$ rpki-client -vvf rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft File: dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft (raw, json) Hash identifier: xtTuUiBNG0UkhlFEKhu0d9vaq0+z8brtY+38OLprlGI= Subject key identifier: 8D:20:CF:F8:CE:A7:5B:58:AB:98:77:B7:A0:00:23:4F:EA:C0:29:8B Authority key identifier: 76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC Certificate issuer: /CN=A918C10A/serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC Certificate serial: 07A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft Manifest number: 07A0 Signing time: Fri 18 Apr 2025 21:17:53 +0000 Manifest this update: Fri 18 Apr 2025 21:17:53 +0000 Manifest next update: Fri 25 Apr 2025 21:17:53 +0000 Files and hashes: 1: dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl (hash: POABnRCbbu8EKgHUKr97AqjR4sO11ju1al3QelanKng=) 2: CCFEC19AFDAC11EAB7B8A13BC4F9AE02.roa (hash: 6YyrwyMT54ZUSKQODwlJAe9xJg6+Kacl1A+Uqo8vrKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 18:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1958 (0x7a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C10A, serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC Validity Not Before: Apr 18 21:17:53 2025 GMT Not After : Apr 25 21:17:53 2025 GMT Subject: CN=6802c181-1cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1e:4c:b3:7c:9b:1c:2b:60:01:6a:6c:3d:1f: 04:c9:e4:20:d1:96:3f:ea:2e:94:08:8d:13:a0:30: de:2a:53:dd:9b:4d:61:c4:cc:10:a6:1f:e1:9d:07: a7:99:34:4d:ef:01:ab:b9:ab:59:5b:cd:28:e6:96: c0:87:c2:9f:62:5c:77:5f:90:50:47:01:77:2b:76: 23:e1:03:5b:d5:8d:9b:c9:ca:e8:50:88:35:d7:05: 96:9c:99:3f:ff:5f:97:2b:40:72:2e:ba:3d:50:28: 72:03:5e:42:1c:78:33:8e:01:f6:74:70:71:0f:b6: 9b:64:af:1b:ef:4d:95:81:d7:39:23:54:4c:7d:a9: dc:31:d7:ec:ac:7c:c1:bd:10:ce:5a:89:63:61:ea: 52:fe:19:27:f5:6b:f5:29:a3:a2:85:ff:c0:a7:32: 0a:20:16:9d:3b:c5:6f:53:fb:68:1e:b0:66:3b:c5: 12:36:cf:41:13:6a:a2:f0:24:64:17:5d:c8:f3:1b: ab:dd:73:28:35:5f:3e:78:b4:2e:a2:1b:e7:76:bf: b1:a7:61:7c:d0:d5:80:4c:0d:54:03:17:ec:00:7a: c9:2d:79:5c:26:67:1f:b2:d5:d9:21:81:81:38:ec: 24:bd:e5:aa:97:70:ac:9f:c2:6a:d3:19:2d:ef:56: cb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:20:CF:F8:CE:A7:5B:58:AB:98:77:B7:A0:00:23:4F:EA:C0:29:8B X509v3 Authority Key Identifier: keyid:76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:3f:f9:99:0c:a3:76:53:65:f4:1a:9f:8f:20:80:06:57:42: 13:a3:fc:7a:a1:09:50:e1:95:c3:6e:01:0a:98:53:ea:5d:10: ba:73:07:27:79:83:fb:d9:b9:3c:53:69:3f:42:68:4d:ea:df: b0:01:b0:f2:b2:83:78:10:a1:eb:9a:d3:e0:13:e4:8b:b9:fc: e1:91:b4:a8:87:ec:e4:0c:ad:4a:e9:48:ef:33:1b:c2:d8:14: a6:86:a9:02:d1:3c:79:23:74:c7:db:0e:b3:ff:82:37:12:3e: 9d:07:9e:6c:67:25:5e:39:0b:57:af:d3:a9:53:69:f8:4e:54: db:15:1e:94:98:b3:98:3a:1f:b2:fe:f9:5d:c2:22:ff:7b:07: 9c:4f:8c:32:aa:e9:f9:eb:aa:cb:1f:e0:8c:00:0e:24:17:53: fc:e2:d8:a8:de:71:0a:64:42:dc:b6:bf:0d:cb:0d:df:ba:46: 2d:d0:de:e6:9e:ff:a5:75:e8:a5:12:f9:3b:fc:7b:fa:d0:bc: 1c:3e:01:d4:55:d2:3b:d6:be:6a:12:ff:c3:16:58:69:b8:e1: 1e:29:e8:9b:92:fd:ea:ad:a3:8f:0d:55:bc:dc:48:c2:cf:25: f3:c3:7d:42:c6:37:35:5c:a8:2b:2e:bd:f4:7b:41:7c:ee:53: 17:79:1a:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMxMEExMTAvBgNVBAUTKDc2MUE4RThGRUI3NjAxNDk4QzlFQTY3ODg3RkRDMTA1 NDE3NkQ5RkMwHhcNMjUwNDE4MjExNzUzWhcNMjUwNDI1MjExNzUzWjAYMRYwFAYD VQQDEw02ODAyYzE4MS0xY2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArx5Ms3ybHCtgAWpsPR8EyeQg0ZY/6i6UCI0ToDDeKlPdm01hxMwQph/hnQen mTRN7wGruatZW80o5pbAh8KfYlx3X5BQRwF3K3Yj4QNb1Y2bycroUIg11wWWnJk/ /1+XK0ByLro9UChyA15CHHgzjgH2dHBxD7abZK8b702Vgdc5I1RMfancMdfsrHzB vRDOWoljYepS/hkn9Wv1KaOihf/ApzIKIBadO8VvU/toHrBmO8USNs9BE2qi8CRk F13I8xur3XMoNV8+eLQuohvndr+xp2F80NWATA1UAxfsAHrJLXlcJmcfstXZIYGB OOwkveWql3Csn8Jq0xkt71bLlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0gz/jO p1tYq5h3t6AAI0/qwCmLMB8GA1UdIwQYMBaAFHYajo/rdgFJjJ6meIf9wQVBdtn8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzEwQS85OTE2OTg0QUZE QUIxMUVBOTUwQjZGM0FDNEY5QUUwMi9kaHFPai10MkFVbU1ucVo0aF8zQkJVRjIy ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RocU9qLXQyQVVtTW5xWjRoXzNCQlVGMjJmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzEwQS85OTE2OTg0QUZEQUIxMUVBOTUwQjZGM0FDNEY5QUUwMi9kaHFPai10MkFV bU1ucVo0aF8zQkJVRjIyZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZP/mZDKN2U2X0Gp+PIIAGV0ITo/x6oQlQ4ZXDbgEKmFPqXRC6cwcn eYP72bk8U2k/QmhN6t+wAbDysoN4EKHrmtPgE+SLufzhkbSoh+zkDK1K6UjvMxvC 2BSmhqkC0Tx5I3TH2w6z/4I3Ej6dB55sZyVeOQtXr9OpU2n4TlTbFR6UmLOYOh+y /vldwiL/ewecT4wyqun566rLH+CMAA4kF1P84tio3nEKZELctr8Nyw3fukYt0N7m nv+ldeilEvk7/Hv60LwcPgHUVdI71r5qEv/DFlhpuOEeKeibkv3qraOPDVW83EjC zyXzw31Cxjc1XKgrLr30e0F87lMXeRri -----END CERTIFICATE-----Generated at Sat Apr 19 00:59:17 2025 by rpki-client