$ rpki-client -vvf rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft File: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft (raw, json) Hash identifier: 8vr5Ii6XuSvAoJI+EUdPs9rwCxHw+x0x290ZtSuhp3g= Subject key identifier: 46:FE:55:2D:E9:F9:8E:11:C4:CC:02:18:D6:73:A0:FA:FC:91:FF:72 Authority key identifier: 32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8 Certificate issuer: /CN=A918C88D/serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8 Certificate serial: 0B22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft Manifest number: 0B0D Signing time: Fri 04 Apr 2025 19:24:22 +0000 Manifest this update: Fri 04 Apr 2025 19:24:21 +0000 Manifest next update: Fri 11 Apr 2025 19:24:21 +0000 Files and hashes: 1: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl (hash: VFGL9/vuxcnutQOqA6yKDVQHmCwiDwPeGH7gpIXkBzw=) 2: E1EFDAA8F40611EAA5B2244FC4F9AE02.roa (hash: da18YanehMb25ZME1c4CpzCwhlEVLs96RlfGiZoiMxU=) 3: E324E2F6F40611EAA5B2244FC4F9AE02.roa (hash: feQeohVrk3aa2EM/daTKcvI0d6w6k0q2b/efqxvduBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2850 (0xb22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C88D Validity Not Before: Apr 4 19:24:21 2025 GMT Not After : Apr 11 19:24:21 2025 GMT Subject: CN=67f031e5-1a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b2:4d:88:d7:6a:8c:88:a8:17:6f:34:a2:df: 64:dc:d2:09:de:3d:13:9e:0c:55:1b:51:e1:51:80: a3:de:ca:92:d3:84:14:ee:98:cd:39:85:4a:10:b9: 51:09:8e:52:5d:6e:13:18:30:fd:96:35:f5:88:d5: a2:b0:36:bb:7f:84:38:ae:19:54:3a:df:d7:c4:ba: 1f:28:ab:63:df:95:e2:04:b0:44:f0:fb:f4:ab:8a: 31:76:af:de:2e:b3:aa:cf:61:54:84:66:c5:90:8c: f2:58:c7:f6:b3:ad:a7:5e:47:78:f2:42:76:f2:3d: de:6b:39:84:b3:9c:4b:61:65:51:80:cd:d3:15:87: 54:45:05:76:29:d5:79:3b:98:7b:8d:4f:af:01:4e: 7e:05:ba:b2:af:0b:ee:b1:79:d3:87:3a:4a:20:90: 59:b4:fa:6c:69:38:7a:69:31:30:12:d1:af:0c:d3: bc:c3:c3:42:af:e6:74:ab:bd:13:e6:ac:d7:bd:75: 8a:d8:b3:5e:dc:cc:39:af:b3:6b:c9:86:17:7d:c3: 23:2f:71:37:57:46:37:f0:23:49:63:67:a8:d9:4d: a3:49:1e:dd:65:4d:87:84:8d:f6:c3:41:84:c6:ac: 3c:19:66:b6:11:01:d8:e1:1a:8a:7e:c1:51:4c:52: 76:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FE:55:2D:E9:F9:8E:11:C4:CC:02:18:D6:73:A0:FA:FC:91:FF:72 X509v3 Authority Key Identifier: keyid:32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:24:71:f2:45:29:6a:22:3b:fa:5a:30:50:13:99:78:57:df: 