$ rpki-client -vvf rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft File: C-qOMYe9SY0l8kldarDunkU0p_E.mft (raw, json) Hash identifier: xdkG4NSbV+5IhKFoQ+vTj4kFeLbS31a7oV98kditxPM= Subject key identifier: C1:77:A1:5E:A3:E2:4C:E1:25:38:F8:83:61:C7:E2:AF:34:93:20:19 Authority key identifier: 0B:EA:8E:31:87:BD:49:8D:25:F2:49:5D:6A:B0:EE:9E:45:34:A7:F1 Certificate issuer: /CN=A918C64D/serialNumber=0BEA8E3187BD498D25F2495D6AB0EE9E4534A7F1 Certificate serial: 07CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft Manifest number: 07C6 Signing time: Fri 18 Apr 2025 21:07:26 +0000 Manifest this update: Fri 18 Apr 2025 21:07:25 +0000 Manifest next update: Fri 25 Apr 2025 21:07:25 +0000 Files and hashes: 1: C-qOMYe9SY0l8kldarDunkU0p_E.crl (hash: Ibwxkm+qpsuW/ilrjGsNQ2olyDgtcRpbFWuAsDDaqrU=) 2: B7362AE0EDC811EAAFF8BD46C4F9AE02.roa (hash: NrRaGTGhuuOTZ4sgZcXvRyo7s7nlCIeG2H0kiEu0fzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.crl rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 21:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1995 (0x7cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C64D, serialNumber=0BEA8E3187BD498D25F2495D6AB0EE9E4534A7F1 Validity Not Before: Apr 18 21:07:25 2025 GMT Not After : Apr 25 21:07:25 2025 GMT Subject: CN=6802bf0d-477d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ac:22:54:08:3b:1f:66:bc:b7:91:30:24:30: e5:01:90:9b:d6:b6:65:ee:0f:1e:51:16:63:24:4e: c4:da:18:f6:8b:6c:25:26:b9:ee:47:a9:7d:7f:a0: 87:5f:0d:15:fb:47:76:ce:22:37:3a:3c:ca:15:07: aa:c9:c9:ce:80:1e:8d:74:46:aa:14:11:34:fe:a8: 32:ac:2c:69:2e:62:07:8c:c7:44:a7:1c:0a:cf:bb: 9f:2b:a7:30:cb:db:ca:1d:4f:25:26:b0:21:76:d0: ea:d3:d1:5b:59:ba:9b:f8:54:2b:4f:6f:1f:87:9d: 54:6c:c3:e8:f5:d7:1f:48:3d:1b:53:8f:f7:83:29: 3b:fe:25:2a:70:b1:62:42:d3:be:16:35:29:25:7d: 5d:14:21:29:7c:a6:05:76:81:7d:4b:8c:91:5f:c2: e0:ef:d8:ef:67:1d:ec:7f:76:c2:ae:01:04:ae:21: ab:e4:35:cd:b1:80:c6:9d:fc:0e:ff:2c:6d:d1:07: 3e:d3:fb:dc:ca:33:51:6e:ad:01:ae:76:30:26:c4: a1:4d:9d:b3:a7:6c:5a:05:2a:59:d5:aa:67:7b:1c: 3b:92:b1:b1:21:16:d6:e2:14:db:b1:a1:86:62:4c: dc:4c:2c:85:a1:f4:4b:6c:c0:f8:52:3e:6a:d2:a7: 78:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:77:A1:5E:A3:E2:4C:E1:25:38:F8:83:61:C7:E2:AF:34:93:20:19 X509v3 Authority Key Identifier: keyid:0B:EA:8E:31:87:BD:49:8D:25:F2:49:5D:6A:B0:EE:9E:45:34:A7:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:4f:bb:12:34:5d:ba:67:6c:24:15:52:57:7f:ee:8d:ea:ea: 