$ rpki-client -vvf rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft File: j6aYZRx6wk24J9I50PyLLI2jZrg.mft (raw, json) Hash identifier: /tMnVaiTB51Aqq2RJvMtx7zkoCqrK9tKCVm2W5Pomp4= Subject key identifier: D9:97:DC:82:FF:C6:D6:C6:48:93:6A:58:4E:94:FC:5A:36:9F:31:EA Authority key identifier: 8F:A6:98:65:1C:7A:C2:4D:B8:27:D2:39:D0:FC:8B:2C:8D:A3:66:B8 Certificate issuer: /CN=A918C3B7/serialNumber=8FA698651C7AC24DB827D239D0FC8B2C8DA366B8 Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft Manifest number: FF Signing time: Tue 15 Apr 2025 03:59:57 +0000 Manifest this update: Tue 15 Apr 2025 03:59:56 +0000 Manifest next update: Tue 22 Apr 2025 03:59:56 +0000 Files and hashes: 1: j6aYZRx6wk24J9I50PyLLI2jZrg.crl (hash: tzMFBmxtGIQ9EJaxfeWLzG4EN6BBm+RrFBkclfAtpgI=) 2: 756EDE70611611EF83B51C41C4F9AE02.roa (hash: 0voBvvYJ1FOla9h6paRdef89XemcSYIiMH4ggu9oHRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.crl rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 03:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C3B7, serialNumber=8FA698651C7AC24DB827D239D0FC8B2C8DA366B8 Validity Not Before: Apr 15 03:59:56 2025 GMT Not After : Apr 22 03:59:56 2025 GMT Subject: CN=67fdd9bd-43c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:45:4d:33:db:9c:cc:53:e7:b8:ce:50:cb:89: ea:7c:87:8f:8d:66:f1:8a:a5:90:9c:10:30:45:53: bf:65:b7:7d:8a:53:fd:93:7a:9e:54:9c:cf:a0:11: 24:72:53:97:16:c9:71:f9:47:5c:b5:2f:72:b2:ce: 8b:95:1e:1c:ac:28:bc:0d:6f:fe:f1:74:f2:67:bd: c2:3f:93:35:1c:5d:2f:d0:9c:b8:04:81:d3:3d:cd: 42:36:02:d6:dc:2b:cb:ed:4a:b0:aa:33:cc:db:de: f7:54:74:13:22:cd:dc:ce:97:05:1c:49:4d:9a:66: 6a:03:f4:e4:23:48:4c:99:a1:d9:4f:d7:5f:93:bf: 86:dc:94:0e:85:e6:fb:1f:f2:22:f0:1f:72:83:92: e0:f5:49:1c:cc:74:05:4d:f4:e8:3f:ba:35:68:04: 63:30:25:c9:a9:14:c6:7a:81:96:8b:35:ad:e8:78: 3f:c5:93:55:6e:a1:75:71:3a:e3:3d:23:52:40:ce: 53:52:26:20:9e:c7:61:67:12:8c:85:bf:62:9e:c0: 00:e8:cc:b0:82:9c:10:12:6c:de:13:59:b6:d5:3d: 86:ab:f0:2d:a7:99:72:dd:21:23:8f:91:69:48:8e: 9e:76:75:f3:92:db:35:ad:c6:d9:96:cf:04:fb:63: 2f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:97:DC:82:FF:C6:D6:C6:48:93:6A:58:4E:94:FC:5A:36:9F:31:EA X509v3 Authority Key Identifier: keyid:8F:A6:98:65:1C:7A:C2:4D:B8:27:D2:39:D0:FC:8B:2C:8D:A3:66:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:05:84:89:5c:c9:08:74:c8:59:5a:e2:c3:42:ab:42:2b:b6: 