66:32:80:9a:d9:97:a3:ea:f5:43:44:d1:fd:b3:36:d7:fb:8d: c7:73:36:a4:79:d9:09:be:2f:21:a9:82:c6:66:2a:f9:3a:ca: 41:ac:73:3a:05:c1:56:b7:e8:c5:32:f8:9e:77:1a:32:3b:48: 9a:b8:d4:99:1a:5c:53:27:38:fb:73:01:15:0f:e8:39:08:d2: a6:ec:4c:ad:1f:af:19:21:6b:6a:f1:0e:d1:90:be:3b:f3:e1: 96:5b:ae:56:0a:ea:e0:aa:5b:2f:c5:56:6b:9c:23:80:ea:ab: b4:cc:26:bf:c6:2e:da:9e:c8:69:9b:0d:db:77:16:be:5b:dd: c2:82:c7:30:72:7b:93:76:15:c8:7e:76:57:f6:23:54:b5:3e: 17:55:cc:62:80:f2:cf:77:9b:0a:4a:56:d5:51:77:74:b9:1a: 32:47:61:8c:d0:89:a8:1a:e4:d2:f7:99:99:d8:52:13:b3:95: ea:9a:4d:70:25:5d:8f:24:d2:7e:c1:6f:cd:1c:ea:93:1b:31: de:b1:d4:0a:db:43:4b:ed:16:dc:9b:93:7e:65:3b:ff:33:e6: 22:a1:0b:a8:48:1d:99:70:b8:b2:81:c8:73:88:84:4d:18:2c: 11:46:4b:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM4OEQxMTAvBgNVBAUTKDMyNjQ0MzY0NzlBNTBFRDQwQ0NGRDJCNzA0RTYwMjQ5 NjA4RTQzQTgwHhcNMjUwNDA0MTkyNDIxWhcNMjUwNDExMTkyNDIxWjAYMRYwFAYD VQQDEw02N2YwMzFlNS0xYTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrJNiNdqjIioF280ot9k3NIJ3j0TngxVG1HhUYCj3sqS04QU7pjNOYVKELlR CY5SXW4TGDD9ljX1iNWisDa7f4Q4rhlUOt/XxLofKKtj35XiBLBE8Pv0q4oxdq/e LrOqz2FUhGbFkIzyWMf2s62nXkd48kJ28j3eazmEs5xLYWVRgM3TFYdURQV2KdV5 O5h7jU+vAU5+BbqyrwvusXnThzpKIJBZtPpsaTh6aTEwEtGvDNO8w8NCr+Z0q70T 5qzXvXWK2LNe3Mw5r7NryYYXfcMjL3E3V0Y38CNJY2eo2U2jSR7dZU2HhI32w0GE xqw8GWa2EQHY4RqKfsFRTFJ29wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEb+VS3p +Y4RxMwCGNZzoPr8kf9yMB8GA1UdIwQYMBaAFDJkQ2R5pQ7UDM/StwTmAklgjkOo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Qzg4RC8zOEFCNTkxRTNE QzExMUVBQUYyQjY3MzVDNEY5QUUwMi9NbVJEWkhtbER0UU16OUszQk9ZQ1NXQ09R NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tUkRaSG1sRHRRTXo5SzNCT1lDU1dDT1E2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Qzg4RC8zOEFCNTkxRTNEQzExMUVBQUYyQjY3MzVDNEY5QUUwMi9NbVJEWkhtbER0 UU16OUszQk9ZQ1NXQ09RNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6JHHyRSlqIjv6WjBQE5l4V99mMoCa2Zej6vVDRNH9szbX+43Hczak edkJvi8hqYLGZir5OspBrHM6BcFWt+jFMviedxoyO0iauNSZGlxTJzj7cwEVD+g5 CNKm7EytH68ZIWtq8Q7RkL478+GWW65WCurgqlsvxVZrnCOA6qu0zCa/xi7anshp mw3bdxa+W93CgscwcnuTdhXIfnZX9iNUtT4XVcxigPLPd5sKSlbVUXd0uRoyR2GM 0ImoGuTS95mZ2FITs5Xqmk1wJV2PJNJ+wW/NHOqTGzHesdQK20NL7Rbcm5N+ZTv/ M+YioQuoSB2ZcLiygchziIRNGCwRRkuk -----END CERTIFICATE-----Generated at Fri Apr 4 22:00:28 2025 by rpki-client