$ rpki-client -vvf rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.mft File: SkTgEhvolIv3vEnLA6Y4F6W60YY.mft (raw, json) Hash identifier: Bzhw+4lu2BsNdDUaDVE0Kh2eQYrtyGW8Oq836GEmpuE= Subject key identifier: CA:EE:EE:A5:14:BD:60:E4:7C:F2:78:59:60:61:DD:C6:59:2C:36:C4 Authority key identifier: 4A:44:E0:12:1B:E8:94:8B:F7:BC:49:CB:03:A6:38:17:A5:BA:D1:86 Certificate issuer: /CN=A918BFB8/serialNumber=4A44E0121BE8948BF7BC49CB03A63817A5BAD186 Certificate serial: 0EFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkTgEhvolIv3vEnLA6Y4F6W60YY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.mft Manifest number: 0EF2 Signing time: Fri 04 Apr 2025 17:46:41 +0000 Manifest this update: Fri 04 Apr 2025 17:46:41 +0000 Manifest next update: Fri 11 Apr 2025 17:46:41 +0000 Files and hashes: 1: SkTgEhvolIv3vEnLA6Y4F6W60YY.crl (hash: StoIFzJNLPLRlWTCArbRWWW2LkLj5uMc5Z+FnAI67EE=) 2: DBB5A81E77D611E98792C466C4F9AE02.roa (hash: rYh7DLX0QOpcJaWgIoBnQP4DTxgE7Xhb6DwQPEWKynA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.crl rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkTgEhvolIv3vEnLA6Y4F6W60YY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:46:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3834 (0xefa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BFB8 Validity Not Before: Apr 4 17:46:41 2025 GMT Not After : Apr 11 17:46:41 2025 GMT Subject: CN=67f01b01-66ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c0:0f:20:48:0f:fa:1f:31:84:22:7e:e8:f2: 9d:8f:19:62:c9:7e:7f:8b:6a:b1:1f:e4:fd:91:af: 2d:78:79:db:79:37:7a:65:b6:bc:99:1f:14:72:ee: 7f:58:17:01:a6:3c:b1:cb:8c:ae:36:30:00:56:87: 03:c2:a8:07:08:91:02:94:2d:20:62:38:32:8e:65: ce:91:9e:97:f7:a7:1a:5e:7b:68:a7:a5:99:0d:be: ee:d9:b6:09:e2:9d:0e:ba:1d:4b:d8:4a:dd:fd:63: 9e:f4:08:84:1a:1b:ed:8e:55:0c:65:92:4b:51:35: a8:32:fb:7d:49:bd:a7:1f:c9:76:da:21:57:88:42: ae:c9:c0:ce:28:4d:b2:94:0b:12:6d:bf:0a:b3:3a: ce:29:fc:53:b9:55:ed:1f:5f:31:2d:57:65:6a:69: 59:8e:b9:ff:e6:a3:6f:5a:c4:dc:aa:1a:ae:4f:2d: 00:8c:0a:d4:57:b5:11:28:df:5f:d8:50:0b:fb:68: d7:a4:09:84:d1:a1:fb:92:61:ba:f1:57:a5:a9:d3: ee:61:ad:e6:11:b9:a9:b8:e9:4f:e6:4a:b1:8a:52: 3b:7a:c9:b8:9c:f9:1c:bc:d8:9c:38:7d:08:5b:59: c9:33:b1:40:d3:77:7a:03:76:96:ba:94:05:8f:19: d0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EE:EE:A5:14:BD:60:E4:7C:F2:78:59:60:61:DD:C6:59:2C:36:C4 X509v3 Authority Key Identifier: