$ rpki-client -vvf rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft File: 0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft (raw, json) Hash identifier: 0yGcisgkKVDh4oKFMfE1Z8YXZzL30vOq1RDx8lfOxUE= Subject key identifier: A6:C5:18:CE:FD:B6:45:26:CB:E5:C2:DE:22:1D:CE:87:C4:37:F5:E2 Authority key identifier: D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44 Certificate issuer: /CN=A918C212/serialNumber=D05AC90A207F6087CE02EDC23188E32AAA1B1B44 Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft Manifest number: EC Signing time: Sat 29 Mar 2025 04:43:22 +0000 Manifest this update: Sat 29 Mar 2025 04:43:21 +0000 Manifest next update: Sat 05 Apr 2025 04:43:21 +0000 Files and hashes: 1: 0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl (hash: PrkRqMl+2SeFmcVm8OFX404GONpQqEnJycHxb4/WIRI=) 2: BCBA699CA2D111EE89C12A4EC4F9AE02.roa (hash: v8vLgjK5S+JdCLTZc8YYYPXnZStqFTZMOLbog1OTRVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:43:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C212 Validity Not Before: Mar 29 04:43:21 2025 GMT Not After : Apr 5 04:43:21 2025 GMT Subject: CN=67e77a69-ab91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:66:58:54:b7:51:13:26:85:7a:ae:24:aa:fc: 2c:20:f6:fe:56:15:4b:7f:b7:88:ea:1c:c5:d5:8c: 3b:4b:66:7c:35:70:c2:45:96:63:12:18:ae:7a:fb: 98:c0:2e:10:ae:82:26:a0:24:dc:77:ad:b4:8a:cf: c6:8c:e4:8f:8f:10:ea:08:c5:1d:dc:fb:4b:81:56: 6e:cb:78:1a:58:e4:b2:74:dc:b7:cb:e8:5c:ef:d0: 1c:58:12:53:ac:d8:48:33:8b:b4:d4:05:58:e0:8b: 08:e3:f8:c4:42:24:05:39:49:55:f3:91:43:41:b3: f1:34:fd:be:7f:ee:82:5f:0a:7e:75:cb:f9:c5:fc: 42:d9:50:c6:80:bd:9d:ed:73:c1:8e:a6:23:1e:cb: 83:41:8d:cb:07:4e:65:d9:c2:dd:c0:aa:37:73:6e: e6:0a:27:06:04:80:7e:75:98:ce:64:f2:95:ca:85: 3d:04:c7:f7:92:64:b0:0b:84:3c:8c:30:f9:2d:29: 9f:57:f4:b3:16:16:02:22:2f:b0:af:8f:29:d7:8f: 67:bc:02:54:a2:58:dc:55:9e:30:30:81:b3:74:13: ef:86:fc:e4:01:13:7b:aa:4d:18:85:70:6e:17:ac: c0:c3:2a:c8:17:1d:86:ba:46:be:b3:cd:17:f7:42: 2a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C5:18:CE:FD:B6:45:26:CB:E5:C2:DE:22:1D:CE:87:C4:37:F5:E2 X509v3 Authority Key Identifier: keyid:D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:30:62:87:a7:d4:b0:dc:cc:08:38:fa:3f:f6:b0:ad:8b:78: 6f:39:9f:fb:14:67:ff:bb:d9:50:80:b0:3e:a0:7b:9a:69:8c: d0:fc:aa:99:a2:18:33:34:30:a4:25:80:0d:64:40:f7:a6:2f: 4e:8e:79:e5:06:dc:fe:e7:43:6e:96:f2:db:20:df:61:fa:93: ef:1b:68:1e:b1:fa:21:26:4a:c6:2e:4b:ab:51:28:16:93:76: 71:a2:c1:ed:7f:0e:df:91:c3:81:a6:ab:ee:2a:08:cf:a2:76: c6:32:64:d9:3d:98:8f:8d:9d:88:34:0b:32:dc:9b:e1:50:52: ca:aa:ce:a8:0e:08:73:cd:05:78:e3:3e:df:67:56:08:49:b8: 1c:13:44:a4:f0:23:4d:44:ed:a7:15:e0:03:51:d5:cd:e5:6a: 36:b2:5d:1f:fc:54:86:0e:d9:c6:b2:92:5e:92:c2:d3:29:f4: 3f:b3:36:82:88:82:5b:bc:42:86:aa:4c:2a:3e:36:3c:3c:36: 0c:38:f2:a2:e9:12:4b:cc:26:70:9e:d8:27:bc:4b:24:91:e0: 6f:b0:bc:9d:80:0f:12:0e:2c:0a:6d:06:8f:78:c1:3e:61:ff: ba:33:82:5a:43:75:93:0e:e3:60:34:fd:31:54:1b:fe:98:33: bf:1e:08:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyMTIxMTAvBgNVBAUTKEQwNUFDOTBBMjA3RjYwODdDRTAyRURDMjMxODhFMzJB QUExQjFCNDQwHhcNMjUwMzI5MDQ0MzIxWhcNMjUwNDA1MDQ0MzIxWjAYMRYwFAYD VQQDEw02N2U3N2E2OS1hYjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGZYVLdREyaFeq4kqvwsIPb+VhVLf7eI6hzF1Yw7S2Z8NXDCRZZjEhiuevuY wC4QroImoCTcd620is/GjOSPjxDqCMUd3PtLgVZuy3gaWOSydNy3y+hc79AcWBJT rNhIM4u01AVY4IsI4/jEQiQFOUlV85FDQbPxNP2+f+6CXwp+dcv5xfxC2VDGgL2d 7XPBjqYjHsuDQY3LB05l2cLdwKo3c27mCicGBIB+dZjOZPKVyoU9BMf3kmSwC4Q8 jDD5LSmfV/SzFhYCIi+wr48p149nvAJUoljcVZ4wMIGzdBPvhvzkARN7qk0YhXBu F6zAwyrIFx2Guka+s80X90IqOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbFGM79 tkUmy+XC3iIdzofEN/XiMB8GA1UdIwQYMBaAFNBayQogf2CHzgLtwjGI4yqqGxtE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzIxMi80QjIzM0VFQUEy RDAxMUVFOTNBODhGM0RDNEY5QUUwMi8wRnJKQ2lCX1lJZk9BdTNDTVlqaktxb2JH MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBGckpDaUJfWUlmT0F1M0NNWWpqS3FvYkcwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzIxMi80QjIzM0VFQUEyRDAxMUVFOTNBODhGM0RDNEY5QUUwMi8wRnJKQ2lCX1lJ Zk9BdTNDTVlqaktxb2JHMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPMGKHp9Sw3MwIOPo/9rCti3hvOZ/7FGf/u9lQgLA+oHuaaYzQ/KqZ ohgzNDCkJYANZED3pi9OjnnlBtz+50NulvLbIN9h+pPvG2gesfohJkrGLkurUSgW k3ZxosHtfw7fkcOBpqvuKgjPonbGMmTZPZiPjZ2INAsy3JvhUFLKqs6oDghzzQV4 4z7fZ1YISbgcE0Sk8CNNRO2nFeADUdXN5Wo2sl0f/FSGDtnGspJeksLTKfQ/szaC iIJbvEKGqkwqPjY8PDYMOPKi6RJLzCZwntgnvEskkeBvsLydgA8SDiwKbQaPeME+ Yf+6M4JaQ3WTDuNgNP0xVBv+mDO/HgiC -----END CERTIFICATE-----Generated at Fri Apr 4 22:24:47 2025 by rpki-client