc:9d:06:9e:f6:8b:04:81:b6: a5:c1:48:37:7a:7b:5b:16:41:5c:36:1c:c8:69:a0: 2b:f2:86:2a:97:b0:d4:66:34:f9:e2:1e:44:f1:1c: a8:a7:a5:18:ae:94:45:e2:e8:9a:51:c2:84:fe:16: 32:00:13:8b:aa:0a:ed:7e:78:8b:d3:81:ab:20:37: 2b:05:b6:24:47:b2:34:d1:13:12:f1:74:fd:12:56: da:bc:cd:4f:9d:10:9b:69:93:d9:fb:1d:b1:a7:21: 8b:8e:6e:da:2b:78:f6:54:0f:6e:8a:ba:39:cf:9c: f8:16:b3:15:86:92:2c:d0:82:c3:c4:83:27:0f:55: 3a:ce:95:a6:d5:64:09:eb:71:7d:87:b9:34:d9:7d: c7:b5:44:66:fd:bd:1f:be:c5:6a:bd:12:0b:2d:75: 02:a7:f8:ce:6e:a2:81:c0:14:50:ab:46:1d:81:7b: a9:ca:a5:27:81:6b:75:9a:80:b4:c2:90:43:39:67: 98:c3:37:d9:10:5b:b5:6f:6a:cf:6c:f5:35:63:0d: 08:33:b9:53:df:53:90:a9:b5:7a:bc:61:77:3a:20: 3e:38:57:61:a9:d2:63:6f:96:81:35:24:d4:e9:5e: 4f:fc:6b:ac:1a:d5:60:de:d4:95:8c:71:f7:52:21: 5e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D7:6B:02:99:53:CC:79:D2:53:ED:F4:6E:79:21:65:29:AA:2A:AD X509v3 Authority Key Identifier: keyid:20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:ab:e2:41:a5:26:eb:d1:47:0e:99:75:b6:eb:77:67:e8:f7: 41:52:f4:15:be:4d:15:00:65:d9:b5:5b:6b:9c:53:bf:45:c9: bf:7d:0d:f9:b7:80:8b:7e:cc:94:39:5f:27:8c:bf:d5:67:4a: 53:44:b3:1e:a3:f7:ca:f9:da:9a:f2:3d:c8:ec:6d:75:b9:a8: 58:9b:48:fe:7e:7c:e6:61:b4:f3:e0:37:8c:f6:15:bf:2a:06: fd:62:3a:4e:f3:97:c9:00:39:61:76:c0:4c:f4:67:e0:53:fc: 48:9e:e5:44:85:0a:b2:b7:95:64:44:81:73:2e:ed:f0:8f:74: bf:91:7d:5f:2c:8c:02:d4:59:c3:1f:5e:26:78:8c:06:f9:e2: 3d:69:7d:03:48:8a:8a:e2:12:fa:ab:e6:1b:76:69:eb:a5:df: ee:2b:2a:ac:60:3c:7d:4c:34:f7:a4:49:15:ae:8d:43:ed:02: c8:96:eb:80:5e:40:da:d8:d9:56:2f:df:0d:f7:35:d3:0e:31: ca:d0:d3:c5:29:e9:18:44:b2:98:1e:c0:dd:42:bc:a0:99:fe: c8:8b:37:57:ee:12:42:23:cf:c6:e9:d7:74:d8:f3:23:4a:53: 71:35:85:ec:c4:cb:37:00:07:7c:f7:93:25:81:8b:1d:3d:1d: cb:98:1a:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJEMUExMTAvBgNVBAUTKDIwNzQ2REE5NkM2QzkzNDhFOTRCQkI3NERDQ0I1OTAx QzZFQ0I3QjMwHhcNMjUwMzI5MDEwNTQ3WhcNMjUwNDA1MDEwNTQ3WjAYMRYwFAYD VQQDEw02N2U3NDc2Yy1iMDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA656O6s38nQae9osEgbalwUg3entbFkFcNhzIaaAr8oYql7DUZjT54h5E8Ryo p6UYrpRF4uiaUcKE/hYyABOLqgrtfniL04GrIDcrBbYkR7I00RMS8XT9ElbavM1P nRCbaZPZ+x2xpyGLjm7aK3j2VA9uiro5z5z4FrMVhpIs0ILDxIMnD1U6zpWm1WQJ 63F9h7k02X3HtURm/b0fvsVqvRILLXUCp/jObqKBwBRQq0YdgXupyqUngWt1moC0 wpBDOWeYwzfZEFu1b2rPbPU1Yw0IM7lT31OQqbV6vGF3OiA+OFdhqdJjb5aBNSTU 6V5P/GusGtVg3tSVjHH3UiFe1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrXawKZ U8x50lPt9G55IWUpqiqtMB8GA1UdIwQYMBaAFCB0balsbJNI6Uu7dNzLWQHG7Lez MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkQxQS80QzZFQUJFODk5 RDgxMUVDQjlFMzU3NkZDNEY5QUUwMi9JSFJ0cVd4c2swanBTN3QwM010WkFjYnN0 N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lIUnRxV3hzazBqcFM3dDAzTXRaQWNic3Q3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkQxQS80QzZFQUJFODk5RDgxMUVDQjlFMzU3NkZDNEY5QUUwMi9JSFJ0cVd4c2sw anBTN3QwM010WkFjYnN0N00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZq+JBpSbr0UcOmXW263dn6PdBUvQVvk0VAGXZtVtrnFO/Rcm/fQ35 t4CLfsyUOV8njL/VZ0pTRLMeo/fK+dqa8j3I7G11uahYm0j+fnzmYbTz4DeM9hW/ Kgb9YjpO85fJADlhdsBM9GfgU/xInuVEhQqyt5VkRIFzLu3wj3S/kX1fLIwC1FnD H14meIwG+eI9aX0DSIqK4hL6q+Ybdmnrpd/uKyqsYDx9TDT3pEkVro1D7QLIluuA XkDa2NlWL98N9zXTDjHK0NPFKekYRLKYHsDdQrygmf7IizdX7hJCI8/G6dd02PMj SlNxNYXsxMs3AAd895MlgYsdPR3LmBoF -----END CERTIFICATE-----Generated at Fri Apr 4 22:06:46 2025 by rpki-client