keyid:4A:44:E0:12:1B:E8:94:8B:F7:BC:49:CB:03:A6:38:17:A5:BA:D1:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkTgEhvolIv3vEnLA6Y4F6W60YY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:01:c0:21:cc:b2:b4:cf:77:66:dd:9b:a7:60:41:c7:32:29: 68:67:59:54:ea:6c:65:44:df:df:e9:a4:02:78:51:f9:36:38: 0e:b3:b0:57:ab:60:8c:5f:43:43:19:9b:63:5c:ad:fa:36:53: ed:9d:ca:cc:7a:46:34:f4:27:59:c5:39:e5:01:4d:6c:ab:db: e5:1e:d6:ce:5c:67:bd:7d:7a:8a:42:a4:4f:b8:3b:d8:54:b7: 50:bd:35:21:ae:6d:94:53:05:9a:5b:bf:42:5f:a0:6e:bf:73: 7e:96:ef:40:03:39:30:d1:43:52:14:61:c7:2c:68:49:21:6a: 1c:0e:a0:35:82:0a:0b:7f:3d:2b:f6:11:f0:1d:44:eb:f8:91: 92:a2:4c:d8:af:99:0b:fc:02:cb:6c:14:7e:41:ff:05:6a:7b: ac:da:af:97:de:86:39:ec:d8:c2:1e:99:6a:98:21:0d:02:07: ed:a4:35:4f:71:d3:d8:ff:e1:4e:db:23:19:8f:f0:65:85:aa: 33:c8:f2:56:59:83:13:40:3e:9a:c3:53:08:f3:c3:0b:6f:64: a0:15:01:4f:e5:38:51:12:e0:b1:96:6b:93:5f:d8:41:09:22: 2e:52:94:6c:dc:1e:d9:72:03:5a:31:20:22:82:e7:d0:a7:4d: 74:5d:9b:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJGQjgxMTAvBgNVBAUTKDRBNDRFMDEyMUJFODk0OEJGN0JDNDlDQjAzQTYzODE3 QTVCQUQxODYwHhcNMjUwNDA0MTc0NjQxWhcNMjUwNDExMTc0NjQxWjAYMRYwFAYD VQQDEw02N2YwMWIwMS02NmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMAPIEgP+h8xhCJ+6PKdjxliyX5/i2qxH+T9ka8teHnbeTd6Zba8mR8Ucu5/ WBcBpjyxy4yuNjAAVocDwqgHCJEClC0gYjgyjmXOkZ6X96caXntop6WZDb7u2bYJ 4p0Ouh1L2Erd/WOe9AiEGhvtjlUMZZJLUTWoMvt9Sb2nH8l22iFXiEKuycDOKE2y lAsSbb8KszrOKfxTuVXtH18xLVdlamlZjrn/5qNvWsTcqhquTy0AjArUV7URKN9f 2FAL+2jXpAmE0aH7kmG68VelqdPuYa3mEbmpuOlP5kqxilI7esm4nPkcvNicOH0I W1nJM7FA03d6A3aWupQFjxnQSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMru7qUU vWDkfPJ4WWBh3cZZLDbEMB8GA1UdIwQYMBaAFEpE4BIb6JSL97xJywOmOBelutGG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkZCOC9BQjk1QjVBODc3 RDUxMUU5QUJDNjNBNjVDNEY5QUUwMi9Ta1RnRWh2b2xJdjN2RW5MQTZZNEY2VzYw WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NrVGdFaHZvbEl2M3ZFbkxBNlk0RjZXNjBZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkZCOC9BQjk1QjVBODc3RDUxMUU5QUJDNjNBNjVDNEY5QUUwMi9Ta1RnRWh2b2xJ djN2RW5MQTZZNEY2VzYwWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2AcAhzLK0z3dm3ZunYEHHMiloZ1lU6mxlRN/f6aQCeFH5NjgOs7BX q2CMX0NDGZtjXK36NlPtncrMekY09CdZxTnlAU1sq9vlHtbOXGe9fXqKQqRPuDvY VLdQvTUhrm2UUwWaW79CX6Buv3N+lu9AAzkw0UNSFGHHLGhJIWocDqA1ggoLfz0r 9hHwHUTr+JGSokzYr5kL/ALLbBR+Qf8Fanus2q+X3oY57NjCHplqmCENAgftpDVP cdPY/+FO2yMZj/BlhaozyPJWWYMTQD6aw1MI88MLb2SgFQFP5ThREuCxlmuTX9hB CSIuUpRs3B7ZcgNaMSAigufQp010XZs/ -----END CERTIFICATE-----Generated at Sun Apr 6 00:48:16 2025 by rpki-client