36:77:ac:3e:04:11:f5:eb:e2:30:47:6d:60:50:05:27:82:8d: 18:9f:a6:4d:60:c4:e7:f3:1c:9c:22:0b:4a:8c:e0:e3:cd:60: b7:a6:10:c8:06:1c:f3:33:c8:a7:87:fb:c8:bf:c1:7b:8d:10: d2:66:51:1d:2e:6e:02:3e:fc:6b:12:e0:5d:de:1d:10:8b:84: 60:11:bf:bc:a4:c4:b2:36:72:fa:22:84:30:b2:dd:0b:9d:e7: be:ca:ed:16:57:ce:ec:7d:33:85:a5:9c:0a:27:84:bb:40:f1: 84:71:cf:65:8b:2e:da:a1:7c:fc:e7:69:28:87:d8:99:5d:c9: 5a:ad:1c:76:b0:25:c5:e6:8a:d5:12:c5:ff:1c:99:67:78:63: d7:18:c5:e0:86:88:a4:7e:ed:85:e9:ff:ea:9f:db:de:50:93: 22:23:4b:62:21:fc:3b:56:80:86:c4:b5:e7:5a:fd:ac:17:36: 67:22:c0:e8:d8:74:0b:c7:85:b8:90:6c:b7:31:dc:43:8d:b8: 7f:76:5f:60:ad:17:b5:29:d9:93:fc:21:87:b4:03:5d:dc:2f: 16:b4:2e:5d:05:1f:48:12:92:78:08:b1:64:1f:db:87:ad:3c: 48:64:04:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMzQjcxMTAvBgNVBAUTKDhGQTY5ODY1MUM3QUMyNERCODI3RDIzOUQwRkM4QjJD OERBMzY2QjgwHhcNMjUwNDE1MDM1OTU2WhcNMjUwNDIyMDM1OTU2WjAYMRYwFAYD VQQDEw02N2ZkZDliZC00M2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0VNM9uczFPnuM5Qy4nqfIePjWbxiqWQnBAwRVO/Zbd9ilP9k3qeVJzPoBEk clOXFslx+UdctS9yss6LlR4crCi8DW/+8XTyZ73CP5M1HF0v0Jy4BIHTPc1CNgLW 3CvL7UqwqjPM2973VHQTIs3czpcFHElNmmZqA/TkI0hMmaHZT9dfk7+G3JQOheb7 H/Ii8B9yg5Lg9UkczHQFTfToP7o1aARjMCXJqRTGeoGWizWt6Hg/xZNVbqF1cTrj PSNSQM5TUiYgnsdhZxKMhb9insAA6MywgpwQEmzeE1m21T2Gq/Atp5ly3SEjj5Fp SI6ednXzkts1rcbZls8E+2MvkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmX3IL/ xtbGSJNqWE6U/Fo2nzHqMB8GA1UdIwQYMBaAFI+mmGUcesJNuCfSOdD8iyyNo2a4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzNCNy8xRTY3NzdBQTkz MjUxMUVFQkU5ODdGNjBDNEY5QUUwMi9qNmFZWlJ4NndrMjRKOUk1MFB5TExJMmpa cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o2YVlaUng2d2syNEo5STUwUHlMTEkyalpyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzNCNy8xRTY3NzdBQTkzMjUxMUVFQkU5ODdGNjBDNEY5QUUwMi9qNmFZWlJ4Nndr MjRKOUk1MFB5TExJMmpacmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3BYSJXMkIdMhZWuLDQqtCK7Y2d6w+BBH16+IwR21gUAUngo0Yn6ZN YMTn8xycIgtKjODjzWC3phDIBhzzM8inh/vIv8F7jRDSZlEdLm4CPvxrEuBd3h0Q i4RgEb+8pMSyNnL6IoQwst0Lnee+yu0WV87sfTOFpZwKJ4S7QPGEcc9liy7aoXz8 52koh9iZXclarRx2sCXF5orVEsX/HJlneGPXGMXghoikfu2F6f/qn9veUJMiI0ti Ifw7VoCGxLXnWv2sFzZnIsDo2HQLx4W4kGy3MdxDjbh/dl9grRe1KdmT/CGHtANd 3C8WtC5dBR9IEpJ4CLFkH9uHrTxIZARN -----END CERTIFICATE-----Generated at Wed Apr 16 17:18:09 2025 by rpki-client