$ rpki-client -vvf rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft File: AOQNlW1o1h2oWB5U6LjC26Fssyc.mft (raw, json) Hash identifier: mQL2UP/3sUAQgJuGPJrsR9uBvNrpXYDHoFKsAB7pxIQ= Subject key identifier: BF:0D:D5:D0:3F:97:CA:2E:E8:E9:BB:BE:7D:53:0D:54:8A:B9:48:17 Authority key identifier: 00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 Certificate issuer: /CN=A918C21E/serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft Manifest number: 013C Signing time: Fri 11 Apr 2025 03:39:38 +0000 Manifest this update: Fri 11 Apr 2025 03:39:37 +0000 Manifest next update: Fri 18 Apr 2025 03:39:37 +0000 Files and hashes: 1: AOQNlW1o1h2oWB5U6LjC26Fssyc.crl (hash: 7P4BAxGocEvXAjVeHUID2mgzmBN9lZS6B8zjZ9ixM1s=) 2: 79266D5C32AB11EE8EEB9940C4F9AE02.roa (hash: 6KqNq4cdtHhz/rpHpQGDibxzs+UH6NBhNOISI8YbXQE=) 3: 79A8653C32AB11EE8EEB9940C4F9AE02.roa (hash: 4JGUeecx58BBmafBCfjWDOEaD/pbsFBnC8eWlzMDtQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 03:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C21E, serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Validity Not Before: Apr 11 03:39:37 2025 GMT Not After : Apr 18 03:39:37 2025 GMT Subject: CN=67f88ef9-e252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3e:83:25:0a:3d:47:b8:2f:03:9d:54:24:46: a4:63:2a:6a:db:71:0b:11:ff:2b:15:f0:ea:c2:e5: d9:6b:e8:ba:bd:37:cf:5a:51:51:65:04:61:ea:a6: 9f:d8:18:87:df:49:5a:af:0d:c6:e6:a3:35:04:1d: 1b:81:ea:dc:d1:72:5a:f0:af:81:c1:5d:c3:7b:9f: 95:6f:26:ac:22:d1:ae:28:f9:91:84:da:1f:4f:e3: 4f:9a:8e:21:7a:5c:99:74:df:70:42:1b:0b:a4:09: 79:e1:17:0d:61:64:f9:8a:17:e5:09:b6:eb:fa:d8: 80:4a:66:30:72:0f:8e:d5:e9:71:ec:f0:46:63:c2: f6:f7:1d:b1:41:cc:2a:cb:8a:54:65:1b:0b:55:c2: a4:15:f6:6a:c6:cb:d9:a4:fb:35:46:97:ab:26:82: e4:a9:38:74:9b:d6:5f:a3:b7:1e:19:ad:53:b2:5b: cc:32:2f:67:52:5c:ce:7d:50:66:d7:e0:f6:41:d0: 7b:1d:ad:06:d5:d5:1d:3f:7c:70:b5:ba:88:e1:86: b4:f9:05:02:a8:b1:cc:61:cb:21:ee:29:e7:f9:fe: b8:78:e5:8f:5d:ce:27:02:72:de:39:d7:a6:28:f4: 11:49:01:df:38:ad:f2:94:9e:7a:4d:44:bd:46:cb: 3c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:0D:D5:D0:3F:97:CA:2E:E8:E9:BB:BE:7D:53:0D:54:8A:B9:48:17 X509v3 Authority Key Identifier: keyid:00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:60:df:60:67:9e:05:ce:1b:0c:a1:59:68:47:4a:2f:69:cc: a8:e0:26:e3:1e:f6:f9:cd:47:c4:53:95:ef:dd:13:e3:5e:52: ed:91:d3:7b:14:62:89:03:09:34:e0:3b:4c:6c:1c:76:3d:0a: 10:d7:e1:ae:65:d0:43:9d:17:5f:87:de:9f:db:ef:d7:cf:c6: dc:79:ef:e5:22:d7:48:ef:9d:59:52:f3:82:01:9a:5c:a0:99: 40:e6:cb:e7:c5:62:94:ea:d1:e2:38:0c:ec:40:e4:50:08:e3: 51:d9:26:98:a8:04:62:b1:08:33:4a:72:eb:bf:b4:a3:cc:c0: 52:17:37:69:c1:8c:09:d3:c6:51:86:00:df:05:da:ae:26:00: e1:34:be:31:2d:94:c5:b0:33:e0:6f:02:72:02:65:b7:59:b9: 87:eb:d6:15:90:f9:e9:57:31:83:93:ad:3d:a7:06:d6:1d:26: 9f:af:d6:dc:e6:c7:3a:65:8a:e2:7a:ce:6d:d7:f6:b8:63:95: 3c:9f:c8:43:68:35:39:ca:cd:98:a5:ef:96:8c:f6:ec:fc:8d: 64:da:e3:bf:4f:89:d6:19:91:08:7d:04:95:e8:2f:5e:a6:d7: 1a:cb:0d:82:9e:9c:c4:9c:f7:19:4a:b9:13:17:48:f6:15:40: 8b:ee:84:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyMUUxMTAvBgNVBAUTKDAwRTQwRDk1NkQ2OEQ2MURBODU4MUU1NEU4QjhDMkRC QTE2Q0IzMjcwHhcNMjUwNDExMDMzOTM3WhcNMjUwNDE4MDMzOTM3WjAYMRYwFAYD VQQDEw02N2Y4OGVmOS1lMjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArD6DJQo9R7gvA51UJEakYypq23ELEf8rFfDqwuXZa+i6vTfPWlFRZQRh6qaf 2BiH30larw3G5qM1BB0bgerc0XJa8K+BwV3De5+VbyasItGuKPmRhNofT+NPmo4h elyZdN9wQhsLpAl54RcNYWT5ihflCbbr+tiASmYwcg+O1elx7PBGY8L29x2xQcwq y4pUZRsLVcKkFfZqxsvZpPs1RperJoLkqTh0m9Zfo7ceGa1TslvMMi9nUlzOfVBm 1+D2QdB7Ha0G1dUdP3xwtbqI4Ya0+QUCqLHMYcsh7inn+f64eOWPXc4nAnLeOdem KPQRSQHfOK3ylJ56TUS9Rss8VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8N1dA/ l8ou6Om7vn1TDVSKuUgXMB8GA1UdIwQYMBaAFADkDZVtaNYdqFgeVOi4wtuhbLMn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzIxRS8yNTc1Q0ZGMDMy QUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFoMm9XQjVVNkxqQzI2RnNz eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FPUU5sVzFvMWgyb1dCNVU2TGpDMjZGc3N5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzIxRS8yNTc1Q0ZGMDMyQUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFo Mm9XQjVVNkxqQzI2RnNzeWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfYN9gZ54FzhsMoVloR0ovacyo4CbjHvb5zUfEU5Xv3RPjXlLtkdN7 FGKJAwk04DtMbBx2PQoQ1+GuZdBDnRdfh96f2+/Xz8bcee/lItdI751ZUvOCAZpc oJlA5svnxWKU6tHiOAzsQORQCONR2SaYqARisQgzSnLrv7SjzMBSFzdpwYwJ08ZR hgDfBdquJgDhNL4xLZTFsDPgbwJyAmW3WbmH69YVkPnpVzGDk609pwbWHSafr9bc 5sc6ZYries5t1/a4Y5U8n8hDaDU5ys2Ype+WjPbs/I1k2uO/T4nWGZEIfQSV6C9e ptcayw2CnpzEnPcZSrkTF0j2FUCL7oQ8 -----END CERTIFICATE-----Generated at Sun Apr 13 02:05:06 2025 by rpki-client