02:02:c7:f8:fc:e5:74:39:a1:87:95:f2:9a:a5:e8:da:ff:13: 84:d4:07:5b:38:f4:94:18:5c:46:cf:e0:cf:76:f2:85:9c:07: 1a:db:d3:6a:5a:08:06:e3:9a:39:40:d2:27:c5:2e:3e:78:3a: bb:78:de:23:f1:be:2c:a6:92:da:4d:74:eb:8e:49:a0:4b:eb: 55:65:1e:83:1e:7e:68:84:84:fb:18:03:5e:19:34:e2:1d:d3: f7:1e:4d:13:fd:78:a7:ad:64:74:ee:3b:7d:12:ea:b6:e8:96: 26:0d:a6:97:fc:83:1f:6a:3c:35:57:a4:07:41:41:45:e9:8d: ff:3a:9e:dc:54:05:40:f4:03:86:17:0f:cd:e6:a1:c9:dd:08: dd:65:bc:ad:c2:85:28:38:3a:9c:93:63:d8:c2:25:cd:d6:71: 40:d1:9c:dd:b9:84:ea:19:aa:7b:d1:7c:1c:5e:cb:68:53:dd: a6:7b:ee:8b:71:02:90:30:e7:59:84:03:57:7b:b1:e1:02:40: 92:77:55:0b:cb:96:be:6e:bb:47:1e:03:2c:81:2a:99:82:e9: 12:d5:a3:66:73:44:7a:cb:a9:8a:19:ee:dc:de:79:7f:f7:29: fc:93:9a:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NEQxMTAvBgNVBAUTKDBCRUE4RTMxODdCRDQ5OEQyNUYyNDk1RDZBQjBFRTlF NDUzNEE3RjEwHhcNMjUwNDE4MjEwNzI1WhcNMjUwNDI1MjEwNzI1WjAYMRYwFAYD VQQDEw02ODAyYmYwZC00NzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKwiVAg7H2a8t5EwJDDlAZCb1rZl7g8eURZjJE7E2hj2i2wlJrnuR6l9f6CH Xw0V+0d2ziI3OjzKFQeqycnOgB6NdEaqFBE0/qgyrCxpLmIHjMdEpxwKz7ufK6cw y9vKHU8lJrAhdtDq09FbWbqb+FQrT28fh51UbMPo9dcfSD0bU4/3gyk7/iUqcLFi QtO+FjUpJX1dFCEpfKYFdoF9S4yRX8Lg79jvZx3sf3bCrgEEriGr5DXNsYDGnfwO /yxt0Qc+0/vcyjNRbq0BrnYwJsShTZ2zp2xaBSpZ1apnexw7krGxIRbW4hTbsaGG YkzcTCyFofRLbMD4Uj5q0qd4ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMF3oV6j 4kzhJTj4g2HH4q80kyAZMB8GA1UdIwQYMBaAFAvqjjGHvUmNJfJJXWqw7p5FNKfx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY0RC9EQUQ0NTg2QUVE QzcxMUVBQkJBMTM3NDZDNEY5QUUwMi9DLXFPTVllOVNZMGw4a2xkYXJEdW5rVTBw X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MtcU9NWWU5U1kwbDhrbGRhckR1bmtVMHBfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY0RC9EQUQ0NTg2QUVEQzcxMUVBQkJBMTM3NDZDNEY5QUUwMi9DLXFPTVllOVNZ MGw4a2xkYXJEdW5rVTBwX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGT7sSNF26Z2wkFVJXf+6N6uoCAsf4/OV0OaGHlfKapeja/xOE1Adb OPSUGFxGz+DPdvKFnAca29NqWggG45o5QNInxS4+eDq7eN4j8b4sppLaTXTrjkmg S+tVZR6DHn5ohIT7GANeGTTiHdP3Hk0T/XinrWR07jt9Euq26JYmDaaX/IMfajw1 V6QHQUFF6Y3/Op7cVAVA9AOGFw/N5qHJ3QjdZbytwoUoODqck2PYwiXN1nFA0Zzd uYTqGap70XwcXstoU92me+6LcQKQMOdZhANXe7HhAkCSd1ULy5a+brtHHgMsgSqZ gukS1aNmc0R6y6mKGe7c3nl/9yn8k5oI -----END CERTIFICATE-----Generated at Sun Apr 20 22:04:55 2025 by rpki-client