$ rpki-client -vvf rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft File: xK1kn8XyMwadUdhtVa3KzxQtYVc.mft (raw, json) Hash identifier: VxNadyx72blXueJH0N8sw40MWYq38k6uM2MtpgZTBOM= Subject key identifier: 7E:42:22:B8:81:E7:37:F0:DF:0E:79:8A:BD:8E:46:6B:7F:F4:4D:5C Authority key identifier: C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 Certificate issuer: /CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Certificate serial: 09F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft Manifest number: 09EA Signing time: Sat 12 Apr 2025 19:40:49 +0000 Manifest this update: Sat 12 Apr 2025 19:40:48 +0000 Manifest next update: Sat 19 Apr 2025 19:40:48 +0000 Files and hashes: 1: xK1kn8XyMwadUdhtVa3KzxQtYVc.crl (hash: K9d391iQ/v0Zd1+khr+vk1U3NgvWmGDal3NW+dhnLtw=) 2: CA67185A02E511EF8ED1355CC4F9AE02.roa (hash: dM/bkocbrskLUTOMClpNK4FPOQXtlGaqmRxFxTWilMw=) 3: C98E616802E511EF8ED1355CC4F9AE02.roa (hash: gcadtXqsvUpMiAzq36zy8qMAKjIAq2N8zE6RS42bGR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 19:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2548 (0x9f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BDEB, serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Validity Not Before: Apr 12 19:40:48 2025 GMT Not After : Apr 19 19:40:48 2025 GMT Subject: CN=67fac1c0-f876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:78:87:b1:7b:0b:e4:4f:3e:0c:8e:20:ec:92: 62:3c:92:97:48:f8:2d:e2:be:d6:ca:f1:8d:06:f2: 34:dd:4e:8d:33:62:77:0b:66:55:06:3b:ec:53:41: 85:23:b3:56:cd:9f:f0:e8:a1:87:a4:64:f3:ac:de: 49:41:09:b0:20:31:31:ff:54:27:e0:68:df:d1:91: 18:92:d3:f4:a9:07:7c:9a:c2:ff:65:5a:36:f1:bc: 26:01:e9:3e:bf:61:1c:f0:d2:c9:85:ee:65:cc:90: 9a:d4:40:84:5e:76:dd:fd:f5:60:ca:a4:ec:3c:81: 95:3b:2a:37:6c:c1:da:dc:49:70:96:db:0e:67:8a: ab:85:df:96:76:c6:bc:2d:f9:7f:2f:b5:38:9b:d7: 46:ef:5b:65:71:e4:06:10:45:c8:96:eb:5e:e9:c4: 76:d0:64:5b:0f:43:67:31:be:14:e4:e3:44:1e:cb: ff:06:e3:a3:81:85:51:95:c4:3a:bf:fa:fc:b0:22: 07:86:08:22:10:8d:43:8c:92:57:8d:16:25:86:3e: 04:25:b7:19:eb:0e:f8:da:62:80:87:6e:20:22:3e: a6:96:10:87:06:26:c7:38:a0:d5:98:75:5e:03:f7: 02:e7:9d:8f:91:b0:0d:5a:cf:49:d1:94:8f:07:10: c0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:42:22:B8:81:E7:37:F0:DF:0E:79:8A:BD:8E:46:6B:7F:F4:4D:5C X509v3 Authority Key Identifier: keyid:C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:f7:54:54:07:76:f3:31:c2:94:29:86:72:2a:c5:ed:e6:6a: 01:27:18:1a:18:5e:99:d1:80:91:50:d1:26:33:95:bc:e1:54: 2d:26:fa:13:03:d2:fc:04:b2:f6:c0:88:b7:e7:e0:c4:5c:39: dc:07:77:e2:dc:80:cc:62:de:70:f3:d9:ae:fe:c9:2a:87:80: e4:ff:bf:79:17:42:35:52:d1:63:4e:b3:be:da:06:26:79:36: 62:56:13:fa:2d:54:79:f7:1a:bf:34:53:6b:f8:1e:13:47:6a: 62:4c:61:e8:63:6a:cb:e0:4a:a5:43:e4:23:1b:1d:1e:39:46: 50:b1:8a:84:99:af:02:fa:63:7b:75:af:77:d3:bf:70:b8:7c: 33:ae:d7:71:c8:fd:9e:b3:16:24:de:5c:95:ec:24:09:f2:0a: b2:e0:18:af:af:e0:22:94:4e:1a:2f:a0:e9:a7:48:7e:07:6c: 86:aa:c1:72:7f:25:e9:82:47:e9:b6:4f:f1:50:dc:2d:d1:85: bb:59:66:da:7c:3a:3f:df:d0:95:5e:be:d7:6a:cd:f2:e6:16: 30:aa:04:65:3c:79:f0:22:15:e8:c8:a0:12:ec:b8:90:65:e4: 89:76:77:7a:d9:e9:6d:30:8d:b3:75:a2:e2:2d:c2:d6:1b:08: 37:c7:df:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJERUIxMTAvBgNVBAUTKEM0QUQ2NDlGQzVGMjMzMDY5RDUxRDg2RDU1QURDQUNG MTQyRDYxNTcwHhcNMjUwNDEyMTk0MDQ4WhcNMjUwNDE5MTk0MDQ4WjAYMRYwFAYD VQQDEw02N2ZhYzFjMC1mODc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqniHsXsL5E8+DI4g7JJiPJKXSPgt4r7WyvGNBvI03U6NM2J3C2ZVBjvsU0GF I7NWzZ/w6KGHpGTzrN5JQQmwIDEx/1Qn4Gjf0ZEYktP0qQd8msL/ZVo28bwmAek+ v2Ec8NLJhe5lzJCa1ECEXnbd/fVgyqTsPIGVOyo3bMHa3ElwltsOZ4qrhd+Wdsa8 Lfl/L7U4m9dG71tlceQGEEXIlute6cR20GRbD0NnMb4U5ONEHsv/BuOjgYVRlcQ6 v/r8sCIHhggiEI1DjJJXjRYlhj4EJbcZ6w742mKAh24gIj6mlhCHBibHOKDVmHVe A/cC552PkbANWs9J0ZSPBxDAuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5CIriB 5zfw3w55ir2ORmt/9E1cMB8GA1UdIwQYMBaAFMStZJ/F8jMGnVHYbVWtys8ULWFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkRFQi9GQTVDRjQyQzc1 QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13YWRVZGh0VmEzS3p4UXRZ VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hLMWtuOFh5TXdhZFVkaHRWYTNLenhRdFlWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkRFQi9GQTVDRjQyQzc1QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13 YWRVZGh0VmEzS3p4UXRZVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt91RUB3bzMcKUKYZyKsXt5moBJxgaGF6Z0YCRUNEmM5W84VQtJvoT A9L8BLL2wIi35+DEXDncB3fi3IDMYt5w89mu/skqh4Dk/795F0I1UtFjTrO+2gYm eTZiVhP6LVR59xq/NFNr+B4TR2piTGHoY2rL4EqlQ+QjGx0eOUZQsYqEma8C+mN7 da93079wuHwzrtdxyP2esxYk3lyV7CQJ8gqy4Bivr+AilE4aL6Dpp0h+B2yGqsFy fyXpgkfptk/xUNwt0YW7WWbafDo/39CVXr7Xas3y5hYwqgRlPHnwIhXoyKAS7LiQ ZeSJdnd62eltMI2zdaLiLcLWGwg3x98s -----END CERTIFICATE-----Generated at Sun Apr 13 04:17:39 2025 by rpki-client